skysight-inc/HackerNews huggingface dataset:
Show HN: Open-Source and Cross-Cloud Policies-as-Code Solution
Hi HN !

I'm excited to share with you a tool i've worked on, and that could help you in many situations.

If you have any feedback on the idea, the script or anything else related to the project, I'd love to hear from you.

TLDR : Kexa is a Open Source and Cross-Cloud script that read YAML rules, gather resources from cloud providers, cloud services, and report you and your teams if a rule has been broken.

The greatest advantage of this script is that it has been designed to be fully extensible, making it easy to write new rules, add new addons or add new functionalities, while remaining lightweight and easy to deploy anywhere.

You can check how it look like here : https://kexa.io/

And on Github : https://github.com/4urcloud/Kexa

*Main features :*

Let me list to you a few use cases, with the associated 'addons' (cloud services, providers) that can already be used in the current state :

- Azure, AWS, GCP :

- Check for orphan resources (costs optimizations)

- Verify dangerous network rules (security)

- Ensure tags are compliant with standards (compliance)

- Verify for secrets or token rotation/expiration (security)

- Ensure user are using MFA (security)

- Kubernetes :

- Ensure pods are running (operational excellence)

- Ensure names compliance (compliance)

- Github

- Ensure runners are online (operational excellence)

- Ensure branches are protected (security)

- HTTP

- Check for certificates expiration or presence (security)

- Check for response code (operational excellence)

The notification system allow you to be notified by Mail, SMS, Teams, Webhook as well as setting different alert level and channel for each rules file you're editing.

CIS Benchmarks have been followed by our Teams to create a set of rules for Azure, that will allow you to have a quick report on your compliance to those Benchmarks !

More CIS Benchmarks rules are coming for all providers, inform us if you're interested.

We've developed a SaaS where you can visualize Kexa scans results and historic, and explore the resources that raised the error.

*How can you run it ?*

In any cloud functions, with the Github action available here: https://github.com/marketplace/actions/kexa-action

Or even locally if you want a quick report on a set of rules (ex: CIS Benchmarks rules that are available as Kexa rules for Azure and more to come)

If you're interested, you can follow the documentation here : https://github.com/4urcloud/Kexa/blob/main/documentation/Doc...

And if you like the project, do not forget to star us on Github ! https://github.com/4urcloud/Kexa

Thank you for reading, hoping i'll have your feedback on this
26TB NVMe storage in a 2U short depth server with an Ampere Altra CPU
For some snark, I'd include "OpenAI" in the table with X on all the metrics...
Mobile hasn't changed Wintel's stranglehold on the market at all.
It is getting to the point where I am really considering giving up games that require anti-cheats that only support windows.

They were already getting to be too much but this is getting crazy.
McDonald's Ends IBM's A.I. Drive-Through Tests Amid Errors
> Gaming is horrible on Mac.

Just like an Linux is horrible for doing video editing, not sure that comparison makes sense. Pick the right system for your workload.
I've known people working on archiving at big old media organizations, and one thing that is underestimated is the extent to which now inconvenient things are painted out of the archives.

For example, there was a large classic cartoon archive which had a whole team of retouchers painting out all the smoking.
How do you make a round corner with a beer bottle? I mean an actual corner (three walls meeting), not an edge (two walls).
They could bitbleach the local drive too for all you know.
Also, for the most common cases this probably wasn't even needed - I bet they just stored the "masks" for rounding the corners hardcoded, as that would have been much faster.
https://en.wikipedia.org/wiki/July_12,_2007,_Baghdad_airstri...
> dumb regulations will they now release with yet another costly initiative that European taxpayers don't even want or know exist

Since this is a private organization the best guess is none
Isn’t this an example of sarcasm, rather than an example of two contradictory colloquialisms?
Maybe if Slack offered proper video conferencing tools it would not complain. Should ask Zoom for advice.
Well, i guess the same "most people".Where(p => p.money > 1billion) .. dont like friendly jordies and were part of a crooked clan the day there ancestors got shipped in. So Assange is in good company..
Starting with these: https://medium.com/@pc.peterso/three-key-tensions-in-your-en...
This is annoying, even though I am mostly a Linux user I still use Windows occasionally.
I wonder how people would have felt if, instead of releasing stuff about the USA, he had released it about your country's doings instead.
Didn't the UK use to have a joke candidate called "lord Buckethead" too? I'm pretty sure I saw him on some stage with Theresa May. Is it related to the count?

