skysight-inc/HackerNews huggingface dataset:
It bothers me that I see an increasing number of apps that run a local web server. I've got half a dozen apps, mostly development tools like pgAdmin, that force me to run the app and then access the UI through a browser.

How many such apps am I running that I don't know about? And how many of them are exposing my system to malicious web sites, or to curious people in my office on the same subnet? I wish I knew.
With decentralized technologies we can have the large networks/platforms without the monopolies. Just imagine that Ethereum 2.0 comes out supporting many transactions. Then create a dapp that integrates video somehow, maybe with something like BitTorrent.
How do you “accidentally” write software that can reinstall itself?
Ideal Tech Intern Projects
SAAS: if one transaction gets through, it’s not “down” or “unavailable”, it’s “elevated error rates.”
How Page Load Time Affects Purchase Conversion Rates
How does a "session" exist without "credentials" that have to be verified every time? Http is stateless so even non-native authentication solutions have to deal with these problems. Why can't your server generate a "session token" and require it to be passed using basic auth? Wouldn't you want to hash these "session tokens" on your server in case it becomes compromised?
Take note of what the poster said the name on the ticket was.
Link after ICE took down the website:
https://universityoffarmington.edu
This has been asked already, but what are the benefits to declaring async in the function definition and not at the call site?
So maybe a silly question, but is there some reason clear contact paper wouldn't work? Is the sheen not quite right?
Note that dropbox also opens up three servers on your Mac, though when you exit the app they go away, so are arguably discretionary. I assume they are for lan syncing, though I don't know why that would require three ports.

They're blocked in my little snitch anyway so no problem.
To me, the 'Historical Background' page(s) (which I almost overlooked) are most interesting, and the real treasure here.

https://www.oldbaileyonline.org/static/History.jsp
If Apple removed a piece of ransomware that you installed would you have a problem with that?

Do you think anyone would have installed Zoom if they knew that it would allow any random website to activate your camera?
I agree that this entire thing has been disturbing. Leaving behind a web server after you perform an uninstall by Zoom is unbelievable in my opinion. It's not even the fact that there was a vulnerability that makes me angry, it's the idea that you say uninstall, and it knowingly leaves a web server running on your machine.

Then, Apple, can push a silent update to simply kill software on your machine which as I understand it wasn't installed through the app store.

In this case I may be happy that it's no longer running, but the whole thing is disturbing. Looking at the Security & Privacy settings on my MacBook, I see nothing about running any anti-virus or anti-malware. The closest setting I can see that might be this is under software update, where I have the option to install automatically the system data files and security updates.

It's kind of a stretch for me to consider the ability to kill some software Apple might construe as malware at anytime the same thing as a "security update". To me, a security update would patch Apple code which had a vulnerability.

Where do I tell Apple to whitelist software in the future they might not like which I've chosen to install not going through the App Store?

It's actually news to me that I'm running Anti-X on my Mac, I didn't think I was.

Considering the fact that I have to learn new places for all the buttons every time Microsoft gets bored and changes things for the "better" I'm really disappointed.

System76 is looking better and better.
Knuth Reward Checks
random stickers (that don't have to be corporate) make it easier to tell whose machine you're about to grab.

That could mean yours, or your rival's; I leave that part of the decision to you.
That’s another issue. As an organization is viewed as less ethical, only less ethical people join creating a downward spiral.
Or intentionally don't watch what you say and stop giving this kind of system any power. If you run for office in 20 years planning to hide what you think now, or apologize for it, then you're in for a losing battle. Say what you think, admit when you're wrong, learn from your mistakes.
If I was a politican, I'd prefer 100M votes backed with firearms than 100M votes backed with nothing.
Predatory capitalism already monetized the air as an externality and it has cost people plenty already. Is also about to cost people a lot more than will ever be scraped back in carbon taxes.
One of the most enlightening threads I've come across in awhile. Thanks for the solid explanations
Code makes the minimum calculation - as to how it originally came about I would guess a mix of empirical (committees working with various sized boxes as they work on NEC revisions) and then math to have a formula/table for the real world.

There are wire fill factors in the NEC - basically if you have a junction of a conductor of this size (gauge) then it must have this many cubic inches to go with it.

The simplest outlet (a receptacle) would have 2 conductors (hot and neutral) and those each require a certain number of cubic inches based on their size (12AWG and 14AWG being the most common). The cubic inches of a box are typically stamped on the box and the amount of conductors ('wire fill') must be below the box capacity. Ground doesn't (didn't?) count in the calculation as it shouldn't carry current normally so it's not a conductor.

If you've worked in a box at or near capacity (especially with a AFCI or GFCI/RCD) you will always put in a larger box given the chance.
I was waiting for this comment.

