skysight-inc/HackerNews huggingface dataset:
1 point by RichardHeart 44 minutes ago | parent | edit | delete [-] | on: Telegram 0-day vulnerability that can be used to d...

"TELEGRAM'S REPLY ZDNet has reached out to Telegram for comment earlier today, and the company has looked into the issue reported by Hong Kong protesters.
"We have safeguards in place to prevent importing too many contacts - exactly to prevent the scenario," a Telegram spokesperson said.

"In fact, our data shows that the bot displayed on the screenshots got banned from further imports after two seconds - and only managed to successfully import 85 contacts (not 10,000)," it said. "Once you get banned from importing contacts, you can only add up to 5 new numbers per day. The rest of the contacts you add will look like they're not using Telegram - even if they are."

However, this ban limit can be bypassed. A determined threat actor like the Chinese state can easily employ multiple bots to exploit this issue, instead of just one, and they'll eventually import the entire phone number sequence they want to cover."
Javascript coming from a different origin? What about CDNs in that case?
The "play this awesome gacha game that I _totally_ play all the time" segments on absolutely unrelated videos is awful.

I get that they pay the creators so much money for the spots it's silly for the creators to say no, but I will always skip those segments.
But government agents in China posting deceptive or false stuff wouldn't be blocked.
As in simply something like going to the dentist or getting a haircut, politics comes up because at least in my lifetime and most peoples there's never been a President (and certainly not Prime Minister in Canada) doing the things that Trump is doing. Peoples lives, families and affairs have been affected for many who travel to the United States as an example and the discussions of what he's saying and doing permeate work and non-work environments.
(Some say this version of events is an untrue rumor.)
A consistent look trains users to expect consistent behavior. For example, a native macOS table supports various modifier key behavior, arrow key navigation, type select, drag and drop, copy and pasting rows, etc. It's worth learning these features (the theory goes) because they translate across apps.

But every web app is a snowflake, so there's no shared expertise to be developed. I don't expect anything beyond point and click. We've given up on empowering users.
Download & Details: https://themesberg.com/product/windows-95-ui-kit
The deep umami tones of Japan’s ancient fermented paste
People don't want to be drug addicts and live a poor existence to feed a habit. They have problems, they use the drugs to medicate or fit in, the problems compound with drug use, so they use more to deal with the problems more. They are also ostracized by communities which nobody likes as we are social creatures. The level of that social exclusion probably depends a lot on their current level of wealth. People like having shelter and their physical needs met and while they might not necessarily want normal either, I'd argue a big part of that is more that they have poor coping strategies and don't now how to cope with normal. There will always be people who don't fall into certain strategies for combating homelessness and drug addiction, but this is a much better approach than doing what amounts to nothing.
For $400 you can get the Occipital Structure Core [1] with Skanect Pro scanning software bundled. I've used Structure Cores for other purposes, and they seem pretty good. Not sure what your accuracy will be though.

1. https://store.structure.io/buy/structure-core
Whoa the Hindenburg was huge: http://thesaratogasake.blogspot.com/2010/06/big-things-again...
What Facebook Knew About Cambridge Analytica
Ask HN: How do you securely exchange files with others in your life?
So lets say you're texting with your parents about their finances or your partner or real estate agent about an upcoming purchase - specifically someone less technically inclined. They need to send you some spreadsheets or PDFs that contain information best kept secure - what methods, services, or applications do you tell them to use? What if the tables are turned and you are sending them something?

Is there a gap between best practice and the reality of what usually ends up happening, and if so, why do you think that is?
I find it ironic that NYT objects to my reading articles in private mode, but publishes pro-privacy articles.
Email hn@ycombinator.com and find out why they banned you.
While by no means required, it's not unusual for a tapenade to incorporate anchovies or anchovy paste which gives some measure of fishiness.
I suspect that your second line, "No estimates. No sprints. No Jira. No bullshit!", is why "help one another" works.
We need low cost low security jails for people who commit property crimes. Basically just wall off a few square miles and throw them in there left to their own devices.
Similarly, as the size and footprint of a company grows, the parameters controlling/sustaining the growth/maintenance of said company also change as well, thus changing the required talent profile accordingly.

