asne11

title was changed to: US Urges Fix for Widely Used Software After Critical Alerts ...weird

Dallas metro here. I couldn't receive SMS based OTP from a bank for hours yesterday.

I was unable to receive SMS based OTP from my bank yesterday for a couple of hours... Wonder if it's related. Anyone else?

Ok I'll bite... What am I looking at?

Suppose you're a young 20 something with maybe $300 to your name. Daddy gets struck by farming equipment and dies. Now you have two choices:

1. Continue operations of the family farm, assuming you can come up with the money to cover taxes.

2. Sell the farm to Big Farm, Inc., get a $5M check and forget about it, regardless of the consequences that means to your customers.

like which?

Or, a bill for costs after you lose.

Stay away, you may end up owing money. From the Retainer Agreement:

> XVI. FIRM DOES NOT GUARANTEE RESULT

> I understand that there is always a risk to litigation. If I were to lose a case, under some circumstances, I may have to pay costs and/or attorney fees to the prevailing party. I acknowledge that FIRM has made no guarantee regarding the successful termination of my case and all expressions about the relative chances of success are matters of opinion only.

> When I check in with folks still there, they mainly talk about how the time difference and distance has done nothing but add churn to the entire process

I don't buy that. Saudi Arabia and the United States, via Saudi Aramco, have figured out a solution to that long ago. Business "flows" unimpededly between the two for decades.

> wages for new hires in construction, manufacturing, food and other blue-collar sectors appear to be ebbing too, according to an analysis of millions of jobs posted on ZipRecruiter.com. Job seekers report seeing roles that once offered salaries between $175,000 and $200,000 a year ago now being advertised for tens of thousands of dollars less

You mean, I can quit software engineering and install flooring for $150,000/year!? Count me in

Why even have an iOS app in the first place over a simple web app? Is there any additional functionality that the iOS app can offer over web?

I think (or hope) that people will just stop putting data on drives it doesn't need to be on.

For anyone interested:

> From 2012 to 2022, overall dispensing of stimulants in the US increased by 57.9%.

> Stimulants dispensed among the 31-40-year-old (yo) and 71-80yo age groups more than tripled since 2012; from 2012 to 2022, prescriptions dispensed rose from 5.4 million to 17.5 million among those 31-40yo, and from 0.1 million to 0.9 million among those 71-80yo.

> From 2012 to 2021, male patients had more stimulant prescriptions dispensed than female patients. By 2022, the number of stimulants dispensed to females were slightly higher than for males. Compared to 2012, prescriptions dispensed increased by 35.6% for males and 87.5% for females.

Stimulant Prescription Trends in the United States From 2012-2022:

https://deadiversion.usdoj.gov/drug_chem_info/stimulants/IQV...

Why can't this be a simple observation?

"slot" is a processing unit. Either GPU or CPU. I believe `llama.c` is only CPU so I'm guessing 1 slot = 1 core (or thread)?

> we repeatedly observed cases where our models refused to generate the text or images that the actors asked for

So the protections were bypassed at least some of the time. Many of these are demonstrably trivial to bypass.

I thought their whole point of opening the models in the first place was to undermine OpenAI, but this seems to invalidate that. Maybe their hand was forced?

> the air traffic control system is not inherently governmental. Doing what Paul did for 30 years is not an inherently governmental activity. It's safety critical.

That's absolute nonsense, I'm wondering what angle she's playing here. If it's safety critical, such as ambulances and functioning stoplights, that's what makes it governmental.

> You can't make those kind of investments if you're a government agency, you have to pay for things up front, nor can you make the kind of incremental improvements that air traffic control needs.

Sure you can. Look at healthcare.gov, or TSA.

You think you can protect them, but you can't. The best thing you can do is create an environment where they feel comfortable coming to you when they mess up.

Show genuine interest in their activities, and equip them to make their own decisions when using the internet.

does legality of a thing prevent big pharma from doing the thing?

Is the gov kicking down doors for shit posters?

Please, we do it routinely. They're called "informants."

At the end of the day if uncle Sam demandeth, uncle Sam will haveth.

> The Foreign Intelligence Surveillance Court doesn’t (and courts in general don’t) issue subpoenas.

This sounds like a matter of technicality, no? Whatever you call it, what they issue has the effect of a subpoena that you can neither appeal nor speak about.

My point is not that this is what's going on here, but that the right to appeal is not generally a given.

I keep seeing people trying to assure other readers that the recipients of these subpoenas have some recourse to appeal.

This is not the case if the subpoena is issued by the FISA court, otherwise known as "the court of no rejection."

Who's interested in building a replacement? A dozen HN readers can surely crank out something at least as good in a matter of weeks.

Could be in the right position if US government bans TikTok.

Fax or mail (certified with return receipt) Facebook a letter and state that you revoke their authorization to post electronic funds transfers to your account. Staple the certified receipt or fax confirmation to a copy of the letter. That's all your bank needs (double check me here) to reverse any transactions thereafter and assess a fine to Facebook, which will likely face a fine from it's bank as well.

The matter will be resolved by next morning.

When return receipt arrives, staple that to the copy as well should the matter escalate further.

Not addressing your question, but FWIW:

Mail is the one thing I eventually caved on and offload to Microsoft. It's an uphill battle keeping your mail out of Spam folders. You setup DKIM, SPF, etc. according to the latest spec, and at the end of the day, the MS and Google still drop your mail in spam. They simply don't care.

Second, the forces and money keeping MS above legally bound 99.9% uptime tower in comparison to any one person's own resources. Is your daily driver even operational 99% of the time you use it? We hackers can't help but to tinker, so I suppose not.

MS has teams of engineers paid specifically to keep the thing running and NOT tinker. At only ~$10 / month that's a no brainer.

I caught this suspicious process running under VS Code:

  /usr/bin/ps -ax -o pid=,ppid=,pcpu=,pmem=,command=

I expected a rogue extension was responsible. Rather, the spyware ships with VS Code in this commit:

https://github.com/microsoft/vscode/commit/307987fe383950b8f...

Screenshot of the running process: https://pbs.twimg.com/media/FrSfjwtWYAE02hC?format=jpg&name=...