skysight-inc/HackerNews huggingface dataset:
I think you've got it. But I'm on the fence about the rest. I mean, you're spot on that it would require a monumentally bad collection of misconfigurations to mount the attack and 9.8 seems to be somewhat histrionic. But considering how often I run into a monumentally bad collection of misconfigurations when doing incident post-mortems, I'm sorely tempted to be ok with assigning ratings with the assumption that the target has done all the compensating controls wrong. YMMV.
Isn't the potential revenue of spacex way lower? That market is quite a bit smaller than cars, and will be for the foreseeable future.
I think they might be targeting cloud providers that expose such endpoints to their clients.

I built clusters using ingress-nginx at my old job and I can guarantee you that not one single endpoint of k8s was accessible outside of NAT.
Yes, but that's insane, isn't it? Whi's going to buy a Tesla now? Eco conscious left wingers hate Musk with all their heart, and right wingers hate electric cars or any mention of climate change. Who's left?
> don't read consumer reports or reviews by randos on the internet

I like the idea of using industry literature, but I think consumer reviews have value too. Much smaller purchase, but I was considering a new travel thermos and all the professional review were praising it. As soon as I pulled up some consumer reviews though, it was almost universal that after washing it for the first time, it smelled of garlic and soy sauce. Apparently this issue was around for at least three years (into today).

Not sure why that got passed over by all the professionals (maybe a lack of time spent with the product), but I was glad I read the consumer reviews as well.
We don’t know how the story ends yet. Is this a permanent backlash or does the public forget in a a couple years?
That's just because he cashed out of Tesla no?

Like if he didn't sell a ton of Tesla to buy Twitter he'd have more in Tesla?
> Based on our analysis, about 43% of cloud environments are vulnerable to these vulnerabilities, with our research uncovering over 6,500 clusters, including Fortune 500 companies, that publicly expose vulnerable Kubernetes ingress controllers’ admission controllers to the public internet—putting them at immediate critical risk.

I don't understand that. Under what circumstances are those admission controllers exposed to the public internet? The k8s API of my EKS is definitely exposed to the public internet, but my understanding is that it will say "no" to whatever unauthenticated request it receives, isn't it?
An Ocean in Motion: NASA's View of Earth's Underwater Highways [video]
I made AI fix my bugs in production for 27 days straight – lessons learned
“Shite” isn’t a minced oath. It’s a different word to “shit” with a different etymology. Same as “feck” is a different word to “fuck”, even if they are used in the same way.
I agree, this is probably the effect of more competition from Chinese and other EVs, and the politics is not yet factored in.
Hes basically just Howard Hughes 2.0 (which the intelligence/govt community also controlled). Look how that worked out for Mr. Hughes.
“ In no-cloud mode the only way to interact with the devices is through their app, and an app isn’t always the most convenient way to interact with devices in the home.”
Heart attack at 63. What a shame. Guy worked at the company longer than I’ve been alive and all he has to show for it is an inheritance and obituary. Makes you wonder what we’re working so hard for.
We will never be past that is there are tradeoffs in implementing things. Safety was brought out in other comments, but there are others. In some cases a slower algorithm will be faster in the real world because it is more CPU cache friendly (depending of course on what N is, but often N is small enough). In some cases you can accept a less precise answer - thus making your algorithms faster.

For most of us, in most problem spaces, the above doesn't matter and so the standard library is good enough. There will always be those who correctly have a need that is strong enough to be worth building their own standard library though.
Tesla Y numbers jumped quite up lately in Norway. But due to how delivery of it works here, it might be lots of backorders finally getting into the country and registered at the same time, so the data is always a bit hard to gauge for a short timeframe. (Edit: so I guess the problem is we report delivery, and not sales)
> Or you did have experience it just did not notice.

Exactly my point, and this is why personal anecdotes are just not sufficient for something like this.

Life is full of people telling us to do <thing>, because they’re convinced that their personal experience with that thing indicates some universal truth.

