this_steve_j

Tesla was artificially subsidized by selling carbon offset credits to traditional manufacturers, for example Ford. Otherwise they would not have been able to sell cars at such a huge loss. I don’t have a citation for this, but it was reported in the FT.

The study looked at almost 40 years worth of observational data from multiple correlated sources. That is one of its contributions relative to similar studies that looked at fewer sources of measurements, or used different methods.

I’m really grateful to the HN community for bringing quality research (like this study and others) to my attention.

If there are old habits and behaviors, like indoor fires in this case, that can be easily avoided (by me) in exchange for a better chance at avoiding lung cancer, I’m surely glad to have that knowledge so I can avoid unwitting cozying up to a serious ailment later in life.

There is so much anecdotal evidence around old habits but a high powered study, followed by more like it, can usually be relied upon.

I use a screenshot of the payment barcode from the Starbucks app when I’m in the store to pay. I do not want it on my phone. It seems to be constantly bombarding my wife’s phone with trivial prompts and notifications.

This was quite a big mess! Let’s see if there is a way to break it down in a Safety II fashion.

1. Airline human resources deviated from the traditional practice of hiring experienced rudder and stick pilots.

1. Overly permissive company attitudes toward crew rest and a lack of awareness about how it can affect vigilance and fitness for duty.

1. Breakdown of the ceremonies that transfer command and control in the cockpit.

1. Lack of training for high altitude stall recovery.

1. Activities performed in low altitude stall recovery training scenarios are orthogonal to a successful recovery in high altitude stall scenarios.

1. Automation surprise followed by alert saturation combined with incongruous perceptual signals and loss of situational awareness.

1. Aircraft control systems that failed to resolve the ambiguous delegation of authority (double PF) dilemma.

1. Highly compressed timeline of events in a physically disorienting environment.

1. What else?

I didn’t install the plug-in, but made a mental substitution and reread the thread. Now I am chuckling like a grade schooler over some madlibs and dribbled coffee down my shirt.

I haven’t followed the legal contours of this case very closely so perhaps these are not interesting questions.

Who would go to jail if _no_ driver was in the car?

From what I recall, the vehicle was a Volvo and its pedestrian detection and emergency braking system was defeated by the test equipment. Is there any culpability there?

Or what about the person who planned and initiated the driving route that night, in the dark through a populated area. Are they responsible to a degree?

It doesn’t sound like the backup “driver” was engaging in engineering or testing activities, and certainly not driving, but instead was paid to be doing what a passenger might do if they thought someone else was driving.

What the driver is legally responsible for may be different from what they believed they were doing. At least, that would me my defense in the situation.

Can someone please explain Article 15 in terms of an analogous civilian workplace infraction and a typical military non-judicial punishment?

For example, if Joe shows up with a hangover 2 hours late for work at as a machine operator and cops an attitude with his manager, then he might get a…

Here is NOAA’s Heat Stress Gauge and Time Series data web site for the Florida Keys area which shows the likelihood of coral bleaching due to thermal stress.

https://coralreefwatch.noaa.gov/product/vs/gauges/florida_ke...

This summer I have been keeping my Florida hot tub temperature at 94°F, which is reportedly 7.1 degrees lower than most others.

It’s pleasantly refreshing and usually cooler than both the wet bulb temperature and the bag of water attached to my neurons.

Never been much of an ocean swimmer myself, but I am curious about the heat-enhancing properties of the layer of water where the reading was taken.

I’m headed there now to read the NOAA Coastal Water Temperatures Guide (hot tub, not Manatee Bay) which has an interactive map.

https://www.ncei.noaa.gov/products/coastal-water-temperature...

Included is footage of nuclear tests starting with the May 1945 trial run to Trinity (the first atomic bomb), a 100-ton TNT blast used to scale and calibrate the Trinity device, and ending with the last U.S. atmospheric nuclear detonation (called Tightrope) of the Nike Hercules air defense missile in 1963. Also included are test series in the South Pacific, footage of the firing of the U.S. Army's atomic cannon at the Nevada Test Site in 1953, and color images of multi-megaton high altitude air bursts over Johnston Island just before the limited test ban treaty went into effect (banning all except underground detonations) in 1963.

