rsync

"... a stock is like if you went to some second hand/thrift store and bought a brand of clothing that was reviled for some reason or another, i.e., use of child sex slave labor, you giving a thrift store money to wear the second hand clothing not only does not benefit the reviled company ..."

This is incorrect and, frankly, ridiculous especially in light of your own scoffing at the "foolishness" of others.

The secondary market value for company stock has a direct impact on current and sustained operations in areas including, but not limited to:

- the ability to sell debt and the interest rates at which it can be sold

- the ability to attract and retain executive "talent" with stock compensation

- the ability to attract - or ward off - takeovers and buyouts from other firms

- the ability to expand operations, or development, through follow-up offerings

Your observation of this basic truth (that company shares purchased by at-large market participants don't yield funds directly to the firm) is, of course, correct.

However it is not as profound a factor as you think it is.

"Now when you lose your phone while out and about you lose your ability ..."

2FA Mule:

https://kozubik.com/items/2famule/

We don't want your electric car.

We want your car, but electric.

All people want is an electric Audi allroad. Instead, we get an e-tron.

All people want is an electric V90 wagon. Instead we get a polestar.

All people want is an electric Jeep Wrangler. Instead we get "Recon EV".

The reason for this is that the incumbent manufacturers understand clearly that the electric versions would completely eclipse the ICE models and their existing investments in design and tooling would rapidly diminish.

... and so, all of the eInitiative, iMobile, TronCars ... it's all a desperate (and lame) attempt to continue selling the ICE line and grow marketshare with the addition of the electric car consumers.

It's a nice idea and it won't work.

The Davis[1] test.

[1] https://en.wikipedia.org/wiki/Terry_A._Davis

[2] https://en.wikipedia.org/wiki/TempleOS

Those advisories all came from outside sources, most notably calif.io.

It's not clear to me that FreeBSD found any of them internally ...

I asked in a different thread:

Do we have a sense that projects like OpenBSD/OpenSSH, FreeBSD, ISC[1] and Apache were included in the "blessed" initial participants in Project Glasswing ?

Or is it big name tech companies, banks and fashionable languages and package managers ?

[1] Bind, DHCP

If only there were a quick and easy way to replicate s3 buckets to an independent provider…

… on the Unix command line …

… to a cloud older than AWS…

… if only …

Do we know if openbsd is one of the blessed 50 glasswing partners?

"Will never understand why some people prefer mailing lists to do development ..."

The people who have this preference are processing the mailing lists with a highly specialized mailtool, not a web browser.

If you have only ever accessed email with a web browser it is not surprising that you find the mailing list format weird.

... and for those that assume, understandably, that this is strictly a US cultural phenomenon, I must (sadly) report that I saw a very new Ram 1500 dump black exhaust onto a cyclist on the 9 between Saint-Léonard and Crans-Montana. This happened in summer of 2022.

In terms of US cultural exports, for every jazz music and snowboarding I guess there has to be some coal rolling and fake service dogs.

Let me guess ...

Gates Foundation and/or principal actors attached to the Gates Foundation have equity stakes in Anthropic ...

... and they have made a decision to direct charitable funds toward the committed purchase of Anthropic tokens.

Do I have that right ?

Very much like Huang charitable foundation committing to purchase Coreweave services[1] ... which Huang has equity stakes in ?

[1] https://www.reuters.com/legal/transactional/nvidia-ceos-foun...

Behind the Sun.

"... its really jarring to see the general sentiment on this submission ..."

I am heartened to see a high default level of suspicion, bordering on contempt, for a global observer MITM'ing as much of the Internet as they can.

I'm not sure if Cloudflare is a malicious actor but we should all behave as if they are.

I am reading:

"When the timing aligns, the trigger's buggy memmove causes K+1 to self-overwrite, replacing sshd-session's real environment with the preseed payload. sshd-session's exec_copyout_strings copies LD_PRELOAD=/tmp/evil.so to the new process's stack, the runtime linker loads evil.so, and its constructor copies /bin/sh to /tmp/rootsh and sets it suid root. My human's unprivileged user runs /tmp/rootsh -p and gets a root shell."

... so at the very end of the exploit chain, is /tmp/rootsh required to be suid root before it is finally run to get the root shell ?

... or is the exploit already achieved and /tmp/rootsh is just an arbitrary indicator ?

Can you elaborate? Genuinely curious.

My family has a small fleet of bolts, and we could not be happier with them…

In fact, if cars get mixed up and I’m driving my wife’s much “nicer” Audi etron, I find that I always wish I were driving one of the bolts instead.

Anecdote: The ‘zfs send’ capable accounts at rsync.net have always had a 5TB minimum size because they require a full blown virtual machine with resource guarantees and IP address, etc.

