skysight-inc/HackerNews huggingface dataset:
Whether or not this hack was developed with the help of Apple (a “backdoor”) or by a third-party exploit, this is exactly what a “golden key” looks like after it gets in the wild.

An espionage tool developed by a major world power proliferates to totalitarian regimes, aided and operated by ex-NSA agents on the payroll, to compromise human rights activists and the political opposition.

If ever there was proof that our devices need to be striving — constantly striving — for absolute security, and can never allow any “trusted party” an authentication or encryption bypass, this article is it.

An exploit like this is incalculably valuable to intelligence agencies. That the exploit would proliferate is undeniable. And the ends to which it would be (has been) used is atrocious.

Probably the only thing different about how intelligence agencies exploited this, and how they would exploit a golden key, is that with the golden key they would be sweeping up every photo on every device, and not just some photos on some devices.

“It was like, ‘We have this great new exploit that we just bought. Get us a huge list of targets that have iPhones now,’” she said. “It was like Christmas.”
FYI Mapzen is coming back as a Linux foundation project (just announced in the last week):

https://hub.packtpub.com/mapzen-an-open-source-mapping-platf...
Self-hosting costs me money ($5/month) but not much labour after the initial set up that took 2 hours. My work flow is to write in text files on my local computer, commit to git and `git push`. I can't think of a work flow that requires less labour. It would also cost nothing if I used github pages or a similar service.

Caveats - authoring is not mobile friendly, and it's not possible for folks who aren't comfortable with git.
Yes but the inverse isn't true either: removing anonymity doesn't cause everyone to trust each other.
If you don't have trust, or you're not sure, an exercise like this is a good idea
Rock Your Band’s Marketing: 5 Ways to Promote Your Music
A Closer Look at the Polar Vortex’s Dangerously Cold Winds
Wordpress is great. I've signed up for a yearly plan, I get to use my own domain. And their editor is really great.
“Anyone may arrange his affairs so that his taxes shall be as low as possible; he is not bound to choose that pattern which best pays the treasury. There is not even a patriotic duty to increase one's taxes” (New York Judge Learned Hand).

If people abuse tax exemptions and deductions, it makes sense to ask why those exemptions and deductions exist. But it doesn’t make sense to me to demonize the taxpayers. Especially since I doubt many celebrities (Bloomberg’s target) actually make any of these tax decisions on their own. They hire accountants to worry about that while the celebrities show their concern and political bona fides in public.
Isn't that what quantitative trading is?
See also: http://opengameart.org
Ok, in the developed world. And it really isn't. The US might be the worlds richest Country but in many areas, it's like a developing nation.
It happens like any other flagged submission: members flag it. And as you note, vouching restores it. 'minimaxir's put together a lengthier explanation here:

https://github.com/minimaxir/hacker-news-undocumented#flaggi...
is this useful beyond improved breeding for genetic experiments? I understand there is scientific value in being able to quickly and cheaply breed in fewer generations a mouse with specific sets of genes as a tool for downstream research.

I have a hard time imagining gene drive is useful for improving some species: how does one determine the utility of one set of genes versus another? we can not accurately reflect the real world in a lab environment to determine if some change is a net advantage or net disadvantage over all environments, situations a species faces. I agree it will be possible to assess the performance of traits in a lab benchmark, but then it's obvious we are over fitting to the genetic fitness of pulling a lever, or running in a wheel etc, and disregarding the cost of the change on all other functions the organism would face in a representative test. The real world with millions or billions of creatures is a much faster and parallellized test, i.e. a lab with space for 1000 mice, could in theory face 1000 micedays per day of artificial selection, while those in the wild are performing giga micedays per day of natural selection over the whole challenge set without overfitting...

Again, I do see the utility for breeding selective traits and downstream learning about the functions of the genome in a cheaper way compared to fifty fifty coin flip breeding...
Napster. Worked there in 2000 and 2001. It was surreal (at least for me) to work at a place that was always in the news at the time. I can understand how employees at Faang must feel at times. Not a total distraction but it’s there. Napster was an interesting place.
My theory was pure imagination :) I 100% agree with what you said. The primary goal is to raise the bar of entry. The problem is, current SWE evaluations focus too much on one single task. The ration "writing functions" versus the rest might be about 20% vs 80%. We focus too much on the 20%. How about team work, collaboration, knowledge transfer, project related issues, mentoring people, setting up environments, understanding users, collaborating with product managers and designers, etc.

