foolmeonce

With nixops you also define define your configurations in nix (and can have interdependencies between them) then start machines or virtual machines as blank nixos installs and add their ssh key and address for nixops to reconfigure and manage.

I ultimately find it easier to have one host that is keeping track of all configurations and pushing my changes to all hosts since I otherwise end up with a lot of machines with different changes I've been working on.

> Bluntly put, when an institution is given power over children, more than that of a family, and the auditing is lax, you're gonna get maltreatment, and from there unmarked graves.

Families are not particularly safe. Systems that pulled children from their family for placement in a "correct" family created similar horror stories and the natural families of many are also horror stories.

Air crashes are more notable than auto-crashes despite being less likely per passenger. Similarly, even if institutions fail at 1/10th the rate of placement in families, notable news will still paint us the opposite picture.

Having 1 in 25 buildings being completely rebuilt at all times and another 1 in ~5 getting renovations is extremely annoying.

I think buildings that are too regularly under construction should carry some tax penalties, instead renovating non-durable buildings to tastelessness is a way to save on property taxes, get tax deductions and try to pressure tenants out to get the latest upscale rates.

Further, the Play store is evidence against supporting the company store concept at all and not an explanation for why an exclusive one should be allowed if it doesn't immediately induce vomiting.

I think the prevailing belief, and belief they must have had to try their research was the belief that a good percentage of attempts would slip through initial review to be caught at a later stage. I fail to see what your alternative research would do to that apparently false belief other than reinforce it.

If you put ethics aside, then yes there was value. Failed research is most valuable, while successful research is usually quite worthless due to the bias toward finding whatever researchers already believe.

I do wonder if they would have published if they didn't expect disclosure by angry Linux maintainers, i.e. if they really believe they were weakly successful. Generally, I think this is the type of finding that normally gets lost if there's no pre-disclosure.

https://pubmed.ncbi.nlm.nih.gov/16060722/

> from experience ?

Then that's a bad example since this alignment with preceding line style commits you irregardless of your history with any function.

> I don't understand what you mean there, what would "aligning connect with foo" mean ?

If you are aligning with lines above you and your coworkers have so many options:

    void foo(..
         connect(..

    int foo(..
        connect(..

    int foo(..) {
                 connect(

If you are nesting with fixed indents, then everything is fairly well defined and simple changes to one line don't cause significant reflow.

This is a good example of a pointless alignment footguns tabs prevented.

Why do you want to recalculate the number of spaces before 'that' based on any change to the length of the function name 'connect', and why do you realize you don't want to when it comes to aligning connect with 'foo' to be consistent with this styling instead of indenting priority?

Much easier to hit tab twice on the 3rd line because that is the correct nesting depth and not try to adapt lines based on insignificant aspects of previous lines and not make someone refactoring try to hop around any more than necessary.

Edit-typos

People who work 5 days aren't really working just 100%, they complain that they are asked to stay late and work weekends with little or no comp. (I.e. comp days that are more vacation days they can never actually schedule.)

It is actually easier to penalize a company that makes you work more than agreed upon when the agreement is less than 100%.

I would suggest an Android One or econo-level Google Phone using adb to delete google bloatware, choosing a qualcomm or something that looks not totally encumbered so it might be possible to transition to Linux when the 3 years are up.

At least the cod get a break from the UK. We've been hearing about this lovely idea by the british to go it alone since 2016?

Countries should be thinking less about any potential with the UK and more about how to block any dependencies on new trade with them to be able to step out of this time sink of a drama.

> nearly all phone subsidies from carriers have stopped.

I find this great. The ability to differentiate on "free" phones was a barrier to competition on the service costs that allowed telecoms to avoid competitive pricing for decades.

My concern with the Spanish law is that it seems to ensure a functional, repairable phone physically but there is not a realistic way to ensure essential security updates across all the software involved.

Thanks, a key take away for me was:

> Painting the tape is an illegal activity and prohibited by the SEC because it creates an artificial price.

So it sounds clearly illegal and fully under SEC jurisdiction in the deli stock case, but what about the crypto market cases? Can the SEC go after other/foreign market cases for people under US jurisdiction or SEC regulated entities participating in painting the tape in blockchain markets or international markets?

It's not very clear, but from the last two descriptions it sounds to me like it has a shutoff sensor that can engage by accident or leave a child under the "off" machine.

> HSM's require I'm sure some very rigorous development and testing.

I think they mostly require an outside evaluator to do a sort of documentation process that costs somewhere around $500k depending on complexity on a new product, and maybe $50k just for up-versioning.

It's generally hard to get that money back on a product since the market of organizations that need the certification is tiny and then the larger overall market for a security product is also usually small and not so happy to defray those costs.

> If you consider a risk of death of 1 in 350,000 as "ridiculously unlikely", then you would have to accept that death from COVID is also "ridiculously unlikely" for that part of the population. It then is only logical that you would take the lesser of two "ridiculously low" risks, and that's exactly how it works in medicine.

Right, but wrong. You dismiss the low factor because it is outweighed by other factors. For example you give someone a medicine that may kill them in rare circumstances to return them to a physically active life Just as you tell people to ride bikes despite deaths and brain injuries.

