MurphyA/hacker-news huggingface dataset:
by drdaeman | 2025-09-09 18:20:16+00:00
Except it's not a BP monitoring, it's some ML gimmick that detects signs of high BP. If it's like their sleep monitoring (which e.g. thinks I was in a "core sleep" while I was unable to fall asleep so I was sitting and playing a game), it's just a "maybe it'll work, but don't rely on this and don't expect any accuracy" type of thing.
by astrange | 2025-09-09 18:20:35+00:00
> Apple Silicon got some huge wins from lower latency and massive bandwidth, but that came at the cost of making RAM fixed and more expensive.

The memory latency actually isn't good, only bandwidth is good really. But there is a lot of cache to hide that. (The latency from fetching between CPU clusters is actually kind of bad too, so it's important not to contend on those cache lines.)

> A lot of PC users scoffed at the default RAM sizes until they actually used one and realized it was great at ~8GB less than the equivalent PC.

Less than that. Unified memory means that the SSD controller, display, etc subtract from that 8GB, whereas on a PC they have some of their own RAM on the side.
by hombre_fatal | 2025-09-09 18:20:43+00:00
It doesn't give you a live BP reading. It just does some sort of fuzzy inference using data over time kind of like how the Whoop tries to estimate your BP in the morning based on overnight data.

The Apple Watch just notifies you when it thinks you might have high BP and you have to use a cuff to see if it's correct. So, we're still some ways away from passive BP.
by rolph | 2025-09-09 18:20:51+00:00
curating apps for security is like closing a loop tighter.

look for list of malignant apps e.g.

https://duckduckgo.com/?t=lm&q=which+app+is+doing+the+scam+&...

if you have any such apps delete them.

if you see that some bad thing happens, e.g. you get a scam call after requesting callback, you then look at app history, and you look for apps that were active during that time span, and you have a short list of suspects.

the name and description of the app may be misleading, but have an odd permission set, for example a flashlight app that requires contact history and calander access. flashlights dont need that.

look at the permissions of each one, individually for any that allow, in your case, access to contacts, or dialing/dial history.

there is going to be some [system] app[s] that legitimately has this access and presumably, some unfamiliar app, or recently installed app that is abusive. make sure you know the difference!

if your not sure, your can perform experiments such as removing the permissions, or forcing stop of the app, to see if the problem stops, or something complains.

a sophisticated exploit may involve a number of apps working together, to cloak activity, and keep reinstalling if the whole gang isnt cleared out at once.

in this case you may have some other compromise and a password change might be a good idea.

if any of these apps somehow have financial access, you may need to look at replacing cards, and auditing bank / credit activity.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

the last bastion of defense, is how the target responds to the contact. they may be at the edge of competency, thus an easy mark, the target may be contacted at a time they are known to be overwhelmed with the mothly rota of bills and income. the target may have been behaviourally profiled and bombarded with a campaign from all sources and is now acting in a frame; a headspace that seems real, and very urgent.

you may actually have to talk them down out of that headspace, to prevent signifigant, recurring vicimization.

https://www.aarp.org/money/scams-fraud/fraud-tactics/

https://consumer.ftc.gov/consumer-alerts/2024/03/sure-ways-s...
by ctoth | 2025-09-09 18:20:57+00:00
What is weird to me is that you have access to this information at all? It would make sense for the people who use your software ... the IT departments or whatever to have access but why on earth do your engineers need access? What gates access to your customers' machines? What triggers a write-up like this? Hostnames, "machine names" are ... not unique by nature.
by bitpush | 2025-09-09 18:20:57+00:00
The incentives are also not aligned here. You make money if there's more ads in the podcasts. In a world where there's no ads, your company wont exist.

So at some point, you'll have to start prioritizing making money ("proving your worth to users") and will start to make sure there are more ads in the podcasts, so that you can remove them.

And that is a lose-lose scenario. You will end up directly contributing to more ads in the podcast. This is called a second order effect.
by viraptor | 2025-09-09 18:21:00+00:00
> This one is where ICE’s operation is completely fair.

