skysight-inc/HackerNews huggingface dataset:
Maybe I didn't have enough coffee yet today, or maybe I'm just missing something entirely, but.... this whole report talks about how the web API leaks user data, right? Yet all I see in their examples are HTTPS requests. Doesn't that require that somebody already infiltrated either a client device (scope limited to single client), or a central server? How did they man-in-the-middle/decrypt this HTTPS traffic?

True, if a web cache (not under exclusive control of the company) can be queried for this data by a 3rd party, it sure is a big problem. But that is rather an operational fuck-up more than it is a fundamental design flaw.

How did these pen testers get access to server requests, inside the HTTPS traffic with 3fun's servers? I'm curious how they got access to this info. I'm also curious why nobody else appears to be asking that question. Did I read the article too quickly and miss something that explains how they did that?
I think most people willing to change their diet for the sake of the environment already are well aware of the consequences of meat eating. In my opinion it would be more beneficial to focus campaigns on the problem of food waste which I am sure more people would be willing to give up.
> By now everyone has heard of climate change but many still don't believe it/dispute it.

Nobody disputes climate change since climate has been changing for billions of years, just the human contribution towards it. Also, many people consider the distinction important...
We do use facial recognition to detect the faces in the photo, and then integrate with the school's student management system to work out what permissions or media consent has been granted for each student.

From there you can identify whether the photo overall is publishable, and if not, what students aren't. You can then crop/edit the photo to remove students from then on.

All of this happens in an on-premise VM, rather than calling out to a cloud service. Obviously you can run up an instance in AWS, etc.. if you want to cloud host, but that is the school's volition.
C++ compilation is massively multiprocess. Linking is mostly single-process but the gold (for little benefit) and lld (for good benefit) linkers support multithreading.
At least in the consumer market in the UK this is exactly what AMD is viewed as by non-techs.

If you go to an average big box store and look for laptops AMD based systems can start as little as £250 where as you can't get a mobile i3 based system anywhere close.

When these pathetic CPUs are teamed with slow disks and a pile of bloatware it makes them seem cheap and awful.
I'm wondering if hedge funds would buy something that would allow access to private data. I heard insider trading is not an unusual thing, so a polished series of exploites wrapped up as a tool with clear interface might be taken seriously.
On a grand scale, it's the same with car companies. People have started car companies (Tucker, Bricklin, DeLorean, Tesla), but they usually underestimate by a factor of 3 or more how much money it really takes to do it.
Not everyone is capable of walking long distances, using bikes or electric scooters. Taxis are a form of public transport.

I'm not saying everyone who uses them needs to use them, but if you ban them outright you ban certain people outright, which is discrimination in the absence of alternatives.
How A Norwegian Viking Comedy Producer Hacked Netflix's Algorithm
You cannot force people to eat something.
I like Tom Mitchell's definition in his machine learning book:

'A computer program is said to learn from experience E with respect to some class of tasks T and performance measure P, if its performance at tasks in T, as measured by P, improves with experience E.'

Merriam Webster's definition of statistics:

'a branch of mathematics dealing with the collection, analysis, interpretation, and presentation of masses of numerical data'

So establish a couple of definitions, and take it from there.

I believe such discussions can easily be taken too far: surely the point of a subject is to group together related topics. Who is to say that the set of topics comprising multiple subjects need to be disjoint?
> But it's a tricky thing because we don't wanna remove the incentive to invent new drugs.

That's covered by the patent system. The barriers to selling an existing, out-of-patent drug (remember that mention upthread of an "authorized generic"?) are covered by the FDA; they're totally unrelated.
This is happening exactly as you suspect.

Russia is going places in the world of agriculture. It is a sector that is like telecoms in that a country that is behind can leapfrog the West by putting in new infrastructure.

This agricultural trade is working out with new markets sought for organic produce, 'kosher' food items and plenty else. It is also two way so Russia is best buddies with Turkey these days with agricultural trade being part of the deal.

