skysight-inc/HackerNews huggingface dataset:
Have a look at some of the organised voting/flagging campaigns originating from *chans. Those can range from just manual action to automated scripts + account takeovers. Also if you can both post comments and flag them from a different account - free karma.
Corellium uses its own bootloader IIRC.
Bleem didn't violate any of Sony's patents or rules. It allowed unauthorized code to run through the use of a bug, but it didn't, you know, come with illegal copies of the games, or copy the PlayStation ROMs. It didn't copy any Sony code. It let users use the console in a way Sony didn't like, but didn't ACTUALLY "harm" Sony in any way.

This is different. In the US, bugs are actually "legal" to buy and sell and protected by the 1st. However, how you USE those bugs is a different matter.

What is happening here? Corellium has copied iOS code, is running it on non-Apple hardware by virtualization, and justifies what would typically be a majorly illegal process (i.e. what if HTC made a phone running iOS?) by claiming "security researchers."
Cute, but practically it's often easy to muster resources for the short term that you can't reliably access long term.
I don't think it is convoluted: either you disclose the vulnerability to the constructor so that they can fix it or you publish it publicly. Selling it without disclosure to someone whose goal is just to exploit it is criminal.

The convolution is in somehow shoehorning the notion of selling a secret into the notion of free speech.

> Google's Project Zero

Do you understand that the projects that aim at improving security are fundamentally different than the ones aiming at exploiting flaws?
It’s the old spiritual argument repackaged. Go in the woods for years and you will emerge an enlightened man. But if you want to remain sane and participate in society, this type of philosophy is incompatible.

I agree with the sentiment, though. If you want to become “financially independent”, might as well directly give away all your belongings and lounge around near Santa Monica pier. Instead of slaving away for years as a wagecuck, and then trying to enjoy life when you can no longer maintain an erection.
> Every company in the US has an aversion to firing that leads them to use expensive defensive measures (in the case of the larger ones: severance pay, PIPs, standardized performance reviews, diversity training) for when they feel they have to go though with it.

Not really. It's just harder to hire again usually than figure out how to coerce the problem you have already to be less of a problem. That's the nature of the market right now.

If developers were easy to find and hire then they would be getting fired left and right like happens with just about any other commodity job.
What if they bought a phone for every VM they offer? So let's say they offer 5000 VMs, they buy 5000 equivalent phones. Do you think they will still have a chance?
I use the same approach. I wrote about my latest project, a task manager for the post UI world, www.iprompted.com

You can read about how I came up with the idea here: https://www.iprompted.com/blog/scratching-my-own-itch
They’re planning on making “research devices” available to a select group of people soon.
This appears to be a great project, not in small part because, for my taste, great web design. I haven't read the articles yet, but I plan to.

That being said, allow me to share a regret that I have about the Civil War. I find it a tragedy that the institution of slavery was terminated in the United States via such a violent solution. This lead to resentments and scars and continuation of race discrimination and racial issues until this day. It's such a tragedy. Compare the slavery in 19'th century America with the situation depicted in the "War and Peace" early 19'th century Russia, where peasants were slaves in all but formal legal status (for example they were called "souls" and they were pretty much the unit of account when describing a prince's wealth). Two hundred years later, that slavery in Russia left no scars, and the same story was repeated in many European countries. In the country I come from slavery was abolished at various points in time (in various provinces and for various social strata) ranging roughly from 1775 to 1850. The last people to be freed from slavery were the gypsies, and one can say that even today there is some racism in my country against gypsies, but nothing like the issues that America sill faces .

