neatchee

IPUMS Current Population Survey (CPS) Microdata, 2000–2025

Found on a realtor.com research article. Didn’t check the original source but I’ve never known that site to provide fabricated data (and this was historical graphs and everything)

For those curious 2025 is about 33%

Book publishers and economists have a very different definition of what “young adult” means

winget on its own, yeah, I agree scoop is better. But toss UniGetUI at it and suddenly it’s a real package manager.

And UniGetUI supports multiple sources: winget, msstore, pip, .net tools, chocolatey, scoop, etc

I do wish winget was more robust on it’s own but I also appreciate the goal of getting the package handling right first and letting third parties handle the update automation, at least for now.

I’m naively optimistic that after another 5 years baking it’ll be closer to what I actually want

I know this is a Linux community and therefore we love to hate on Windows…

but for anyone that hasn’t used Windows in a while, they actually finally implemented relatively decent package manager in the form of “winget”. When you add the wonderful UniGetUI on top of it you get a pretty good experience.

It had issues early on with consistency but the last ~year or two has seen it get a ton of improvement. It’s much more reliable than it used to be.

Obviously “it’s about goddamn time” and it doesn’t hold a candle to mature package manager like what’s available on Linux.

But if you’ve not experienced it before, and are forced to use Windows sometimes, it’s worth checking out.

Yeah the whole thing was crazy. The driver apparently stopped a little ways down the road and called the police. They did come back but not initially.

The only real “emergency” I can think of is when I saw someone get hit by car while trying to run across a three-lane road. Went over the hood. probably a 30MPH hit

The driver sped off. I pulled into the middle (turning) lane, put my hazard lights on, and tried to help the person. They were unconscious at first and then extremely dazed. Some other bystanders tried to get them to “walk it off” but I demanded they stay still and not move their head or neck until paramedics arrived.

Fortunately a nurse saw it from their apartment balcony and rushed out to help. They obviously agreed the person shouldn’t move.

Kind of wild looking back that so many people wanted this person who just got laid out by a car to pretend like they were completely okay. So fucking dangerous in that situation.

The analogy is perfectly accurate.

An imperfect, simpler form of security vs a higher, more cumbersome form of security.

Where is the problem with that analogy?

Biometrics are not “bad practice for anyone concerned about security”. They are one type of security that is sufficient and effective for certain risk profiles but not others. Users should make informed decisions based on their needs and the features of the security implementations they are considering.

Your hyperbole is, in fact, dangerous as it pushes people who do not understand security to blindly accept policies that are not good for their risk profile. We have proof that proper usage of biometrics is more consistent with end-users than proper usage of passwords. It’s not just about convenience. It’s also about adoption and proper compliance.

Absolutist policies and positions like yours do harm. Just look at how NIST recommendations have moved away from things like frequent password change enforcement because it leads to bad behavior (writing down passwords, etc)

You’ve misunderstood my analogy.

Most people don’t need the strongest form of protection. It’s about risk profile.

Also biometrics don’t replace passwords. They supplement them. They allow certain features to be accessible with reduced security, if that fits your risk profile, while maintaining the high security of passwords for specific functionality.

Again it’s about risk profile. if you believe there is a chance that will happen to you, then go ahead.

Personally I just turn my personal phone off when approaching a border or attending a rally and that covers me. I’m not really worried about getting mugged from behind by a federal agent.

This has big “don’t use a standard deadbolt on your front door; it’s not as strong as reinforced titanium doors with time-release locks” energy

Like, not technically wrong, but does not fit the standard risk profile, it’s overkill for most situations.

Also to everyone talking about US law enforcement, this is just so easy to protect from, not worth ditching biometrics: if you see cops approaching and are worried about a device being unlocked, just reboot it. If you need to do it surreptitiously, just hold the power button to force shut it off after ~10s. This will always require a password to unlock after

As someone who works in this problem space, I promise you with 100% certainty that the type and quantity of data collection being done without kernel access would be far more distasteful than what’s done with kernel access. You can take my word for that or not but I obviously can’t say any more than that

Including cheating functionality in games is already done and people hate it: it’s called pay-to-win microtransactions.

The archetypes for cheaters are such that they don’t provide ways to please the a large portion of cheaters without harming players because harm is their goal. And the other group is trying to make money by charging for services for players and then cheating to complete those services as fast as possible. There are no in-game features that can be created to mitigate these people.

The only class of cheaters that can be dealt with as a service problem are those that are cheating to a) catch up to others or b) offset a skill shortfall or c) offset a time shortfall. This makes up only a subset of an cheaters

Only some cheaters are a service problem. There are a number of different cheater archetypes and some of them do not respond to service offerings

And believe it or not, while kernel level provides a level of access that could be used for nefarious spying we actually do much MORE stuff people would find distasteful when we DON’T have kernel access, because we have to infer more without direct access to the places where cheat makers do their work

I want you to know that I literally work in this space and you are handwaving away an incredibly complex problem space that hundreds of smart people have been trying to solve for decades now and it’s only getting harder (good cheat suites use hypervisor mods and direct memory access kits these days). I would love to educate this community but I’m under NDA (in addition to not wanting to provide information that attackers can use to better understand how we approach this problem space)

I want you to know that I literally work in this space and you are handwaving away an incredibly complex problem space that hundreds of smart people have been trying to solve for decades now and it’s only getting harder (good cheat suites use hypervisor mods and direct memory access kits these days). I would love to educate this community but I’m under NDA (in addition to not wanting to provide information that attackers can use to better understand how we approach this problem space)

Cool. So tell me how to write a game engine that cannot have its memory read to determine enemy player position with precision and then automate aiming and trigger pulls in a first-person shooter

You have no idea how hard anti-cheat is or how determined attackers are because of the profit incentive.

Are you a videogame networking engineer? Because you’ve just handwaved away one of the most difficult challenges in gaming as if it were “duh that’s easy” level simple.

I can link you some GDC videos that talk about how hard this problem is if you want

ETA: Also you’ve only addressed memory modification attacks. This does not address external aimbots that read memory to determine enemy player position and then send legitimate-but-automated inputs to aim and shoot. How do you stop cheaters from doing this when they can see exactly how data is structured in memory, how values are obfuscated, etc?

Open source competitive multiplayer games would be catastrophically compromised.

deleted by creator

Was gonna say this. At the state level people just leave your state. At the federal level it’s a lot harder to ignore.