skysight-inc/HackerNews huggingface dataset:
This release is to provide you with everything you need to establish a functioning security incident response program at your company.

In this pack, we cover

Definitions: This document introduces sample terminology and roles during an incident, the various stakeholders who may need to be involved in supporting an incident, and sample incident severity rankings.
Preparation Checklist: This checklist provides every step required to research, pilot, test, and roll out a functioning incident response program.
Runbook: This runbook outlines the process a security team can use to ensure the right steps are followed during an incident, in a consistent manner.
Process workflow: We provide a diagram outlining the steps to follow during an incident.
Document Templates: Usable templates for tracking an incident and performing postmortems after one has concluded.
Metrics: Starting metrics to measure an incident response program.
While this is very impressive there is an important qualifier missing from the article.

They are NOT comparing the output from the same programming languages and so probably not the same source code either.

- Their compiler uses a custom language (NesFAB) and does NOT support C

- The reference compilers are all using C

"NESFab is a new programming language for creating NES games. Designed with 8-bit limitations in mind, the language is more ergonomic to use than C, while also producing faster assembly code."

And http://pubby.games/nesfab/doc.html#_what_is_nesfab

Presumably they made a best effort to implement their algorithm as closely as possible in the two languages, but that's a lot different than comparing the output of compilers using identical input source code.

So instead of saying

- "In a bizarre twist, my compiler generates faster code than GCC, LLVM, and every other compiler I compared it to."

It would be more accurate to say

- " In a bizarre twist, my compiler [and language] generate faster code than GCC, LLVM, and every other compiler I compared it to [using C].
You save the plumbing to near the pedal box and maybe the plunger to the master cylinder... and that's it?

Not my world, but I don't get it - with throttle by wire you can do fun dynamic/nonlinear response, cut throttle when you don't have traction etc. With this thing, all the clever things are already done by the ABS/ESC unit, so removing the physical connection really only frees up like like 50 cm of a hydraulic piping.

Would love to hear an automotive engineer's take on this to be honest.
No no, it would be "just as stupid as the 2020 conspiracies" if Joe Biden had said "Mark Cuban went to Pennsylvania and boy, he really knows those voting computers... anyway we won in a landslide"

https://www.youtube.com/watch?v=F9gCyRkpPe8
Yes, you can still do that. The only differences with modern Kobo devices are the loss of an external uSD slot and, on the latest modeks, the liss of the internal uSD slot.

I also have a hard time describing the process as jail breaking. Updates to the Kobo are simply unprotected zip files which contain firmware updates along with a gzipped tarball that contain updated files for the filesystem. Anyone with a knowledge of Linux can modify the software.

Ibalso consider the situation as rather stable. Not only has Kobo/Rakuten been ignoring modifications of the open source components for over a decade, they have been ignoring patches to the proprietary binaries.
That deserves a discussion on its own, including the silly foot logo.
>>I’ve even managed to go years without opening the news.

If only life was that simple.

If you are not Knuth or Einstein, you better be open to the world. Or you won't win at life.

Focus is for people are absolutely too darn good at what they do, and get rewarded for it. For everybody else, you have to be open enough to be informed about newer and rewarding things.
Counterexample: TextNow offers a "free"(ad-supported) mobile phone service, yet people overwhelmingly prefer to pay for T-Mobile.
What I don't hear in discussions about this, is in what manner human 'thinking' is distinguished from AI 'thinking'. A lot of people hold the prejudice that both 'thinking' and 'consciousness' are substrate dependent, without a lick of evidence. If the hard problem of consciousness is unsolvable, it would make sense to err towards, at least, 'We don't know if it is', but ethically it would be responsible to err towards 'It is', and in reality 'It could be'—assuming the AI is observably intelligent in the same manner as other life we deem intelligent.
Depends on where you are going. We did a trip to India and we got charged several fees when withdrawing from State Bank of India. It would have been even higher if we had allowed State Bank of India to the currency conversion. Do your research before heading to a different country.
>You're selling yourself for free.

I get to avail myself of their product for free

Because "they" will attack you economically by psychologically targetting you with advertising for items you don't actually need, but they will manipulate you into thinking you do.

Meaningless buzzwords, nobody is being 'economically attacked'

>Because "they" create an electronic copy of you with all this data. With AI and other existing / future technologies they could create a version of you to populate their metaverse.

Slippery slope fallacy. Does not exist

>"They" sell the electronic copy of you, and this can be bought by anyone, including governments. If the government of the day (which may change - boy howdy) don't like things you say or how you conduct yourself (or re-define what fraud anbd corruption means), then they can target and harass you much more specifically when armed with all this extra information that's extracted from your electronic trails.