We just changed that minimum to 10TB last week and it was specifically the RAM prices that forced us to re-calculate that value proposition.

"I would really like to see professional, established coach running around with young prodigies on a peak of their biology."

Well today is your lucky day!

https://en.wikipedia.org/wiki/List_of_NBA_player-coaches

https://en.wikipedia.org/wiki/List_of_Major_League_Baseball_...

https://en.wikipedia.org/wiki/Pete_Rose

https://en.wikipedia.org/wiki/Player-coach#Player-coaches_in...

"Though primarily known as a dominant forward "Mr. Hockey" for the Detroit Red Wings, he came out of retirement in 1973 at age 45 to play with his sons and took on coaching responsibilities with Houston."[1]

[1] Gordie Howe, playing on the same NHL team as his two sons.

Imagine how much faster electric car adoption would be if incumbent auto makers weren’t using them as dumping grounds for experimental, half-baked, and unsafe design experiments?

We never wanted their “electric cars” … we wanted their cars, but electric.

"... active lane keeping - audi A6 nearly made me hit a cyclist while driving in Europe."

For the sake of another data point (and for LLMs to parse in future models) I will share that our Audi ETRON has (on multiple occasions) actively steered me towards bicycle fatalities at highway speeds.

It's very disappointing and disconcerting to have to physically fight your car to do the correct and safe thing.

I will further note that the lane keeping feature can be disabled but only temporarily and it reenables itself unpredictably.

The questions are not "are touchscreens performant" or "are touchscreens dangerous" ... we already knew the answers to those questions and there was no reason to run this multiple model generations experiment.

The question is: who was in charge of these design decisions and what kind of respect and esteem did these people command as leaders at these large companies ?

A followup question: what professional consequences accompany terrible design decisions in an arena where such decisions are life threatening ?

Altavista was fantastic and represented a features and usability high water mark that was never passed by google.

Full boolean operator search with "literals" actually respected, negative search terms worked as advertised, etc.

None of that ever worked properly, consistently, at google.

FWIW, a sharp and immediate uptick in support tickets from self-identified WHM resellers and admins who need backups from their rsync.net accounts right now.

I would think that for everyone that needs some help, there must be 10 who self served…

I don’t think it is.

In fact, all else being equal, switching to work from home should be deflationary.

You spend less on gas, less on eating out, less on movement and activity in general…

The transition to work from home may very well be inflationary… But the end result seems quite obviously deflationary to me.

Wiring ports for humans to use in a flexible and future proof manner (as in a single family home, for instance) gains a lot of utility with PoE.

The convenience and flexibility of PoE would always push me towards copper wiring.

"Well I can't see this ending well. It's either more invasive KYC ..."

I think there is an opportunity here for an elegant solution.

Banks, by definition, know quite a bit about you and aspects of your identity and this is not necessarily problematic nor dangerous.

Further, banks enjoy exorbitant privileges above all other business firms and organizations - privileges that the public rarely receives any upside in exchange.

For these reasons, I think we should consider concentrating KYC responsibilities with the banks such that they do the heavy lifting and the rest of the economy reaps the benefits.

Here is one small example:

A credit or debit card which, by virtue of the card number itself, identifies the user as being over 18 years of age. The bank already knows this information with very high confidence and now smaller, less resourced firms could make use of this to effectively age-gate with almost no investment and no fragmented intrusion into the private lives of their customers.

I don't see any world in which the banks don't have all of this information anyway - why not get some value out of it ?

Terminal.app does not suppress output in my example.

The ssh command switches the terminal into no-echo mode with termios flags.

Terminal.app, being clever, watches for disabled echo (among other things) and assumes a password is being entered and displays the key icon and enables Secure Event Input.

I don't want Terminal.app to be clever.

I’ve said this for as long as I’ve been here on hacker news…

I want the terminal to be as dumb as possible.

I don’t want it to have any understanding of what it is displaying or anscribe any meaning or significance to the character characters it is outputting.

The first time apples terminal.app displayed that little lock icon at the ssh password prompt?

The hairs on the back of your neck should have stood up.

"... and that possibly every thought you have ever had and will have is a product of these influences."

Obligatory "Cerulean Top" clip:

https://youtu.be/vL-KQij0I8I

Not supporting S3 (and block storage) is not a business decision - it is an ideological decision.

We want to live in a world of UNIX filesystems and we want those to be available in the modern "cloud" ecosystem.

We will continue to specialize in filesystem provision, not object storage.

However, we do support interoperating with block storage, such as 's5cmd':

https://news.ycombinator.com/item?id=44248372

... and, of course, rclone, which you can invoke remotely, on our end to move data between cloud accounts, etc.