skysight-inc/HackerNews huggingface dataset:
This is a fairly common recommendation for "zero trust." A VPN is theoretically superfluous in a zero trust environment, where you have no concept of a trusted network and your applications should be sufficiently hardened to prevent unauthorized access. Google operates this way, if I recall correctly. It's how their "Beyond Corp" white-paper recommends setting up the environment.

It's not exactly a "one size fits all" solution; I believe PCI requires VPN usage, for example, so a bank trying to implement zero trust practices would need to keep their VPN intact, but that's a regulatory concern, not so much a technical one.
Legality is the lowest bar of ethical behavior.
Brazil's Supreme Court is not "a government elected by the people".
We interviewed Eric Mill, one of the authors of the memo, a couple years back, getting into the details of what exactly the memo meant about VPNs, about encrypted email (it's not what you think it means) and about encrypted DNS:

https://securitycryptographywhatever.com/2022/06/10/omb-zero...

I think for HN the most important thing you can keep in your head about the OMB ZT memo is that vendors jumped on it like the Bumpus hounds to the Parker family Christmas turkey, so there are a lot of ZT takes that more or less condense to "our product is now rated M for Mandatory".
Checking internet archive from 2022/23 (prior to the 2024 ownership change that introduced AI articles) supports this:

https://web.archive.org/web/20220601000000*/cosmosmagazine.c...
There is some history here, like the musicians that went on strikes and picketed radio stations after one dared to play a record on the radio instead of a live orchestra!
For what it’s worth, I thought the same thing when Rails added a component called “Spring”. I thought it would lead to needless search conflicts since they’re both used for web development. But, it’s mostly been a non-issue.
In my limited experience in a small biz running some SaaS web apps with new relic for monitoring

> What are the key assets you monitor beyond the basics like CPU, RAM, and disk usage?

Not much tbh. Those were the key things. Alerts for high CPU and memory. Being able to track those per container etc was useful.

> Do you also keep tabs on network performance, processes, services, or other metrics?

Services 100%. We did containerised services with docker swarm and one of the bug bears with new relic was having to sort out container label names and stuff to be able to filter things in the Ui. That took me a day or two to standardise (along with the fluentd logging labels so everything had the same labels).

Background Linux Processes less so, but it was still useful, although we had to turn them off in new relic as they significantly increased the data ingestion (I tuned NR agent configs to minimise data we sent just so we could stick with the free tier as best as we could).

> Additionally, we're debating whether to build a custom monitoring agent or leverage existing solutions like OpenTelemetry or Fluentd.

I like fluentd, but I hate setting it up. Like I can never remember the filter and match syntax. Once it’s running I just leave it though so that’s nice

never used open telemetry.

Not sure how useful that info is for you.

> What’s your take—would you trust a simple, bespoke agent, or would you feel more secure with a well-established solution?

Ehhhh it depends. New relic was pretty established with a bunch of useful features but deffo felt like over kill for what was essentially two containerised django apps with some extra backend services. There was a lot of bloat in NR we probably didn’t ever touch. Including in the agentnitself which took up quite a bit of memory.

> Lastly, what’s your preference for data collection—do you prefer an agent that pulls data or one that pushes it to the monitoring system?

Personally push, mostly because I can set it up and probably forget about it — run it and add egress firewalls. Job done. Helps with network effect probably as easy to start.

I can see pull being the preference for bigger enterprise though who would only want to allow x, y, z data out to third party. Especially for security etc. cos setting a new relic agent running with root access to the host is probably never gonna work in that environment (like new relic container agent asks for).

What new relic kinda got right with their pushing agent was the configs. But finding out the settings was a bear as the docs are a hit of a nightmare.