If I can find a way to do that I will, and certainly for future submissions. Thanks!

There was a bit of a 180 in FL during 2021. One week the governor was announcing mass vaccinations at retirement communities, and the next week he was with volunteers giving shots of monoclonal antibodies at libraries and nurses protesting the vaccine requirements at their workplaces (presumably health clinics).

As the year progressed, there was a collective run on Ivermectin horse paste at the farm & feed stores, no wait to get a Delta booster vaccine at Walmart, and no small number of death threats being made against public health and local officials who retreated from the “liberal” mask and vax talking points.

Also, the lines were very short at Disney World.

There’s probably a relationship between the severity of a pathogen’s disfigurement and uptake of vaccines among the people who don’t get routine medical care.

The study authors concluded: collectively, these two states could have averted more than 95,000 hospital admissions and 22,000 deaths had they reached the vaccination coverage achieved by the top five states and continued at the same pace from October 2020 until August 2021.

Malware is defined many industry standard places, like NIST 800-61 which is the Computer Incident Response Guide, US-CERT, and EU-CERT.

From what is your understanding of the term malware derived?

Fundamentally, malware is about destructive application behavior. It’s a negatively charged term that should be reserved for tools created/used with actual malice by threat actors.

I would gladly pay federal taxes if more government safety agencies put out high quality streaming content like the USCSB!

That said, there is a facepalm moment in each video when you realize the agency has no regulatory authority and can only make recommendations that may or may not translate into voluntary compliance actions.

It was adware and not malware, from what I can tell.

There was a thread on the old FileZilla support forum[1] where the developer describes the adware included in the installer offered to unwary downloaders, which sounds a but shady but is probably not malware.

A lot of AV engines use crowdsourced classifiers like virustotal to flag “potentially unwanted applications (PUA)” as a threat and quarantine, but the term “malware” is a category reserved for destructive or criminal application behavior. I’m not convinced that is what was or is bundled with “sponsored” Filezilla installers.

At some point the bundled adware was apparently something called OpenCandy related to ask.com, and the developer of FileZilla is alleged to have concealed rather than disclosed it.[2]

The adware-free installer was/is reported to be available for download freely on the same site, but for the extra browsing effort.

[1] https://web.archive.org/web/20190526065704/https://forum.fil...

[2] https://malwaretips.com/threads/sourceforge-net-adds-adware-...

Was about to write a similar comment, but it seems like parents’ experience (rather than science) is the thing of real value at work here.

As a scientist with no kid in the game whose opinion carries no weight though, I would concur with both you and Dr. Phil on the matter of telephones vs threenagers.

One of us is a replicant and it might be me!

But it sounds more like you’re describing a Purple team [1], where the compliance and sec ops teams work together with vulnerability researchers and pen testers to perform attack surface analysis and develop threat detections.

In my experience Red teams generally perform adversary emulation using a certain amount of surprise and deception, and attack your defenses in depth with a _little_ help from inside (if needed). Essentially an outside group paid well to try and steal your lunch.

Liked and subscribed, and thanks for the comments and all the work.

Edit: Let’s split the difference, I’ll call it magenta, and flip this here turtle on its back. Why did I do that?

[1] https://www.sans.org/purple-team/course-faq/?msc=purple-team...

(because reddit was down)

I don’t want to go to bed. Read me a cybersecurity bedtime story about AI hacking baddies with a heart of gold, written like a PR blast.

> Machine learning has the promise to improve our world, and in many ways it already has. However, research and lived experiences continue to show this technology has risks. Capabilities that used to be restricted to science fiction and academia are increasingly available to the public. The responsible use and development of AI requires…

Okay. This went downhill pretty fast, but let’s proceed from the basis that this wasn’t written by a GPT trained on landing pages and sentiment analysis.

TL;DR: We’ve got some gripers drowning out the hypers.

> Information security has a lot of useful paradigms, tools, and network access that enable us to accelerate responsible use in all areas.