Recently Russia signed up to have Huawei put in their 5G network. There is an on-going ambition to boost bilateral trade between China and Russia. Although dollar denominated, this trade is really 'barter', China get their soybeans, Russia get their 5G network. It is a win-win for both sides.

Also to remember is that Russia has had sanctions that have led to a certain level of self sufficiency. Hence the emphasis on the agricultural sector as well as manufacturing things like cars. Weapons sales are part of the picture too, good for foreign currency reserves.

I think patience is running out in China and in Russia with the UK/USA and their vassal states. The recent efforts to start conflict in Venezuela and Iran have been met with resolve from both China and Russia.

The world was unipolar after 9/11 with Western dominance in telecoms. Now it is a multi-polar world and all of that early dominance in mobile telecoms has evaporated. Had the UK/USA not been fighting pointless wars in places like Afghanistan, Iraq and Libya (to name a few) then I don't think this situation of backwardness would have arisen.
I don't know how this was done, but traffic could presumably be intercepted by using a proxy and installing the certificate for the proxy on the device - you have a secure connection from the app to the proxy and a separate secure connection from the proxy to the servers but the proxy gets to see all traffic in the clear.
The Great American Lawn: How the Dream Was Manufactured
Top Admin Templates with Node.js Back End
https://www.cnet.com/how-to/amazon-and-google-are-listening-...

https://www.theguardian.com/technology/2019/jul/26/apple-con...

https://www.theverge.com/2019/8/7/20758491/microsoft-voice-r...

Apple, Amazon, MSFT and Google.
Thanks for the reply. I didn't think of the split caches. It didn't make such a big difference in my own workloads or reviews I've read.
Vuepress: a minimalistic Vue.js-powered static site generator
I could definitely fully engage a 64 core CPU for fuzzing.
> Yu claimed, without offering any actual proofs, that HarmonyOS is “more powerful and secure than Android.” “Can it be installed on smartphones? Of course.”

This immediately made me wonder if I have ever seen "without offering any actual proofs" added as a qualifier to any of the press statements of Apple, Microsoft or Google.

Don't get me wrong, that kind of skepticism is good. It just feels naive and tribal to limit it to the Chinese companies.
A link with much more technical details: https://www.xda-developers.com/harmony-os-huawei-announce/
Well, it's the app selection that makes an OS, so if HarmonyOS can't run Android apps, it's doomed. Even if Huawei dumps money into developers (Microsoft tried that with Windows Phone).
Zombie debt: How collectors trick consumers into reviving dead debts
Zip does not create an array, it creates a generator which returns a tuple on each pass.
1957 German Grand Prix
But that’s still a compromise in convenience. You’re trading not dealing with one problem for not dealing with another. You’re making a qualitative judgement about which problem you care about the most. It’s not reasonable to assume that everybody cares about the same conveniences that you do.
Ouch, good catch!

The page loads 41 requests and 12.88 MB of data, with the page taking 2+ seconds to properly load the content (1.09s according to Chrome dev tools, but this is just the initial DOM load).

For a simple webpage with white background and dark text.
They're just querying the API.

The data they are examining was meant so the app knows how many people are "in your area" .. but instead of just giving you some vague information, it's giving you the exact coordinates of other users, and identifying info about them.
Yes, and I first removed my old (c. 2017) international US phone number following a rather invasive dynamic challenge they used to lock my account before coercing me to doxx myself. I'm also closing my account as I no longer need it. No credit accounts associated ever.
It would be even better if cryptocurrency community didn't hijack the term cryptography (which even overlaps theirs).
Yes. It is less than any salary I could make at a company if I could get a job. But that article was a career limiting move. C’est la vie. Never talk to reporters unless you have a specific reason to. Definitely don’t talk to reporters who burn their sources.

I understand that he is writing a book now, and I doubt many insiders will speak to him. I don’t expect it to be very accurate.

I had a lot of problems because of that article. Not just the death threats and such, but ... do not ever become interesting to states. They have a lot of resources.
We already know very well how to remove CO2 from the atmosphere, but we're doing the opposite. For example, in the EU we're adding "biofuels" to gasoline for stupid reasons and part of that comes from palm oil, which is produced where rainforests are cut down first. So we're not only trying to save the dirty ICE, but we're also destroying rainforests in order to look "green".