The "completely" is going quite far given the treatment of them. They could be sent a notice ordering to stop work and leave. Or the employer could be told to start applying for visa updates or else. It's not like a skilled Hyundai worker on a temporary international work assignment is likely to run away and start an undocumented life in the US instead. It was a completely unnecessary show of force that also cost more than sending a few letters.
by mlinksva | 2025-09-09 18:21:13+00:00
As the post mentions wallets like MetaMask being the targets, AFAIK MetaMask in particular might be one of the best protected (isolated) applications from this kind of attack due to their use of LavaMoat https://x.com/MetaMask/status/1965147403713196304 -- though I'd love to read a detailed analysis of whether they actually are protected. No affiliation with MetaMask, just curious about effectiveness of seemingly little adopted measures (relative to scariness of attacks).

Added: story dedicated to this topic more or less https://news.ycombinator.com/item?id=45179889
by ryzvonusef | 2025-09-09 18:21:21+00:00
> Pakistan's spy agencies can monitor at least 4 million mobile phones at a time through its Lawful Intercept Management System (LIMS), while a firewall known as WMS 2.0 that inspects internet traffic can block 2 million active sessions at a time, Amnesty said. > The two monitoring systems function in tandem: one lets intelligence agencies tap calls and texts while the other slows or blocks websites and social media across the country, it said. > In court, Pakistan's defence ministries and intelligence agencies denied running or even having the capacity for phone tapping. But under questioning, the telecom regulator acknowledged it had already ordered phone companies to install LIMS for use by "designated agencies." > Amnesty said the firewall uses equipment from U.S.-based Niagara Networks, software from Thales DIS, a unit of France's Thales, and servers from a Chinese state IT firm. An earlier version relied on Canada’s Sandvine. > Niagara told Reuters it follows U.S. export rules, does not know end users or how its products are used, and only sells tapping and aggregation gear. > Amnesty said the phone tapping system was made by Germany’s Utimaco and deployed through monitoring centres run by UAE-based Datafusion. > Datafusion told Amnesty that its centres are only sold to law enforcement and that it does not make LIMS, while AppLogic Networks, the successor to Sandvine, said it has grievance mechanisms to prevent misuse.
by aurareturn | 2025-09-09 18:21:21+00:00
It has A19 Pro. A19 Pro has matmul acceleration in its GPU, the equivalent of Nvidia's Tensor cores. This would make future Macs extremely viable for local LLMs. Currently, Macs have high memory bandwidth and high VRAM capacity but low prompt processing speeds. Give it a large context and it'll take forever before the first token is generated.

If the M5 generation gets this GPU upgrade, which I don't see why not, then the era of viable local LLM inferencing is upon us.

That's the most exciting thing from this Apple's event in my opinion.

PS. I also like the idea of the ultra thin iPhone Air, the 2x better noise cancellation and live translation of Airpods 3, high blood pressure detection of the new Watch, and the bold sexy orange color of the iPhone 17 Pro. Overall, this is as good as it gets for incremental updates in Apple's ecosystem in a while.
by hellojesus | 2025-09-09 18:21:53+00:00
This is a great point, and the obvious answer is the government should provide zero subsidies or welfare programs. Every single program creates moral hazard and deadweight loss. Iterate your question to conclusion, and you will arrive there.

What the government should encourage is charitable donations, and when I say that, I mean the mere act of it. There should be no tax incentive for doing so.

Where children are concerned, if anything, perhaps make the sales tax on child-related services zero, and increase sales tax on luxury goods associated with sink or dink households. At least that methodology provides the opportunity to forgo the penalties.
by AlienRobot | 2025-09-09 18:22:14+00:00
This honestly doesn't feel like it should be the case.

There aren't that many websites. The e-mail provider could have a list of "popular" domains, and the user could have their own list of trusted domains.

There is all sorts of ways to warn the user about it, e.g. "you have never interacted with this domain before." Even simply showing other e-mails from the same domain would be enough to prevent phishing in some cases.

