skysight-inc/HackerNews huggingface dataset:
Not all the time. At least when it comes to subjects involving physical things as opposed to software or theoretical subjects, video greatly expands the amount of raw information captured at the expense of total density. It takes quite a bit of control out of the author's hands, so to speak, by capturing far more than the words they explicitly choose to write. When it comes to fixing or building things, for example, this means that video has the potential to capture a lot more incidental information that the author might never think to include like the speed and strength of movements as well as tactile responses that are nearly impossible to describe in a consistent manner.

I think text is better when you already know what you're looking for and video is better when you are still trying to develop an intuition for the subject.
How can they scan your software and run security checks on it based only on a hash?

Are the checks actually run locally by xCode?
> The company that isn’t picked will have its funding terminated and have to return the money it spent to the government.

Wow! I’ve never heard of such terms before with a govt contract.
In my opinion, the market must crash before we'll know who "the next Google" is.

For instance, Amazon and Google became huge between 2000 and 2005. That was a stretch of time when great engineers were a dime a dozen. Tons of dot coms had cratered, and Sun Microsystems was circling the drain.

That created a huge pool of educated talent, eager to be hired.

That situation doesn't exist any longer.
Because human rights are important and oppression is bad. States aren’t monolithic entities. This isn’t a case where people suffer the consequences of their own choices. It’s a case where some people suffer the consequences of other people’s choices. You’re proposing to allow millions to suffer indefinitely, hoping that those who rule them will eventually change their mind.

This is been tried already, and it didn’t work. What changed things was force, first military, then legal.
Doesn't even have to be that serious. My young son went off on a sleep walk once, came in speaking complete gibberish (like a random sort on a dictionary) but in a totally normal rhythm and cadence. After I regained composure and figured out what was going on, and redirected him he want back to bed, artfully working his way around the usual Lego detritus everywhere his path. So weird you can be basically unconscious but still so functional!
> Give users even more confidence in your software by submitting it to Apple to be notarized. The service automatically scans your Developer ID-signed software and performs security checks.

Looks like it uploads a bundle to them for all that to happen on their side.
Your brain is like 100 Billion mini computers all working together
I agree - it seems like nobody is really thinking through how to solve homelessness and is instead arguing about how much money should be allocated to the same strategy that cannot work.

For currently homeless people with no “special deal” like winning the affordable housing lottery, it’s just going to be implausible for them to find housing in San Francisco, as long as someone earning $30,000 a year can’t afford to live in San Francisco. That means any solution must get people into housing that is not located in San Francisco.
This may be true. But it does not make sense to violate personal spaces of millions of people for the possibility that one blind person will be in the train. I never encountered a blind commuter but I'm sure they exist. In my country people would be extremely helpful and would tell them their stop and help them get out. To me clean and quiet public transportation is a sign of civilization.
What does this mean for non open source projects? They need to submit the source code to ensure there is no malware, right? This is the standard practice in iOS apps.
>When he died, she was left hundreds of thousands of dollars in debt

If a person dies, how can the bill go the spouse? I don't get this.
A lot of the comments below this are rebutting this point by mentioning that videos are better for learning, or complex tasks. This seems obvious to me. Unless I grossly misunderstand how most people use facebook though, they're not there to watch videos about learning or car repair. They're there to consume content as a distraction. It's right there in the beginning of the quote: "the best way to tell stories..."

In that context, this comment is absolutely spot on - we're not talking about a tutorial video showing how to replace the headers on your BMW. We're talking about a video with a talking head that reads a "story" to you. "Can you believe what the president did today?" (cue outrage).

"It commands so much more information in a much quicker period," is a nice way of saying "video distracts people much more effectively than text."
They scan the software, not your software. If the hashed match against a known scanned good bit of software then it's safe. Maybe.
If you wrote a book, I would buy it. Great post, very succinct.
Could you do this as an Adobe (Photoshop) add-on? Wouldn't that be a bigger market?
Related: the GOES “full disc” view is a partial realization of this and it’s mesmerizing: https://www.star.nesdis.noaa.gov/GOES/FullDisk_band.php?sat=...
In the early 90s Australia, I worked with a Frenchman who was employed as an English⇔Japanese translator (go figure).

I remember us reminiscing over Asterix one day and his mentioning what a marvelous job was done translating it from French to English.

To be honest, in my ignorance I think that was when I discovered that English was not the original language of the material!
For one thing a pint is still (roughly) a pound.
Show HN: Highway – Simple Routing for PHP. PSR-7 and PSR-15 Compatible
I’m in the UK too. My tuppence, after working with a number of companies big and small (and huge):

- reliability, reliability, reliability. It doesn’t matter if your network is superfast at 3am in the morning if it doesn’t stay up properly at 2pm because Americans come online; I will always just note the latter.

