hcazz

https://www.youtube.com/watch?v=SiB8GVMNJkE

Not sure you understand how "The Formula" works. The profit generated by adding this feature will outweigh the cost of any resulting accidents that they take liability for.

A less pessimistic way of phrasing it is that within the boundaries they've defined, their self driving system is so much better than a human that they're willing to assume responsibility for crashes deemed "at-fault" while using the system.

Not intentionally trying to compare that with other automakers, but Mercedes is the only "you can buy now" vehicle (ignoring robotaxis/Waymo/others) that assumes liability with those capabilities. Until other automakers provide that legal guarantee, they're parlor tricks at best that will continue to get folks killed in scenarios that they otherwise wouldn't had they been actually paying attention.

To be honest I don't think the best option for this is a VR headset, it's a pair of VR glasses. I use the Viture One glasses on airplanes, and the best part is they mostly just look normal on the face compared to something like a AVP or Quest. I think the new xReal One Pro glasses have a better FoV, but probably not enough for me to upgrade at this point. They can do "spatial tracking" where the display stays oriented in the same spot as a floating monitor if you move your head, or "static tracking" where the display is always fully in your FoV regardless of where you move your head. Both options plug in via usb C, and you can use them with anything that can do displayport over usb c (Steam Deck, Macbook, Android Phones, iPhones with an adapter, etc).

Viture: https://www.cnet.com/tech/gaming/viture-pro-xr-review-great-...

xreal: https://us.shop.xreal.com/products/xreal-one-pro

Echoing this, I dread every time I have an uber/lyft/etc that is a Tesla. I'm very convinced that most folks who buy Teslas generically hate cars, and simplifying the experience for them is how they get to drive/start/continue driving.

Someone who can't manage a gear selector because it's "too complicated" is not someone I want driving on the road, and when you combine that with exceptionally terrible ride quality for the price, it makes for a dreadful experience.

When you dumb down/streamline a phone experience into an iPhone you get something anyone globally can use, with not many downsides. When you dumb down a car experience into a single screen/app you get exceptionally shitty drivers.

That's incorrect. It's a titrated drug similar to blood pressure meds. If you have effectiveness at a 1mg dose for example, you stay at that. The drugs have maximum doses.

I'm based in the US. Most of those options are available from Amazon.

I've owned both the Viture glasses and the nreal air (back when they were called nreal rather than xreal). The picture quality on them is more than enough to use as a second display, but where it shines for me is on flights. It mostly just looks like a normal pair of oversized glasses, but presents an incredible display on that is miles beyond any in flight entertainment system.

I only bought the Viture because I lost/forgot my original nreal air glasses on a flight and they were never found.

Google Glass was released almost a decade ago, I'm not convinced the tech isn't there. I also had a RECON Mod Live HUD for my Snowboard Goggles which was released in 2011 which had a unit size not that far off from the Google Glass.

It's disappointing that in 2023 there isn't something even remotely close (or better) to tech that was available 10+ years ago in the case of the RECON Mod Live.

Yeah, there are significant limitations to camera based systems. Although for Mercedes, I'd argue it's significantly more than:

'follow the car in front and do what it does'

which is describing adaptive cruise control/radar based cruise control which has been on the market in vehicles for over two decades.

Tesla's software does not have those limitations

Recklessly enabling a half baked vision only autopilot doesn't mean it's "superior". There's a reason actual self driving car companies (Cruise, Waymo, etc) report disengagements per mile as a means to show how "self driving" their vehicles actually are.

Until Tesla self-reports this data, it's nothing but a toy, and I wish folks the best who actually trust their life with it. [0]

Officially, Telsa describes Autopilot as "an SAE Level 2 driving automation system designed to support and assist the driver in performing the driving task," as cited by NHTSA. Autopilot is not an autonomous driving technology, but the new numbers suggest people are treating it that way, sometimes resulting in tragedy.

[0] https://www.caranddriver.com/news/a44185487/report-tesla-aut...

https://www.sae.org/blog/sae-j3016-update

With Tesla's Autopilot, you are driving the vehicle.

With Mercedes new L3 system (which I'm going to assume you haven't ever used, since it isn't available yet on a vehicle for purchase), the vehicle is driving.

This isn't about Elon, it's about the capabilities of the vehicle you're sitting in. You're also ignoring TFA -- if Tesla's Autopilot is the best thing on the market, why are they asking officials to redact information on whether or not someone got into accidents while using it?

