> If you read the profile the New Yorker published about us last year, you'll find the author's own shock experience of HN encoded into that article (and it's something of a miracle of openness and intelligence that she was able to get past that—the shock experience really is that bad).
I suppose I should clarify that that was not based on anything Anna said to us. It was just my interpretation of (my memory of) what she wrote. So anybody can read the article and decide whether they agree.
> Each sample of the malware contains a hardcoded name of the victim organization.
> Apart from encrypting the files and leaving ransom notes, the sample has none of the additional functionality that other threat actors tend to use in their Trojans: no C&C communication, no termination of running processes, no anti-analysis tricks, etc.
> Curiously, the ELF binary contains some debug information, including names of functions, global variables and source code files used by the malware developers.
It is for manually targeted attacks. Once it is deployed, the damage is done and the victim is notified. They don't need C&C. The hardcoded victim name is probably just a big FU.
You can have excellent perimeter security but this organisation might just bribe an employee to gain access.
It is far more scary than some automated bot scanning for ports.
I'm not denying its effectiveness, just remarking on its technical merit as a topic of discussion. Once the system is already compromised it becomes less about the payload and more about the attack vector involved. If the payload in question was using novel techniques then it would be a different story but the analysis shows the program to be relatively rudimentary.
Well, no point in over-engineering a solution, right?
To put it another way, sounds like they moved fast (and maybe broke a few things?), put together an MVP that meets their needs, rolled it out, and are now likely learning and gathering feedback for their next iteration... sounds like they fit right in around here!
(This thread reminded me of something a cow-orker used to say: "If it's stupid but it works, it's not stupid".)
If you have colorful icons you'll need to duplicate the resources to account for light and dark variants unless you prefer sub-optimal legibility. If you emphasize color as a method of representing state you'll need to adjust by shipping images for each state value. With monochrome icons the emphasis is placed on shape so you can efficiently render the whole icon in a different color without obfuscating its meaning.
I'll be the contrarian: Is this a good business decision?
Sony has recently stated that it wants to enter the automotive industry but Google is a direct competitor with Waymo and their Nest product has a pretty firm standing in the smart home appliance environment. Is it wise to basically become dependent on a large competitor for such an integral component of your next generation products? What if Google decides to give up maintenance of Flutter to the community and use an internal, better fork? I guess it's the same thing with Microsoft using Chromium to implement Edge and how we're converging towards a complete Google monopoly.
I was an early adopter and proponent of Flutter but that's just not the case anymore. The ecosystem has become inundated by what you might get if you forced copulation between the JS and Android ecosystems. There's a ton of low-substance spam articles, excessive usage of libraries reminiscent of NPM-madness, and just a general obnoxious colorful-emoji-fueled atmosphere. I don't want to be misinterpreted: there are plenty of good Flutter developers and the core engineering team is certainly brilliant. But they're largely overshadowed by a community who continues to drive a good technology into being associated with bloat, poor security, and puerility.
The slide deck could have just said "We don't want to pay $10/unit for a Qt license" and saved us all the time. If you have half a gig of SDRAM and a playstation-class CPU, awesome. A lot of us don't.
What if Google decides to give up maintenance of Flutter to the community and use an internal, better fork?
I will never touch another Google-generated embedded project again. You will get burned. Just don't do it.
AOT maybe slower in certain cases. This topic discusses it - https://github.com/dart-lang/sdk/issues/39367 (it's not relevant only to dart, but other languages/runtimes like it too)
Sony offer solutions and experience. They have lots of experience doing that. I am sure changing the technology behind their solution will not be a problem as users don't see it at all.
This is just a single engineer from a company that not only makes TVs, console, but tons of other electronic (and possibly non-electronic) equipment. Inside every company, even inside every project, and every team in a any company there might be competing ideas, research and whatnot.
For example we use anywhere from good ole MFC, wxWidgets, WPF, Qt, imgui, Telerik and who knows what else...
This location exists below the cranium or somewhere securely encrypted and private.
> Socially ostracizing people for leaked mental help information is like laughing at fat people who had their gym treadmill data leaked
And like that example it happens despite whatever ideal moral system we want to espouse (never watched AFHV?). Advising people to not seek mental health care because of social acceptance is a valid concern since the consequences are real and critical. In 1952 Alan Turing admitted to performing homosexual acts and was subsequently charged with gross indecency - he was punished for sharing his secret. What do you think would happen if someone pursued mental health care to resolve a deviance in 2020?
"Hello Bob, I'm quite happy you've come to seek help with your problem... but first constable Alice would like to have a word with you. Oh, and I'm afraid you won't be allowed to leave the country or own a firearm; plus I've already spoken to your employer and he "suggests" you take a permanent leave of absence to resolve these issues. No worries Bob, just doing my job! Hm? Your girlfriend and friends dumped you after finding out? That's a shame, Bob."
If you want to act like there are no downsides to these solutions then I'm afraid you're being particularly naive. By all means fight for the right to have these people not discriminated against but don't mislead people by suggesting that you've already won the war when you clearly have not. Some lack the fortitude and recruiting them through disingenuous advertising is unethical.
