skysight-inc/HackerNews huggingface dataset:
On the Windows side, loading arbitrary kernel code is an annoying process that involves disabling driver validation+dev mode and one or two reboots. If all components are working well, merely being an admin does not grant you arbitrary kernel access like it does on most Linux configs. You need to pay for/steal someone else's code signing certificate or reconfigure the target to boot into a special mode (that may require a Bitlocker recovery key). Nothing a malware author can't do, but like on the macOS "verify every binary" approach, a malicious actor can be blocked with a single certificate revocation at that point, no AV necessary.

As for groups, Windows has a variety of groups with a range of permissions (both local and over network shares). On home installs, the default user will have all of the permissions, kind of like on how most Linux installs have a single sudo/wheel user. Every kernel object has a different ACL that can be altered down to the user level. Furthermore, Windows differentiates between various permission levels ("browser content rendering process" vs "normal process" vs "admin process"), doing things like preventing keystroke insertion into higher privileged processes running under the same user account.

In office/corporate environments, the person interacting with the computer never gets admin permissions at all, so the admin/kernel boundary isn't relevant until a privilege escalation exploit is involved. Even IT administrators should almost never use real admin accounts; almost everything from changing passwords to reconfiguring permissions and settings can be done with assigning users to lower privilege groups or the right ACLs, not entirely unlike how Linux capabilities can be used to grant relatively low-power users permissions that normally only root can use.

Windows's security problem isn't unlike Linux's: it can be locked down securely, but you'll break tons of applications and you'll need to read through tons of obscure documentation before you can pull it off. Out-of-the-box Windows has a lot of security features that Linux lacks, but when it comes to unmanaged home computers owned and used by normal people, neither has any real protection boundary preventing kernel access in practice.
Well we'll see in a year when Google completely shut mv2 support. Until then it's very easy to speak, especially when you have very few market share and everything to gain with marketing stunt and not much to lose.
i would love to used to use it change code in ways that compiles and see if test fails. Coverage metric sometimes doesn't really tell you if some piece of code is covered or not.
> Key your locks alike, then you only need one key!

Seconded!

If you aren't up to rekeying locks yourself it is an easy job for a locksmith and shouldn't be too expensive.

If rekeying isn't sufficient because your locks use different shaped keys and so you'll have to get at least some new locks to put everything on a common key, and you are up to doing lock replacements yourself (which unless you've got unusual locks is usually one of the easiest DIY projects), I'd consider using Kwikset SmartKey for the new locks.

Despite what the name suggests these are not electronic locks. They are entirely mechanical, using a normal key. They came out in 2007 before "Smart" had become associated with shoving microprocessors into places they don't belong.

If you want to rekey a SmartKey lock you simply take the current key, insert it, rotate 90° clockwise, insert a tool Kwikset provides through a little hole in the front to press a button, and that releases the key so you can remove it without having to rotate the cylinder back to 0°. Then you can put in a different key, rotate the cylinder 180° counter-clockwise, then back to 0° and remove that key.

The lock is now rekeyed to that second key.

So, just buy your news locks from Home Depot or Lowe's without having to worry about getting locks that are keyed to the same key, install them, look at all the keys they came with and pick which one you want to be the common key, and then go around and rekey them all to that using the procedure described above.

Keep the other keys. They can be useful if you have a guest stay over (assuming you have more than one door to your house). Rekey one of the doors to one of those other keys and give that to the guest. When they leave you can rekey back to your common key.

Kwikset also makes SmartKey padlocks if you want to go all in on the one key thing.
If I'm understanding you correctly, then you can do something like

create view admin_users as select * from users where role='admin';
create view recent_admin_users as select * from admin_users where created > LAST_WEEK();

etc. You can also give different roles different permissions to access views without access to the underlying tables as a way to define a stable, high performance API, for example.

I wouldn't use views for something so small, but I probably wouldn't use a query builder either. If you want a stable API, make a view to indirect access to the table(s). Don't break your view API. If you change the underlying table, update the view to keep it as a stable interface.

Query builders can be nice for generic code. E.g. you have a variable length list of predicates (e.g. from http query strings) and want to do `predicates.fold(_ => true)(_ and _)`. In that case you're basically using it as a macro system, which works because sql fragments compose. In fact IMO the most pleasant way to use a query builder is usually exactly as string interpolation macros.

ORMs, the original topic at hand, are an entirely different beast. I think generally people who bash ORMs don't have much issue with query builders.
> Can't you just install it at the user level?

Sure, if you want your ordinary non-admin user to have write access to the executables, which makes it a lot easier for some malicious piece of software to hack them since it no longer needs to get root permissions.
The Sun and most planets and in general stuff rotates in the same direction because it formed from a cloud that had some movement, caused by a bifurcation at some point of its formation. Bifurcation meaning losing balance in chaos and moving away from that initial unstable equilibrium into a significant motion.