(Edited)
They will block you through DNS. For 99% of the users base, it’s generally enough.
> When he (the president) uses his official powers in any way, under the majority’s reasoning, he now will be insulated from criminal prosecution. Orders the Navy’s Seal Team 6 to assassinate a political rival? Immune. Organizes a military coup to hold onto power? Immune. Takes a bribe in exchange for a pardon? Immune. Immune, immune, immune.

this is a quote from the dissenting opinion of Judge Sotomayor.

the rest did not find that interpretation of the case true in their opinions.
DNSSEC isn't reasonable, and the OMB memo doesn't require it. CLOUD.GOV doesn't even support it.

NIST has standardized a set of PQC constructions; I think the jury is in there.
I hate Bitcoin as much as the next person but it's not really fair to criticise a technology that's potentially cool on the grounds that it doesn't have enough adoption. If it had the stability of entire countries behind it, it wouldn't fluctuate this much and even if it did, if everything's in that currency then you don't notice it in daily life either.

The problem I have with it, is that the technology is inefficient at solving the problem as compared to a central authority issuing currency. Something using e.g. blind signatures sounds really cool but the tech was ahead of its time (paper stems from 1983) and by now it doesn't sound cool and new anymore. Example implementation: https://en.m.wikipedia.org/wiki/Ecash
The problem is that the author's job was already pretty far down the "fire certain types of work" pipeline. By his own account, he was writing 1 column every 3 weeks, for an unprofitable magazine, as a freelancer with no formal employment relationship. If they'd been responsible in the way you're wishing for, they would have never hired him at all, knowing they don't have the money to treat him as a valued employee.
> As someone above mentioned, it’s kind of odd that these systems are so utterly disconnected to the broader IT protocols in so many places.

My greatest realpolitik lesson at uni was being assigned parking in an "odd" building's gated parking lot. It was close to my dorm, but required carrying your permit to them, so they could enter you into their system for access.

Cue realization they weren't connected to the main university parking registry.

Cue my not buying a parking pass (a substantial cost, as this was an urban campus) for the next few semesters... as my prior auth continued to work on the gate.

And why would parking police think to check for unregistered parkers in a gated lot?

(As far as I can remember, I still had access ~2 years after graduation, then they finally cleaned up their DB)
Of course there are plenty of creative people who pay the bills by doing things other than the commoditized analogue to their art, no? The stereotypical actor waiting tables comes to mind, as does Einstein in the patent office.

(Edit: this submission seems timely and relevant - The Blue Collar Jobs of Philip Glass - https://news.ycombinator.com/item?id=41240152 )
The reality of China is that their GDP stats are so systematically faked and so clearly don't add up that nobody actually knows whether China is economically healthy, not even Xi Jinping.

In such a scenario, China could collapse at any time, and past performance is not a predictor of future results.
Asked? Told.
This is what desperate looks like. Google needs to get out of hardware. They know what they make is uncompetitive. It never will be even if they get the handset right because absolutely nobody trusts them.

Their only chance is to give the hardware away in exchange for the spying
I got work with a Xerox Star when I had a job at Western Union. It was wonderful. It took many years for Mac and Windows to catch up.
> No. That's what you are doing. Apple didn't buy Next for 400 million $ to get their hands on 'WebObjects'. In fact that played very little role.

I never said Apple bought NeXT for WebObjects. I said that NeXT had value outside of the deal in the marketplace because WebOjects was starting to get traction.

In fact, NeXT was planning to IPO into the .com craze on the strength of WebObjects. Here's a whole Computer History Museum article about that:
https://computerhistory.org/blog/next-steve-jobs-dot-com-ipo...
VN - Vietnam

SK - South Korea

JP - Japan

FDI - Foreign Direct Investment

RoI - Return on Investment

JV - Joint Venture

ToT - Transfer of Technology ?
Spring framework can be seen as a wrapper for other projects and technologies creating a cohesive development platform.
> Yeah, but Apple didn’t care about WebObjects; it needed an operating system.

I never said Apple bought NeXT for WebObjects. I said that NeXT had value outside of the deal in the marketplace because WebOjects was starting to get traction.
> Post covid I like to keep at least a month stash of anything cheap and durable as toothpaste.