- most businesses would love to get a prepackaged vpn solution that works with little fuss and supports a lot of different devices. They should also be able to turn it off if they later move on to some other product.

- make it super-easy to associate a server name to an IP, and have it reachable from the entire network. That’s what most people care about, from their networks.

- ignore basic mail services, Office365 and GMail are unbeatable. But you can offer admin services, like managing O365 for them, making regular backups and so on.

In my book, the best ISP is the one that gives me simple tools for the most common tasks, offers tons of reliability, and gets out of the way. For others, it will be the one they can call and tell “make it so”.

The worst is always the one where you have to fill some Word document with complex network details you don’t know anything about, just to open port 80 for machine X. Nobody likes bureaucracy.
Omi.js DevTools: Debug Omi.js Apps
Poland has something similar on regional (not city) level, it's called Janosikowe (from Janosik - a Polish Robin Hood), and it's much less flavorful than the Japanese thing, it's just a percentage of local taxes paid by the richest regions to the poorest regions.
Video is great ... as an art medium.
Famous People Born the Exact Same Day
This is fairly obvious. In order for a government to have a large income, there must be large corporations. The larger the government income, the larger the corporations. Not all countries will be large, therefore the largest government (in terms of revenue) will have many, many companies larger than smaller governments.

I suppose it's an interesting headline to read.
I knew “Abraham Lincoln & Charles Darwin - February 12, 1809” but not many of the others...
Is that still true though? The NSL already compel speech in that they limit what you can say. We already have secret courts making decisions that we find out about years later.

At this point the major wall has been breached in terms of rights, altering speech for national security, and we can no longer trust anything. If the secret courts decided they were going to compel active speech instead of compelling negative speech, what mechanism would let us know of the change? I don't think there is any
I presume that's because the other half is mostly the Pacific Ocean (along one plane), or the empty southern oceans (along the other plane). I assume they went for utilitarianism, as opposed to actively discriminating against people living in Alaska and Japan.
Nothing but iTunes can load songs into your iPhone, which is hardly the fault of other software.

It does videos as far as I’m aware, though it’s certainly no VLC.
I think the other lesson is to be wary of sales pitches being sold as an expert recommendation.
Every single time someone says this, I want to ask them which obstructions they would like to see removed, because everyone answers differently.

So let me ask you, which government obstructions would you like to see removed?
Yes, but I don't understand what you are trying to say. For example, it reads like "Iron and Steel are very different materials" which is also true, but the majority of the mass in steel content is the element iron.

Depending on when they were made, Nuclear fuel rods can be encased in Zircalloy which is an alloy of zirconium and tin or niobium. The "magic" material that is discussed in the article starts out as sintered zirconium carbide structures which are then mixed with molten tungsten and copper[2]. It isn't an alloy in the traditional sense I suppose.

[1] https://www.mne.psu.edu/motta/chapters/Book%20Aug%202011/Cha...

[2] The zircon carbide ends up providing the material with a stiffness even at high temperatures, while the tungsten is flexible enough to keep the whole thing from being brittle. And the whole thing conducted heat better than the metals currently in use.
Don’t worry about if you’re good enough. You passed the interviews, you’re fine.

You are not an imposter. Everyone feels the same at most stages...just getting hired, once you settled, etc.

This isn’t a platitude, 80% of what people do at FAANGs, Ivy League schools, etc. is chest-puffing.

You are not an imposter.
I think this is the Boeing incident the above comment is talking about.

https://www.wired.com/story/us-china-cybertheft-su-bin/

I wondered why the United States does not care about such state sponsored violations of intellectual property, going as far as to deny the crime.
This is technically true, but the UX for this is so horrendous it's hardly worth taking seriously. If people are willing to put up with bad UX we could instead use TLS client certificates, which are still _much better_ than saving a page that has JS SRI in it (at least it's in the browser!) and has _much better_ cryptographic properties. (And that's assuming that you could somehow get the origin issues right.)
Honest feedback: I don't see how this succeeds without integration with existing applicant workflows. The cognitive overhead of another app to store data, manually update status etc is high.

If e.g. Monster or Indeed launched this as a value-add to existing functionality it would be big, but i'm not going to make the effort you're asking for in isolation.
I've searched this space looking for a decent RX/TX SDR that does a few watts. It's surprisingly hard. Seems like the 5 watt $30 HTs (that are SDR based) are extremely common, but as soon as you add any flexibility it's $1000s.
Photoshop is used less and less by designers, with tools like Sketch and Figma taking over. Also, usually the developers would prefer to handle compression.
Download as in wget it? That would break for all kinds of reasons (CORS, CSRF etc), and SRI does nothing if the attacked controls page generation.
Somewhat clickbait. They overview the different criteria but don't go into how each factor contributes to the overall score and thus the admission process so you don't really learn much how the overall admission process is decided.
Peter's Evil Overlord List (1996)
This protects against… making many slightly-different copies of a malware app and signing them all locally, so that revoking one doesn't affect the others?
Has anyone been prosecuted for acting similar to your example?
iOS app binaries are submitted to the App Store, not the source code. Malware is detected via static analysis of the byte code (and presumably some runtime heuristic analysis) but it isn’t perfect.
iOS does not involve sending your source code. This involves ensuring your app runs in their Hardened Runtime and is properly signed. Apple checks that there is no Malware.
It does do podcasts and video, and it can't be blamed for Apple locking it out of your iPod. No idea what other features you find it lacking, the best comparison I'm aware of[1] doesn't show a huge difference, but I've never seen the appeal of iTunes.