So it shouldn't be surprising stuff is for the most part moving in the same direction. It's surprising when something isn't, probably because it was hit by some body changing its angular velocity.

The same goes for the alignment of equators.
> the FIDO Alliance’s Credential Exchange Protocol and Credential Exchange Format to allow for passkey private keys to be securely migrated between providers

Doesn't that require the sender to trust the receiver in advance, which in effect means that it will be possible to go from one megacorp to another, but never to anything open source and self-hosted?
I think they’re anonymous (which is likely why they shut down the site in response to legal threats, you need a name and address to respond to lawsuits)
> sad that so many people don't understand the 1st amendment

Yup. Private parties can curtail your right to free speech. But not your rights under the First Amendment.
> this is not a value system disagreement.

Yes, it is. The issue is not that people don't understand how MS defines what is and is not a security boundary. The issue is that MS's definition is for the benefit of MS, not for the benefit of the user. That's a value system disagreement.
Someone keeps downloading hidden Microsoft apps on my phone it is cyber prime and Microsoft will not help me find out who's doing it I'm going to go to the authorities why won't you help me
> Projects like Hoot (Scheme) and Kotlin port are already demoing such things.

And Scala.js has shipped it. [1] Although technically experimental, it has no known bugs and it has full support of things like manipulating DOM objects from Scala.js-on-Wasm code.

[1] https://www.scala-js.org/news/2024/09/28/announcing-scalajs-...
My impression is that Bullenweg.com initially provided a timeline of events but took on a progressively more active stance as events unfolded.

This culminated in a made-up addition to the timeline entitled "Matt announces acquisition of Bullenweg.com" complete with a "quote" from Matt (there is a footnote within it mentioning it is fake).

This seems to have been the last straw to the lawyers representing Matt to step in and threaten a libel suit (or similar). The result is Bullenweg.com folding (for now) since this could get real expensive real quick.

The above is my interpretation of the events - I have no further inside insights.
Isn't that what Pine does? Good hardware, and then the community is responsible for the software?

My issue with Pine devices is that the community has largely fail to make something good out of them, so they've remained paperweights (please correct me if my impression here is wrong).
> Which makes no sense.

You're twisting what "makes sense" means here. What they're saying makes sense with respect to the current design. They have had a design with one sharp security boundary and maintained it... for decades. Their statement is entirely consistent with that, and in no way nonsensical. You're saying it "doesn't make sense" to mean "I think this is poor design, and there should be multiple layers of security boundaries", and you're obviously welcome to have that opinion, but that doesn't mean their disagreement implies their statement is nonsense.
In my experience (on Gnome at least), Linux is moving towards Windows-style sudo protection. It lacks the "press ctrl+alt+delete to verify" trick.

Windows has the advantage that you don't need to script everything. You can wrap `runas`/`System.Management.Automation.PSCredential` around every other tool if you want to, you just don't need to in most cases.
Years ago I bought the carelessly discarded domain of a defence contractor that was acquired by another one. And set up a catch all email forwarder. Had weeks of fun reading all the emails that I got sent. There was nothing "secret" but plenty of social and business stuff still going on.
What on earth is a regenerative farmer doing on HN? I’m very curious and intrigued
But it's fine for their document OCR? Dragon has been doing dictation for years and years. Either the service works to an acceptable degree or it doesn't. Audio transcription isn't some
unknown quantity.
I think this is much of the problem. The complexities are hidden behind the abstraction, and I'd wager (naively) that most NixOS users at some point need to use an escape hatch. It makes sense that that complexity extends all the way to altering the OS itself, so that Nix has to perform less acrobatics.
I want to block some time to grok the WBR and XMR charts that Cedric is passionate about (for good reason).

I might be wrong but I feel like WBR treats variation (looking at the measure and saying "it has changed") as a trigger point for investigation rather than conclusion.

In that case, lets say you do something silly and measure lines of code committed. Lets also say you told everyone and it will factor into a perforance review and the company is know for stack ranking.

You introduce the LOC measure. All employees watch it like a hawk. While working they add useless blocks of code an so on.

LOC commited goes up and looks significant on XMR.

Option 1: grab champagne, pay exec bonus, congratulate yourself.

Option 2: investigate

Option 2 is better of course. But it is such a mindset shift. Option 2 lets you see if goodhart happened or not. It lets you actually learn.
hey! so i got a cdn for video made of 4 bare metals and 2 are newer and more powerful so i give them each 2 ip addresses from the 6 addresses replied by dns for the respective a record. but from a very diverse pool of devices (proprietary set top boxes, smart tv sets, mobile clients ios and android, web browsers, etc) i still get ~40% of traffic on the older servers instead of the expected 33% given 2 out of 6 ip addresses resolved as dns a records for these hosts. why?
https://news.ycombinator.com/item?id=41958198
Does that still exist? I got a decent ISP (Zen) so they don't block anything.
> Wouldn’t you say that the WaPo brand owns its prestige much to the journalists, editors and other professionals who build the newspaper on a day by day basis?