In somewhat related news, Hungary has a joke-ish party called the "Hungarian two-tailed dog party"[0], which does a lot or civic work but usually campaigns with slogans such as "more of everything less of nothing", "100% more happiness", sends people on tv tribunes dressed like chickens etc..

This year they managed to elect the major of a district in Budapest which has been controlled by Fidesz since forever.

Do not underestimate jokes.

[0] https://en.m.wikipedia.org/wiki/Hungarian_Two-Tailed_Dog_Par...
Because we hired the government to do it.

In a large domain of things windows is still a monopoly.
It is.

Use reader mode in your browser.
I'm sorry we let you down :(
Convenience is king. As life piles up (errands, parenting, everything), cognitive capacity goes down and the more the user wants a "push button do everything" solution. They'll trade autonomy for ultra-convenience + a dropped internet connection now and then. I'm somewhere in the middle, but I see why people do either.
Does it really matter?

We argue semantics around incidents like this when it comes down to: people doing bad stuff and trying to hide it.

If anything, these laws are completely broken. People should never be punished for exposing bad actors, period. Imagine if that ever happened. Maybe governments and companies would think twice before acting illegally/immorally.

Governments do not want these incidents to happen because they want to keep doing it in secrecy and they enact laws to make uncovering these schemes illegal. Arguing if that's illegal or not is missing the whole point. It will never be legal in a corrupt society like ours.
I'm going to build an all AMD system, install Linux Mint, then slowly migrate everything over and completely switch. It was bad enough when they started the spyware / bloatware train with Windows 8 / 10 but this is the final nail in the coffin.
Yet they only did it due to EU regulation, so this theoretical point is moot.
Chrome's "reader mode" sucks.
I made the switch. It’s fantastic. Pop with the pre-packaged Nvidia drivers.

Other than Warzone and Tarkov (for which I keep a separate drive with Win10), the only things I haven’t quite managed to get sorted yet are (i) a convenient system-wide replacement for the frame limiter in RTSS, and (ii) relatedly, proper frame-pacing when streaming using Sunshine.

Also, Steam seems to have a weird and widespread bug where if you use Big Screen, exit to the desktop mode, then launch BS again, you get like 5fps in the BS front-end itself (after launching a game, it’s fine). The workaround is to just kill the client when you exit Big Screen (usually when your gaming is done anyway).

Really happy I made the switch and fully expect those niggles to get sorted (or my aptitude to improve) in due course. Windows has been shit for a while but recently it’s really crossed over into unbelievably shit.
Potential candidates might include rare minerals or isotopes that are scarce on Earth. Another possibility could be revolutionary scientific data or biological samples unique to Mars, which could be invaluable for research. Oh, and media, we love us some media and it travels light ;)
After he had been under house arrest for the bogus Swedish charges ...

Sorry, if you are prosecuted and no other network gives you a show, what will you do? I'm sure he would have taken a CNN show as well.

This was also in 2012, before the whole Euromaidan thing. Many European politicians lined up to be friends with Russia.
On the flipside, Microsoft will upload your confidential files to accidentally NSA-controlled servers and accidentally miss US state malware.
I don't know a lot about it, on the face of it I think its terrible. Why do you ask?
Large thread from yesterday: https://news.ycombinator.com/item?id=40775301
sadly JSON does not handle non-utf8 strings
Co Antrim storyteller Liz Weir left in wheelchair on airport tarmac
Right until you need support. Microsoft's isn't great, but I don't have to create a new account at Bing's ad department and shove a few hundred bucks into it to guilt trip them into unblocking my old O365 tenant because a haywire AI accidentally closed it down, and that's the only department with something occasionally approaching customer support.