In the circles I grew up in, that meant growing up unvaccinated among many other highly questionable things.

The point is that the burden of proof must be higher than “it feels good to me” or what amounts to the naturalistic fallacy.

I have no actual opinion about the efficacy of walking barefoot other than to note that I didn’t knowingly experience what other people passionately describe. I also know there are many things that make me feel good that have no effect on many people.
Idc about him, but I’m curious about the board. Why don’t investors care? Doesn’t the CEO have fiduciary responsibility to not tank the company in a worldwide market?

If Sundar or Tim reduced market penetration across EU by 43% they’d get recalled in a quarter.
Are you sure? He used it to help get Donald Trump elected, and now Musk has an unassailable position in government and tremendous power to steer government spending to his businesses, and to cripple the agencies that regulate them.
Tesla needs to develop an affordable car for emerging economies (LATAM, EMEA), and their stock will increase faster than before. China is dumping its cars on these markets like crazy and even then most people are reluctant to buy them.
It's a problem with a k8s component called "Ingress Nginx" (the ingress controller that uses Nginx).

Nginx isn't the problem, but I don't think you can really get away from including it in the title given the name of the component
> For example, aspects of the API just don't work as expected, like for some reason search and mention endpoints do not have support for long form posts (>280 characters)

At the risk of sounding blunt, they probably fired the people who actually built the API at Twitter and it's now (internally) in maintenance mode. They very openly don't care about giving other companies data -- even with the new pricey API tiers -- or making the non-app/-website experience good at all. I doubt any of the new item types -- Articles, ordered media in tweets, etc. -- even have an API exposed.
The API is broken by design, even before Musk took over they slowly crippled it so you would only use official Twitter apps.
Score 9.8 ought to mean, "this is almost the worst conceivable vulnerability".
I would bet the SpaceX investors would heavily protest taking on the level of indirect debt associated with that company (Elon's shares and the ongoing SEC payout fight there), though he may have a controlling interest in SpaceX.

Even with controlling interest it likely would result in a class-action from shareholders... But he's defanging all the federal organizations that have been keeping his double handed dealings in check and the judiciary that would oversee the cases sooo... Oligarch can do no wrong?
What's wrong with with laser weed removal? Seems like a very smart idea.
But the backfire is catastrophic: every leaker in DoD can now claim as a defense that their leak must be a political appointee up there attaching docs to now-expunged Signal chats. That is now both Occam and Bayes rational.
Why china? Did he finally realize that it's probably the one jurisdiction that will let him get away with his cars running people over or crashing into fake tunnels painted on a wall?
Lol, I agree about name-calling others (or saying that someone must be thinking something, as if the author can read minds), but you definitely aren't earning any good will with "btchsky". Maybe stay away from the social media you seem to not care for?
dont blame hacker news for the abysmally sorry state of political and tech leadership right now. lots of people dont know this but there was a time when the statements of the President of the United States and his cabinet members / advisors were looked upon with some degree of reverential formality. now they are gutter trash on a daily basis.
Pretty hard to forget when he keeps reminding people how abrasive he can be every five minutes.
I wonder how many of those investors have skin in the game and are sycophantically trying to avoid Musk leaving them holding the bag.
I laughed at this. Having a lovely fixed and unmovable perspective on many pursuits is so engineering. Coding, programming, etc, shapes our communications skills and our outlook in interesting ways. Dating truly benefits as well.
Given what Elon has said about valuing people who work long hours and have an "extremely hardcore" work ethic, I can't imagine it's healthy to stay for too long.
Their weight make them uncommon for bikes, and more common for boats and camper vans (places with high temperature fluctuations, intermittent power recharge through solar panels, need for reliability, and where you don't want the slightest chance to be burned to death in your sleep).

