skysight-inc/HackerNews huggingface dataset:
If you look at the list of top online stores after Amazon, many are brands with also physical stores. One would assume they are less shammy. I know if I go to a regular supermarket here, great effort has been spent by the buyers and the organization to ensure that everything is actually of decent quality. Even the cheapest alternatives. That cost of course I then have to pay in the price of the products.

I prefer not to buy things from unknown sellers which I can get from known sources. Sometimes you need something special like a car spare part that has local markup of 300% so then online is worth the risk (not safety critical parts).

I just don't understand the situation where a person decides to buy a regular product from an unknown seller, especially from a system that incentivizes something that is not in the interest of the buyer.
Hopefully you have since learned to read the documentation of the tools you use, or at least enough of it to understand the basic data model you are working with. Rebasing won't even (immediately) remove the commits from your local repo. And force pushing isn't some magic operation either.

Further, even if you had managed to delete the secrets from the repo you have to assume that others already copied them and rotat your keys anwyay.
> How do you actively detect a malware agent running in user space using stealth

Depending how advanced the attacker is, check the executing binary maps back to the actual expected name and location on disk. Make sure the executable and libraries used at runtime are the correct ones matching hashes of known good qualities.

Ensure the process tree structure has an expected structure, ie "bash" isnt starting a process called apache.

Make sure the selinux policy is correct for the process that is running. (I have no idea about apparmor)

Check to see if its linking to the expected binaries, that its not using 'hidden' files (starting with a dot or directory with a dot), or deleted files.

Confirm that the process is opening sockets and files that. you expect it to (ie, apache shouldn't open files that are outside its configuration directive).

The process should not be making outgoing socket connections unless it is a client.

It should not be running with capabilities(7) that it does not require. It should not be executing from a setuid binary.

Check the process name, quite often attackers rename the running executable, so you'll see /proc/pid/cmdline renamed with a bunch of null bytes at the end.

Some malware has 'anti debugging' tactics, ie, they have traced themselves to prevent you tracing them, you can find this as one of the lines in /proc/pid/status iirc.

There are more, but thats the few off the top of my head.

> or a kernel.

This is a MUCH harder problem, because attackers can always disable any security mechanism assuming they kernel code execution. However, assuming they are not too focused..

If the system is booting in secureboot mode, it should be enabled, and no extra / unused / out of date kernel modules loaded.

I know that code injection at the memory level means that attackers can inject unsigned code, so in this case you would want to periodically sample the code and ensure that execution context would only have the processers EIP in known areas where the kernel would map executable code. You could do an additional check to see if the areas are mapped by userspace processes (it might be too late) so you can find offending attackers.

If the host is virtualized, this becomes easier to do and mapping and comparing memory from the guest kernel for the executable code sections means that its harder for an attacker to work around by being able to disable a mechanism.

Usually attacker kernel exploits do not persist long temr in kernel space, (they abuse kernel space to allow for userspace privilege escalation ie make a binary setuid or modify permissions on a /dev/) because the longer they are there the more likely they are to panic the system.

Some of the more advanced attacks I have seen are from people uploading system kernel panic images, where I have a 'snapshot' of the running system and can work around attackers mitigation techniques.
These kind of people are emotion driven I believe. I don't think you should try to rationalize their reasoning.
Do you mean topK rather than median, for K small? You certainly cannot build a heap with trillions of items in it.
No, those are not comparable. If someone criticises the electric chair, it’s not reasonable to defend it with “if we’re going to chastise the electric chair we may as well give wood, metal, chairs, and electricity a bollocking since that's ultimately what's facilitating all this”.