Not going to assume what you have and haven't owned before, but your statement here is objectively false:

Tesla's software is far superior even with its weaknesses.

https://www.engadget.com/mercedes-becomes-the-first-automake...

If Tesla's software was objectively better, why couldn't they get L3 approval in California?

I was able to see this in person recently at Jokulsarlon Glacier Lagoon in Iceland. The craziest part was how excited our tour guide was - she was taking as many photos as we were. From what they told us it doesn't last long, as the sun melts the top layer of ice, turning it opaque.

https://ibb.co/YpCs9p9 https://ibb.co/Gd0YGMN https://ibb.co/ZHyhm5h https://ibb.co/fv0wnnp https://ibb.co/HNY5ss0

Yeah, I'd apply in a heartbeat if they offered remote roles (or security roles based out of their Culver City office).

I understand it's interesting to announce accomplishments (such as increased areas for testing), but as someone who lives in West LA, it's slightly annoying to see multiple announcements saying "testing is expanded, be on the lookout!". I'm nearly at the point where I'm just ignoring announcements for Los Angeles because the last two haven't amounted to any changes for someone that lives here and wants to use the service.

Sure they are, JPMC just recently acquired a small startup.

To me at least, the different types are easy to understand.

White-board - the color of the board is white, it is used for dry erase markers.

Black-board - the color of the board is black, it is used with chalk.

Chalk-board - the color of the board doesn't matter, it likely uses chalk to write with and is therefore a "blackboard" as well.

It's just cornstarch. Same reason you should never use pre-shredded cheese on a pizza, the cornstarch burns faster than the cheese does.

Because it's soluble in water, you can (and I have) washed pre-shredded cheese in a colander and dried it on a kitchen towel when it was all I had on hand, and it turned out fine.

To play devil's advocate for a bit, are you certain he's solely responsible for the successes of SpaceX/Tesla, or that those companies succeeded in spite of his leadership?

In case it isn't clear, I agree with the parent comment. In the same tone as the comment above the parent, you could also write "Thing is - Elon Musk knows a thing or two about sexual harassment lawsuits. It's inevitable that he will have another at Twitter."

Stop idolizing billionaires.

Musk has successfully run companies in the past and is running two extremely successful companies right now.

Is he actually running those companies, or is he posting selfies of whiteboards at 1:30am showing architecture diagrams of Twitter?

In these markets, after he was nearly forced by courts into completing a purchase deal for Twitter after making an overpriced offer, I'm genuinely curious to see how he pays the ~$1b in interest per year on the debt to purchase Twitter.

Yeah, I'm seeing that as well.

whatever privileges I may have, I can pass on some or all of those, but no more.

That's just a permission boundary in AWS.

https://docs.aws.amazon.com/IAM/latest/UserGuide/access_poli...

I'm sure some folks will see this as dishonest or unethical, but it feels more like the natural evolution of getting spammed by recruiters.

If recruiters are going to endlessly spam me with their templates and automation, it only seems fair that my response is also templates and automation.

Being focused and having lots of random interests are mutually exclusive, that should be obvious.

If I had a hiring manager say this to me in an interview, I would not want to work for that manager. Random interests outside of work have zero influence on a candidate's ability to perform a job well. I enjoy working with coworkers who live fulfilling lives outside their 9-5, but outside of illegal activity, I wouldn't let their outside life influence my decision to hire them. If they find value in playing video games every hour outside work, that's fine. If they want to obtain random certs and skills, that's fine too.

I'm also in the process of getting my private pilot's license. Do you expect me to start flying in the middle of the day instead of working? If anything, being able to focus on a target goal that can take 6+ months to accomplish indicate focus and drive more than a lack of it.

The SCUBA diving example mentioned is an interesting life experience for someone to have, and doesn't deserve someone gatekeeping whether or not the individual is "serious" about their hobbies or experiences.

Historically speaking, in the ~15 years AWS has been around, have they ever increased prices for any service? In my experience, they've only ever decreased prices of their services as advances in tech have been made rather than increasing them. Sure some start out being expensive cough Macie and Fargate cough but they didn't increase prices after being launched as far as I'm aware.

Assuming they never have increased a price in 15 years, that doesn't prevent them from doing so, but it's a confidence inspiring track record.