With Google, that's just Tuesday.
Json is maybe a bit heavy, but using a machine readable format such as tsv or csv (including configuring your terminal emulator to properly display it) would be a big step up from the status quo.
The problem could be abuse of a dominant position. Maybe Mac has now a market share good enough so that MS can pretend they are not in a dominant position in this sector, although if all it takes for an industry to abuse their users is that they all commit it together, each with their still high market share, that would also be an issue for citizens. Esp. in duopoly cases.
Turning off the WiFi doesn't do anything, Android phones stockpile location-based telemetry while in airplane mode and upload it once you reconnect to the internet[1].

I can't speak for everyone here, but not all of us use stock ROMs and Google Play Services. I personally use GrapheneOS, which let's you significantly neuter Google's spyware capabilities.

[1] https://digitalcontentnext.org/wp-content/uploads/2018/08/DC...
OpenAI exec says they might eliminate some unimportant creative jobs
Perfect for planning illegal anti-competitive actions, Google would love it
You might enjoy a variety of `find` based commands, e.g.
`find -maxdepth 1 -iregex ".*\.(wav|draft)" | xargs echo "found file:"`

This uses regex to match files ending in .wav or .draft (which is what I interpreted you to want). Xargs then processes the file. You could use flags to have xargs pass the file names in a specific place in the command, which can even be a one liner shell call or some script.

So the "find <regex> - xarg <command>" pattern is almost fully generally applicable to any problem where you want to execute a oneliner on a number of files with regular names. (I think gnu find has no extended regex, which is just as well- thats not a "regular expression" at that point)
I mean the dark mode button was genuinely funny
You can have a regulation requiring that devices are not dependent on internet services and that people can manage them themselves. This is consumer protection 101 where people are protected from predatory business practices.
Same. I have a dedicated gaming machine with windows 10 where I do nothing except games.

Still trying to delay the upgrade to 11 as long as I can though.
Everything is annoying to somebody. Software doesn't have to always be optimized to minimize annoyances. Sometimes it's just fun to optimize it for your own amusement, and a personal blog (which this is) gets a pass from me.
Yep, I think I'm okay with not being able to play some games and I'll probably just keep a dedicated machine if I really feel the need to play those games.
The CIA agent is not a criminal in the US. For the Chinese government he is a criminal.
"à la", there is no diacritic on "la". "à" means (roughtly) "to" and there is a diacritical mark to distinguish it from "a" as in "il a", "he has". But "la" means "the", like "le" but female, and there is no need to distinguish it from any other homograph.
It is a reasonable argument for an article in a Christian magazine, and I suspect readers of the magazines would be more likely to expect it than random people going to it from HN.

I do not think the author does a great job of it - it would be better without the rhetorical middle part of the paragraph linking fairy tails to Christianity. Then again, I (though a Christian) may not be the target audience of this magazine either.
https://www.theguardian.com/commentisfree/2011/sep/18/julian...

David Leigh and Luke Harding's history of WikiLeaks describes how journalists took Assange to Moro's, a classy Spanish restaurant in central London. A reporter worried that Assange would risk killing Afghans who had co-operated with American forces if he put US secrets online without taking the basic precaution of removing their names. "Well, they're informants," Assange replied. "So, if they get killed, they've got it coming to them. They deserve it." A silence fell on the table as the reporters realised that the man the gullible hailed as the pioneer of a new age of transparency was willing to hand death lists to psychopaths. They persuaded Assange to remove names before publishing the State Department Afghanistan cables. But Assange's disillusioned associates suggest that the failure to expose "informants" niggled in his mind.
Bug? It's intentional behaviour
> say "Mr. Putin has decided to extradite you to the US in exchange for...".

Or worse. Not say anything other than "get in the car now". It is not like dictators need to explain themselves.
I think it's working as intended. It incentivises buying a good quality plastics or cloth bag and reuse.
There is something about this that makes me so very happy.
Files and directories, once a reference to them is obtained, should not be identified by their path. This causes all kinds of problems, like the reference breaking when the user moves or renames things, and issues like the ones described in the article, where some "edge case" (and I'm using that term very loosely, because it includes common situations like a space in a file name) causes problems down the line.