I don't really have any point to make, it's just an observation.
Not to mention that people are biased and cannot be trusted to moderate ethically.
Public defenders use billionaire's plea deal as model for others
I'd recommend sending a short email making your case to 'hn@ycombinator.com'. You're more likely to get a response while the story is still young. "Paging" comments are hit or miss, while incoming email is better monitored.
I highly doubt that is there concern, I think it's to paint them as evil. If the case was on should Corellium emulate Apple's hardware that will be simple, but to tack on that Corellium also indirectly enables the bad guys in this age of constant hacks and privacy invasion is an additional burden that Corellium has to bear.
For both baking and frying in butter, I prefer plantains (so I wouldn't say Cavendish is unbeatable in those formats).
No, I don't realize that at all. It may make sense in a country where money is free speech and where companies are people, but outside the US, it makes little sense to say that selling a secret is protected by free speech.

Disclosing one, yes. Selling it secretly do that it can result in exploits, certainly not. Responsible disclosure is a thing. I doubt that people selling credit card numbers and fake identities are protected by free speech.
California Supreme Court Blocks Sweeping Search of Minors’ Electronic Devices
My apologies - I don't mean to come off as adversarial either. And as I clarified in my other message, I should have just said UDP spoofing, so I probably contributed to the confusion.

> I would "assume" that you need to use libc bindings over ffi

I wonder about whether that is even necessary. socket() and sendto() are basically C library wrappers around system calls for the most part. Surely the Rust standard library already has equivalent wrappers, or will someday. There's no real reason I can think of that I'd need to FFI into C unless there is some limitation of the current Rust standard library.
Throwaway for obvious reasons. I was at a startup in the valley where they got one of the cofounders to work for sweat equity for over a year then got him deported to his home country to remove him from the picture (was reliant on employer sponsored visa. They 'accidentaly on purpose' didn't turn up to his immigration meeting). He managed to dodge this by enrolling on some bullshit PhD to get back into the country but then they screwed him with trumped up claims of embezzling company funds. All I would say is, don't jump to any conclusions with your interpretation of this case.
Probably not. That would be much better legal footing, but still has problems.

The iOS copy isn't running on the actual iPhone, which is a massive violation of the iOS ToS which says that iOS can only run on an Apple-branded device.

There is also legal precedent upholding this in Apple vs Psystar (2007), in which a company claimed "fair use" when selling their own "hackintoshes" and a UEFI product which made building "hackintoshes" easier.

How did Psystar do? They lost. Terribly. And they had a surprisingly robust legal team, making it all the way to the point to appealing to the Supreme Court (the SCOTUS denied the request).
Occupants of cities that have this problem?
I got roasted for this article last week, but I'll post it here because its completely relevant.

I think the entire dev hiring process is broken. Not because I had a hard time, I think I had a totally normal (and slightly easy, because was okay where I was while looking) time and ended up getting a large raise and ending up somewhere I love...but I've been on the hiring side as well and I think hiring signals are weak and cargo culting is rampant.

It's telling that I can't think of many other fields outside of academia that require so much time interviewing to hire.

https://medium.com/swlh/brief-thoughts-on-getting-hired-as-a...
It's not fully automatic and I'm sure scammers will come up with new scripts to still trick people into answering.

Over time it should allow Google to flag numbers as potentially being a scam, marketing, etc based on other users flagging a caller. Saves Googling for that information which is what I currently do with an unknown number. The only risk is spoofing/false positives putting your number on some blacklist.

https://support.google.com/phoneapp/answer/9118387?hl=en
Isn't a more reasonable solution that the users select content that they are comfortable with, or just leave the platform altogether? YouTube is mine and hundreds of millions of people's favorite site on the internet. If I see content I don't like, I go to other content.
Is it just me or does this reasoning not make any sense?

"NASA: 90% of our rocket scientists use the A/C you just fixed, but you can't explain how a rocket works so f* off"

Presumably what matters is whether homebrew is technically significant or relevant, not just that they use it?
> Apple is still largely using its vast resources to enrich investors, not workers.