Yeah. But statistically some of them are going to vote Trump so I don't think that is much of an argument why the WaPo endorsement decision needs to be made by any specific committee in the WaPo.

There are arguments for and against both candidates - the WaPo as an institution might be good at presenting both but it isn't competent to make the decision on which president is a better choice. That includes Bezos for what it is worth. If we're talking shoulds, in theory they shouldn't be endorsing anyone.

> No one buys the Post out of a wish to read Bezos’ personal views or those of random strangers.

Sounds to me like that is exactly why people buy newspapers. The drive is to find out what a community at large thinks about things and to figure out how a random sample of a community is interpreting events. If I want to learn what an expert opinion is on a topic I would not be turning to the WaPo to try and figure it out.

Although with the advent of the internet we've discovered that professional corporate journalists do a terrible job of capturing that so I expect they're being replaced by podcasters with more independence. Owner's influence has never stopped at nixing one decision.
A reservation queue would have worked just as well. (first in first served)
The invite system sets up existing hierarchy of insiders and outsiders from the get-go, favoring the already popular, and creating a wall for new (single) users perhaps not in the hot geolocations where invites get handed out in bulk. It actually excludes people who are already struggling to socialize, and rewards those who have all the 'right connections'.
It's Debian running GNOME. You can install whatever UI you want from the repos, but the developers have written convenience tools in the form of GNOME extensions, which you can see in the top bar in the photos. It works fine, in my experience, modulo some finicky bits involving the onscreen keyboard. I have the original developer model, and I don't know what differences exist in the community edition.
You do have to admit, the footer is extremely small and it's also not in the most prominent place. I think most "AI companies" probably don't go into a sales pitch saying "It's awesome, but it might be full of shit".

I do see your science fiction angle, but I think the bigger issue is the media, VCs, etc. are not clearly spelling out that we are nowhere near science fiction AI.
I'm riffing on password rotation requirements and the meta-nature of trying to make Goodhart's law a target. I could've been a bit more obviously sarcastic.
Recent and related:

UK will give sovereignty of Chagos Islands to Mauritius - https://news.ycombinator.com/item?id=41729325 - Oct 2024 (282 comments)

Also:

UK to hand over Chagos back to Mauritius - https://news.ycombinator.com/item?id=33463586 - Nov 2022 (52 comments)
The thing is, the people most likely to complain that the Cybertruck is a bad vehicle are the people who are informed about it. The wider public doesn't know about things like the tonneau cover leaking, wheel bearings failing, the suspension being stuck down and causing tire rub, the aerodynamic wheel covers that were causing tire failures because they were puncturing the sidewalls, the upper control arms that bend like an empty aluminum can, the door edges that will cut your finger off, the tailgate that will also cut your finger off, the fact that it's got even worse sight lines than the Hummer H1, or that the bed effectively loses twenty percent of it's space because of the backwards angled bulkhead where the bed and the cab meet.

Someone who is an enthusiast will most likely know about those things because they were widely reported in the automotive news sphere, and thus they will have a much higher chance of being against the Cybertruck. The wider public doesn't know, and so the novelty factor draws them in.
Can you elaborate? What does that have to do with the situation at hand?
I don’t have much hope for these types of keyboards and for the price of a Magic Keyboard, i’d prefer a better keyboard (not a high bar there) and some kind of stand even though a bit more cumbersome.
Damn I’m sorry.. the picture was blurry on the device I used since no JS and it was just the free part of the whole article.
I was sloppy at the end of the workday and the weekend ahead.

Probably also biased towards a satellite with jammers.
ADHD and managing your professional reputation
Entrepreneur, multiple income streams, software is one of them.
I've tried to look up SDE and can't find anything?
Teens Want Less Sex in Movies and TV Shows, Study Finds
The only thing I can think of that might be a net plus for the west if if we start pumping water from the ocean to the Salton and allowing that to evaporate and creating more greenery where it creates rain shadows.
If malware is already running as you with the ability to write to your files, what does it gain by Trojaning your VSCode to do bad stuff instead of just doing the bad stuff directly?
This whole Wordpress thing is like some sort of wild bar room brawl.
Any fool on a hill can confidently state that they don’t believe in gravity because there’s no proof for it and the matematisk theories are all complicated and bureaucratic. Why should he believe it?

But so what?
In the age of PoE is Diablo even relevant anymore?
What a loaf of crap.

I'm one of those people that doesn't think plastics are the devil, that doesn't think natural == good and unnatural == bad, basically the kind of people this guy expects to be in agreement with him. I was once an extrusion mechanic.