You might say that people don't move or rename things while files are open, but they absolutely do, and it absolutely breaks things. Even something as simple as starting to copy a directory in Explorer to a different drive, and then moving it while the copy is ongoing, doesn't work. That's pathetic! There is no technical reason this should not be possible.

And who can forget the case where an Apple installer deleted people's hard disk contents when they had two drives, one with a space character, and another one whose name was the string before the first drive's space character?

Files and directories need to have a unique ID, and references to files need to be that ID, not their path, in almost all cases. MFS got that right in 1984, it's insane that we have failed to properly replicate this simple concept ever since, and actually gone backwards in systems like Mac OS X, which used to work correctly, and now no longer consistently do.
See also: the entirety of human history before copyright.
> The US correctly assessed that this was empty PR theatre and not worth enabling.

And they asked for it just to be sure. /s
Boardroom:

AI!

AI, what?

Dunno, just AI.

Ok.

Ok.

Ok.

Ok.

Ok.

Ok.
glad to see more discussion about local-first, but there havn't been a good business model for local first products, which might lead to the unsustainable of the tech ecosystem
So literally just now I opened the Google photos app and it came up with a nag screen to turn on auto-backup which I had already explicitly turned off. The message was worded to make it sound like they were doing me a favour and it was difficult to close the banner (I just exited the app because what I needed to do was possible with a less invasive version).

I would not go so far as GP as to say that this dark pattern is better or worse than what Microsoft is doing, but I think it is a fair point that a Google/Microsoft account is needed on the biggest mobile/desktop platforms respectively and their attitude to privacy and user agency is somewhere between laissez-faire and contemptuous.

With Android there does at least feel like with F-Droid, different OEMs, alternative apps, the web and even Other android spins that these aren't quite the lockdown that Windows is, although it's fair to say that in either case you shouldn't really be constantly on your guard for the next way that your operating system is going to try to trick you into giving away more of your stuff to them.
I'm sure they've already collected data on people they've given no money to. The null hypothesis was that "support" as given provided material benefits irrespective of an amount of cash given.
Maybe it was a typo. Maybe you didn’t buy bio-degradable but bio-degrading?
Sure, but isn't that called trolling? Shouldn't trolls be blocked by default?
The manifesto, in summary:

1. Create a new type of copyright called "training right".

2. This "training right" also applies to names.

3. This "training right" also applies to all usage with AI, even if it doesn't involve training (e.g. as an input to the AI software, such as Img2Img).

4. All AI-generated materials to be captioned as such, and all their activities catalogued and logged.

5. Public domain is no longer public domain (public domain has no "training rights" by default), and freely licensed media is no longer freely licensed (freely licensed media has no "training rights" by default) because "it would not have been possible to foresee its use in a dataset to train an AI model".
Of course, but from his PoV he is not, so he should not participate in or legitimise a procedure in a Chinese court.

Consequently, entering a plea, and particularly a guilty plea, should not be done.
Windows is no longer an OS. It's a marketing platform with a "captive" audience.-
The best known in the UK was probably Screaming Lord Such: https://en.wikipedia.org/wiki/Screaming_Lord_Sutch

Absolutely right about the power of jokes.
It flies on my new AMD 7800X3D custom build!

Fedora 40/Wayland worked beautifully out-of-the-box with buttery smooth DE animations which unfortunately started flickering after installing NVidia's proprietary drivers which should be fixed with explicit sync [1] in NVidia's latest 560 drivers which is now available in KDE Plasma 6.1 update, hopefully it'll be available for Gnome in a system update soon - looking forward to running Wayland again.

