1MachineElf

>Off-Topic: Most stories about politics, or crime, or sports, or celebrities, unless they're evidence of some interesting new phenomenon.

I'd say that such a database puts this submission under the "unless they're evidence of some interesting new phenomenon" exception. While Xinjang isn't completely new, a database of evidence is much more interesting than the average Xinjang article.

PlatformIO seems to be the npm or pip of embedded development. While it offers convenient installation of toolchains and their dependencies, I fear it could enable the same software supply chain attacks that have tarnished npm/pip. I would really like to better understand the security posture of the PatformIO registry.

I haven't logged into Instagram in a while, but I recall there were plenty of accounts by women where were often wearing just lingerie. Seems like a hypocritical position for IG to take.

Not bad! It's about as coherent as background music needs to be, at least in the typical Lo-Fi beats context.

I don't have access to Sonauto. I wish I could ask them what the compute requirements are for this. How much energy does it take to produce 1 hour?

Since this involves generative AI and Nix, I wonder to what extent this may be connected with nixified.ai[0] - Quite possibly there is no connection and it's Bard that's performing the generative AI.

>The goal of nixified.ai is to simplify and make available a large repository of AI executable code that would otherwise be impractical to run yourself, due to package management and complexity issues.

[0] https://nixified.ai/

All I can tell you is I've worked for a company that had to comply with CFIUS agreement, and honestly, there are no surveillance capabilities whatsoever. They have oversight capabilities and can audit the parts of the business that are covered by the security rules. Ironically, these rules we had to comply with were called the National Security Agreement (NSA) but that entirely coincidental. It was not anywhere near as exciting as people commenting here are speculating.

Disappointing if true. That's the only Meta app I tolerate.

You're not alone. My initial reaction was the same.

One of my favorite NixOS features. Hope to see it more in GuixSD.

Dear Brave Leo, how do I convince the Brave devs to finally implement Issue 9443 the "Bookmark All Tabs" button for Brave on Android[0]?

[0] https://github.com/brave/brave-browser/issues/9443

Recently I developed a presentation* about immutability as a design concept in computer security. As part of it, I have slides which cover Certificate Transparency implementation[0], which uses Trillian[1] as a distributed ledger. Part of Trillian's documentation includes a Firmware Transparency[2] example. For the year or so I've been aware of it, I've thought that it's a great idea, and wondered if it would ever grow as a project/practice. Digging through the links in this announcement, it appears Trillian is the basis for the distributed ledger here. Glad to see the idea has been taken further by Google!

* Sorry, the presentation is non-public.

[0] https://certificate.transparency.dev/

[1] https://transparency.dev/

[2] https://github.com/google/trillian-examples/tree/master/bina...

Perhaps they should have said "information wants to be encrypted" Computers are getting better and better at cryptography all of the time. Applies the same logic behind "information wants to be free."

As an aside...

>the universe tends towards entropy.

To me, the paradox of entropy is that it represents chaos and yet it is an inevitable end state of the universe. It would seem that all efforts against the natural order are themselves a form of chaos. I question the distinction between the two.

>This recent trend of openwashing is unwelcome because it misleads FOSS developers and users who are looking for software that can be used, examined, modified, and redistributed without limitation.

Please do not use the Free Software Foundation's acronym, FOSS, to describe the OSI's definition of open source. Both of the links you provide from the Open Source Initiative don't mention FOSS at all.

FOSS was initially defined by RMS: https://en.m.wikipedia.org/wiki/The_Free_Software_Definition

FOSS leans Copyleft, which goes against the "without limitation" criteria you've used to characterize it.

This nuance is explained here: https://www.gnu.org/philosophy/floss-and-foss.en.html

I'm amused about him referring to House Centipedes as a far tougher enemy towards the end. Indeed, they are. My neighbors and I have both of these running around our basements.

Recently I was on an important video call with my boss, who must have wondered why my eyes were constantly darting to the walls as he was talking to me. It's because I was watching on crawl across the ceiling from the far corner of the room towards me... I've no idea what happened to it after the call ended.

>Companies should keep in mind the following:

>When offering digital products, you must ensure that customers understand the material terms and conditions, including whether they’re buying an item or just getting a license to use it. Unilaterally changing those terms or undermining reasonable ownership expectations can get you in trouble, too.

>Selling digital items created via AI tools is obviously not okay if you’re trying to fool people into thinking that the items are the work of particular human creators.

>When offering a platform for creators to develop and display their work, be clear and upfront about their rights to access and take this work with them, as well as how the work will be used and presented. Again, don’t change the terms later.