>Another slippery slope argument.
Stellar work! This is such a wonderful writeup!
Context switches on most general purpose OS's are non-preemptible. It's relatively easy to find out what they cost. The TLB hit is application dependent - it depends on the working set (memory use footprint) after the switch. This is not some hard to know thing, certainly not for the purposes of bounding a spinlock.
Tyre is clearly the correct spelling. I quickly tire of anyone claiming otherwise. Gaol is an archaic spelling which I've found incredibly confusing ever since I was a small kid a long long time ago.
Twilio's verification API for instance has this[1] but only for US targets. Though the person in the OP is from the UK. I wonder how many other countries' carriers have non-business caller name lookups.

The other aspect would be if Google were able to cross-reference address book contacts that were obtained from permissions from their apps/services to check what name is most commonly associated with that number.

[1] https://www.twilio.com/docs/lookup/v2-api/caller-name
This is revisionism. There was quite a lot of noise around Google's terrible historical image generation.

One key difference though? Google backed off, apologized, and if I'm not mistaken, explicitly said "We messed up." Versus... this.
> Now take a step back and look at what you’re doing. You’re writing an operating system.

Whoa whoa whoa, buddy. I'm a software developer. I don't take a step back and look at what I'm doing. I don't even know what I'm doing half the time.
There are not many languages that for example abstract higher than C# and compile down to it. And whilst we are building abstractions in C# (etc) those are one step up (height), and then there are many of those frameworks, thus many steps sideways (breadth)
> But what they do need is a way to specifically identify those whom they wish to persecute.

Which is one of the arguments for pervasive / opportunistic encryption: if only 'certain people' encipher communications, they stick out like a sore thumb. But if everything is encrypted, even 'innocuous' things, then it's harder to be targeted.
Hi, What are the salary range for these positions? I do not see them listed in the position descriptions.
Someone put an iPhone SE 3 inside a Nokia Lumia 1020
Traditionally, scientists provide their analyzed results and figures to peer reviewers, but raw data itself is seldom provided to reviewers to confirm or reject a hypothesis in a double-blind fashion.
Yes. The message is changed slightly, but this is what happens: https://www.youtube.com/watch?v=ZUt1MXelR9w
That isn't the failure mode at all, that was given as the result of the failure (once it was already too late to reverse course). The next line which you forgot to quote was: "The world pays next to no attention as the American Century ends in silence."

Which is definitely not how the world is currently treating Trump.

Do you not think swelling deficits and an inability to pay the bills (the things actual spelled out as causes in that section of the article) are not something Trump is (ostensibly) trying to reverse more than any other president in recent memory?
> custodians can be hired

SF has one of the largest city budgets in the country — >$15billion — and struggles to staff park workers making $70-90k.

If the park workers only make $60k, but the city budget is 1/10th, 1/20th, 1/100th of SF’s, how does the math here ever work?
So some fragile far-left activists have a grievance of the day with language that is benign for the majority of the population. So what? No one should care and the adults can continue about their day.
Any scrollbar would be nice, but I'd like to introduce you to mobile browsers that hide scrollbars by default.
> Whereas the entire point of paying a premium for Apple products is that you don’t get subjected to any side hustles

I pay for Apple One and I am furious about their ham fisted inclusion of easily the lowest quality ads in Apple News Premium, and to have included them to such a degree that they are a major distraction.
I support initiatives to get really aggressive with drug dealers/users. I wish we could better help the unhoused in humane ways, but when 99% of our social resources we allocate to that effort are forced to go to fent zombies to no appreciable effect, I am very pessimistic we will make any progress no matter how many billions we throw at it.
In Australia, gaol is far more common than jail. Neither are used anymore really. It's more often just prison or penitentiary.

Some of Australia's more popular historical sites are old gaols.
"jail" and "prison" are the American English words in question.

Although that distinction is rarely relevant in casual conversation in practice. People say "jail" and mean "prison" all the time.
Au contraire, if you haven't anyone or anything to bail you out, how can you justify the risk of innovating?

Man is not an island.
IMO he went overboard on the cynicism in his later years but he was always funny.
We should stop normalizing giving phone numbers out to companies. If I don't want you to call me, why would I give you my phone number. And on the other side of that coin, why do you want my phone number if you're not planning to call me? It's not an identifier. Just don't do it.

Same with social security numbers. You don't get it unless I expect you to send me a tax-related form at tax time.
You are absolutely right. People don't really like hearing it.
Except it flags it properly as dupe and doesn't include more dupes.
What about extra feed - grain or silage or whatever? Or do they keep stocking density low?
Does Elon even have a vision for the future, or is he just obsessed with the engagement metrics for his next tweet? His posts nowadays feel like a carefully balanced science experiment — one part rage bait for people who believe in decency, one part dopamine drip for his loyal fanbase who think being a contrarian will increase your chances of becoming a billionaire.
> List doesn't include "the same color should look the same on all renderers/browsers".