Boat stability and seaworthiness is often improved by well-placed ballast - those batteries' weight is not a drawback in that use case. With camper vans, they can be placed in a low central position too.
During ww2 in italy (and I guess elsewhere) some intellectuals participated in the war as well. Some on the side of the fascists, some on the side of partisans. And I doubt the ones in partisan groups would have discussed about mussolini in a respectful way
I don't think sodium has a bright future - it's a 3x bigger ion for storing the same amount of charge, which makes it heavier, and the ion's bigger, leading to more deformation and damage to the separator, and lower cycle count, while the whole battery's also heavier.

Lithium's come down in price enough that its no longer the primary driver of battery cost, so I wouldn't bet on Sodium.
How is he going to manipulate his stock price without using social networks to spread rumors?
It's an accurate factual statement, not a drivel.
Ive got a server hosting a number of things, amd monitoring setup for a lot of stats. Got tired of seeing blips because various countries were beating on my server, not a DoS, but enough requests to notice, and sometimes generate an alert. I blocked 7 countries, in full, and the impact was fantastic. No more 2gb of logs generated every day by countries that have no business accessing my server.

Unless you own a global business, i see no reason to even allow other countries access. The potential for attacks is too great, especially from some very specific countries.
This ain't true at all. Do you have public no-password wifi? I presume not, then just don't enter wifi password in it and voila, no ads, no smart features, just plug that HDMI cable, switch input and run whatever you need from it for next 10 years.

But if you have the idea you want internet-connected TV but somehow 'not smart' (not even understanding what it means) but without ads then yeah good luck, they are baked into OS even if manufacturer didn't want them. And there is no such manufacturer I know of.

Although, I have cheap 75" TCL one and the only ads I see in past 2 years are those youtube itself inserts, while using all default apps that came with it (plus VLC for more video formats and generally better player). What other ads areas are there?
He has 3 years left to convince the administration to allow non-US-born lizard people to run for president.

Or, more likely, to institute some kind of perpetual monarchy passed down through his 14 kids.
He's a bit different, more like superhero and supervillain at the same time. The Haber process has probably saved billions.
Design a Fault Tolerant System [video]
Palantir's goal is to make a data monopoly. This is laid out quite plainly in Peter Thiel's book 0 to 1. As he said: "Competition is for suckers.". This is also pushed internally (I worked for Palantir as an FDE or "delta").

The financial purpose is to create a J curve with income. Lose a bit or money first, then charge monopoly prices.

I don't like Palantir at all. Anecdote: I got drugged without consent _twice_ while employed there. The first time was minor but the second time hurt me and I'm still hurt from it. I can only guess but I think I got dosed with a large amount of Adderal or meth. I quit after that. I wanted to get authorities involved, but Palantir contracted for them, so I didn't out of fear.

This being said, if you're a UK employee and think this is a good idea: you're about to get screwed out of a lot of money long term. And you won't be able to leave because Palantir's tactic is to be as sticky as possible.
I agree maybe not adding the ticket link is better if you know that the system might not be available in the future.

You can not avoid it all the time but maybe It's better to use the PR description for that purpose.
Wrote this as a thought experiment: what if jobs worked like real estate - something you could buy, sell, or rent? I don't think it's very practical, but it's interesting to think through where financialization of more of our lives could lead.
I'm not sure if there's been a lag for a while. I think there's an oversupply now of all Tesla models including Cybertruck.
I still think home energy storage systems make the most sense to start.

Vehicles are hard because energy density matters a lot there.

Home storage also benefits a ton from cheap, safe and reliable storage (it's why LFP is so popular for a lot of systems at the moment) and they are incredibly flexible on energy density - the difference between a big box sitting outside against a wall and a slightly bigger/heavier big box sitting outside against a wall is mostly negligible.

---

LFP is the first system I would actually install from a maintenance/safety/cost standpoint. But while they're good, they can still fail and catch fire. I'd happily have a bigger box against my wall if it means a cheaper & safer battery.
There are quite a lot of people who write/talk about video games or movies who are openly negative about much of what is produced.