I have about as much confidence that AWS won't raise prices on existing services/features as I do that Google will eventually kill another good project - https://killedbygoogle.com/

The security professionals today are the second sellers of snake oil

If someone breaks into your house, and stays there for a week, would you say they didn't really break in because they didn't murder you?

proof-of-breach

Maybe you're referring to a "proof of concept"? A "proof of breach" in the security industry is an incident to be investigated, and if necessary, involve law enforcement. It isn't meddling kids that didn't cause any harm. As a side note, I've never heard anyone use the term "proof of breach" in that context in the industry.

The fact that Okta didn't detect this earlier is concerning in its own right, let's not downplay the fact that the level of access that third party providers have is not a solved issue in the industry. The RCA/post mortem/follow up actions from Okta's side should not be "they got access but didn't do anything with it, we don't need to change anything".

Can you elaborate more on the firewall perspective? Your description makes it sound like for a three tier webapp[0], the entire pdf is suggesting to put a firewall around the presentation layer to limit it to appropriate sources, then the application tier to limit to appropriate sources, then the data tier to appropriate sources, etc.

While that should be done, and they are suggesting that, I feel like that's only covering section 2 at best. This doc isn't about adding other similar walls, it's reducing attack surface, limiting blast radius, and encouraging industry standards such as defense in depth, least privilege, and some elements of supply chain security. Your comment suggests you know that, but the PDF states many other things that have nothing to do with firewalls or differentiating good traffic from bad traffic.

My take on it is I see this document more as a source to point at internally at the NSA for best practices or a minimum bar to meet, not the best that the industry or the NSA has to offer. Even then, I'd assume that some organization externally will use this to say they aren't "up to the NSAs standards", and push for changes to fix their practices.

If it means that more folks learn of common practices in the industry and increase their security as a result, I'm all for folks sharing these practices, whether it's the NSA sharing it or a private organization.

[0] https://www.ibm.com/cloud/learn/three-tier-architecture

I'd highly recommend you go read the definition of "slave", as well as the history of slavery around the world.

Focusing on the context of this article specifically, what makes you think that workers of a company worth 1.78 trillion dollars are slaves?

That's antithetical to how the computer security industry should work -- arbitrary certifications don't guarantee compliance or security, at best they suggest it.

To me, this feels like the same problem as OKRs in an organization. When your goal for success is a high score on the exams for a job rather than the ability to do the job, folks will optimize for the high score on the exam. Setting hard goals that determine success will determine where folks spend their time. Along those same lines, I don't see this as a problem for third party entities like CompTIA/(ISC)2/ISACA/Cisco/Etc to fix, but rather poor management and expectations of employees.

OKRs and certificates aren't bad, they just need to measure the objective value to the organization as opposed to arbitrary standards (such as you must have X certificate to work here, or increasing pay based on certs earned).

Those tests mentioned above can be useful litmus tests for folks in the recruiting space to sort through candidates, especially if they have a large number of applicants, but I worry that it excludes folks that could otherwise be very good at the job/role.

I'm convinced folks who complain about "unexpected recurring small bills on AWS" have never taken the five minutes it takes to learn to using the billing console.

It's like asking why the knife you're using keeps cutting you when you put your finger on the sharp end. Learn to use your tools, and they won't surprise you. Learn to track your costs, and you won't have unexplainable recurring bills.

Agreed. Rolling your own login solution just to federate access to users seems really, really, unnecessary. There are a million other ways in AWS to accomplish the same task without writing any code, or leaving around a random lambda that will likely be forgotten in a few years.

Relying on a cheap payment online to identify an individual determined to act maliciously likely isn't going to lead anywhere useful.

The parent post above is referencing an online meme that pokes fun at a lack of punctuation[0].

In the Q/A section quoted, the lack of punctuation can be read as:

Q: Do you store my card?

A: No payments are processed directly by Stripe, and we don't store your card details

Which implies that Stripe is not processing the payments, with the note that the card details are not stored.

This could be rewritten as:

Q: Do you store my card?

A: We do not store your credit card information. Payments are processed directly by Stripe, and we don't store your card details.

[0] https://i.imgur.com/gbJVPk3.png

Have you double checked the settings for lane keep assist on your Audi? I have a 2018 Q5, and you have the options between "early" correction and "late" correction. If it's set on "late" correction, then it seems to bounce between lanes as your described.

When it's set to "early" correction, it indefinitely stays centered (assuming it can see the lanes).