There are practical ways to solve this problem. They aren't perfect but they are very feasible.
by albulab | 2025-09-09 18:22:19+00:00
I just read the Guardian report noting that UNRWA fired nine staff members to “preserve the integrity” of their mission. They weren’t punished for refusing to participate in any wrongdoing—instead, they were let go because investigations suggested they might have been involved in the October 7 attack

Comments that suggest this was some kind of cover-up or rewriting of history only hurt their credibility. Implying that an entire group is spinning the past—even two years on—comes off as divisive. Let’s stick to the facts, not broad-brush accusations.

https://www.theguardian.com/world/article/2024/aug/05/nine-u...
by ameliaquining | 2025-09-09 18:22:22+00:00
Log4Shell didn't light up all the beacons because Java is "enterprisey", it was because it was probably the worst security vulnerability in history; not only was the package extremely widely used, the vulnerability existed for nearly a decade and was straightforwardly wormable, so basically everybody running Java code anywhere had to make sure to update and check that they hadn't been compromised. Which is just a big project requiring an all-out response, since it's hard to know where you might have something running. By contrast, this set of backdoors only existed for a few hours, and the scope of the vulnerability is well-understood, so most developers can be pretty sure they weren't impacted and will have quite reasonably forgotten about it by next week. It's getting attention because it's a cautionary tale, not because it's causing a substantial amount of real damage.

I do think it's worth reducing the number of points of failure in an ecosystem, but relying entirely on a single library that's at risk of stagnating due to eternal backcompat obligations is not the way; see the standard complaints about Python's "dead batteries". The Debian or Stackage model seems like it could be a good one to follow, assuming the existence of funding to do it.
by marcosdumay | 2025-09-09 18:22:25+00:00
> if there was a rapid reversal

I have some bad news. It's already some 8 months too late for "rapid".

> Not enough time has really passed for things to change _that_ much

Here in Brazil we are in a mini economic boom because every single country is willing to pay a premium on anything that didn't come from the US. The EU is shutting up internal racist and protectionist dissidents (strong on their 2 largest economies) so that they can diversify from you. Most of the world is discussing independent payment systems... Nato countries are organizing to defend against the US and China and Russia are promising military protection to Latin America.

I wonder if things changed that fast when WWI started, but it absolutely never changed that fast in my lifetime.
by simonw | 2025-09-09 18:22:34+00:00
I just published an extensive review of the new feature, which is actually Claude Code Interpreter (the official name, bafflingly, is Upgraded file creation and analysis - that's what you turn on in the features page at least).

I reverse-engineered it a bit, figured out its container specs, used it to render a PDF join diagram for a SQLite database and then re-ran a much more complex "recreate this chart from this screenshot and XLSX file" example that I previously ran against ChatGPT Code Interpreter last night.

Here's my review: https://simonwillison.net/2025/Sep/9/claude-code-interpreter...
by Gualdrapo | 2025-09-09 18:22:45+00:00
This with the glass ui thing feels like now they're doing "innovation" for the sake of "innovation". But as someone said on the other thread about this thing (https://news.ycombinator.com/item?id=45185576), at this point they could just make a cardboard phone, wrap it with some fancy words and would sell it like crazy.
by mxuribe | 2025-09-09 18:22:52+00:00
Oh, no, no...its not "mulching"...we don't dare mulch our employees! We simply streamline their corporeal shell in an effort to improve their ways of working. Its actually part of our new health care offering. In the past these would be called "diets"...but, no, no, we like to call it bodily optimization! And, hey, we hope that all employees participate in the mulching, er, um, i meant bodily optimization...Because, hey, someone needs to be fed to the AI...er, i meant someone needs to provide inputs to the ever-godly AI. ;-) /s
by a_shovel | 2025-09-09 18:23:08+00:00
Here's a question to ponder: Why aren't American convenience stores already like Japanese convenience stores? I distrust cultural explanations because humans are basicly the same everywhere. Given the choice, quite a lot of people would prefer a Japanese-style 7-Eleven over an average American convenience store. I think this is the key:

> Challenges include the difficulty of transporting fresh food to locations in the United States far from city centers. In Japan, the average convenience store receives multiple fresh-food deliveries per day. [...] In the United States, Mr. Dacus said, fresh food often means hot food that can be frozen and cooked on site, eliminating the need for multiple daily deliveries.

Japan is a much more urbanized country, with more foot traffic to support impulse stops to buy a snack. Even outside of pedestrianized areas, it's a shorter trip to get supplies from a central regional location to individual stores.