Every company is trying to enrich investors. That's how capitalism works
I recall getting our 56K link and were wondering what we could do with it and so we fired up CU-SeeMe and promptly saturated the link :-/. Ahh, Archie, Veronica, anonymous ftp, muds and gopher... good times
Listen. I love YouTube, other people love YouTube. For some reason, the people who don't love YouTube insist on asking YouTube go go away. Just go post your videos on YetAnotherTube where you manually run video review and all that shit.
“For educational purposes only” would be most similar. Still clearly not ethical.
Kind of like how police brutality wouldn't exist if there were no police at all?
Thats the opposite of realist. A realist would observe that the stripe founders own and manage stripe, that their investors probably do share the same ideals as them, that HR is challenging and this obviously wins favor, that people involved understand the global optimum (not damaging the planet) can be greater than the local optimum (maintaining low expenses for stripe) and on and on.

The comment was idealist, not realist.
Considering that the original question was "gosh, what could we possibly do besides 9-5?", not much imagination is required.
“Forgetfulness, and I would even say historical error”

Seems to be the same or at least very similar idea.
A 40B solar mass black hole in the extreme core of Holm 15A
It’s all paranoia all the way down, I’m sure. There can be no other explanation for such convoluted implementations.

That said, I do sympathise. If your entire business/career/life is fonts, and all of a sudden they’re one ‘right click » Save as…’ away, I’d be panicking, too.
I can’t steal something then sell it to someone else “for research purposes only” and be okay.
Thanks for the advice regarding bindgen etc, I will look into that when I have more time. Generating the compatible structures (if Rust doesn't have them already) is one part of the problem, the other is really just the sendto() and socket() calls which as I mentioned are basically syscall wrappers for the most part. As per my other email, if I was writing this program in Rust, I'd prefer to use Rust all the way down rather then calling into C. Otherwise it's a Rust wrapper around C facilities. It should be possible do it all in native Rust code as far as I am concerned.

As per my other message, I apologize if I have offended you, it certainly wasn't my intention, I was just trying to clarify the use of the raw IP API, as opposed to the higher level solution which wouldn't work for our simulator.
I'm getting a 404 when I visit that link.
woohoo, 3 new applications so far!
> Stop Android from being a monopoly

How?

Apple doesn't care to compete, they've taken the profitable users and sell them higher and higher margin devices.

Microsoft doesn't care to compete, they killed the windows phone team and then killed the goodwill they had developed by releasing windows mobile 10.

KaiOS doesn't really compete.

Blackberry 10 didn't really sell.
Firefox Developer Edition and Nightly both support installing unsigned extensions by changing the preference xpinstall.signatures.required to false.

https://support.mozilla.org/en-US/kb/add-on-signing-in-firef...
I owned my first pair of Doc Martens when I was 15. I was in high school and saw that Eric Clapton wore a pair and I just loved the look. Now, 42, I own dozens of pairs of Docs and I still have the original ones from when I was 15.

I own Vegan Docs and I love them. Every bit as good as the leather versions. However, I thought I was helping save cows but it turns out they are dying anyway. Sad.
Are you thinking of the service worker caching issues in create-react-app?
For your sake I hope not - when Kosovo autonomy was revoked all other republics became afraid. If I were Mamata Didi right now I’d be up late at night worrying about how many seats my assembly victory margin has to be for it not to be taken away with Darjeeling being made a UT.
What WOULD WORK is buy 5000 iPhones and doing passthrough. In this setup, you have 5000 iPhones, all running iOS, and the screen is recorded with touch-inputs replicated on the real iPhone. Even if they were jailbroken, the odds of Apple winning would be way, way lower than this case.

Or, well, enter a legal contract with Apple.
Let's say someone ran a service which spun up Windows Virtual Machines, of any model, which were not genuine licenses, for the sake of "security research." Legal?

Microsoft outright encourages this. From https://developer.microsoft.com/en-us/microsoft-edge/tools/v...:

Before installing, please note:

These virtual machines expire after 90 days. We recommend setting a snapshot when you first install the virtual machine which you can roll back to later.

Edit: Furthermore:

The Microsoft Software License Terms for the Microsoft Edge and IE VMs are included in the release notes[1] and supersede any conflicting Windows license terms included in the VMs. By downloading and using this software, you agree to these license terms.