I don't expect anything good to come from politics under the pretense of saving the planet.
Thank you :)

Please read my answer here [1] to avoid duplicate content ^^

Beside, I may add social features in the future indeed. There is so much that can be done (many ideas), but for now, I focus to build the journal with polished basic features.

[1] https://news.ycombinator.com/item?id=20652803
The emissions were of course work related in that argument.

Think Mrs. Merkel going to a climate summit vs. someone going to the same place to take a selfie for their followers.
As summer camps embrace facial recognition, parents want smiles
To pick the bit operation being used. They also have varying number of operands (ranging from just filling a target region with solid black to three operand stuff that merges images, etc.)
Sounds like we need a distributed Ledger, a Chain of Blocks do to speak. Like Stone Hedge.
When industries don't self regulate and cause harm to societies, then yes the government steps in to prevent harm through regulation.
There are similar, smaller services (like Via, or myTaxi in Europe) that work fine and have nowhere near the money that Uber spends on their tech stack.

Ride sharing is extremely local, so it's not like you need any cleverly scalable tech. Most places will be tracking a few hundred cars at any given moment. Only in very large cities like NYC would you need to spend a little more on big servers.

What Uber presumably does is collect and analyze a lot of real-time data, which isn't strictly necessary to provide the service they're providing.
My late brother used to talk about an area outside Glasgow called Springburn and how it is consistently listed as one of the poorest/deprived places in Europe (not sure if that was the correct term but it gets the point across).

Yet each election term they voted in either the same politicians or politicians with the same manifestos.

Nothing will change!
> both Huawei and Google would be entirely benign without such owness.

No. Everything is relative.

Google is relatively more restricted and benign than Huawei. Restricted because it's located in society based in laws and rules. More benign because their workers and even main owners Larry Page and Sergey Brin have values more supportive towards individual privacy even if they work in industry that exploits it. In Chinese society surveillance and government oversight is not just repression. People have value system that is not questioning it as much.

I'm not just implying, I'm strongly asserting that in a world where everything is just shades of grays and relative you can have orders of magnitude differences between actors.

Google is not 'a good guy' but they are orders of magnitude better than Huawei in a good guy axis (if the value system is the western liberal democracy kind).
> How did they man-in-the-middle this HTTPS traffic?

The easiest way would be to use a HTTPS debugging proxy like Charles.

But really, since the testers control the client device, they can do whatever they want.

The problem is that 3fun trusts the client to keep other users data private. This is pretty obviously a bad idea, since attackers can modify the client in pretty much any way they like.
By pets what do you mean? Is it ethical for me to have a cat, when cats are obligate carnivores that not only have to eat meat but also independently kill billions of birds a year? Is it not okay for me to eat a chicken but it's perfectly ok to own a python or boa and feed it live mice?

Cows are not killing the planet. They are one of the few things you can raise that doesn't require pesticides or chemical fertilizers. They and other ruminants are important parts of grassland ecosystems.

The megafauna that existed on planet Earth just 200, 500, and 12,000 years ago were far more numerous than the number of livestock cows today.

This reductionist mindset about the environment that doesn't even attempt to quantify trade offs or factor for the important role livestock plays in crop production is beyond tiresome.

We also happen to need meat for healthy brain function. We need lots of Omega-3 fatty acids the kind that animal foods only provide and plants are not as healthy as they're made out to be. They have tons of oxalates, phytic acids, and inflammatory agents that harm human health in large doses. Not to mention the absurd amount of carbs we already consume from plant based foods.
Ugh no need to downvote him, just wanted to make sure his mental model was in check. Exponential growth is a life skill a lot of the population lacks.
HarmonyOS will officially be Open Source
Maybe they're using seL4?