This framing has to simply stop. In past decades it was not acceptable to mix up public health with this personalized health nonsense and it is most likely going to result in an ebola-like outbreak with a slightly dangerous vaccine getting out of hand while people fear monger on the internet over odds that we accept whenever we step on to a public street.

Sorry, I meant 14-44 m+f, which had 4200 excess deaths in 2020 in the part of Europe sampled, you would need to add a portion of the 30k <64 for what the actual EU advice was (no women under 60) in a scenerio where you don't have an mRNA.

Women under 30 may have this slightly raised risk of death with the vaccine if you control the virus without vaccine which you can't actually do indefinitely. The relative mortality of Denmark being 4 times lower than the others shows that the 4.2k deaths, so that ~2k would repeat many times to get to herd immunity and in the meantime you would be willing 10 times that in the women under 64 with taking the first EU advice given too literally.

I don't agree with this idea that we have to find data to weigh ridiculously unlikely harms for the individual. That gets into freeloader math like not vaccinating your particular patient because the rest of their demographic is vaccinated enough.

Also when you add other outcomes for covid patients who go to hospital you will have much larger subsequent negative outcomes and some death rates from associated problems Like MRSA, error, c-dificile, subsequent antibiotics, etc..

> deaths among young women attributed to vaccinations would overtake deaths from the illness itself, which would completely destroy trust in ..

Clearly a magical vaccine that was available and injected immediately would have killed more people than the virus would have in that scenario, but patients who refuse the vaccine in that scenario don't get to live in that scenario because they create this scenario.

Denmark is a poor example since it is small, had too few cases and clearly is one of the farthest from herd immunity in Europe. Looking at the somewhere like the UK for what would happen, there were very measurable deaths in the <34 group that would occur if a country that did crisis management as (relatively) effectively Denmark opened without vaccination:

https://www.euromomo.eu/graphs-and-maps

So the 2 deaths would have to be averaged over additional years of lock down without an exit plan.

Sure, there is no reason not to prioritize mRNA for younger women if it is available, but these botched announcements will kill tens of thousands of young women world wide even if the production is never reduced and the delays in countries like South Africa are short lived.

I am deeply saddened by the behavior of the US and EU in this regard, it really amounts to a simultaneous false virtue signaling and through snubbing all but the best options, push other nations that don't have priority access to mRNA to now make deadly decisions for some kind of honor that doesn't even make sense.

It's reports within 3 weeks, so something like 18 per million per year.. The larger danger is any interaction with an automobile to get to the appointment.

You would be unable to write an API like this without unsafe and being encouraged to write new APIs in a way that works in safe rust is an improvement. When I look at chrome/v8 source it is a series of example many distinct APIs each repeating this context problem, probably since this style of API can be the same as in Java, but the Java version is safe thanks to the GC.

(Since their new exploits tend to be in big new APIs that relate to new flags, I think they would be well served by using rust for this splattering of new apis.)

The first example I looked up needed a UAF in something that clearly should have been ported from Java to any memory safe language, instead C++ had to be used:

https://theori.io/research/escaping-chrome-sandbox/

I'd wondered about the openness of the workers do connect to unrelated resources myself..

But I agree with CF, they don't inherently have a security problem. They have the normal situation of a proxy again. If a lot of new domains show up to bot proxy then the Baysian for an unknown worker domain is going to become bot..

> Had he put the same effort to sourcing the book and toning down the claims, there would have not been a controversy.

Had he put effort into ruining the success of his book by toning down his claims, expressing caveats, adding footnotes of where he was using a small study, etc, then someone else willing to take the risks of not being diligent would get the fame and opportunity to defend their book.

I would wonder if the realization they want to prosecute (or want to publish it) comes from that, but this could not be a copy cat:

"On or about March 27, 2019"

I think you misunderstood about his scripts; his primary source of data is from acquiring the domain the malicious scripts were hosted on and he wrote scripts to summarize the server logs of his previously malicious CDN.

He knows the script URL and referrer URL of each attempt to invoke the malicious scripts. The URLs of the scripts seem to include the token to configure them to the attacker.

He visited sites in the referrers and looked them up in search only to do tests to convince himself that the pages are clean and the servers aren't conditionally returning the malicious content, etc.

Older Huawei were pretty normal and you could request unlock code, etc. I think they started to get more secretive/closed as every random fact about their implementations could be made news worthy by adding a suggestion of incompetence, pirating or snooping purpose.

That still leaves the option of using a GSI of whichever distribution.

https://github.com/phhusson/treble_experimentations/wiki/Sam...

I think the changes pushed people to invest in new devices, etc, for a per-user lifestyle, while going back to restaurants, meeting rooms, etc, there's an excess of second hand inventory.

> "These numbers are all estimates but you can imagine if millions of website owners and Google Analytics users end up making a similar reduction in their website size too. The total reduction in the carbon footprint of the web would be immense."

If we removed 40k of CDN content per visit then the 1.8 kwh/GB would be 2.8 kwh/GB.

I folded right away with at least 2 Lenovo's that have never run Windows. I think lenovo has saved a huge sum even if this motivates the few people who have gone through the steps to go after similar damages.

The base €42 seems well bellow the threshold where someone could create a whole service that does the process like the airline delays. But maybe a Linux or EFF style charity could provide guidelines per vendor/country with a donate request.