[1]: https://az792536.vo.msecnd.net/vms/release_notes_license_ter...

From the license:

NO ACTIVATION. To prevent its unlicensed use, the software contains activation enforcement technology.
Because the software is licensed for testing use only, you are not licensed to activate the software for any
purpose even if it prompts you to do so.

Not only are you encouraged to use the software without paying for a license for testing purposes, you're outright forbidden from doing so.
Correct link: https://developer.squareup.com/blog/making-openapi-swagger-b...
They are apparently onto the VM trick now. I've heard of them checking the running processes for the virtualized network connection, etc.
تلفزيوشان – شات دردشة عربية
IANAchemist either, but I've heard of this being done for prototyping in the semiconductor industry; manually creating single devices to test their electrical/quantum properties while the production teams are trying to figure out how to manufacture the things industrially.
No worries.

You can use libc::syscall to make syscalls in the normal way, and that's technically ffi. Otherwise, to do raw syscalls, AFAIK you need to write some Assembly to do it. Running an assembler and linking it into a Rust program is pretty straight-forward. It would be nicer if one could use inline assembly (and let the compiler handle it for you), but that hasn't been stabilized yet.

The topic of whether to build a Rust standard library without libc is definitely one that has gotten some attention, and some folks have made some progress on that front, but AFAIK there is no serious ongoing project or effort that attempts this. Some folks definitely desire it though, at least for Linux. (In other platforms, like macOS and Windows, raw syscalls aren't a stable interface, so you kind of need to use the system libraries.)
It's most definitely not a meritocracy.
Wonderful leadership. Thank you, Stripe!
On-premise migration strategies for AWS
Well I’m not getting the same salary. I intentionally negotiate for hourly so I can come and go as I please without feeling like I owe anyone anything. But I did negotiate an hourly increase so I’m still paying all my bills and saving.
I don't like it being an auction because then customers aren't necessarily getting the better choices, they're getting the choices backed by the most wealth

It would also harm not for profit search engines.

Why not choose based on popularity?
The email you get in your inbox when you do that is http. It starts with http://a.sched.com/track/click/.
The owners would be the same initially. The board would be different and Over time the ownership would drift. I don’t think equity and funds managers would view the payments between the 2 companies to be not real
Libhybris would still be your best bet on re-using Android drivers..

https://en.wikipedia.org/wiki/Hybris_(software)
PCMag: The VPN Industry Is on the Cusp of a Major Breakthrough
This really shows how much Apple's review process has improved:

- Usually under a couple days, sometimes same day

- Doesn't immediately hit the store upon passing review, instead hits "Pending developer release"

- Expedited option for critical bug and security fixes

- Preorders

Now if only they would stop those apps that trick people into crazy subscriptions.
My father once told me - if one of my sons was a drug dealer and the other was in procurement, I'm not sure which one I'd be more disappointed in.
The spot isn't really free. The spot has the same value as the spots they are auctioning. By not auctioning it off, Google pays an opportunity cost for the spot. Not that this even matters practically.

I really don't understand people's obsession with this aspect of it. Google makes so much money from its search that there is no way that any potential cost to them from having to bid for this spot would have any real competitive impact on the search market.

For default search on iOS, Google already pays Apple more per year than the EU fined Google on this issue.
Co-founders definitely do horrible things just to retain equity for themselves.

Another true story: A team co-founded a company together. They all agreed to be co-founders and split the equity as fairly as possible.

Co-founder X was put in charge of legal, since noone else wanted to do it. Unbeknownst to the others, X allocated a small pool of shares for everyone except for X, taking the vast majority of the company for himself.

When everyone received their share agreement, they did the division against the "total shares" listed in the agreement. Everyone's percentages came out as expected, since they falsely believed the "total shares" represented the total shares in the company -- rather than in the pool.