EDIT: for the sake of the completion of thought, I want to add that the opposite is also true: a young company in a fast growing innovative industry can afford to hire a different kind of talent without harming its growth, and as the industry matures, they simply can't afford to keep doing that.
For cables? Monoprice.
> Give people a choice which society they're allowed to live in.

By this metric, this would be a prohibitively small WTO.
The results are (mostly) between the large and extra large GPT2 models, and it's possible to reproduce if you have the resources.

Between this and the 774M GPT2 release, it's been a pretty good week :)
Let me put it another way: how would you implement a dotfile management framework (like any of these: https://dotfiles.github.io)? Programmers seem to really like them, judging by how many of them there are. But the whole point of them is to forcefully usurp the assets of literally every other program on the system. They're user-level rootkits, in a sense.

Or, for a simpler, more obvious example: find(1), grep(1), etc. A set of utilities that can all be asked the equivalent of "read literally every file the VFS has access to and tell me whether they match an arbitrary-code-execution predicate." Do you want to literally copy your entire hard disk into the 'inbox' of these utilities, in order to get them to search it for you? (And before you say "well, we can trust the base utilities that ship with the OS to do more than arbitrary third-party utilities"—there's a whole competition of grep(1) replacements, e.g. ag(1), rg(1), etc. Do you want to make it impossible for people to innovate in this space?)

Or how about Nix, or GNU Stow, or, uh, Git? These utilities become useless if they have their own sandbox. Does your git worktree live in Git's sandbox? Vi's sandbox? The inability to make this distinction functional is why mobile OSes only have fullly-integrated IDEs!

Or how about shells themselves! (Or, equivalently, any scripting runtime, e.g. Ruby, Python, etc.) Should people not be allowed to install these from third parties?

Or, the most based example of all: make(1) [and its spiritual descendants], and the GNU autotools built atop it. How does ./configure work if you can't detect true properties of the target system, only of the sandbox you're in?
Twitter thread by a Research Scientist at OpenAI addressing OpenAI's policies in response to this discussion here: https://twitter.com/Miles_Brundage/status/116495932263331840...
Unfortunately, the people that such initiatives are aimed at happen to be junkies. They will consume whenever and wherever they feel like it, just as many of them will steal from the most convenient target when they need more money for a fix. Further, the optics of state-sanctioned drug use sites are pretty bad, even in the most liberal of cities.
> For me, that day was a long time ago. And that was not - and is not - my defense.

Please share your experience. Did you run away? Did you actually change their opinion?

Here's my story: for a month, a man with an anti-Asian sign would be marching around and pointing his "Go back to China" sign at me. (My parents are Filipino and I'm born in America) What do you expect me to do, walk out and have a reasonable discussion with the guy?

No. You call the police and get that man out of my life. No one has to tolerate this kind of hate. And no amount of reasonable discussion can convince a crazy man to tolerate others.

Deal with the problem. Get them out, kick them out. I'm not going to wax-philosophical and think "oh, he's demonstrating his freedom of speech / 1st amendment rights". Nah, he's trespassing on private property and I want him out of my workplace.

True story. This is how you deal with problems. "Tolerating" the hate only makes it fester and get worse. Hoping for the man to stop marching (after he's been marching for literally weeks) is the height of insanity.

---------

Look, we've got Christchurch mosque shootings and El Paso shootings. There's a hateful philosophy which is GROWING. Its pretty clear to me that "tolerance" has lost the fight. There's literal blood in the streets now, as the hate is beginning to fester and spread even further.