Risk management frameworks… Threat intel… Critical control mapping… Threat modeling… Wait.. Did you just say “network access”?

Joe, Will… just one more question.

A banquet at your company regatta is being prepared by the executives’ personal AI chef. The guests are enjoying raw oysters. The entrée consists of boiled dog. How will that make your shareholders feel?

Not to put too blunt a point on this metaphor, but a human’s eyes and visual cortex are not stereo cameras and the human brain is not a GPU/CPU despite some apparent similarities.

Nor is “professional commercial driver” a job that could be performed by a Neanderthal or a 6 year old student driver of today despite nearly identical hardware and software. I would never ride across Manhattan every day in a car driven by the latter two humanoids and I doubt most anyone would.

Ideally these systems should only be certified after performing demonstrably better than a teenage student driver given a series of the most complex, adversarial driving workloads in deteriorating conditions with disabled and malfunctioning sensors.

On the other hand, today’s billionaires may actually be close to achieving fully autonomous and acceptably failsafe non-human driving on today’s roads, and they might also be exploring Mars within my lifetime. Personally I wouldn’t bet my life on it.

This is probably my favoritest hot retake I have seen in awhile.

> “Our chatbot Amy deals with lots of customer queries already,” he added.

> Jansen also said that around 10,000 fewer people would be needed to service and repair digital networks

I believe this is what C. Doctorow would describe as “enshittening” customer support operations.

It doesn’t require AI or any other magic, just a juicy performance-based incentive and a big parachute. The next CEO will focus on “improving the customer experience”.

A parsing error due to a signature-based malware definition file update is a totally plausible suspect!

It would explain why the router is downloading “updates” but not firmware upgrades.

Also, these signature files contain tons of hex strings and unusual characters used to identify the actual malware (IOCs).

We rollback these updates all the time when a bad malware signature update pegs the AV scan daemon. They are released several times per month depending on the vendor.

Someone more knowledgeable about ASUS asd can probably confirm/deny.

Here in Florida anhingas are commonly called “snake birds”. When they are swimming, the head pokes out of the water and looks similar to a snake, so perhaps that’s how they earned the name.

Just about every moving body of water or lake will have several of them on the shoreline stretching their wings to dry.

I’m an older man who doesn’t use his feet very hard, and I came here to say that I just bought another pair of Sockwell moderate compression socks.

40% merino, looks awesome, feels awesome, and not so much of the Precious Bodily Fluid pooling in lower extremities.

I will also +1 the Darn Tough socks. There is an appreciable difference between $6 and $26 for a pair in terms of moisture performance and comfort.

Washing them in a garment bag makes it easier to re-sort.

I’m holding out hope for an NTSB-style investigation report by CISA that is a giant website with 1000s of pages of analyst notes and digital forensic evidence and shows exactly how they found out what they did as it happened.

For all the the $100mil’s that have been spent over the course of this cyber Pearl Harbor event, there should be something monumental added to the public record that every comp sci and cybersecurity student or pro can learn from for the next 50 years.

Data from these big attacks shouldn’t be limited the rarefied few folks who are lucky enough to take a $9000 SANS SEC541 course or work on a CIRT team for a Fortune-100 company whose sausage is among those roasted by the the fire.

Get a Volvo if you want to learn about cars trying to not kill you, says Steve Notwosniak.

The Volvo Cars Safety Centre crash lab opened in 2000 and contains two test tracks of 108 and 154 metres long respectively. The shorter of the two is moveable and can be positioned at an angle between 0 and 90 degrees, allowing for crash test at different angles and speeds, or to simulate a crash between two moving cars. Cars are crashed at speeds up to 120 km/h.

Outside, there is room for performing tests like roll-over crashes and run-off road scenarios, whereby cars are launched into a ditch at high speeds. Here, Volvo Cars also offers rescue services opportunities to hone their life-saving skills, as it did earlier this year when it dropped new Volvos from a height of 30 metres to simulate the heavy damage found in extreme crash scenarios.

https://www.media.volvocars.com/global/en-gb/media/pressrele...