Things are more than the sum of their parts. If you have a ton of beneficial things which can be cobbled together into one bad detrimental thing, the existence of the latter does not remove the benefits of the former.
I read somewhere that the 10$ gift card was for crowdstrike partners who are working to fix the issue, and not it's customers.
https://news.ycombinator.com/item?id=41066811
Hi! I'm the author, didn't expect this to be posted here yet. I was still somewhat working on it, so please bear with me when you find anything weird. You can give me any feedback here.
Trek has a good reputation and the FX+ 2 seems very nice although i did’t find the exact specs on the composants used (!). If you’re in a wet state check carefully the sealing around the motor and the one between the battery and the frame. When the falls rains come many bikes stop working. The ones with wide joints covering and without much motor aeration tends to handle better.
Can you share more about the hate against foreigners in Warsaw? I am surprised as I’ve heard mostly opposite opinions.
The COM file exploit worked because it is relatively unknown. I remember a worm going around when I was in grad school where you'd get an e-mail with a link to https://giftcard.customerservice.savemoneyonanew.tv/amazon.c.... Users who had been through the phishing training would see the HTTPS at the beginning and the amazon.com at the end and know that this was a legitimate Amazon email. The e-mail instructed them to click the link and "open the PDF file". Users would click the link, down load the COM file, and the open the file, installing malware all over the machine and forwarding the worm to all their contacts.
Likewise, I've long encouraged people to compose the email first, then come back and summarize the most important part into the subject line. An email with a subject of "question" might just get deleted out of annoyance.
The exec just follows the instructions provided by their CISO, who adheres to the information security standards used in audits.

These standards are influenced not only by actual threats but also by lobbying from Endpoint Detection and Response (EDR) systems like SentinelOne and Crowdstrike. For instance, in 2021, the White House issued Executive Order 14028, which mandates the Federal Government to implement a robust EDR solution. Consequently, standards such as those from NIST and ISO27001 have increasingly emphasized malware detection and response.

When onboarding any large enterprise, you will encounter these requirements before the enterprise can proceed with procuring your service. This compels B2B organizations to implement this software to be successful.

^1 https://www.opensecrets.org/federal-lobbying/clients/summary...

^2 https://www.opensecrets.org/federal-lobbying/clients/summary...
Wouldn’t they store user IDs instead of handles to make this more permanent since handles can be changed pretty easily?

on top of what others have said, this seems super fishy.
The employees can democratically decide how they want to run things. They can choose to issue stock, they can choose other people to make decisions about the business e.g. appoint a manager to make decisions for them. They cannot do these things in a general employment situation.

At the most bloody-minded level a food-service worker must wash their hands after going to the toilet and this is a restriction on their rights, but at the same time this infringes upon the rights of customers to not get sick eating food. Denying employees democratic control of their workplaces is a much greater restriction of their rights. And as a matter of practice, employees get the short end of the stick when they have a boss.
Some might very well do. E.g. a company with a service for training hackers and security researchers.

In this case the question is moot, as this doesn't involve remote code execution.
It's a B2B tool, which means it's quite likely the contract/license states that all disputes are to be settled in a court appointed by them. This is not valid for consumer disputes, but businesses are free to do what they want. Perhaps this will let them off the hook?

OVH is different in that it's actually a French company.
There's a documentary about exactly that: https://www.imdb.com/title/tt0372588/ :)
What you've answered is a great (if not the best) way to defend against attackers, but not what was asked,They asked how to detect.

I'll strongly disagree on selinux, I have seen it work in practice to defeat attackers many times, that provide features that seccomp and cgroups etc do not.
>might I also suggest that sufficiently skilled efforts to direct a conversation will not be detected by most conversation participants.

.. and, even more importantly, the censorship cannot be considered successful on the part of the agency doing the censorship unless a) the victim audience do not know the censored information, and b) never know that things were censored.

It would appear that attempted obfuscation over this very issue can be observed in a multitude of forms ...
Meh. We (techies) always knew the risks of running random crap in kernel space, especially when it runs junk it downloads from the internet.

So, I expect this to be spun somehow along the lines of "sure all our boxes were down, but look, you've brought them all back up, didn't you? Now think about all the bad guys this protects us against! Of course the risk was worth it!". Also, "everybody does this! we couldn't have known!"