We can work to slow down the hate today, or we can sit still and "tolerate" it for the years to come, hoping it goes away by itself.
I was more thinking if a bunch of first world countries got together and put up an amount of money that Brazil can't possibly give up on.
That’s just crazy talk. Next you are going suggest free healthcare for all or something communist like that.
You’re minimising the throwing hot coffee in a toddlers face.
Invisibility of a Product
My problem with ads isn't the time (as long as we're not talking minutes), it's the abrupt interruption in the middle of a video or exposing my system to ad network malware/redirects/viruses. If an ad is part of the content itself and doesn't disrupt the video, great. Many content providers generally promote the stuff their audience might have an interest in anyway.
Mobile NixOS: The Present and the Future
What you say makes sense, and I understand that it may be anecdotal but I was hoping you had some sources that could enlighten a foreigner like myself to why/how the above explanations make sense? I would appreciate it!

I ask because the Americans/South Americans around me seem only to be able react to the media hype/lack thereof.

For example all my friends from SA are on IG all day saying that the paucity of international coverage on the Amazon fires shows marked unfairness, which may be true- but they haven't investigated at all beyond the realm of "forest good, fire bad".

For my own sake, I desire to know the context of this fire, in the society which it is affecting and not from the United States point of view.
I am honestly surprised at how ridiculous Google’s original blog post was. Zero nuance.
On you typical laptop 14" FHD display, exactly this padding and sizing looks great (at @1x), while at 14" 1600x900 it still looks very good. Sure, on 1376x768 it looks terrible.
What about blaming the forest fires on NGOs, like he did earlier this week? That's the kind of thing being spread to his electoral base.

https://news.ycombinator.com/item?id=20762592
A Simple Workflow for Building CloudFormation Templates
OK, design a punishment that will deter people from stealing. I’m not opposed to caning but for some reason the country refuses to do it.
Though I'm not sure what you would accept as a good reason to raise alarm, I think the press is not unfounded in scrutinizing him.

Bolsonaro exhibits some worrying traits, such as the recent conspiratorial line of thought that NGOs would have started the fires to get back at him.
I'm a married 30s man and I wouldn't go to many Seattle downtown neighborhoods at night.
Who is responsible for losses, them or customers?
Really depends on sect, culture, country etc. In a lot of Muslim countries they do use coffins, like Turkey.
It'd be really easy to circumvent. Proxying Google Analytics through your own origin would become standard practice.
Anyone using NoScript or similar is, in a fashion, doing that. I can confirm that it's generally more pleasant dealing with the web when a lot of third-party script is being blocked.
It's absurd because Google knew it was absurd before including it in their article anyway.
Wonder why this has taken so long? On several occasions, I've gotten calls from my own cell number - which seems pretty crazy - and then that leads to more calls because sometimes real people call back after missing the robocalls. At first I took screen shots because I couldn't believe it, but it's happened frequently enough that the novelty wore off.
You are aware that Google has vowed to actively fight any sort of fingerprinting right? https://techcrunch.com/2019/05/07/googles-chrome-will-soon-g...
> Order 5: Self-Transforming Mind. In this order of consciousness, which is infrequently reached and never reached before the age of forty (Kegan, 1994), individuals see beyond themselves, others, and systems of which they are a part to form an understanding of how all people and systems interconnect (Kegan, 2000). They recognize their "commonalities and interdependence with others" (Kegan, 1982, p. 239).

This idea is awesome, and is common sense in eastern philosophy. First generation Americans, or anyone who finds themselves the venn between multiple diagrams of culture, can also arrive to this pretty quick. Everyone's ideas are limited to the experiences that produced them, but it's embarrassing for western science on the whole for it to shirk the east when it comes to the realm of inner experience.
Check out https://github.com/alicevision/meshroom
Video tutorial from Prusa: https://www.youtube.com/watch?v=1D0EhSi-vvc
This relies on the surface of the water being static. In most rivers the surface flows. Indeed, there's a shear layer under the surface, so in a river these effects happen in the opposite direction.
Wow, it's rare that I scroll down 5 pages and see the best comment there.

That's a great idea.
Apple is not the only company with an "upside-down" credit card -- Capital One Quicksilver cards also have the "chip on the right".
I don't consider Slack beautiful– I think it is really unintuitive. The data flows differently than any native app I use...
While nice in thought, this is all a bit rich, coming from a tenured Yale law professor.