I do not know of their design, but I know some helenos devs are involved, so it's sure to be a proper microkernel multiserver system.
The most profitable part of solar power isn’t panels or batteries
I believe those 3 companies have shown and demonstrated their competence and ability to deliver world class software. Huawei has not, at least yet. Whether that will ever happen remains to be seen.
https://news.ycombinator.com/item?id=20652966
The IPCC is now the authority on human nutrition?
Yes. I agree. It's the Al Capone strategy. But the fact remains, shareholders are more protected than the environment and/or the public.

We're 20 yrs into the 21 century FFS. You'd think we'd woken up already.
This is either quackery or a Nobel prize worthy breakthrough. I'm inclined to go with the first.

Basically they say they can explain the galaxy rotation speed problem using some novel concepts of entropy and information instead of traditional explanation involving dark matter. If they are right, this will bag them a Nobel prize with 100% certainty.

But I'm afraid they aren't right.

* neither author is an astrophysicist

* one's interests are [1] :"Current interests include flexgrid & elastic optical networking technologies (subsystems & devices) & architectures, converged wireless-wireline access networks (5G), theory of information & entropy, cryptography & security."

* the other author describes his interests as follows [2]: "My own interest is accurate ion beam analysis (including RBS and PIXE) using a 2MV Tandem"

* 5G networks and ion beams don't have much in common with cosmology

* the second author is also considered a Biblical scholar [3]. Here's one little glimpse into how he understands the world: "The Kingdom is about the return of the glory of God. Which widgets you have in your pocket is hardly relevant to that."

[1] https://www.researchgate.net/profile/Michael_Parker12

[2] https://www.researchgate.net/profile/Chris_Jeynes

[3] https://www.churchtimes.co.uk/articles/2018/8-june/features/...
In the Greenberg article, he's photographed with a good old bag of cash...
I don't have problems with my desktop (16G ram no swap). I do run into OOM on some servers (I've just migrated a service from a 512MB instance to a 2G one because it crashed every few months)

When I have had swap, the machine simply hangs rather than OOM saving the machine.

What I don't understand is how 500M of swap can help on a 16G machine. Why would it be any better than an 18G machine?
In the real world where people do transactions for money they send invoices and do bank transfers.

I believe some companies offer cash in hand or bitcoin payments, but by no means is that “the way it is done”
> But it's a tricky thing because we don't wanna remove the incentive to invent new drugs.

Let universities and government institutions invent them.

Why does everything need to be run by corporations these days?
Ah, so "black societies" meant something like "criminal organisations", maybe triads? I thought to begin with the comment meant dark-skinned people.

So, if I have it right:

Originally Huawei called their OS 'Hongmeng'. But that sounds like 'Hongmen' which is an alternative name used (but not exclusively) for the outlawed Tiandihui crime syndicate.

something close to that.
> Want to know where I was during my vacations to Canada and who I spent time with? It's all there for the taking and I'm not involved at all!

Even if this didn't happen, Big Tech would still know since you probably took your smartphone with you...
Swap dates to the 1960s. zram was introduced to the mainline Linux kernel in 2014.[1] zswap presumably later, though Wikipedia states it was added in 2013, possibly indicating improved temporal performance under zswap.[2] Hrm, actually, they appear to be two distinct features.

There's a lot of institutional knowledge, and mythology, around swap. Less so around zram/zswap, and that is going to compete with other competing capabilities and lore.

I've been wranging boxen since the late 1990s, and using Unix since at least the late 1980s. I'd only run across references to zswap / zram a few weeks ago when attempting to compile OpenWRT, and didn't look into it until seeing your comment (one reason for writing copiously footnoted HN comments -- I might accidentally learn something).

zswap might very well be The Answer We've All Been Looking for, but, well, All Of Us Realising that is another stage in the Hierarchy of Failures in Problem Resolution.[3]

________________________________

Notes:

1. https://en.m.wikipedia.org/wiki/Zram

2. https://en.m.wikipedia.org/wiki/Zswap

3. https://old.reddit.com/r/dredmorbius/comments/2fsr0g/hierarc...
Bitcoin and Gold Are Monuments to Irrationality
Don't get me wrong but I assume your influence is negligible compared to Al Gore's. His work or actions might cause more emissions directly than the average person's but because of his reach and mission, it will be offset at other places (e.g. because three people think twice if they really want to visit their unpopular in-laws over Christmas)
With a bit of practice, yes. First time I drove such manual transmission car was very confusing. I didn't know the engine stopped because I switched in wrong gear and didn't have enough torque or what. Felt very frustrating. After I got used to the transmission it was ok. I guess it would become seamless after a couple of days.
And one of those companies let you log in to root with an empty password, very recently. The scepticism should apply across the board
Serverless Security: Best Practices to Secure Your Serverless Infrastructure
I would take out the snark and say:

statisticians take pride in models that are understandable, while machine learning practitioners take pride in models that have high accuracy.
Meat is disproportionately consumed in western countries, so, even a change only in those countries would have a big impact. Eg, China consumes half the meat per person of the US, and India just 5%.
> The most surprising finding for me was how rare one could see more than one person in a car

Reminds me of :https://thumbs.gfycat.com/CharmingShamelessFrogmouth-mobile....
While this is most pronounced in Glasgow, this is something that's seen at smaller but significant levels throughout the UK (outside of Scotland), so I don't think it's particular to that country. Wales, Northern Ireland, and the north of England (Liverpool and Manchester are specifically mentioned in the Glasgow effect Wikipedia article) have similar stories.
> check pollution data for India its same as that of China. At least China has proper facilities for measuring the air quality.

I have checked. It is not the same.

World Most Polluted Cities in 2018 - PM2.5 Ranking | AirVisual – https://www.airvisual.com/world-most-polluted-cities
Companies Use Borrowed Billions to Buy Back Stock, Not to Invest
There are small systems in which 512 MB (or MiB) isn't available, but in which some swap might conceivably be useful. Mostly networking gear, which still ships with absurdly low storage/memory allocations (my DLS router is 64 MB RAM, 8 MB flash, as an example).

Not unviable under the stock OEM firmware, but confining when switching to, say, OpenWRT. Not that I'd know about this or anything.
I was not saying 16 or 32 cores should be "enough for anyone", I was just curious about the specific workloads people might want such a beast for. ;-)
Since nobody has pointed it out yet, harmony = 和諧, which is a euphemism for censorship in China.

And then there is 和諧 = 河蟹, which is an atonal homophonic euphemism for the euphemism.
When I was studying and we talked about that and other software failure incidents in a class my experience was more that most did not want to work on projects where failure had such a huge impact (i.e. death) or the discussion was about how can one avoid it from an engineering perspective. No one was flippant about consequences or talked about lawyers.

I also do know that people have been discussing AI, ethics and consequences in that same class now as I know the teacher. I don't now the outcome but I think people at least recognize the potential problems.
As an English speaking person I have a vested interest in operating systems that are in English.

If Harmony OS takes over then I doubt the finer points of the documentation will necessarily be in English.

I know there are many strong opinions on everything to do with China, but if English is no longer the lingua-franca in tech then I will be blaming the Trump regime and the three letter agencies for messing it up.
Ask HN: Any good resources comparing web server APIs: CGI, WSGI, Servlet?
I believe that loosening up the restrictions on Huawei was one of the things China demanded in order to stop blocking purchases of US farm goods, and that's what ties the two together.
I think we deserve it. 70,000 yearly people die from Big Pharma's opioid crisis in the US, Jeff Bezos and his companies barely pay taxes and his newspapers run non-stop spam about how we should disarm the peasants because 20-100 per year die in mass shootings, and people actually agree with it. Face it, we're opiated masses of worthless idiots.
Money I guess. I'd be interested in seeing a blog post analyzing how all this stuff gets used. For instance looking at https://www.theguardian.com/uk I can see hundreds of cookies against their site and loads of associated advertisers. Most of the items are a load of hashes and ids etc so how does all this stuff get used in reality and what are they actually storing - is it just a journey of clicks on that page etc?