> You may agree with its decision this time, but will you always agree?

Yes, I will. At least I am not going to lose sleep over it until Apple does abuse that power.

I am actually even more happy to be an Apple user knowing that the mothership said hell naw to the naw naw naw naw to this horseshit Zoom has been pulling.

If I were Apple, I'd be taking this as a personal slight against my entire user base.
Control Panel “add and remove programs” usually works?

All that does is launch the app’s uninstall process. The app is free to leave whatever crap it wants to on your system.
No, and I'm 100% in agreement with the need for it to be removed, it was clearly malware.

The question I see is really that Apple doesn't inform its users of the existence of this feature, unless you really search for it. Having something as simple as a functional-equivalent to Windows Defender with its own icon in Control Panel, which is fully enabled in the default operating system installation, should be sufficient.

Personally, unless I am specifically aware of the existence and enabled status of some anti-malware application, I don't think it's a good precedent to set for operating system vendors to start silently removing software from peoples' machines. Really all it should take is apple making people aware of the feature's existence.
This blog post[1] has a good explanation of ConfigData updates. The flag would appear to force the install of new Gatekeeper configuration updates.

>To help distinguish Gatekeeper and XProtect updates from other updates in the software update feed, Apple marks them as being ConfigData updates.

>Marking these updates as ConfigData cues the App Store to not display these as available software updates in the App Store’s list of software updates. These updates are meant to be under Apple’s control and to be as invisible as possible.

[1] https://derflounder.wordpress.com/2014/12/27/managing-automa...
I'm still trying to figure out how it happened. Did they have some kind of automated case cleaning system or something?
How do they manage this feat over unencrypted stateless http? Surely they must transmit something with every request?
I think "breaking the correct behavior" might be a bit of misleading term -- it's obvious that in some contexts we would want to be warned about the context switch and in others we'd be annoyed by it. I could totally understand why Zoom would, for frequent users, want the users not to get an annoying dialogue. On the other hand, if I'm a rare user or don't know a program is installed on my system, the context switch dialogue would be super useful alerting me that something is happening.

So I think you could argue Apple might want to let you override that, I don't know what the language is and whether there's a "click here to skip this next time" box on the dialogue. It's possible they got the annoyance versus security tradeoff wrong.

But imho they didn't break the correct behavior any more than Microsoft "broke the correct behavior" of privilege escalation by adding a dialogue box with UAC in Windows 7 .
A friend teaches English in south east Asia. His younger students refuse to watch any movies from before ~2010, saying they are too old and slow. I think the focus on remakes is an attempt to capture this market that would otherwise not bother watching older content.
> but the new money is not denominated in dollars, it's in Libra

That would be a problem from the governments perspective. Any theory that starts by assuming normal economic forces forces where money is concerned is risky.

The supply of money is actively managed by governments in response to various things. That ability to exchange serious amounts of money is not usually tampered with but is generally required to flow through systems which a national government controls (usually the US Government) and there are gate-keeping fees to get involved. The ability to make loans or do creative accounting at scale is also locked down with regulations and requirements.

It is an interesting situation because the distortions don't directly generally stop anyone doing anything directly; but the way winners are chosen doesn't function exactly like a theoretical free market. Facebook is unlikely to be selected as a winner if they just jump in feet first; and particularly if they want to expose the monetary system to supply-demand forces that aren't under government control.
This was an honest, down to earth look at realities of podcasting.

Well written and sincere, great stuff.
Why do they put that stuff in there instead of keeping it in the .app folder?
So then you have a protocol link to a .vbs file and you tell all of your contacts how much you love them.....
Whenever I read one of these articles/headlines, I wonder how/where can I get a device to measure brain activity. Some sort of fitbit for the brain (ideally with no connection to 'the cloud', of course).
Freepsychics.com – Get a free psychic reading online
OK but on Mac, dragging the app to the trash doesn’t launch an uninstall process, so it will always leave the crap behind.
Movies are only one piece. The Disney also has a lot of TV content and even a 67% ownership share in existing streaming service Hulu.

I mean if their existing streaming service is firmly in edit: third place and they are looking to add a second that’s just not a great sign.
Most AR apps today are based on the same toolboxes, either opencv, arkit or arcore. The latter 2 are actually pretty good (in terms of tracking and plane detection) for more simple use cases.

So by gimmicky I assume you’re talking specifically about the use case?

If so it’s probably true that majority of ar apps are games that don’t work too well or ar just demos/prototypes.