If you think about it, it's a pretty risky process for companies. Judging a candidate based on a few 45-min whiteboard exercises and a high level system design question, we're looking at only 20% of the whole picture.
It might just be me, but reading right-aligned paragraphs with all that white space to the left is quite painful. My eye naturally drawn the left edge of the page at the end of each line. It's a little better when you get to parts with the notes on the left, but even then the notes distract from the text they actually want me to read.
Not sure about breaking into cars specifically but the recent popular video where the former NASA engineer designed a device to film people stealing packages off of doorsteps seems to both confirm your statement about not being downtrodden but dispute the idea that thieves are homeless or junkies. Almost all of the people that he caught on film stealing in that video were normal looking middle class people that had cars, apartments, houses and didn’t seem to have any mental illness other than a complete lack of empathy for others.
Yeah, so if the back is tight why would the shoulders roll forward?
Ask HN: How can I use my programming skills to support nonprofit organizations?
Lately I've been thinking about doing programming for nonprofits, both because I want to help out with what I'm good at but also to hone my skills and potentially get some open source credit.

So far I've had a hard time finding nonprofit projects where I can just pick up something and start programming. I know about freecodecamp.org, but they force you to go through their courses, and as I already have multiple years of experience as a developer, I feel like that would be a waste of time.

Isn't there a way to contribute to nonprofit organization in a more direct and simple manner like how you would contribute to an open source project on GitHub?
Don't assume the management hasn't done their homework, fair to ask questions but be careful not to sound accusatory saying why not do X instead of Y.

Not knowing if you work at a startup or a larger company it is hard to judge part of this. But if you are at a startup with a mature product there are valid reasons to not do an MVP feature release. The Lean Startup philosophy isn't right for everything, but it is a good start for new businesses/products overall, just not all. For a mature product or a product in a regulated industry (finance, healthcare, aerospace etc) the rules change and the maturity of each new feature has to be different. For example, in healthcare, you can't go to the FDA with a product and expect to keep iterating on features quickly, the product must be complete before submittal, and each new feature must be reviewed to see if a whole new submission is required or if an abbreviated submission can be used. Either way it is another cycle which takes months at best.

At this point, the management may have done enough research or market testing to justify the development time. Or alternatively they are taking a calculated bet and are pushing the product a specific direction intentionally. The larger the organization the less likely they are going to do an MVP because releasing small features and incrementing on it can be harder to sell to clients when you have a mature product and the clients have specific expectations.

Also, sometimes you have to build out a set of functionality that takes longer before a client can see it. Doesn't mean you won't necessarily have lots of smaller incremental milestones internally, but for feature release it might take 9 months. The more you make it into regulated work too, like aerospace, financial, healthcare etc the more likely this is to happen. Even during the development time, they may be presenting early demonstrations to clients just not releasing the feature for usage.
> If you want to store and maintain a personal 128GB collection of MP3 files.

Actually, it annoys me how it's widely accepted that MP3 is an acceptable format to pay the same price for as CDs, while you could rip lossless FLACs from CDs. Either MP3s should be cheaper, or switching to FLAC should be an option, (like Bandcamp does it).
It's still the nicest, simplest web design I know that has any level of popularity for blogging. I'd still rather read on Medium than on Wordpress or Discourse or Blogger or Ghost or really any popular blog layout I've seen.

I don't want to trivialize how annoying the login popups are, but ultimately I put up with them for the sake of a more readable article on the other side.

What blog styles do you like reading?
I would think just making more/different styles of music available would be sufficient. MacLeod's work is great, but it's already been used in so many podcasts and YouTube videos that it fairly leaps out at you when you hear it.
Even worse, the workaround of embedding a GitHub gist has a strange limitation of not being able to specify a particular file in the gist. So each code block needs to be a separate gist: https://stackoverflow.com/q/40809530/1481479
The speech digitizer that let Roosevelt and Churchill converse securely
>That assumption isn't good. There has to be a point to moving the money to the US.

The point is, you are a US company, benefiting from US infrastructure, US diplomacy, US market, US government spending, even subsidies and tax cut rates, and so on -- so bring the money there -- but that's too much to consider for today's elites... The fact that you already took the jobs out (making the phone in China) just increased your margins on those revenues...

So, the point is, I dunno, corporate social responsibility?
iPhone or Android. We don’t have a landline.
To me it looked like a scam right away.

Medium tried to act as if it were something a little bit better than the rest of the web and it quickly became something just a little bit worse.

Why?

If you are running a tiny service you can get together a community of people who are two or three standard deviations better than the mean.

If that service grows, it is going to tap a wider pool of lesser talent and the quality of the discussion will decay.

Hacker News has fought this, but Hacker News is not funded the same way as the firms that Y Co invests in.
Reminds me a bit of the "URL"/transition component of Doug Crockford's post-web secure distributed app delivery idea.

https://youtu.be/O9AwYiwIvXE?t=2400
They've had their enterprise signing certificate revoked.

https://seekingalpha.com/news/3427520-apple-banning-facebook...