My local high-quality American convenience store chain is QuikTrip. If you go to their Wikipedia page and check the map of their stores, you'll see they have stores in Arizona and stores in the Carolinas, but they have no truly rural locations. It's all islands surrounding major metro areas. This suggests that the transport time from some central distributor is a major factor in where they put stores.
by bitpush | 2025-09-09 18:23:14+00:00
> Not really concerned with how Coca Cola makes their money

That's a naive way of thinking. If Coca Cola see their sales are not going up ("ads are not effective"), they'll stop sponsoring podcasts, leading you to do less work, leading to people stopping to use your product.

And since you intend to make money out of this, you'll have strong incentive to keep this charade going. :)
by dh2022 | 2025-09-09 18:23:39+00:00
I do not think ADP goes back and adjusts the numbers from its previous reports. I think this is because ADP does not use sampling - ADP uses the actual data from the private companies for which it provides payroll services. With this data is pretty clear, among many other things, how many people were employed at this particular company in this particular geography at this particular time. ADP then aggregates all of this data in its report.
by mwambua | 2025-09-09 18:23:59+00:00
I personally wouldn't rely on my phone/watch if I'm headed anywhere remote without cell service & electricity. With Garmin inReach you don't just get better battery life - you also get the Iridium satellite network and a team that's more experienced at search and rescue.

That being said, I do think that these new emergency SOS features will come in handy for people who don't know what they're getting themselves into, or who just run into unexpected bad luck on what was supposed to be a quick day trip.
by rjrodger | 2025-09-09 18:24:01+00:00
null != nil !!!

It is good to see some partial solutions to this issue. It plagues most languages and introduces a nice little ambiguity that is just trouble waiting to happen.

Ironically, JavaScript with its hilarious `null` and `undefined` does not have this problem.

Most JSON parsers and emitters in most languages should use a special value for "JSON null".
by ctoth | 2025-09-09 18:24:08+00:00
This makes total sense.. Except who is the SMB in this case? It sounds like the person just downloaded this off the Internet, it wasn't pre-installed by IT. So it sounds like Huntress has full and complete access to whoever downloads their software to try it out/demo it... and aren't afraid to use this access for their own purposes/just do a bit of poking around because why not? When a hostname matches?
by xnx | 2025-09-09 18:24:10+00:00
> Why and how did that ear worm infect so many people?

It's a story they want to believe.

The big bad out-of-town corporation is causing the housing crisis and not the complex web of dozens of factors: existing owners wanting to protect their largest asset, more people wanting to live in fewer places, inflation, tariffs on Canadian lumber, safety standards, etc.
by aurareturn | 2025-09-09 18:24:48+00:00
The problem is that these people are very loud on the internet but sales for small phones are abysmal.

The laptop class (myself included) just don't understand. A huge portion of the world only has 1 computer and it's their phone. They rely on it for work, entertainment, and connectivity. They don't have a laptop where they can do all these things on whenever they want. Their phone is it. They want a big screen phone. It's no surprise that every time Apple made the screen bigger, it sold better.

I loved my 13 Mini but I understand why Apple has given up on it. It was a very good effort. They tried. Didn't sell. Maybe a foldable can solve this problem for both sides.
by cybergreg | 2025-09-09 18:25:36+00:00
You’re really missing the point here. Huntress is an MDR, a cybersecurity company. They protect the endpoint by monitoring it for malicious activity and responding in kind. It’s what they do, not unlike Crowdstrike, Microsoft, etc. Generally a threat actor will install a security agent like this to find a bypass in order to attack more victims. They know exactly what they’re doing.
by ryzvonusef | 2025-09-09 18:25:43+00:00
meanwhile, in a hilarious juxtaposition...

https://www.dawn.com/news/1940395/interior-minister-forms-bo...