However there are a few that are pretty functional e.g. the measuring app in iOS. Was your idea to consolidate all such use cases to create a general purpose app?
It needs to happen at least for every combination of source domain and protocol. Otherwise websites can drive-by open zoom, reminders, or whatever other app you have installed to achieve some marketing or malware goal (or just DoS your computer).

Edit: Once you consider social sites with user-submitted content, like reddit, it might be best if you’re prompted every time.
> Fucking hell, they are hardy little bastards. I wonder if there's any living on comets?

Comets range from ~-220C way out it in the Kuiper belt (https://sciencing.com/temperature-comet-22136.html) to farking hot if the come in close to the sun which is a lot more extreme than the balmy -93C record low recorded in the Antarctic (https://en.wikipedia.org/wiki/Lowest_temperature_recorded_on...). The extreme heat would obviously effect their survival chances but I'm not sure on the cold, I wouldn't be surprised if some interesting chemical things happened when cooling to those temperatures.
That's a pretty broad generalization.

You don't know how hard some people work. Some athletes drink all night, do drugs, skip practice, and show up to work the next day and score a goal. Is that working hard?

Some "influencers" spend 20 hours per day/7 days per week working on their business. Is that working hard?

You don't know how hard some of them work.
Not going to deny that faster GPUs has helped a lot.
But it is not the full picture either. DenseNet-121 has higher accuracy than VGG16, yet requires only 1/15 the storage space, and 1/5 the number of operations during inference. I'm pretty sure training time is faster also.
I think your edit is describing a package manager :D Or the Mac App Store... (But yes, it would be good if this feature were available for apps that can’t come through the App Store)
Optimizing marketing spend - you can show how a ML model will beat a conventional past performance regression algorithm by increasing sales, reducing cost, etc.
More like the sponsored posts are better, more engaging content.
True, though you should run HTTPS on your site. Which means you'll get the Referer unless the other site or the user's browser has been configured to suppress it.
The problem-cyclists everyone has at one time or the other, encountered have this air of entitlement

You betray yourself by the language you use - 'entitlement'. They are entitled to use the road, etc, just like any other user. I see many dangerous road users (all vehicles), but I never think of them as entitled - as if they shouldn't be there. Just sloppy/dangerous/ignorant.

It bothers people more because they know they could kill them with their car. The same way you might call out a smaller person acting rudely, but not a large, fit looking person.
Sucks they charge to use the python library
OpenBCI sells kits. I personally wont buy until they get up to like 64/128 channels but they have decent 16/32 channel kits right now. They even started offering all-in-ones so you don't have to mess around with picking the wrong set of components to get up and running
Pre-series production of VW’s ID.3 has taken off
OK, so you believe Google and the NYT are so different in scope that it's silly to compare them at all, as it would be to compare Little League to MLB, or 2 entirely sports even? I agree with that, which is why I argue that the purported hypocrisy of the NYT's policy is trivial – nevermind that the reporters do not have executive power over site and business operations, nor do we know that they aren't pushing for reform in their own house.

If the president of the World Curling Federation were to publish an op-ed on how the NFL's policies and protocols were inadequate in protecting players from permanent brain injuries, would "How big is curling's global audience and revenue compared to the NFLs?" or "How many pages does the WCF policy book devote to concussion protocols?" be relevant angles of rebuttal?
> Would the “right” way be a full page reload with the row added/deleted, and caching all the values?

I don't know if this is the "right" way, but it sure sounds like a more reasonable fallback for clients without JS than serving them a blank page.
Python has gotten sufficiently weapons grade that we don’t descend into R anymore.

I've experienced this in my own work as well. The extra verbosity of Pandas data frames compared to R data frames doesn't bother me anymore. Sometimes I miss the Lispy homoiconic magic, but not enough to make me want to use R at work.

I still use it once in a while for heavily "statistical" stuff that doesn't ever need to be "productionized", but for run-of-the-mill machine learning I see no reason to use it over Pandas.
The marketers using influencers are still hidden.

An influencer is just an extremely cheap actor. Tom Cruise costs $20 million to get for this commercial, and 1,000 influencers costs only $1 million.
There are none of any practical use, but we live in hope.
The real solution is to not install anything outside of your app bundle in the first place. In this case, instead of sticking a plist in ~/Library/LaunchAgents, you can use an API to add a login item, pointing to a helper .app inside the main app bundle:

https://developer.apple.com/library/archive/documentation/Ma...

Then the system will automatically disable the login item if the app is removed.

Edit: It seems like Zoom was using a login item, but using the "shared file list" API instead of the newer (but still dating back to 10.6) SMLoginItemSetEnabled.

An alternative is to just make your daemon check for itself whether the main app has been removed, and delete itself if so.
All of the secrecy surrounding voting machines, their claims of IP, trade secrets, and all the other BS, when coupled with the fundamentally untrustworthy nature of the machines, makes me very suspicious.