>When offering a generative AI product, you may need to tell customers whether and the extent to which the training data includes copyrighted or otherwise protected material.

>how urgent is this particular treatment?

Consider that recent headlines indicate Malaria is occuring in Maryland: https://www.usatoday.com/story/news/nation/2023/08/18/maryla...

I am not aware of good solutions, only hilariously bad ones: https://www.firstpost.com/world/professor-fails-entire-class...

1st class Linux support tablet, coreboot firmware, & decent specs for ~$500? I consider that a great deal. I'm very keen on this.

Good question!

~2016 I bought a Lenovo ThinkPad E465 sporting an AMD Carrizo APU specifically to take advantage of HSA. It seemed like the feature, or at least the toolchain to take advantage of it, never really materialized. I'm glad at least someone else remembers it.

First time I learned about Bedrock Linux was ~2 years ago via r/unixporn. The redditor who posted was using it with Nix to develop Haskell. See: https://www.reddit.com/r/unixporn/comments/p5cit0/bedrock_li...

I inherited one of these Casio Waveceptor watches from my father.

It routinely will set itself to a totally random time far into the past/future. I've wondered if maybe contemporary wireless devices interfere with the time sync radio. Another possible factor is the watch itself is ~20 years old.

FWIW, the last time an alleged computer crime was attributed to Trump, the evidence was persuasively disputed by a subject matter expert. See: https://news.ycombinator.com/item?id=14224832

No. Simply change the consequences.

I actually went to FAU where this study was performed, the high school 1 mile west of it, and the middle school 1 mile south of that.

During my time at middle school, I knew 5 outcast kids who were regularly getting drunk and high at 12 years old.

All had troubled families and/or divorced parents.

Maybe it's a good thing.

As a suicidal person it can be extremely difficult to open up to another human being because my convictions of hopelessness and futility are so strong that to truly communicate them would also mean cursing the listener with knowledge that would make they themselves suicidal.

Maybe it wouldn't directly cause them to also become suicidal, but it could be a contributor. It could be one cut in a death of thousands. If you've ever seen the show Smiling Friends, the first episode is an example of how wanting to help can backfire in harmful ways.

An AI chatbot might be uniquely useful as a therapy option. I wouldn't have to feel the guilt of corrupting an innocent human being with dark suicidal thoughts. Sometimes a human connection is important for therapy, but the ability to talk things out may actually outweigh it for this context.

The RDP interception tool used by the researchers: https://github.com/gosecure/pyrdp

I wonder if an "enterprise" version of this might exist so that companies can audit what their administrators do on high-impact systems.

I suppose this is both good and bad. I wonder if Red Hat/IBM anticipated this, and how they will respond to it.

What is this?

I just watched it a couple days ago. FWIW, the gravity shift scenes in the hotel hallway are underrated achievements in cinematography.

Reposting my comment here: https://news.ycombinator.com/item?id=37050595

As someone who currently performs information risk management for a financial institution, I'll say that private messaging doesn't need to be banned per-se. It's just that all company business is the responsibility of the leadership, so ultimately, business communications needed to be reserved for business communication platforms over which leadership can enforce policy. Privacy is a component of this. These banks needed processes and controls to ensure their requirements are being met: Records of electronic communication, technical security controls to ensure the privacy of protected communication, approved communication mediums/channels for different classifications of information, periodic reviews on the adequacy of these controls, etc.

Sometimes the restriction of things like WhatsApp, Signal, etc. are seen as an affront to individual privacy. That's not what this is about. This is about preventing a lot of dangerous scenarios, like:

1. Employees at your bank do something evil that's also against the law, but because they used Signal/WhatsApp, no records of the communication can be used as evidence in court.

2. The bank has invested millions upon millions into an information security program. Someone decides to use Signal/WhatsApp to share sensitive account numbers. Signal/WhatsApp ends up with a vulnerability that exposes the information, rendering the InfoSec program protections ineffective.

3. Like #2, but the information in WhatsApp/Signal is super important. The employees who kept it there all leave and/or get into fatal accidents. How will that impact the bank?

4. Your manager starts a group chat for the team via text message and conversations about work occur. Turns out someone in the conversation is involved with a scandal. Because you talked about work stuff outside of the approved comms channels, your personal phone can now be taken and used as evidence in a court (even if they can't pull the encrypted messages from it!)

It's just better for everyone to keep work communications in one place that the company has control over, and your personal device/apps totally separate from it.