I also think he misses a major counter example to his argument, which is (some) tech companies, which have generous work life balance and reasonable expectations. Amazon is (famously) the exception, not the rule, in terms of how miserable everyone is there.
There's a lot of hyperbole surrounding this issue.

1) It is dry season in the region, and wildfires are a normal occurrence.
2) Wildfires are up compared to the same month last year, but still below the historical average.
3) Brazil already has strict environment protection laws which trump even property rights. In the Amazon region, for example, 80% of the area of any property must be preserved with native vegetation. No developed country even comes close.

The reason there is so much hyperbole about the situation in Brazil is both political and economic.

Economically, the current administration has cut funding to questionable NGOs, which used to take the money and do nothing productive, or even worse, engage in biopiracy. This has sparked strong reactions from those used to receive Brazilian taxpayer money. European politicians fake outrage, but their positions can be explained by the recent Mercosur-EU agreement, which has generated a strong reaction by local producers, used to European protectionism.

See France, for example. Macron is simultaneously criticized by both the left and the right, and is trying a political win with local producers and greens, even appealing to a photo of an Amazon wildfire taken 20 years ago by a photographer who died in 2003 to put blame in the current Brazilian administration [2].

Politically, this is only generating such a big reaction because of who's in charge of government in Brazil. The media worldwide tends strongly to the left, and any opportunity to criticize a right-wing administration is not wasted. I'm not saying any government should be above criticism, but things have to be done rationally.

1) If one refers to wildfire monitoring data [3], it can be easily seen that the worst years were in the 2002-2007 range, at levels twice as bad as the recent years. The country was then under a left-wing administration, and the current media and political reactions were nowhere to be seen.

2) Bolivia has much more lax environment protection laws, and is currently facing a way larger wildfire problem, probably the largest in its history. You hardly see anything about it in the media, except sometimes as a footnote in a story about Brazil. No European president is threatening their sovereignty; no one says their president is the destroyer of the Earth.

3) The previous (impeached) Brazilian administration cut environmental protection funds in 2015 from R$ 6b to R$ 1b. There was no outrage. Yet somehow otherwise reasonable people think the Amazon was destroyed in 7 months by the current administration.

[1] https://earthobservatory.nasa.gov/images/145464/fires-in-bra...
[2] https://factcheck.afp.com/prayforamazonas-thousands-people-a...
[3] http://queimadas.dgi.inpe.br/queimadas/portal/estatistica_pa...
Southern Chinese, especially of fujian descent, do this, which is why they’ve spread so far in SE Asia, Taiwan, Africa, NYC, etc...

Cantonese are also known for emigrating.

It’s still hard, and it sucks to leave home because you can’t get a good deal there any longer.
> To appreciate the absurdity of this argument [about encouraging fingerprinting], imagine the local police saying, “We see that our town has a pickpocketing problem. But if we crack down on pickpocketing, the pickpocketers will just switch to muggings. That would be even worse. Surely you don’t want that, do you?”

Actually, fingerprinting is not JUST used to track users for ads. Describing the characteristics of a device is used for lots of other purposes as well. For example canvas size etc etc useful for other reasons. Many / most web dev folks rely on fingerprints (user agent / screen size) when targeting layouts, adding / removing features etc.

The whole analogy where police are cracking down on criminals is the same as cracking down on fingerprinting is what is "absurd" and "disingenuous". A better analogy is wanting to have a 10mph speed limit to reduce pedestrian deaths. It would (and I like car free planning so would support it). But it would ALSO make commutes etc slower.
A single photograph of you in public is usually not a problem. But if I were to follow you around and take a picture every 10 seconds as you go through your day (including at home and in the bathroom), would you like that?
Supporting multiple browsers is always somewhat more difficult than just one browser.

You are right that your choice of features plays into it, but I don't believe that's all there is. Even in the best case (all of features you want are available in all the browsers you care to support), you still should be testing in those browsers (ideally on all of the platforms / devices you support).