Given the input trust problem that I outlined above, I personally would have a huge ethical problem even making one of these machines. Our current level of technology does not offer a solution for this problem set, where we have to record intent and not make it personally identifiable. Think about it. That doesn't come up very often.

The other odd thing is that election security has been somehow linked with secrecy. It really doesn't need to be that way.

The whole process should be wide open, and it can be that way because we do not associate voter intent with voters. All we really need is a bit of privacy for the voter to vote, and from there, all else can be human readable, under the public eye.

Again, I struggle with that, Because it looks for all the world like a clever sleight-of-hand, almost deliberate intent to deceive. Conflate these things to create problems that are not, and then sell solutions to non problems!

Do these voting machine companies truly not understand what I put in my parent comment? Really?

If they do, why are they making machines? They do not work, and are untrustworthy. And go look like I did. We simply do not have trustworthy methods that do not also require votes be personally identifiable.

Simple paper ballots with marks on them work great.

If they do not understand, then there is a competence issue.

Neither scenario is good. Which is it, or is it really something else, something nefarious?

I do not like any of it. The whole mess is ultra shady.
FinSpy can spy on calls and messages sent by Signal, Telegram, WhatsApp and more
Except "Song of the South." Disney doesn't talk about that one.
First of all, you need a hard data that this vulnerability was exploited in the wild

So would it also be okay for a credit bureau to post all of your information to a website? Would that be okay until it was “exploited in the wild”?

Are you really saying it’s okay to run knowingly insecure software until there are reports of it being exploited?

Only a few years ago every browser supported Java Applets and with Java Applets every website could run arbitrary code on your machine.

Java applets ran in a sandbox.
Original live coverage by CBS (sets foot on the moon around 22:50): https://www.youtube.com/watch?v=E96EPhqT-ds

This speech prepared for the president in case of disaster also gives me the chills: https://www.archives.gov/files/presidential-libraries/events...
> iMessage is end-to-end encrypted. The keys are managed by the devices themselves. There is no facility to backdoor or intercept the messages.

That is only a half-truth. Apple controls the key infrastructure; they may replace your keys with arbitrary ones at the demand, coercion or compromise by any number of bad actors. The software is closed source, making it impossible to verify any actual claims made otherwise. If they truly valued privacy, why not open source iMessage, allow users to verify iMessage keys, hire an independent third party to audit their infrastructure, or all of the above?

Moreover, Apple has moved iCloud infrastructure to Chinese data centers to enable spying on millions of innocent people. They have removed apps from their store which circumvent Chinese censorship. These are truly shameful acts which has appropriately drawn criticism from human rights watch organizations.

https://techcrunch.com/2018/02/25/apple-moves-icloud-encrypt...

https://www.cnbc.com/2018/02/24/apple-moves-to-store-icloud-...

https://www.nytimes.com/2017/07/29/technology/china-apple-ce...

https://blog.cryptographyengineering.com/2013/06/26/can-appl...
This is a very good response, most people who have worked in corporate America, know exactly what you're talking about.

Also, there's some "just following orders" and "what could I possibly do about it" mentality. Bad things tend to happen to "troublemakers", and your only option is often to leave; but you're comfortable, and there's no guarantee that the next company will be any better, so you start asking "how bad is it?"
There is tons of malware that doesn't harm the user. Take crypto mining for example: it raises the temperature and the electricity bill, but those things aren't per se harmful (albeit financially). Or how about a botnet client that harms some other entity but not the user who owns the machine it's on? Or adware? The list goes on and on... calling this nefarious behavior "harm" is a huge stretch but calling it "malware" is not.
It's behind a sign in wall for me because I've read too many medium articles, apparently.

Bring back blogspot!
I don't get why anyone is surprised by this or why the outrage is restricted to only Google Home. Google employees and contractors are listening, viewing, and reading stuff from time to time in order to provide labels to their deep learning systems. Moreover, you've consented to this when you created your account or in some cases just used their services without an account.

You can't really have useful machine learning without lots of annotated data quite yet, and Google prides itself on useful machine learning.
> This means separating out the industry into production, distribution, and retailing.

I'd welcome that, less exclusives - better for the end user. Except retailing is obsolete in this context. In the digital world, it's only production and distribution.

And films should be available to buy digitally DRM-free, not just rented, Netflix-like.
Events like this really put into focus the value of engineering. Imagine that management had hired an elite team of 50 safety focused individuals and paid them a billion dollars. They would still be profitable!

Totally reminds me of exploding Samsung phones in terms of the small incremental investment that would have saved billions.