anExcitedBeast

But "fully airgapped systems" are more than realistic. The labs are testing the limits of the most capable cyber offense systems that have every existed, WITHOUT cyber protection guardrails.

For that purpose, any cyber operator worth their salt will tell you true physical airgaps are more than merely "realistic"; they are categorically necessary.

Microsoft and Linux /do/ offer the same path to productivity. Buy 10-20 computers, zero config, native discovery services, download apps.

What businesses need is management services and business applications. Those exist for Apple as well, but two significant headwinds: 1) inertia of essentially every major business on earth using MS Active Directory means there are enormous support and ecosystem benefits, and 2) cost.

To gently push back, there are absolutely accountants and roofers who dedicate their free time upskilling or in adjacent hobbies. Many (perhaps most?) other fields have are conferences and journals, certifications, prestige jobs and grindhouse jobs, side hustles, and all the other trappings that feel unique to us. I'm not saying the distribution curve is the same, but it's easy to think this field is more unique than it really is.

And to the counterexample, the country is full of developers who just want to do their 40 hours and go home to their entirely unrelated life and hobbies. Incidentally, I have a friend who just got a job like this. He's the only developer in a regional materials company, and he loves being done with work at 5 (usually closer to 4) so he can go hang out with his kid.

They make long articles to maximize ad exposure and SEO. It's good faith --they're doing what they have to to make money with the underlying tech ecosystem-- but it's not a good outcome.

LLMs are shifting that ecosystem (at least temporarily) and new revenue models will emerge. It'll take time to figure out. But we shouldn't artificially support a bad system just because it's the existing system.

Transitions are always awkward. In the meantime, I'm inclined to give people rope to experiment.

The celebrity crypto phenomenon has spread to world leaders on three continents. Tracking the pattern seems worthwhile - open to suggestions and thoughts.

I LOVE this. I'd love a correspondence mode so I can play over the course of a few days (or even PBeM if you wanna go old school).

I'm sorry you're dealing with this.

Maybe it's time to rethink how you spend your working attention. Impact can drive fulfilment.

https://80000hours.org/

At the risk of taking the fun out of this, you can recover "failed" text.

After you fail, close the tab. Then restore the closed tab from browser history. Your text should rest ahead of the prompt.

>Assuming that "rich" means "don't need to work at all, for the rest of your life, to keep a roof over your head and food on your table," none of what you listed require being rich.

Yup, I believe that's their point. If you realize the reason you want to be rich can be had for less cost than actually becoming rich, you can save yourself a lot of time and stress.

Anecdotally, I cut my salary by 60% this year to directly pursue what I wanted, instead of saving to do it years later. I suppose I may regret it some day, but at this point I'm confident it was the right choice.

Oxford has a project on impactful careers you might find interesting.

https://80000hours.org/

Theology is a broad term and includes the anthropology of religion, history, and philosophy. Many atheists study theology in good faith.

> Tip: if you care about maximizing the quality of your dietary supplement, research and buy each ingredient individually, and then mix it all up yourself.

That defeats my primary use case for MRP: not needing to think about nutrition. I hate cooking, I hate cleaning, and eating out all the time feels wasteful. I just want quick, healthy meals with a decent shelf life.

Every political research product is funded by someone with an agenda. GAI, Brookings, Cato, Heritage, take your pick.

Funding should always be considered, but is not cause to discount otherwise valid methodologies and findings.

In Android, you can disable App notifications. That may accomplish what you're looking for.

Everyone understands the merits of data-driven design. There is heaps of merit. No point to further discussion.

Everyone does NOT agree on the ethics of force-feeding this model on non-technical users without meaningful and informed consent. Toss in lack of transparent or comprehensive opt-out and misleading adoption strategy and you have a real problem.

Microsoft's market share in consumer computing is still massive and what they decide to do matters. It is worth talking about.

I noticed IR services are not listed on your website.

I hate to be this guy, but you don't want to offer IR/forensic services if you don't have experience doing exactly that.

Your client can sue you if you get it wrong. (http://arstechnica.com/security/2016/01/security-firm-sued-f...)

This incident isn't over. You must fully scope the incident, and the only way to do that is to hire outside help. If the breach leaks and it's found that you haven't properly responded, it will destroy trust with clients and possibly expose you to legal risks.

Hire an incident response firm. They can usually react next day if you can sign a contract today.

Sure, but piracy where everyone gets paid.

I know they have no incentive to do this, but it would be nice if they let you configure alternate VPN providers. This is a really clean VPN UX.

"JavaScript must be enabled in order to use the bytejail website."

Good way to keep stubborn technical users from learning about your project, whatever it may be.

For the sake of dealing with better numbers, about a third of that figure is suicide. And very, very, very few gun deaths are by rifle. Last year ~9k people were shot in the US - ~8450 by handgun, ~300 by shotgun, and many of those killed by rifles were shot by police.

I know this doesn't change the calculus for most people. Just trying to get more realistic figures into the conversation.

I spent a few months in Australia last year. In Queensland, I heard a lot of Aussies say "no drama's" in the same context.

Probably because of the first part ("...doing some of the coolest most innovative big data parsing that there is"). "Creeeeeepy" companies tend to offer good pay to do cool work with smart people. Something that hits 3/4 targets can be tempting (pay, work, people, values).

The article is littered with lines which don't reflect reality, but do reflect the sentiment of IP lobby. Reeks of "Save the American Inventor" astroturf.

On an individual scale, you're right. But the fact is almost every corporation, non-profit, and government agency is weak inside the perimeter security stack; once you're in, you're in. A backdoor in networking equipment is a pretty serious problem.

This wouldn't make you "good at chess", but you can learn a bunch of opening traps and mate patterns like the Scholar's Mate and the Légal Trap. Some traps are wicked simple (ie, e4 e5, nf3 nf6, nxe5 nxe4, qe2. If black moves their knight to safety, nc6+ sacrifice wins the queen.).

I don't understand your complaint. 1) They freely admit that they use Google products, and 2) Google search is a way to be discovered by curious users. SpiderOak is looking to avoid giving excessive user data to Google, which is a totally separate issue.

HTTP status codes are also useful for infosec people during breach investigations. Sometimes all that's available is access logs, and those codes can provide a lot of context.

Don't trust them. Add a system you control between the device and your internal network. If you're just worried about your traffic privacy and not just internal resources, establish an end-to-end encrypted tunnel from that jump system to a network or VPN provider you trust.

Edit: excuse me, I misread your question. I thought you were asking for best practice. I don't have have a specific hardware recommendation (because I don't trust them :) )

They do really cool stuff with with data, including puzzle generation. lichess is worth checking out.