No browser supports CMYK, and using an RGB color space (browsers in popular use support two) doesn't solve this problem, even setting aside that some browsers support color management by default and some don't.
WCPGW?
I gave a presentation on that attack in a number theory class - it made not getting that problem sting a little more.
You're seriously suggesting Apple and Google have no difference in privacy?
If you boot Windows from a RAMdrive you can do this.
Tyre is clearly the correct spelling for the city in Lebanon. ~
Why isn't there tooling to support these recommendations; why is there no automated verification?

SAST and DAST tools can be run on_push with git post-receive hooks or before commit with pre commit. (GitOps; CI; DevOpsSec with Sec shifted left in the development process is DevSecOps)
I don't understand why the Service is unavailable in my region for more than 6 months now.
I'm a physicist and musician, though I'm certainly not one of the greats in either area. Musicians have their reputation for dealing with addictions, though I've avoided them myself.

But I've read that the stereotype of the musician needing the junk in order to be creative, is a myth. When people study the actual timelines, they've found that the great artists did their best work when they were relatively clean, and that the addictions detracted from their work.
What if admitting science-mistakes made the weight loss drugs unnecessary? I'm sure the causes of the obesity epidemic could be acknowledged without framing it as a mistake.
I know, I lived in Australia for 5 years. That doesn't change the fact of my post - that in a thread about jailbreaking kindles, it's nothing but attention-seeking bait to use the term.
> It sounds like someone at Google (not necessarily a programmer) needs to read "Falsehoods Programmers Believe About Phone Numbers:"

>> 4. A phone number uniquely identifies an individual

But that has nothing to do with this. The idea here is that whoever is paying the phone bill is the same person who uses the phone. Nobody believes that.
Certs are a real pain. I’ve been doing infra engineering for the last few years and man oh man people are so quick to handwave away the hidden costs of ssl. You need to understand where it terminates in your stack and how to handle the termination and which pieces of the stack handle ssl and which don’t and all the while make sure you aren’t doing something dumb and insecure.

A classic example is people thinking self signed certs are a good idea without fully understanding the implications of getting every single piece of your application stack and all its third party dependencies to trust the thing.

Which I guess is a good thing, but also man it does place a lot of power into those root CA’s the internet uses.
Is it?

The ones I’m aware of stream primarily on Twitch with YT for clips.
that's why I wrote on avg
im sure it will be deleted/modified/adjusted/enhanced; though #1 is subjective, "unless it is essential" -> and right there, it is essential for google to do lookups of phone numbers to correct account ownership information based on another-companies paid services. "whenever possible try to provide" ... nope, it is never possible; phone validation or bust.

edit: i gotta change my first guess that it will be modified soon. google does not set the goal to not be evil, so they'll likely just leave the repo as-is, unattended.

quote:
1. An individual has a phone number

Some people do not own phones, or do not wish to provide you with their telephone number when asked. Do not require a user to provide a phone number unless it is essential, and whenever possible try to provide a fallback to accommodate these users.
Has the media or world at large even noticed the $TRUMP scam? I've only heard of it through Voidzilla, is that reflective of my bubble or is 'flood the zone' working?
In other news, water is wet and the sun rises every morning.
Okay regardless of whether I had it backwards the intent of my post was still correct. That there may have been people in the system that were 150 years old, due to the COBOL language.

And who says they actually were being paid, was that just assumed or did they find that people were inappropriately being paid? It is been circulated that there is an automated component that prevents that from happening if people are aged past 115 years old

https://secure.ssa.gov/poms.nsf/lnx/0202602578

It is irresponsible to stand up in front of the Whitehouse and spew that there are people receiving social security payments that are 150 years old, without performing a formal inquiry into the matter or communicating the detail appropriately.
it'd be funny in a movie.

in real life it's dead. serious.
It happens even after creation, sometimes we -

.. no longer have tools because i've destroyed my tools with my tools.

- Mickens.
Easy to say but some insist on identifying you via a phone number.

In most other cases i just type some random numbers or use a number generator.
SSN is a weird concept that thankfully doesn’t exist in my country.

But yea unless this is a very important service you get 0 of my real data.
surely if emails/orders can't be certified as coming from an authoritative source (non .gov) they can be ignored?
Subtly designed subvocal sensors, paired with an earpiece providing LLM output, could potentially be pretty powerful as a wearable. Not as invasive as glasses-type implementations - no camera or screen needed at all, really.

https://en.m.wikipedia.org/wiki/Subvocal_recognition
I've had good success with toggleMute[0] (GitHub). It's written in Swift and runs well on macOS 15.3.

You can toggle the mic with a hotkey, and it adds a menubar icon/menu so you can see the current mic status at a glance.