> Apple says. "Any developer using their enterprise certificates to distribute apps to consumers will have their certificates revoked, which is what we did in this case to protect our users and their data.”
Yes please! I have no idea what I'm doing (ok only a little), and finally got the dimensions to match and have trainable layers, and now I am informed that 't.slice is not a function'. Hm. Maybe still a dimension problem somewhere.
Most big media sites now have "you read X free articles this month, you need a subscription to continue" popups. Medium doesn't require you to sign up to continue, but it acts and reads just like those in its cutesy way, hoping the user infers the requirement to sign up.

That popup is a UX dark pattern, and for me puts them in the same category as LinkedIn with its various means of lulling you into actions you wouldn't consciously take.
Lame move, and especially unusual since I don't see Medium as having anything like the market dominance that "successful" API retractions (looking at you, Twitter) have. Doesn't medium still need its integration landscape to reach more users? Or is this a desperate move to secure a much narrower niche?
Ask HN: Any advice for note/scratchpad/idea dumping during the day?
I find that during a normal day, besides just straight programming, I'll need to run sql, create a quick report, jot down an error message, create several small cli scripts, etc. All of which end up in a big mess typically in a single editor(some gui-notepad like gedit), left open and unsaved in multiple tabs for later reference until the day my battery runs out. Then I'm pretty much sol if I ever need to reference those from then on.

I'm wondering if anyone has a good process that has worked for them to control this in a somewhat automated way. I understand it's partly my fault for being lazy and not saving my notes, but I'm looking for a system that could keep a daily/weekly scratchpad-type git repo that I can easy search and always have up and ready when I need to dump in something. What do you guys use for dumping various info/data/code like this that may or may not be used in the future?
Going back and listening to voicemails of spam is more time consuming than just answering it at the time it comes in.
> as soon as Apple revokes Facebook's enterprise distribution account

Good call.

https://seekingalpha.com/news/3427520-apple-banning-facebook...

> Apple says. "Any developer using their enterprise certificates to distribute apps to consumers will have their certificates revoked, which is what we did in this case to protect our users and their data.”
Similar protocols for the Shuttle of course; was in Gambia in 1990 and got chatting with some NASA folks just sitting round the pool at a nearby hotel - they told us they were there as there was a specific abort phase whereby the Shuttle would glide across the Atlantic and land at Banjul airport (whose runway NASA had paid to have extended for this purpose!); in that unlikely eventuality they would have to leap into action, otherwise it was a nice few days in the sun for them.
Is there a reason why the rest of the parent comment was left unaddressed? The implication was to provide such examples. I'm also curious to hear.
On avoiding band-aid security after penetration tests
This isn't just some subtle implementation detail; the aliasing noise is obvious and IMO it's an important part of the sound. I personally like it, because it adds some extra high frequency content that would otherwise be lacking in many Amiga modules because of low quality samples. libopenmpt supports Amiga-style resampling with the render.resampler.emulate_amiga option. Although it's not documented in the man page, you can enable it in openmpt123:

openmpt123 --ctl render.resampler.emulate_amiga=1 amiga_module.mod
> Have you played with Racket at all? There is another concept from the DrRacket tool that I really enjoy. Images have their own print mode, i.e. getting displayed in the REPL just by referencing them.

I haven't played much with Racket, but I have worked with other systems that do this. (I've also developed a feature like this feature myself, many years ago, in a system I was building as a small-scale data analysis tool.) And yes, I agree that the combination of a REPL that both uses the full capabilities of the output device and renders objects that 'know what they are' is transformative. It makes entirely different classes of work that much more interactive.

In addition to the graphics, it still seems like a miss that I can't type 'ls' or 'find' at a terminal prompt and drag a filename from the list into a finder window to move or copy the file. (But getting to that point is work on several different levels... ls would need to produce output that somehow annotates each output filename with the fact that it's a file with a specific full path. Then the terminal would need to be able to intelligently work with those sorts of annotations.)

> There are probably a lot of good reasons for storing code as text, not the least of which are diffing as well as transmitting to/from other authors with their own toolsets.

I think part of it is history... both inside and outside the field of computing. It was technical limitations at the beginning of the field that made text more or less the only choice for early programming systems. (Unless you count the even earlier plugboard machines.)

Outside the field, images alone don't tend to be used to represent the sequences of events that are so common in programming. There's always a convention for imposing a sequence layered atop the visuals. This text, by convention, reads left to right. Pictographic languages have an ordering by convention. Comic books have both a convention to the ordering of frames and (mostly) the text within the frames. I mentioned LabView elsewhere in this thread... it's a visual programming language, but it has an explicit sequence construct (that models a sequence visually as frames of film that can be paged through).