We are a family of 3, and teeth are brushed at least twice a day. 5 tubes of toothpaste would last 6 month. That’s a lot of toothpaste.
Awful news. RIP.
Möbius Sync doesn't sync in the background; you must have the app in the foreground for it to function. So, not quite a proper substitute for Syncthing, but may work for OPs usecase.
You need to lodge a complaint. It’s time consuming so almost nobody do it.

And generally, it came with a slap of the wrist, and the company put up the banner.

For a site to be blocked, it need repeatable, multiple and not correctibles infractions.
If they're on the same network, cross platform, open source airdrop alternative https://github.com/localsend/localsend
I am power user with a large following on X and I have never once had any trouble, despite numerous times criticizing Musk.
Use Signal. If you install the desktop client Signal has a special "Note to Self" address you can use to transfer message attachments between devices.
Side effect: agreed, but the way you used it makes no sense in that definition (arguments cannot have side effects on a function call, they're resolved before the function is called), and the main other option in Go is to pass a struct or separate typed arguments which also has no side effects, and the only other interpretation is "the side effects you can trigger in the function based on the argument" which is identical in all scenarios...

so I figured you were using it in the more colloquial way where it's closer "observable behavior [of the argument's type]". Or "the unintended consequences of a design decision".
Not being able to take a pointer to a literal is one of my pet peeves with Go - especially when using the AWS SDK, which requires pointers to literals everywhere. At least with generics, a wrapper function doesn't require a separate function per type though, and can be simply:

package ptr

func To[T any](v T) *T {
return &v
}
yeah I don't think dynamic navmeshes at runtime would work well.I'm using Godot, I'll have to keep looking
Defense in depth is an idea that has probably done about as much harm as it's done good. The notion that your apps should be exposed on the public Internet is about clarifying the need for sound authentication on apps. In the OMBZT cinematic universe, there is no meaningful security benefit from being masked on a VPN, because so many different people get access to those VPNs.

Your mileage will vary. I wouldn't expose internal apps on the public Internet even as I acknowledge the ideas OMBZT is pursuing make sense in OMB's setting.
The future is actually the opposite: platforms putting servers in every country the operate in and having slightly different rules according to each country
> A VPN is theoretically superfluous in a zero trust environment, where you have no concept of a trusted network and your applications should be sufficiently hardened to prevent unauthorized access.

Defense in depth is theoretically superfluous in a secure system, but it's still a good idea for... what I thought were obvious reasons. I don't see how this is any different.

And, again, as I mentioned above this isn't even just about network trust, it's also about the ability to monitor, audit, and intercept potentially malicious connections when something does get compromised. "We assume our one layer of security will work perfectly" cannot be the starting assumption...

> Google operates this way, if I recall correctly.

Google also has 24/7 world-class security teams monitoring everything across the planet. They have a ton of power to monitor and mitigate damage across the entire internet. Just because something works for Google that doesn't mean it'll work for arbitrary organizations.
Getting scammed is a problem but it's not super common and the banks have a policy of refunding the money. Society bears the cost that way, and has the incentive to prevent and educate, rather than that it ruins some individual's life
> Anyone who has ever trained a model, or finetuned a model, is likely using other people's data. This is universal. It is almost everyone.

Citation needed.

The whole reason there's no legal trouble is that it cannot be proved conclusively that they used copyrighted data for training.

"when the CTO of OpenAI is asked if Sora was trained on YouTube videos, she says “actually I’m not sure” and refuses to discuss all further questions about the training data". Why do you think she's denying the obvious?
Blockbuster Video VHS insert template
Probably tai chi or qigong as well.

I’m convinced we are going to discover that “qi work” is moving lymph through the connective tissue (a phenomenon we only just discovered a decade ago). The proscriptions against doing these exercises or massage during an illness is my clue/circumstantial evidence and I hope it gets studied more.
Humans tend to project our emotional states on animals and, in the case of AI, inanimate objects. While the first can be cute and innocuous, the second creates an incredible amount of risk in the advancement of AI and the well-being of humans.
A reference to "The Iron Curtain"?
Hey guys! Creator of the non-website here. Thank you all very much for the feedback.