[0] https://github.com/satrik/toggleMute
If you look at the Microsoft "developer blogs", almost all of them just post product updates. Not so Raymond Chen. He actually blogs.
Kobo are giving you root access with telnet from the start. You can flash modded firmwares, change the backend servers to phone your own calibre-web instance, install ssh, koreader and even a tailscale vpn on it. They even have UART pins labelled on their board. These are amazing devices to play with. And they read pretty much everything you throw on their storage: epub, cbz, cbr, pdf..
I think foreign information operations had a fair amount to do with why half the people can't stand the other half. I mean, the schisms were there. But Russia (and others, but primarily Russia) amplified the divide, a lot.
Friedman is, like many people in this age of podcasters and influencers, another fool who's not only out of his depth in most interviews, but too self-centered to do anything to change it.

His political analysis when interviewing people in that area is laughable. When interviewing chess players it's clear even to me, a mediocre player who barely reaches 1500 in lichess, that he's totally out of his depth and wasting precious time asking generic questions.

Unfortunately the only good interviewer of this generation is the chiken wing guy.
Dollars are the currency Bitcoin is most commonly compared against, and for people who have easy access to USD it can be very hard to see how btc has utility. But if you compare to other things (e.g. commodities with a monetary premium, or fiat from a small country), it's much easier to comprehend.

It is work to 'get' it tho. All the info is available; I can't make it easier to understand than many others out there already have.
>Several hundred employees have been impacted with messages being sent from an ‘exec order’ Microsoft email address, not an official .gov email address

Yes, that is indeed totally strange
Before anyone comments chrome extensions.

These don't work on chrome mobile or safari mobile which make up a sizeable number of users.

Please, can we just have native dark mode?

I made a pretty mediocre HN client just for this feature https://github.com/rsimmons1/FlutterHnReader

I don't feel like working on it anymore, let's just have dark mode.

Edit: apologies spoke out of my domain on safari iOS, it supports extensions I'm an Android user.
Safety is not a concern. Nothing is a concern. The administration knows that the system can coast on inertia for a few years before total implosion. Then it is someone else's problem.

Likely by then malicious loyalists will be installed and the billionaire class will have solidified oligarchy so there will be no possibility of consequence anyway.
> Maybe that’s the secret of a Deep Life? Not reading news,

Oh, OK, let's just uncritically hand our democracy over to whomever, then. Who ever said it required an informed populace, anyway?
The problem is that it’s not necessarily your contact that is trying to contact you with respect to a family member etc.
> Several hundred employees have been impacted with messages being sent from an ‘exec order’ Microsoft email address, not an official .gov email address.

Shit, coulda just used a @gmail.com address at that point.
They're defined, it just doesn't go into the weird details. From the man page:

A login shell is one whose first character of argument zero is a -, or
one started with the --login option.

(not mentioned: the login(1) program does the dash thing when you log into a VT (as opposed to graphically, which has a whole nother complicated dance); login(1) is traditionally spawned by getty(8) which is in turn spawned by init(8). Some terminal emulators aggressively spawn login sessions; this is wrong but a common workaround for people who failed to configure their shell correctly, or who aren't using bash and thus don't have all the configurability)

An interactive shell is one started without non-option arguments (un‐
less -s is specified) and without the -c option, whose standard input
and error are both connected to terminals (as determined by isatty(3)),
or one started with the -i option. PS1 is set and $- includes i if
bash is interactive, allowing a shell script or a startup file to test
this state.

(or in other words: an interactive shell is one that outputs a prompt and waits for you to input something, as opposed to shells that are used to execute a file/pipe/string)

Further down, and often forgotten:

Bash attempts to determine when it is being run with its standard input
connected to a network connection, as when executed by the historical
remote shell daemon, usually rshd, or the secure shell daemon sshd.

(this goes on to explain how .bashrc is loaded even when it normally wouldn't be)

These are orthogonal, and can be combined in various ways (there are also a few other possibilities mentioned in this part of the man page, but they're much less relevant):

Login shells are normally interactive, whether started sanely by login(1) or by unreasonable terminals.

Non-interactive login shells are rare and weird and sometimes declared "unsupported" by config-file authors, but do work if you're careful (a common error is to do a pseudo-motd in /etc/profile, which will break for non-interactive logins if you don't explicitly check for them; these days, a lot of things should really be done by PAM instead for better reliability).

Interactive non-login shells are what you normally create unless your terminal is dumb, or what you always create if you start bash within bash.

Non-interactive non-login shells are what scripts use.

The SSH special logic is ignored for the common case where you're doing an interactive login shell. But if you are doing a non-interactive non-login shell, it gives you chance to fix your PATHs, since no other startup files have been read. I think those are the only two possibilities with a normal SSH configuration (and in unusual configurations you are probably being restrictive); other shells would be created as a child of the initial shell. (Remember that SSH feeds its arguments to the shell directly; it does not quote them sanely!)
@doge.lol