"security people" are scared shitless of the whole "the world is ending! there are threats everywhere!" discourse that vendors peddle. The less technical, the more scared they are.

Many of these people don't really understand what they're talking about and what compromises their decisions actually imply. Losing a day of work is simply dwarfed by "all your data is gone!".
It's not financially worth supporting, Firefox has 6.53% of desktop and 0.53% of mobile marketshare (Statcounter), with a switching cost of zero if users encounter a breaking issue.

Not surprising it got to this point, Mozilla has been stagnant on features most users care about and catered exclusively to the privacy crowd for years - which isn't a large group and competes with Chromium offshoots (giving it a smaller niche, privacy but demanding an alternative rendering engine).
No! We've managed to design the casing such that it can sustain the fire (and exhaust the fumes with vents), check our doc here https://docs.gouach.com/fireproof-casing
IVR is not a good example because it's an annoying interface that people sometimes have to deal with when calling companies. It actually offers pretty poor UX, because users sometimes know what they want when calling but have to wait to hear the options before making a selection. But it's the best we have for over-the-phone interfaces.

Are you someone who orders things using the Echo? If not, are you just playing devil's advocate?
Of course! But at least your house doesn't burn down, the casing contains the fire and dissipates the heat, check our doc here https://docs.gouach.com/fireproof-casing
Audacious is open source.
https://en.wikipedia.org/wiki/Audacious_(software)
...congrats on the deduction?
I cannot see how they will get over this... It's CIO snakeoil to begin with, but this was not a simple mistake; it shows the entire lack of process and responsibility.
My comment about SMILES strings size was meant to highlight how the 20 bytes you use is quite a lot of data.

Yes, the binary RDMol is larger than the SMILES - it can also store more data, including coordinates and extended stereochemistry, which cannot be expressed as a SMILES.

If you are just worried about structure equivalence, and you consider the canonical SMILES to be the best way to check for that (which your snippet does), and you don't mind the additional space and creation time, then put the canonical SMILES into the database along side the binary, and index on the string.

If you don't want any extra space or creation time overhead, then you end up with the design you've seen, where it tries hard to work with values easily computed from the molecule.

It seems like you're looking for an intermediate, with fixed space.

If you just want fast identity tests, and are willing to take a small fixed space, and aren't so concerned about database creation time, then you can generate the SMILES and hash them to a fixed width. Even 64 bits should be good enough to filter all but a handful of mismatches.

You can also use one of the molecule hashes, which are faster to compute, but will have a higher false-positive rate. (But still less than what your current scheme uses.)

It looks now like you want something which can also be used as a substructure screen.

That's in general what substructure screens are designed for. There's a long and dusty history of developing substructure screens, which is mostly forgotten these days now that compute power and memory are so cheap.

Consider that the MACCS keys were developed in the 1970s as a substructure screen, with 166 bits, or just slightly higher than the 160 bits you use in your prefix.

Coming up with a good 128-bit or even 64-bit screen is a topic I've wanted to investigate for a long time. The furthest I got was http://www.dalkescientific.com/writings/diary/archive/2012/0... from about 12 years ago.

I mention a 54 bit fingerprint. It's available at https://www.mail-archive.com/rdkit-discuss@lists.sourceforge... . I'm told it's pretty decent, but I haven't put it to practice myself.

If you do more in this area, I've managed to gather some queries (identity, substructure, and similarity), in my Structure Query Collection, at https://hg.sr.ht/~dalke/sqc .
And yet there is no mention on the end-customers Change Management and Patch Management practices. Who pushes an update on 1000-5000-10000 machines without testing it?

To whoever does this I have only one quote from Jaws:

You go in the cage,
cage goes in the water,
you go in the water,
shark's in the water,
our shark.
Farewell and adieu to you, fair Spanish ladies. Farewell and adieu, you ladies of Spain.
That is cool if you can tolerate approximations. But the uncomfortable questions soon arise:
Can I tolerate an approximate calculation?
What assumptions about my data do I to determine an error bound?
How to verify the validity of my assumptions on an ongoing basis?