This thing that is clearly NOT a website was initially done for a hackathon and I never expected it to get more than 5-6 users.

It's so amazing and a bit stressful, because I want to offer a great experience at the same time!! Today I tried to make it compatible on phone too mobile users. Hadn't too much time to test it out but I'm on the lookout for bugs.

I also found this post randomly, I was trying to find out why did Vercel sent me an email at 4 AM that I am using 100% of the free plan data LOL. I had to upgrade to pro.

Thanks to everyone for trying out this scuffed thing (which is NOT a website!!) haha. I had a deadline and only 26h left to create it, never knew it will get this many users!

Much love,
Andrei.
How much makeup is Eric Schmidt wearing?
Nobody. That far exceeds the current market prices of the most in-demand bugs.
Also the functional options pattern usually implies that there is an object on which the functions operate. Default values for parameters is something that can apply to any function, not just initializers.

I wonder if parent could give us an alternative for strings.Replace using functional options.
I find the terminology is used inconsistently*, so it's probably always worth asking.

To me, a "large language model" is always going to mean "does text"; but the same architecture (transformer) could equally well be trained on any token sequence which may be sheet music or genes or whatever.

IIRC, transformers aren't so good for image generators, or continuums in general, they really do work best where "token" is the good representation.

* e.g., to me, if it's an AI and it's general then it's an AGI, so GPT-3.5 onwards counts; what OpenAI means when they say "AGI" is what I'd call "transformative AI"; there's plenty of people on this site who assert that it's not an AGI but whenever I've dug into the claims it seems they use "AGI" to mean what I'd call "ASI" ("S" for "superhuman"); and still others refuse to accept that LLMs are AI at all despite coming from AI research groups publishing AI papers in AI journals.
The main issue with TOTP is that it's still vulnerable to phishing, though it certainly is significantly better than SMS.
I hate charging at gas stations. They're not a place where I want to spend time. Their retail is usually small, food choice is meh, and the surroundings are boring and smelly.

In my experience oil-company-owned charging networks are the least reliable. Shell Recharge is so bad it looks like intentional sabotage.

Gas station chargers aren't even an alternative to hotel chargers. They need different types of chargers — hotels and workplaces can have cheap and simple AC chargers that take a whole day or night to recharge (8-11 hours). Nobody is going to spend a whole day at gas station, so they need much more expensive DC fast chargers (20-30 minutes to recharge). But for fast chargers highway stops with a food court and nicer views are much better.

You don't fuel your ICE car in a stable to parade it in front of horses, and EV owners have no need to sit at a gas station.
A huge chunk of them were made public: https://apnews.com/article/brazil-twitter-elon-musk-x-censor...

To the people disagreeing with my parent statement, could you find one non far right affiliated legal scholar who would say those orders are illegal?
Your position is that it can't be measured or distinguished. My position is that it can be distinguished: there's not much return on investment from ai, because it's not really intelligent. If it was able to reason generally, it would create plenty of ROI.

You can't use a contradiction between your position and mine to prove my position is absurd.
From the same article:

> Brazil’s Supreme Court has drastically expanded its power to counter the antidemocratic stances of Mr. Bolsonaro and his supporters.

The title is a leading question. I can come up with different titles for the same article or topic, that could be leading somewhere else:

1. Brazil Top Court's Actions to Defend Democracy

2. A View On Moraes' Decisions In Face Of The Crisis Created By Bolsonaro

3. Brazil's Supreme Court Reaction After The Presidency Went Too Far

---

A legitimate question I have is:

What other institutions (or democratic tools) should have acted to halt the extremist anti-democratic movement lead by Bolsonaro?

(Not a trick question, an honest one given the crisis)
Not being familiar, what is different about Buc-ee's? Why do people spend 30-60 minutes inside?
wormhole-william is just a Go implementation of Magic Wormhole; those are the two you should use, Magic Wormhole and wormhole-william.
> For something I absolutely want to be a part of, because all of the above are incredible, it's not going to take as much in compensation as a place that's not perfect in one aspect or another, but is otherwise nice at the right price.