[1]https://en.wikipedia.org/wiki/Comparison_of_audio_player_sof...
Was it ever true?
> Note that in an upcoming release of macOS, Gatekeeper will require Developer ID signed software to be notarized by Apple.

Does this mean that anything distributed outside of the App Store will have to be approved by Apple? Will the App Store sandboxing rules apply to outside apps too?
I would argue that for a deep understanding of a system, the best medium is in fact a simulation game that incentivizes you to optimize your way through that system.
I'm really excited about PAKEs! But for a totally different reason.

PAKEs are great for low-entropy secrets, but they don't have to be static: you can generate them on the fly too. Every time you have a human-mediated channel that eventually needs to agree on a strong secret, PAKEs are good. So, if you have a device that you want to pair with an existing device with an untrusted third party PAKEs are super great. You can use this to safely send a file across the ether by just sharing a short string like "2-bonobo-magic; see magic-wormhole.

I therefore disagree with the notion that a PAKE being symmetric is a downside: I just think that they're different tools for different tasks, and we should talk about sPAKEs and aPAKEs specifically. Symmetric PAKEs are worse for password auth: I just think PAKEs are not a high priority for password auth. There are two problems with passwords: cred stuffing and phishing (fundamentally the same attack: an attacker gets a password "out of band" and then replays it) and PAKEs solve neither.

[magic-wormhole]: https://github.com/warner/magic-wormhole
I think the point gp was trying to make is that canaries are not working. Schneier for example has publicly doubted their effectivity.
Well, my comment was an answer to an answer to an answer. Someone complained that previous comment generalized about groups of persons from a certain region and then someone else objected that people from a certain region does not make a race. So I was trying to point that racism is a perfect term to define discrimination based on (perceived or constructed or real) groups you would belong to, including, like in this case, in where you come from.
> This is the standard practice in iOS apps.

Pretty sure you’ve got your wires crossed here - you absolutely do not have to submit source code to put your app on the App Store.
No, that's not what it means. Currently there are three security tiers for applications on macOS: App Store, not App Store but cryptographically signed, and not cryptographically signed. All three can be run.

That sentence means that in the future, the second category (applications which are not on the App Store but are cryptographically signed) will need you to generate a certificate with Apple. Nothing about the app store's sandboxing rules, and nothing about all applications -- you can run unsigned applications to your heart's content.
Notarized, not approved. It's not a manual process, doesn't involve App Store-like approval rules, and doesn't require sandboxing.
Since you're not worried anymore about burning the server-side resources, you prevent the dictionary attack in this scenario with a punitively expensive KDF.

(Note: I am not saying this is a good idea! It's OPAQUE but worse.)
10% doesn't matter if it exceeds what your monitor can handle. For example, in Tech Report's benchmarking, even a i5-8400 is well over 60Hz in many current games at 1080p on maximum settings. [0]

If you want to run the latest games on max settings at 4K/120hz, it's a different story. Personally? I remember when reviews gushed over 30fps at 800x600.

[0] https://techreport.com/review/34192/intel-core-i9-9900k-cpu-...
Wounded Knee, the Achilles Heel, and Elizabeth Warren
But in the future, it could, as apple boils the frog bit by bit.
I can still vividly remember some of the scenes mentioned today. While perhaps not traumatising it was certainly pretty off the deep end for a kids film.
She very likely signed agreements to be financially responsible for the treatment. This is one of the very first forms a hospital will ask you to sign.
This lets Apple nuke a compromised version of an app without doing it to all versions or apps by that developer. Which would have been useful in the case of Transmission [1][2].

[1] https://arstechnica.com/information-technology/2016/03/first...

[2] https://blog.malwarebytes.com/threat-analysis/2016/09/transm...
I'd be delighted if designers gave me compressed assets.
The "secret" (at least for me back in 1972 ;-) was to be in a far-flung location (San Diego for me) where there's slim pickin's. ;-)

Seriously, I'm sure the decision process has quantitative elements, but it's got to still be 70% intuition. And the "legacy" applicants most definitely get a big bump.
Spot on. News publishers have been suffering from declining ads revenue for years. They needed to pivot to something anyhow.
Alice was building a social graph model of ppl attending the party?
Excellent; thank you! I'll take a look.
No you can't. The security improvement of PAKE over traditional HTML forms + TLS is that the server never knows the password plaintext; the threat model is a compromised first-party server. If the server is compromised, it can just change the SRI hashes that it sends to the client. SRI is only an effective protection against compromised third-party services.
It's another slow gradual step toward total lockdown.