Some mental health problems are quite serious. People should own that by taking refuge in the mental health process. There is respect to be had in that path.
Are you saying that homosexuality is a mental health topic that Alan was trying to solve earnestly in private? I don't know what to say about legal acceptance of sexual choices and it's not the same thing as earnestly trying to solve a defined mental health issue, which is a legal act. A possible legal outcome for a lot of the behaviours in therapeutic secrets would be more therapy until healed.
I'm arguing that your secrets, especially if they're socially taboo, are best kept to yourself unless you are fully aware of the consequences. I'm against disguising mental health care as something inherently beneficial to the patient. If people are fully aware of what will happen to them then I have no problem, but there is simply not enough transparency in this process and some are lulled into a false sense of security by the advertising.
My point with Turing was that here was a man who lived a decent life up until he exposed himself to society, thinking that this society would help him solve an unrelated problem. In truth, society is only motivated by self-interest (of the collective) and sometimes having you live a decent life is simply not in its best interest.
You can't ever be fully aware of the consequences, and you can't keep every secret to yourself. Sure, take some to the death bed if you want, I think we should heartily defend the right to "make the mistake" of telling a secret to someone private and stand up for the horrible crime of seeking help in an isolating society. Nice name by the way, we don't all have the memory of a goddess to properly order our secrets in.
____
Okay I've skimmed your HN history for juicy secrets to make a point. You're a teenager who doesn't trust people (with some parts of yourself) and writes your secret emotions down on paper to send to fake people. You think a public psychological label is a life-and-death matter. You seem to think 'How to win friends & influence people' is an acceptable instruction book for manipulating people. So you are somewhat exposed already.
The point of therapy is to not need it anymore. If you have hang ups about it, or other topics, you should go there until you don't need to anymore. There is nothing inherently good or bad about having a socially approved and useful set of ideas to contain chaos.
The psychological disorders are like tools. They don't describe what you are, they are a useful label for closing up Pandora's box again and give people some relief from an unknown illness. Having a psychologist label you or anybody else as narcissistic, sociopathic or psychopathic is no more dangerous than being called a jay-walker. If you know what it means and what you are, then it's manageable.
There are some secrets that will get your life messed up. For every Turing, you have a Tom Cruise or the people who went to Epstein's island or whoever else has taboo secrets and still succeeds. There are not good or virtuous secrets and you are wise to be aware of their impact. The majority of secrets are uninteresting and commonplace.
You are referencing my comments without the proper context:
> who doesn't trust people
I do not trust people because I write in a journal? How is this incriminating? I don't find it any more peculiar than speaking to oneself or opening with "dear diary" -- as if those who address their text to something inanimate are any better. I fail to see any merit in this revelation aside from attacking my character. I could try and dig up something equally irrelevant from your history but I find that act to be in poor taste.
> You seem to think 'How to win friends & influence people' is an acceptable instruction book for manipulating people
Once again the context is conveniently missing: the individual I was replying to described himself as someone who dislikes talking to average people (had a sense of superiority). I figured rather than offer him something vague and patronizing like, "be nice and try to be humble", I would endorse a resource that would offer solutions pertinent to the subject matter. I was not sharing my own personal opinions; one does not have to ascribe morality to a function in order to see merit in its execution towards an objective.
> You think a public psychological label is a life-and-death matter
Not entirely, no. But is this a minority opinion? Why would they blackmail the patients if they didn't believe that some would be willing to pay? I have recently lost someone precious to me as a result of similar circumstances and my mishandling of the situation by encouraging therapy and medication played a key role in her suicide. I apologize if my original comment appeared unnecessarily reflexive -- I'm still reeling from the guilt and I could be projecting some of that bias in my response to these types of things.
I think if something necessitates intervention then by all means seek professional care. But if you're unsure and living a decent life make sure you exhaust all other options before considering yourself diagnosed with whatever label is put in vogue by pseudo-scientists. If you think some secrets are uninteresting consider if they'll remain that way when the culture inevitably shifts and society decides to reject certain categories of people. The normal of yesterday too often becomes the enemy of a better tomorrow.
My 2 cents: Get rid of stars and then have each reviewer submit something positive about the product as well as something negative as nothing is ever perfect. Eventually people will figure out the reviewers writing "it works too good!" or "it has no problems!" as negatives are fake. Even if the bots manage to get around the automatic detection (i.e. IP + activity tracking) they'll still be submitting negatives which will hopefully balance out their positives and incline the user to examine each argument instead of being subconsciously manipulated by the 10/10s and 5 stars.
I've been testing out beta and have noticed the Vulkan backend using around 30mb less memory than GL on Linux. Hopefully we'll see even more reductions when QML3 is released (which really focuses on embedded). Another interesting thing is that QML now has cross-platform desktop widget via QtQuickControls2 (i.e. native Windows and MacOS styles) and the improved CMake support is also pretty convenient. I can now get rid of my .qrc files and just write everything in CMake.
I really admire how smooth this migration was and it shows Qt really cares about minimizing breaking changes.
> If you read the profile the New Yorker published about us last year, you'll find the author's own shock experience of HN encoded into that article (and it's something of a miracle of openness and intelligence that she was able to get past that—the shock experience really is that bad).