You also have to make the initial decision about what browsers/platforms/devices you support in the first place, and then choose when to re-evaluate your support. None of that is free.

Please don't get me wrong: I think it's a fine path (and one I have chosen myself), but it's definitely not without downsides.
That's pretty much Santa Cruz California and it hasn't happened yet.
Do you think the above scenario is completely implausible? If so, why?

Please don't make assumptions about my motives.
Show HN: Ransomware protection in 197 lines of VBS
> There are currently 635 users who have submitted 5251 sponsors and saved a total of 7.37 days of people's lives.

> 7.37 days of people's lives

This is a really cool thing to track.
We have real issues in Seattle, but having frank conversations about it has been quite troublesome, too many people want to talk about feels rather than facts, leading to local satire like this: http://theneedling.com/2019/02/05/magnolia-named-worlds-most...

Seattle Parks & Recreation has started adding Park Ambassadors to address what you experienced, and it has significantly improved the downtown parks: https://downtownseattle.org/about/careers/park-ambassador-pa...
I don't think they have any mental hospitals to put him in. Locking people up in mental hospitals isn't much of a thing anymore.
The action in question involved 3 mainland students and one Hong Kong student.

How many people live in mainland China? 1.3B. How many people live in Hong Kong? 7.4M. How many overseas Chinese are there? 50M. How many overseas Hongkongers? About 1.5M.

You can bet that if there is any one such incident happening in the globe, the press will seize on it, because it fits the current media narrative and gets clicks. By the numbers, though, you're looking at 1 in a million.
Interesting POV but you could apply it in the opposite way as well: As management, I could issue a "political ban", then start changing corporate policy and my employees couldn't say anything against it. Without a ban, they could at least spark internal debate.
When the Public Feared That Library Books Could Spread Deadly Diseases
Tangentially related but I've had a 3D printer for years but only just recently learned Fusion 360; it has been a real game changer in terms of the kind of projects I can tackle. Can't recommend it enough.
Some are quite well done and feels less like an ad, some awful ones just play a shitty VPN clip in the worst possible way.
Scientists Attempt Controversial Experiment, Edit DNA in Human Sperm with Crispr
Not to worry: WA senator Manka Dhingra has been promising to bring injection sites to the suburbs as well.
This looks kind of neat (and not too dissimilar to my own software -- see bio), though I can't seem to make it work (or "Bake"?).

It also reminds me of OpenRefine, another very cool online data processing tool with a slightly different focus.
It's completely subjective.
"Opt-in" doesn't work; I thought this was common knowledge
How is meaningful change in society related to shipping Google Drive features?

Time and a place.

Politics has no nuance or filter anymore. It's all the time on full blast, forever. I hate it.
The Story of Webflow
Less like IRC and more like using a Google Docs document or Office 365 Word document collaboration for a live chat, using different paragraph formatting for threading. (Some of the Wave collaboration tech wound up in Docs.)
this is the criticized argument

> large scale blocking of cookies undermine people’s privacy by encouraging opaque techniques such as fingerprinting. With fingerprinting, developers have found ways to use tiny bits of information that vary between users, such as what device they have or what fonts they have installed to generate a unique identifier which can then be used to match a user across websites. Unlike cookies, users cannot clear their fingerprint, and therefore cannot control how their information is collected. We think this subverts user choice and is wrong.

the argument claims:

- people block cookies so fingerprinting methods had to be implemented

- cookies, unlike fingerprinting, can be deleted

- because cookies can be cleared people should just embrace them and keep their ability to choose
I suppose you could, but I think you'd need to write version detection for a browser, the ability to figure out the user's chosen browser, the logic to download a reasonable version of Chromium, install it, get it past virus scanners, etc.
China has been doing this sort of thing well before the Trump administration. People are just now noticing the trend.
What are the Pioneer Square and "3rd and pike" of Frankfurt or Amsterdam?
I believe Drew is responsive to email at his (work?) email address sir@cmpwn.com. You may want to send him a message directly.