Although I agree there is probably a heavier slant towards negativity when discussing tech. I share some of the skepticism about AI but it's still potentially very exciting which you don't get from a lot of commentators.
I'm not sure he was ever a liberal. Maybe a libertarian, for a time.

Today, he spends his time empowering the worst habits of the ultra right and ultra left.

We need modest centrists with no egos driving us towards things like space exploration. Not whatever dystopian space-time trajectory we're on today.
Kim Stanley Robinson owns Mars colonisation now and forever!
Well they had a lot of people on the payroll claiming they were literally chosen by God so they generated a similar amount of positive PR. There's suckers born every century.
I'm not sure he understands that he will always be the Crassus to someone else's Caesar. Things don't go well for the money man.
Genetic association between posterior parietal cortex and intelligence
Nvidia GTC: Denny's gives techies a breakfast treat at keynote
>Someday, it will be better; today, none of them (Grok, ChatGPT, Claude) are good enough for what you describe.

You're living in 2023. Try Cline with Sonnet 3.7.
Child labor protections could soon be rolled back in Florida. Why?
Musk is not a fascist. Fascists don't follow neoclassical economics. Fascism is a very clear and well defined philosophy. None of what is going on fits that definition. He's not even Hegelian.
Yes, it's because he's been selling Tesla shares faster than you can imagine.
> I blocked 7 countries

Russia, China, Nigeria, Romania, North Korea, Iran and Belarus [1]?

[1] https://www.ox.ac.uk/news/2024-04-10-world-first-cybercrime-...
And the best part is, if you ever need to fill out a PR template with what you did or list the changes, it becomes so much easier. You don’t even have to remember exactly what was changed, it’s all right there in the commit message.
That doesn't mean we have to lower ourselves to that level.
ICU is an unreasonably large dependency for something that many users won't need. Its behavior also changes with new Unicode versions which makes it incompatible with something that cares as much as backward compatibility as the C++ standard library.
Manafort used Telegram extensively. The only messages used against him in court were iCloud backups of WhatsApp.
Not to mention... if/when there is a change in administrations, his lucrative contracts with the government will likely be canceled.
Marginalia Search receives second nlnet grant
Confirming Ed Zitron's careful analysis of the situation with SoftBank, Microsoft, and OpenAI: https://www.wheresyoured.at/optimistic-cowardice/.
"Outside of NVIDIA, nobody is making any profit off of generative AI, and once that narrative fully takes hold, I fear a cascade of events that gores a hole in the side of the stock market and leads to tens of thousands of people losing their jobs."

You'll note that the prospect story mentions Zitron multiple times.
Get me off this timeline
AirPods Max with USB-C will support lossless audio
Will you grant that sometimes, they aren't?

It depends. Let's take a SaaS engineering department, for example.

If your customer base is tripling year over year based in the need of the market, you can end up with feature requests that would take decades even with an engineering team ten times the size. Those are often from sales on the backs of failed deals because the product didn't yet meet the client need.

If the goal is to keep the lights on and meet current customer need, you need a fraction of the total engineering team. However, we're on the message board of a venture capital site, so we can take an assumption of hypergrowth, as is the goal of a startup.

So, then, I'd argue that in growth scenarios, these people are required. That doesn't mean that they are being used the most efficiently, of course. I think this would be a main point of our disagreement.

That sometimes, the tail wags the dog and the staff and its culture determine the architecture rather than the reverse?

I agree. And some of that is the ZIRF culture as well. And I think we agree with the rest as well. However, I think I am sensing a separate point where I don't know if we agree or disagree.

Our field has not created the tools to scale from 10 to 100 or 100 to 250 well. The best tools that have been created to date have taken microservices as part of the orthodoxy. I don't think this is the only way to do it - Robert Martin has a good article here from a decade ago: https://blog.cleancoder.com/uncle-bob/2014/09/19/MicroServic...