I feel like eventually I'll have to abandon Mac, but for what? Linux is still flaky and Windows adware unless you spring for Enterprise.

I would pay for a commercial Linux as polished as MacOS, but there may not be enough of me. (It could also have a list of officially supported hardware to at least approach the stability benefits of Apple's vertically integrated HW/SW stack.)
I know I'm a little late to the discussion, but I think your comment might be more well-received if you were to provide evidence to support your claim about the author's financial incentivization. After reading your comment, I looked briefly at the linked article and found the author's wikipedia page. It seems as though his primary product doesn't involve sleep. Are you saying he's financially incentivized via ad revenue from his blog posts on sleep?

In any case, I guess what I'm saying is you seem to have researched the topic and your spending an extra minute or two giving a few more details will probably save a bunch of other folks ten times that, in aggregate.
Wow, thanks for the nice words. Getting it to work (more or less) on mobile was (and continues to be) a fun challenge.
Thanks for the feedback - cofounder of CoinFi here.

We actually help fund the open source Ethereum ETL scripts created by our data engineer Evgeny here:
https://github.com/blockchain-etl/ethereum-etl

In addition, we've contributed the ingest as a public data set to Google Cloud if you want to do your own analytics without running the architecture: https://cloud.google.com/blog/products/data-analytics/ethere...

The compilation of exchange specific addresses is a long and tedious process, plus we hypothesize that exchanges would rather prefer to keep their addresses private, so we're not releasing that information though.

However, one of our Signals products reads from the Ethereum blockchain in real-time and notifies whenever there are abnormal movements to/from exchanges.

Unfortunately we're aware of the "pump and dump" association with signals - any suggestions for front footing that negative connotation and showing users that this is in fact different?

One way we've thought about is to create a Signals Library that basically explains each signal we provide and details the behind what it represents, a rough overview of what triggers it, and the historical performance if you traded off of it.

Any other suggestions would be greatly appreciated!
If you can get commissions then it can be lucrative.
Is there a particular reason to use a symmetric PAKE in this case? Is it somehow not a long-held password?
How do you run unsigned code on iOS. e.g. How can I build an XCode project and have it run on my iPhone?
Modern programs (or apps as they seem to be called now) are like gasses, they expand to fill the volume of their containers. Even if we keep getting more RAM, does that mean that it should take more memory to play music or edit text? Yes, being pragmatic maybe 503 MB out of 24 GB isn't a big deal, but it would be if you had 4 GB, which should be plenty to run an OS and a text editor. Then there's the question of how elegant it is to gobble up so much memory for the benefit of the programmers to use even more abstractions and virtual machines and frameworks. Programs are written once and run lots of times, it makes sense to optimize for the user, not the programmer.
Hold on... This strikes me as disingenuous and here's why. Stripe is using spend-per-resident to compare SF to other cities, to lead us to the conclusion that we already spend more than anyone and so more wouldn't help.

But SF has one of the highest homeless rates in the nation. It's spend per homeless resident that is the relevant comparison.

So how do we do on that? As others have noted, we actually spend less per homeless resident than NYC. You would never get that from reading this! All you see is NYC: $260, SF: $770. Totally misleading! It comes across as disingenuous to me because, clearly, Stripe must know this.
> They overview the different criteria but don't go into how each factor contributes to the overall score

Applicants are graded 1 - 6, so an applicant getting 'tipped' doesn't necessarily bump their score. The way I've seen it work elsewhere is just that applicants who are flagged get their entire applications reviewed, so that way someone actually reads the essays instead of just tossing it after spending 30 seconds looking at the grades and SATs.

Also each department is going to have its own quota, so that way the orchestra gets 10 people and the rowing team gets 10 people and the development office gets 10 people and so on. So you're really only competing with other applicants within your bucket, unless you're not in a bucket in which case it's really just lottery odds at that point.
This article is about "Mac Apps", as the title states. I figure—unless posted elsewhere—that iOS hasn't changed and is still as restrictive as ever.
While I agree Azure web jobs are awesome, I’m not sure I would call them serverless. They require you to provision an app service and would only scale within whatever tier you have and ultimately share resources with any sites you have on the same sever.

Microsoft actually has an on-prem or self-hosted version of Azure functions that uses docker, though it’s still only in preview.
I don't see the author's point in section "Move semantics". The second let statements for `total` is just shadowing the first. Nothing fancy going on here.
Aspirateur s