Personally I would gravitate towards the quickselect algorithm described in the OP until I was forced to consider a streaming median approximation method.
One of the top results from a very reputable source. The title says it all. "Russia’s Nuclear Modernization Drive Is Only a Success on Paper"

https://carnegieendowment.org/russia-eurasia/politika/2024/0...
I was excited about the brief wave of startup grocery stores that were selling zero/minimally packaged staple goods, like “The Rounds.” But it seems like they’re just not able to hit a level of scale to where they can be price competitive with the sneaky dark patterned stores.

So I guess I’m sticking to Aldi.
I think I've used the previous iteration too much for my mental health, I instantly noticed the slight color change from bluish green to greenish blue.
Postman Tutorial: How to Use Postman for API Testing (With Examples)
> Zod offers more than just type safety akin to TypeScript. TypeScript provides compile-time type checking, while Zod adds runtime validation and parsing.

Well of course it offers more, or you wouldn't be installing a library.

The problem is that even when you're expressing normal Typescript types, you have to use entirely different syntax. It's good that you can usually avoid double-definition, but it's still a big barrier that shouldn't be necessary.
Seems to be far too many people not getting the name correct. It's "ClownStrike". ;)
I've seen the "unit price" be per 100g (Especially so you don't notice it's a ton of money per kg) so there's still some screwing around...
To adequately address this claim, we (the general HN public) would need to be able to access all of the metrics regarding censored/downvoted-into-oblivion articles on HN related to Israel/Mossad/Gaza/War Crimes/etc., and we all know that there is only one individual with such power, and its not exactly in their job description to reveal to this audience just how far and wide the obfuscation/censorship goes ..
Many countries also have treaties to accommodate this process across borders.
When I see the low level of support that Apple provides for various less popular web browsers, it reminds me of a certain story:

A friend of mine once worked a long time ago at an IT company that was building an online store. He wrote a script there that displayed a message whenever someone accessed the site using Netscape "Get lost, jerk, with that Netscape and go straighten bananas on a tree”.

The company was quite popular in my country, and that message caused a lot of outrage on Usenet groups.
The UK switched from selling petrol in gallons to litres in the 1980s. I think I just about recall petrol prices suddenly changing dramatically when I was fairly young - I used to help my Dad keep records of how much fuel we'd bought at what price. I'd write down the figures in the book while he went to pay (it was always self-service) so I must have been old enough to be left alone for 5 minutes!

This Energy Institute statistical series - https://knowledge.energyinst.org/search/record?id=58969 - says that their records changed from "new pence per gallon" to "new pence per litre" at the start of 1989. That seems late for my recollection.

Looking back at historical data from https://www.gov.uk/government/statistical-data-sets/oil-and-..., it appears that the average price for "4 star" petrol (97 RON) crossed the £1 per gallon threshold some time in 1979 (Table 4.1.3, and multiply by 4.54609). I'm not old enough to remember that!

By 1989, prices were at 168.8 pence per litre (i.e. £1.68). So I think the story about the change being because it had gone over £1 per gallon has to be a myth. However, retailers certainly weren't complaining about the price displayed being less than one quarter of what it had been! In contrast, they were much less happy about prices per kilogram being more than twice the price per pound (weight).

Prices crossed £1 per litre for 'Premium Unleaded' (95 RON) in November 2007. They fell back below this level in November 2008 but went back up over it in June 2009.
Not so many cooperatives to apply for, are there? Otherwise I would definitely prefer worker owned.
Minimal unbounded knapsack problem [pdf]
Should be an EU wide mandate at this point, as it's mostly pros with little cons.

Since the options are 1), keep spending EU taxpayer money to boost Microsoft's and other US big-tech market cap, or 2), spend EU taxpayer money on FOSS and local companies implementing and maintaining that FOSS for local infrastructure, then the correct choice seems obvious to me.