He doesn't explain jack. Nothing. There is no explanation about any concerns anyone has voiced whatsoever. The only place he almost explains some chemistry, he says "email me if you want to know."

Appeal to authority... specifically the FDA. That doesn't work today. We have had nasty things get past them before.

There are thousands of compounds used in various plastics. Probably, if you count one off additives in proprietary formulas, hundreds of thousands or even millions. You're telling me that not a single one of those, not one, got past the regulators, has an impact nobody foresaw, or fraud was done in the research to get it approved? Not one?

Of course he's not saying that. I almost feel bad for him, he set himself up to explain a topic it would take an entire college course to explain. He can't explain the biochemistry and organic chemistry of every single compound used in plastics, but he decided to write an article defending them anyways, how can anyone expect such an article to have enough substance?

I think it's obvious today, we are bathing our world in compounds that have an impact on our health, on our biomes, that we cannot possibly foresee. We cannot know all the interactions and pathways. It is incredibly irresponsible. Plastics are not somehow immune from that. Lead, DDT, thalidomide, I guarantee you something in our food, our agriculture, our materials supply chains, something that is currently approved, recognized as safe, in widespread use, will be added to that list in our lifetimes. Probably more than one. I just hope we take it seriously and stop making the same mistake.
Well, I don't like her and her platform is alright compared to trump's, but that just words. Tim Walz is alright tho. I still voted for her. My sample size is definetly biased and small, but that is the sentiment I get from her voters that I know.
> * If/When the battery dies, does the lock default to locked setting? I assume so, but how annoying would this be?

Typically, the home locks are just actuated mechanical locks. So the lock will stay in whatever state it was when the battery died. If you want to get into commercial-grade locks, there are magnetic locks that can be configured to fail open or close on power loss.

Anyway, the battery is not a big deal. I have a Kwikset lock with a ZigBee module, it runs on 4 AAA batteries. I switched to Li-ion rechargables several years ago, and they last for about 6 months between recharges with moderate door use. It's even longer if the lock is not used often.

And the lock starts beeping annoyingly after opening/closing when the batteries get down to 30%, giving you plenty of time to replace them.

> * Being a privacy nut, does the lock come with a pre-determined code, or can you generate your own?

You always can set your own combinations. And there are biometric locks.
Related:

Utopia, Abandoned: The Olivetti Town - https://news.ycombinator.com/item?id=20864548 - Sept 2019 (24 comments)
I don't mean to. Which part is the Thiel quote?
Thank you. I genuinely would have had no idea otherwise, why this specific date.
One of the topics of the lecture might well have been how to retain that institution's integrity after the election of a President who absolutely wants to undermine it. Seems pretty relevant to me.
Ha, I do all of this already. (My "trinket" is a Yubikey, though I just added a 3D printed MIT Flea tag an enterprising child was handing out at the last Flea.)

I propose that the reason for clockwise ordering is: door locks are on the right, and also most people are right-handed. So looking at the keychain as you would hold it to insert the key into a lock, the first visible key is the first in clockwise order. The others are "stacked" beneath it.
Tech Craft: My Favourite iPad Pro Accessory: The Raspberry Pi 4 (November 2019)
https://www.youtube.com/watch?v=IR6sDcKo3V8
Oh hey! Small world! I recently used your Static site generator to convert a subset of my Joplin notes into a website which I used as a showcase for employers and that showcase ended up being the thing that got me my initial interview with the company I'm now working for. Thanks for making the converter public and saving me a bunch of time from not having to write one myself from scratch!
Google is reportedly developing a 'computer-using agent' AI system
> The issue is not that people don't understand how MS defines what is and is not a security boundary.

That's a communication failure, not a value system disagreement.

> The issue is that MS's definition is for the benefit of MS, not for the benefit of the user. That's a value system disagreement.

Just because two entities differ on their values that doesn't mean everything they disagree on is their values.

In this case, the fact that users and Microsoft differ on what constitutes a security boundary is 100% a definitional disagreement.

Now MS obviously has had their own values and reasons for not establishing other security boundaries people would like, and that is a value system disagreement. But even if their values agreed with yours and they hated the current design just like you, the fact of the matter would still be that user account groups are the boundaries in the current design, and that would still imply this isn't crossing a security boundary, making the disagreement on that definitional.
didn’t work there, either
SQLite might indeed not be the best tool here. But there are ways to make it work. You could use the blob streaming API to chunk the files into and out of the database, although this is not fire-and-forget and would require a pinch of data modeling and some adapter code.

Seems like the kind of thing where, given a compelling need to do it, one could work something out fairly readily and rely on the result. But it's probably not the ideal solution to the problem.
This is accurate. https://xmrit.com/articles/gift-exceptional-variation/