To illustrate this, X owned over 83% of the company, while the next highest co-founder Y (the CTO) vested < 0.33%/year. Amazingly, X and Y had both agreed to take identical pay (below living) and make identical sacrifices, i.e. quitting their jobs to go full-time together.

Y left after a year, having found out months prior and given X time to resolve it in (misplaced) good faith. X managed to get VC investment only a few months later -- by not mentioning that the company's CTO had quit only a few months earlier.

When the VCs found out about Y, X then informed Y he was never the CTO but a "freelancer" -- even though Y had joined with the intention of being CTO, performed all CTO duties, and was called the CTO by everyone involved. The other co-founders were informed to write they were retroactively "Founding Members" rather than "co-founders."

Of course, if the co-founders are experienced about business it would be difficult to pull this off. For example, you should insist on seeing the cap table even if you believe you know the percentages.

However, this happened to intelligent co-founders right out of college, who even had a parent's lawyer friend look over the contracts.
It's also a barrier of entry to non profit search engines
Exploring Filesystem in Golang
A unique collaboration lets the Bundyville podcast tell stories
> It should be possible do it all in native Rust code as far as I am concerned.

Yeah, it would be, but Rust's standard library doesn't provide any way to invoke syscalls. You either need to go through libc's syscall wrapper, or write Assembly. I used the former to get access to faster directory traversal: https://github.com/BurntSushi/walkdir/blob/ec33af7f9b25afefc... (The rest of that code in that module may be interesting to you, since the API for getdents is pretty interesting and very C-like. Buttoning it up behind a safe API that can never be misused took a bit of thinking.)

Besides, Rust's standard library, on Linux at least, currently requires libc anyway. So you're already going to be linking to it.
UE4 has adaptive tessellation anyway, and you can scale the tessellation multiplier based on distance with a material function so that the landscape has more triangles closer to the camera and less further away. Beyond a certain distance (where the player wouldn't notice the detail anyway, so there's no point drawing it) you can scale the multiplier to zero to improve performance.

I'm not an expert but honestly in a game engine like UE4 where collision is important, it seems like the adaptive geometry tessellation approach is the way to go, as least from my initial experiments.
There are many things that can be done, unfortunately for anything truly effective to be done we need:

1. Lower the quality of living for a huge amount of humanity
2. Have massive technological breakthroughs
3. Embark on large scale geo-engineering

2 & 3 are the only moral choices - condemning the world to live in poverty isn't ok.

Europe and the US are only ~25% of all emissions and the rest of the world is increasing at a staggering rate.
What hw? There's no iphone involved?. Or is this in addition to iPhone?
This concept reminds me of the “meta-moderation” that happened/happens in SlashDot. It’s good to have a second order effect to damp down excessive fluctuations in your first order mechanisms.
@zenexer Those expire after 90 days. You are doing it within Microsoft's boundaries. Now imagine circumventing Microsoft's boundaries and the 90 day limitation for convenience.
It explicitly encourages you to circumvent it so you can run it for more than 90 days.

Edit: To be clear, this part:

These virtual machines expire after 90 days. We recommend setting a snapshot when you first install the virtual machine which you can roll back to later.

If you set a snapshot and roll back to it later, you get another 90 days. Rinse and repeat.
Tasty Seaweed Reduces Cows’ Methane Emissions by 99%
Example code (for ARP though): https://github.com/libpnet/libpnet/blob/master/examples/arp_...

Documentation: https://docs.rs/pnet/0.22.0/pnet/packet/udp/struct.MutableUd...
I am fairly certain dotNet has been pushing parameterized queries since .net 2.0 in 2005. I know at my current employer we have been doing it since 2008.
Please find J20 from the schematic https://github.com/cutiepi-io/cutiepi-board/blob/master/SCH_...
> Because — and this is amazing — NO ONE at Toptal has equity other than the founder

Most businesses have a fixed number is of equity owners, including service business like Toptal. In most businesses like that, if you get any equity at all, it'd be unusual that you could keep the equity if you leave the company.