> Media reports say that data of all SIM holders, including Interior Minister Naqvi, was sold at Google. > They further said that information regarding mobile location was being sold for Rs500 (USD 1.78), mobile data record for Rs2,000 (USD 7.10) and details of foreign trips for Rs5,000 (USD 17.76). > A couple of months ago, the National Cyber Emer­gency Response Team of Pakistan (PKCERT) iss­ued an advisory warning that the login credentials and passwords of more than 180 million internet users in Pakistan have been stolen in a global data breach, urging people to take immediate protective measures. Media reports said PKCERT had identified the global breach involving a publicly accessible, unencrypted file containing more than 184 million unique account credentials. > “The breach exposed user names, passwords, emails and associated URLs tied to major social media services, as well as government portals, banking institutions, and healthcare platforms worldwide,” the reports said quoting the PKCERT’s advisory. > In March 2024, a Joint Investigation Team (JIT) formed to probe a data leak from the National Database and Registr­ation Authority (Nadra), told the interior ministry that the credentials of as many as 2.7 million people had been compromised between 2019 and 2023.
by jpadkins | 2025-09-09 18:25:47+00:00
I'm familiar with how sanctions work wrt advertisers / publishers. It would be totally fine if a court or similar institution said "here is a list of propaganda orgs, please limit what ads they can buy in our jurisdiction" and the ad networks were authorized to find all of their shell companies associated with those named entities. But that is not what the article is advocating for.

I'm objecting to the notion that mega corp ad networks are the best organization to determine what is truth vs. propaganda in our society.
by minimaxir | 2025-09-09 18:25:47+00:00
Fine print on the Heart Rate Sensor:

> Built-in heart rate monitor is intended for use during workouts with the Fitness app and compatible third-party apps on iPhone running iOS 26 and later.

Why is it Fitness app only? Odd restriction.

Also explicit confirmation of foam-assisted tips:

> And five all-new ear tips — including an XXS option — fuse a thin layer of soft foam to the silicone shell to give you even better acoustic performance.
by bongodongobob | 2025-09-09 18:25:49+00:00
Thanks for the confirmation. Lately it's been telling me it has made edits or written code yet it's nowhere to be seen. It's been messing up extremely simple tasks like "move this knob from the bottom of the screen to the right". Over and over it will insist it made the changes but it hasn't. Getting confused about completely different sections of code and files.

I picked up Claude at the beginning of the summer and have had the same experience.
by pjdesno | 2025-09-09 18:25:49+00:00
Note that this is very early work - one of the papers (the HUST one from this June) shows an 8x8 cell device, i.e. 64 bits in SLC mode.

DRAM kind of plateaued in 2011, when it hit $4/GB; since then it's gotten faster and bigger, but not appreciably cheaper per bit.

This could change if there was a way to do 3D DRAM, like 3D NAND flash, but that doesn't appear to be on the table at present. Note that this isn't the "stacking" they talk about with IGZO-DRAM, where they build layers on top of each other - it's not 3D stacking itself that made flash cheap.

Flash got insanely cheap because of the single-pass 3D architecture - it's pretty cheap to put a large number (~400 nowadays) of featureless layers onto a chip, then you drill precise holes through all the layers and coat the inside of the hole with the right stuff, turning each hole into a stack of ~400 flash cells.

The cost of a wafer (and thus a chip) is proportional to the time it spends in the ultra-expensive part of the fab. 3D NAND puts maybe 100x as many cells onto a wafer as the old planar flash (you can't pack those holes as closely as the old cells), but what's important is that the wafer only spends maybe 2x as long (I'm totally guessing here) in the fab. If it took 100x as long, laying down a few hundred layers, the price advantage would vanish.
by randomname4325 | 2025-09-09 18:26:02+00:00
Long time apple fanboy. I've watched most of these unveilings for the past 20 years. The new phones are impressive. But it was all speeds and feeds. The examples felt so wrong. The women dancing while on the phone. The guy running with while recording. The person needing translation to buy roses? None of those feel grounded in reality. It's like they are building tech for made up in corporate conference room use cases.
by plasticsoprano | 2025-09-09 18:26:14+00:00
Good. That app was horrible. I'd get a notification of a comment and 90% of the time it wouldn't load the comment, so I'd have to scroll to the bottom where the comments were and I couldn't tell what the comment related to so I'd reload the link and hope for the it to properly highlight the text and show the comment and that would work maybe 40% of the time. Editing text was frustrating as well.

If they provide a better web experience I'm all for this.