The only cons are the short term costs, teething issues and pains of the transition, but that's outweigh by the long term pros once that hill is crossed, the biggest which is tech sovereignty and independence form major tech firms under Uncle Sam's control, and the taxpayer money going to local companies and jobs instead of US.

Ironically, Russia was unaffected by the Crowdstrike incident since they're under sanctions and can't use it, and IIRC they also started switching to Linux for their infrastructure after the war, so maybe it's an interesting case study.
I dont know why on earth youd assume that the executive/board/CEO club is meritocratic or that it would be open to talented outsiders.
Almost all startups in Israel are cybersecurity oriented.

There is almost no dealflow for a non-Security startup in the Israeli market because Israeli VCs demand a short exit window, Cybersecurity startups are very M&A friendly, and Israeli VCs don't have as much experience with GTMing B2C and B2B2C compared to Enterprise.

Cybersecurity is the right mix of easy but niche (only Israel, CEE, India have a thriving low level development scene because American universities increasingly moved OS and Kernel classes into "Computer Engineering" instead of "Computer Science"), easy exits (there are enough F1000 cybersecurity and enterprise companies to sell a startup to), large dealsize (cybersecurity/infra ACV tends to be mid-to-high 5 figures), and pre-existing network (the Israeli and Indian scenes started thanks to Palo Alto Network's successful IPO, and the founding team at PANW became VCs funding similar startups across Israel and India since the mid-2000s).

Also, Israel is TINY (both in area and population). Everyone is at most 3 degrees of separation from Netanyahu or any other dignitary in the country - it's barely 9 million people.
>The minute you start optimizing for employees instead of customers, you’re delivering less value to customers (the world) and asking to be disrupted.

False comparison bc today's companies balance customer value with shareholder value.
Collectives can do the same thing.

The fatal scenario of companies optimizing for owner's benefit is in fact the scenario we have today where investor-owned companies benefits themselves more than customers, eg
pollution, disposable plastic products that can't be repaired or maintained, like the millions of apple tvs that just become landfill overnight, fake shortages to raise prices, stock buy backs, low quality processed foods manufactured in at bliss point.
Hi! Thanks for your comment!

We are a legit company, and we exist for 3 years (we even fundraised: https://www.breega.com/gouach-secures-e3-3m-seed-funding/)

The battery that we sell on the Kickstarter is our final product (the "v3" of our battery), but we had many initial clients (who came for bike electric conversion in our shop) and B2B customers on our previous prototypes, hence the reviews

We just thought we had a product which worked great now that we can open it to the general public, hence the Kickstarter: as we're still a startup, the economic model of the Kickstarter where we get the cash upfront will allow us to build a large batch of batteries for much cheaper
why would apple allow an app that has such a high % of scam reports stay in the app store? the same fake review keeps getting removed and then posted again by new accounts. I noticed this app on google sponsored results, nearly impossible to tell the difference between this app and the offical "findmy" gps tracker apple app because it shared the apple logo as the preview image sense it was using an apple appstore link. but when i clicked on the sponsored result it was a thrird party gps tracking app, I was suprised to see the top result on the app store had this many reports of scams and I honestly cant figure out why they wont take the app down with all these issues .
all i know is i read that the market for location GPS data is going to expand about 100 billion dollars between 2023 and 2024
Is a Universal Basic Income System Even Possible?
Nice twist on the incompetence version of Hanlon's razor... does it have a name? "Nerdponx's razor" will have a hard time catching on...

EDIT: I see esmifra on Reddit said this six years ago... but not sure "esmifra's razor" would catch on either. https://www.reddit.com/r/wikipedia/comments/8itqf5/comment/d...

And I see there is a similar but less catchily-worded concept, "Hubbard's corollary" from 2020 mentioned in the Wikipedia entry for Hanlon's razor... https://en.m.wikipedia.org/wiki/Hanlon's_razor