On the other side of this, there exist a compensation amount, above which I will accept a job offer knowing nothing about the company, am willing to suffer through almost any job or working condition, regardless of whether I believe in the company's mission, want to be a part of the company, where I'll simply say yes sight unseen. No company has even remotely gotten close to this number with their actual offer, but nonetheless I must admit the number exists. If a company just asks "how much do you want?" I don't see any harm in giving them that number. If they are OK with it, jackpot. If not, we negotiate way down from there after I learn more about the company.
Connect both devices to the same WiFi network and use a http server like:

python -m http.server
Right. Also you may have to reconfigure some firewalls to use scp.

Typically, a firewall allows outbound connections without needing an explicit entry for the protocol, and in the case of magic wormhole, both sides are an outbound connection. So it passes right through.

If you've got security-minded folk managing that sort of thing for you, it's possible that magic wormhole will upset them for this reason. More for policy/compliance reasons than actual security ones.
They cannot forbid it. But they can rhetorically pass a law asking any website to moderate these talks. And block these site on its territory if it doesn’t comply.

Practically, this would never happen, Estonia is too small of an actor.

But if the EU decided to pass a law in this sense (would not happen, too many people implicated in an EU law writing), this would have more weight.
Study finds lands used for grazing can worsen or help climate change
Troubled Amazon drone delivery program faces latest challenge: Annoyed residents
Depends. PyTorch on the other hand has a large user base and well defined and tested api. So should be doable; and is already progressing and rapid speed..
Rendering is a general term that can apply to many things. For example, in JavaScript there is `CanvasRenderingContext2D` [1] where "rendering" is about applying drawing commands to a canvas context.

So you are just proving my point that this kind of discussion devolves into a semantic argument. You want to define rendering one way. Someone else uses the term another way. It's the same problem with "immediate mode" vs "retained mode". People just throw the words around assuming that everyone uses them the same way.

In this way, no discussion is actually had. Just a bunch of people insisting that their personal definition of a term must be adhered to.

1. https://developer.mozilla.org/en-US/docs/Web/API/CanvasRende...
It really depends on the developers writing the application, but in my humble opinion Java and Swing are far better than Electron in terms of responsiveness to user interactions.
https://hetrixtools.com/

It's free if you don't have too many servers - 15 uptime monitors (the most useful) and 32 blacklist monitors (useful for e-mail, but don't know why you'd need so many compared to uptime).

It's fairly easy to reach the free limits with not many servers if you're also monitoring VMs, but I've found it reliable so far. It's nice you can have ping tests from different locations, and it collects pretty much any metrics that are useful such as CPU, RAM, network, disk. The HTTP and SMTP tests are good too.
Taildrop is neat, but Wormhole is much more flexible and much easier to use (if you're OK with a command line tool). We use Tailscale everywhere here and I still wormhole things all the time.
Bukele is a large hole in your argument.
I've been using Microsoft's one for my work accounts because, well, we're elbow deep into Office365 so why not.

I've never gotten that dialog, and have not had any issues with the accounts I've added. Since they're my work accounts, 99% of them share my work email as account name.

So does that mean I've just been lucky, in that the sites I've signed with have provided a sufficiently unique label? I feel I didn't fully get what the issue is.
X has already mentioned what they do in this regard. Posts that are excessively vulgar/crude/etc get shadowbanned. But it's the post, not the account. So if the guy wants to run around saying dumb stuff, it'll be seen by basically nobody besides those that follow him or otherwise actively seek it out. But if he decides to start acting like a normal person again, then his posts would work similarly to anybody else's.
Different metrics can be interdependent, efficiency and effectiveness are among them.
> Complicated topic? The information for "100% understanding" might not even be written

Bjarne Stroustop, creator of C, famously rates his C knowledge as 7/10