I guess my point is that textual representations have a lot going for them out of the box... including an historically natural modeling of the notion of sequence and a huge volume of tooling and process optimized for the purpose of manipulating text. For a visual language to succeed, it has to offer compelling enough advantages to outweigh the cost of walking away from those things.
My bad, I was looking at it from an engineering perspective and forgetting the money flows.
> if implemented correctly, maybe, but that rarely happens.

It's OT, but isn't it funny that we think that by applying in the exactly correct way a method that, to my knowledge, wasn't born from fundamental principles or hard science, you should get all the results you don't get when taking some liberties with it?

I mean, where does the assurance that the method works better than any variation of it come from?
> Isn't this is the same as just saving myself?

Yes, it is. Though you'll more than likely see returns much higher than a standard (but safe) savings account will give you. You'll also get that 2% float on top of free money.

2% still isn't bad. Free is free, as I said.

In my particular case it's only 5% (best case):

50% match up to the first 10%.

So if I contribute 1% of my pay to it, I'll get a .5% match. If I contribute 10% to it, I'll get a 5% match. I can contribute more but I'll only ever get that 5%.

In your case, this is good compared to my situation in that you don't have to contribute 4% to get that 2% match, you can contribute even just 2%.

This is in the US FWTW. It's a pre-tax situation. I don't pay taxes on my contributions or my employers contributions; but I do when I withdraw them (earliest I can start withdrawing is age 59-1/2. The assumption is that when I start withdrawing, my tax rate will be lower than it is now so I'll still "come out ahead".
A psychedelic experience basically, why people take it recreationally in doses that don't quite knock you out. It's really bizarre and something best not experienced submerged in a cave.

I was taught 20 years ago that it was still given to children as an anaesthetic because it's very safe and they tend to either not experience the "trip" or are not bothered by it, thinking it's a dream.
> Censorship Circumvention: Exit Side ... what if there were a pool of exit bridges that you could use via this mechanism? Would that pool have any less abuse or incidence of banning? What if this pool were pay-to-use?

This can already be solved outside of the network by setting up a VPS and chaining it after the exit node (you still have to figure out a way to pay for it anonymously and it's a PITA to set it up).

> What if you posted a monetary amount via a ZK smart contract, and if there was abuse reported, that money became forfeit?

Now that sounds interesting. Not sure how it would work in practice tho.
We should expect everybody to care about the morality and ethics of their actions. That's a pretty low fucking bar IMO. In software, this is one way that manifests.
Yesterday, I had the same question. Asked it on Reddit.

I consider building my own website with Affiliate Links. I need to spend some time on development. And I chose a little bit tough niche.

As always it is buying property and index funds.

For extra money right now, I check freelance platforms and FB groups to get a gig. It's not passive but I'm glad to earn some cash.
A few weeks ago I found a new website https://periodix.net/ . It shows me projects from all platforms where I searched on a gig. (Upwork, WeWorkRemotely, Remotive etc.)
> Do you have a cursory knowledge of all those fields?

Well... yes? Don't you?

Most of that is taught in schools, and I feel one can reasonably expect an adult to have some cursory knowledge about all of the above - enough to at least reason about the basics and to know when to hand a problem off to a professional.
I run a publication on Medium, Better Humans. My understanding is that the pivot to be a place where most writing is paid for was specifically to crowd out content marketing. The content marketing is, as the two of you say, basically Wikipedia summaries and people selling themselves. It's part of the style guide for their Membership program that writers can't have calls to action (with a few exceptions, like if it's an excerpt from your book).

It's been a great program for us. We write in the area of personal development and it's allowed us to pour a lot of money into getting authors who've actually tested their advice and then working with them to write very thorough tutorials that other people could follow.

In my biased opinion, what we used to compete with was trash simply because it didn't work. Content marketers were writing great headlines for productivity advice they'd never tested, the advice had huge gaps or mistakes, and then it would stop short of telling you what to do so that it could make some call-to-action sales pitch.

We've been getting much less competition for page views from these trash articles based on recent Medium changes. The biggest change was that they manually review all articles before allowing an article to get promoted by their algorithm.

As an example, I have an article I wrote that's just creeping up on 1M page views. That just wasn't possible before.
I'd much rather have my own mp3 collection, and do, of thousands of tracks. All legally purchased, I don't steal music.

I don't want to rely on a song being on a particular streaming service.
It's not for nothing that it's not the WHO list of essential drugs. It's a miracle drug in more ways that one, with it now also being used with success against depression in treatment resistant patients, to treat alcoholism etc. And of course nothing beats a good old k-hole experience.

The horse tranquilliser thing needs to stop.
Vector can be slow if you create and destroy them a lot, since they allocate. You can work around to some extent by providing a custom allocator, but using something like SmallVector or absl::InlinedVector can be much faster when the N is known.