However, everyone escaped the java ecosystem (because Oracle and because Spring, more than the language itself IMO) and solutions such as rails plugins didn't develop the rest of the ecosystem around it like AWS did with microservices.

And don't get me wrong - I'm currently living in nanoservice hell. We agree more than we disagree. However, I think we are looking at different constraints.

Were I a director of engineering at a seed funding company that was starting to feel the pain of a monolith, I'd take one engineer and create a plugin architecture that enforces APIs, and build a pseudo-schema enforced by peer review and linting - and performance exceptions must go through views (or stored procedures for creates and updates). It's painful to rename a table, but much less than moving it to another microservice. Then, I'd keep things in a monorepo as long as possible, at least until 100 people, with the rule that all things in main must be behind feature flags first and any database migrations must be independent of code changes.

But I take for granted that growing projects will usually need more people and more quickly than the architecture can easily accommodate, and I think we disagree there.
> most people are reluctant to buy

if people were really so reluctant to buy a cheap, high quality car, BYD wouldn't be selling millions of them.
Is anyone going to acknowledge that people are waiting for the new model to be released, and this happens even with iPhones.

If even HackerNews can't have a rational discussion about Tesla then we're all doomed!
the solution is obvious that Musk will introduce a gas powered Tesla this year
US enjoyed decades of stable 2% inflation per year, but even in the recent spate of inflation it only got as bad as 9% per year.

Argentina suffered 25% inflation per month.

Did you seriously not know this, or were you just being obtuse?
back to when exactly? Let's remember for a moment his behaviour with the Thai cave episode, he wasn't any better.

Thing is, people just put up stupid stickers about purchasing their Teslas before he went nuts, but he has never been centered.
Why are there no Chinese brands in the table?
Europeans can't buy chinese cars in europe?
This makes a SSRF bug go from "oops, that's bad" to "oops, your whole cluster is pwned", right?
>my GE Amana dishwasher, it started having weird power issues, like the controls would just not light up unless I reset the circuit breaker for a few minutes

And they say EVs will outlast regular cars. On every piece of my home equipment, electronics failed before they developed mechanical issues.

Power electronics, especially capacitors, and high power switching elements don't have a great track record of reliability.
it's not core k8s either, it's "ingress-nginx", a community maintained implementation of k8s ingresses using nginx as the underlying proxy, (which is different from the nginx / f5 version called nginx-ingress....).
You clearly have not watched the talk. His point isn't that "coders" aren't "programmers", but that coding — i.e. the act of writing code, i.e. text in a programming language, i.e. text that can be interpreted and run by a computer — isn't the same as programming, which is the act of efficiently producing software that does what's expected of it. He attempts to show why only writing code is not the best way to produce software that does what's expected of it. You can agree or disagree, but it has nothing to do with how anyone calls themselves.
The way you're using "justify" here, makes it seem as if you think people feel it's morally legit to steal, if it's on a porch for... reasons?! From a moral perspective, theft is theft. There's no way someone can sanely claim they thought it was a free thing, because it wasn't locked away.

Doors and locks are there to make theft harder, more overt, loud, etc, and by no means validate when it's legit to be a vile thief.

Likewise, all spam is spam. The use of tools to make it more difficult for spammers to be spammers, is the same as having doors and locks. It makes it more difficult.

edit:
What I said was, you clained they tried to justify it. So no worries, I was not implicating you.
It's difficult for people to comprehend in hindsight, but monarchies in Europe had a quasi-religious hold on the population. So not precisely good will, but definitely a cachet that can be burned down.
It's a good question.

My home was recently destroyed by fire (not a total loss of dwelling, but 95% of contents due to smoke and water), and I'm quitting tech to accept being a rancher and body builder.

I love tech, but tech doesn't love me. So, #yolo on to the next thing.
> and a background in the area is essential

Yes, precisely. Maybe one could (re)make something using LLMs without understanding a thing, but that is as good as copy pasting from SO without understanding.
The market seems much smaller, though.