[1] https://zamundaaa.github.io/wayland/2024/04/05/explicit-sync...
Is it safe to assume that these API calls to ChatGPT, Google Gemini, HuggingChat, and Le Chat Mistral are costing Mozilla money?
Same guy - from tfa:

> In earlier elections, Harvey stood as Lord Buckethead, but was forced to change the character due to a copyright dispute with the American filmmaker Todd Durham, who created Lord Buckethead for his 1984 science fiction film Hyperspace.
God no. How does this help you? You're last in the race of browsers to link AI features, and this sounds like it's not even a plugin but a core feature. I don't understand who would want or need this. You skipped bitcoin, you skipped NFTs, why do you enter the grifter's race now?

edit: I only know of Vivaldi declaring they're against adding AI features [0]

[0] https://vivaldi.com/blog/technology/vivaldi-wont-allow-a-mac...
They're not backstabbing, though, They're completely honest about it: You're the product, and you will be milked as hard as possible.
I mean bugs in the literal sense of insects crawling on the screen.
The US enabled it. If there were no wrongdoings, there would be nothing to leak.
> especially when you're at Project Zero, which hired a lot of former NSA TAO.

Citation needed?
Major data breach on medisecure systems
Phishing toolkits are evolving with AitM
You can also dual boot and/or swap out hard drives. It took me a goodly while to get immersed and comfortable with Linux, so I'd definitely plan a discovery and/or transition phase before hard switching over.
I wish Microsoft didn't make local account creation so hard. One big reason I want a local account is so that my user profile in `C:\Users` is my full first name with a Capital first character, i.e. `C:\Users\Username`. Signing in with an online account in the out-of-box experience means the user profile is truncated to 5 characters and begins with a lowercase character, i.e. `C:\Users\usern`[1]. This has been the behaviour since Windows 8.

Additionally, Microsoft's decision to plague Windows with advertisements and Copilot was terrible. Windows is otherwise a damn good OS, and I wish the engineers had a say over the marketing and Copilot departments at MS. I also wish the UI/UX department didn't suddenly decide that macOS was a shining bastion of good desktop UX, i.e. favouring icons over text.

I'm going to link another comment of mine: https://news.ycombinator.com/item?id=40541721

After setting up I log in to OneDrive and Microsoft anyway; I have an Office 365 subscription (the competition here absolutely sucks) and I'd like my game achievements in XBox Live.

I still use Windows, and I probably will continue to use it despite all this. Unlike the rest of the commenters here, I actually like using and writing for Windows.

Desktop-on-Linux is broken if you have any reasonable multi-monitor HiDPI set-up with an NVIDIA GPU. I personally don't care which company/entity is responsible; as an end-user, it is broken, full stop. I'm also not fond of the OS-as-an-IDE mentality; I like a right proper IDE with a green play button and red circles. I was never comfortable with the command-line, and I remain so, having been entirely raised on Windows. Proton is nice, but what's nicer is never having to bother about compatibility because one is running the platform the game was written on and for.

I faffed around with macOS and I use it at work, but writing programs for Macs is ridiculously painful (and dare I say, expensive) after Apple introduced the requirement to sign + notarise stuff. I'm also not a big fan of the post-OS X Lion workflow when the 'Save As' button was removed.

[1]: https://superuser.com/questions/1148991/why-does-windows-10-...
Right, but the problem pointed out here is that if you compare that to the answers for Tom Cruise, you’d get a bunch of disparate answers that under this method would seem to indicate that it was confabulating, when in reality, Tom Cruise is just known for a lot of different things.
Yeah Afghans too "Well, they're informants," Assange replied. "So, if they get killed, they've got it coming to them. They deserve it." https://www.theguardian.com/commentisfree/2011/sep/18/julian...

I'm ambivalent about his jailing. If you are going to get heroic people killed then you can't cry too much if you get jailed a bit.
personally, on my 16:9 55" at home, I don't care about the bars either, not for 4:3, for 21:9 it's still a bit annoying .
If he is a Russian agent, Russia does more to help the US democracy than the US itself.
The raku LLM modules are excellent CLI and Jupyter notebook tools. Suggest you start here https://raku.land/?q=LLM%3A%3APrompts and review the comprehensive videos and examples from here https://www.reddit.com/r/rakulang/s/W1UqivfFA9
My 4 year old and I just finished Charlie and the Chocolate Factory. He sometimes got a little nervous when the other kids disappeared, but he loved the story. Charlies virtue was so obvious to him. We just brought home a stack of more Roald Dahl from the library.