skysight-inc/HackerNews huggingface dataset:
Apple will and did surrender iCloud data to LE, so would Google.
they denied unlocking the device or implementing backdoor in the future, which I believe is not feature any other vendors have implemented.
And let's not forget that the device apple was so eager to protect belonged to already dead terrorist, as far as average user is concerned that was a PR stunt.
>Almost 1.6M domains had a cert that had recently expired (in July, the month of the scan). Almost 3.7M domains had a cert that expired in 2019 (the year of the scan). Over 9.6M domains had a cert that expired in the 2010s!

This doesn't make sense. Even assuming you included the ones that had expired certs in "had a cert that expired in the 2010s", it would only be 1.6+3.7~=5.3M.

Where does the rest 4.3M come from?
The truth is the US was never welcoming to foreign-born entrepreneurs, and matters have only gone worse in recent times. If you are from a country like India, your only real chance is somehow to get a VC funding.
Delighted with this. I've been working on and off on a shortest-path routing engine in Crystal. Parallelism means I can get performance on a par with C++ even on large graphs, but with the simplicity and readability of Ruby. Full marks to the Crystal devs for tackling the no 1 feature request.
It's 2019. Adults can play hide and seek too, you know.
Very cool article, but also a little depressing. I probably fall mostly into the "poet" camp and it often feels like the industry is setup to beat people down who approach code that way.
Pretty sure that's what they are trying to do? But I agree that they should probably try to make it harder for authoritarian governments to exploit iPhones for use against political dissidents and unpopular minorities.
All of Google's phones. Why would you expect them to patch other companies' devices? When Redhat fixes a security vulnerability in Linux, they don't manage how those updates get to Linksys's routers.

For a messaging app vulnerability like this, those devices would get a fix automatically without a reboot and without the user even noticing, which iOS still can't manage to do.
> CAs exist solely because you CAN trust them, otherwise what's the point?

That's the idea, but in practice, I don't really trust the vast majority of them.
Please don't do programming flamewars here. They aren't interesting, and past experience has shown that they can destroy a forum.

https://news.ycombinator.com/newsguidelines.html
Security researchers have a culture of being both overly paranoid and sticking to just the facts and not actively trying to minimize.

It seems Apple doesn't want them to say "here are the exploits we found, and we found them on X websites, and estimate a few thousand visits per week", they appear to want them to say: "Only the Uighurs really need to worry. And by the way, it wasn't just us! They were going after Uighurs on Windows and Android too!"

Even if PZ added "context" they seem to want, "just the Uighurs!", or "other platforms were attacked too", in what way that that actually diminish the fact that multiple 0-days with remote code execute on multiple OS versions were in the wild?

The fact that we have one case where a single geographic group was targeted does not mean that these exploits weren't being used elsewhere. Imagine there's Windows 0-day and your an IT admin, but the advisory says only Ukrainians were targeted by Russia. Does that mean you shouldn't go back and look at your logs and look to see if you've been exploited, rotate credentials, install new countermeasures, etc?

Shouldn't iPhone users be encouraged to rotate passwords on non-2FA sites after a reboot for example? To me, Apple's response looks like damage control.

And why doesn't Apple have their own Project Zero that publishes deep dives on iOS/OSX vulnerabilities and would allow the press to have more context and not fly off the handle? Wouldn't it help to engender their development community and security researchers to be more active, by educating them on how these vulnerabilities typically work and how they're discovered, so more people can learn to spot them? It would make the claim "we already knew about these and were fixing them before other people discovered them" look better.
It's accurate. Just got back from spending a few weeks at my dad's country house that's wired with 940/450mbps fiber. No problems remote working from there, except, of course, time zone differences. Here's the ISP link, in Romanian unfortunately: https://www.digiromania.ro/servicii/internet/internet-fix/fi.... The price is 40 Lei / month, which is approximately $9.5 at current exchange rates.
I still am convinced that this is people vaping way too much at one time. Cannabinoids are “sticky” oils, i.e. pretty good binding agents. It’s plausible that a carcinogen (in an e cigarette) is binding to them that would otherwise be metabolized and creating a negative side effect.

I do think vaping is probably better than smoking, but it is probably ideal not to be addicted to nicotine. It is much more dangerous to your long term health than either THC or alcohol (assuming you’re not an alcoholic).

Best to lay off vaping weed and nicotine at the same time for now. That seems to be the common thread in these cases.

As someone who only vapes weed, I have to say I’m not too worried.

Edit:

Corrected brain fart of saying “weed and marijuana” instead of “weed and nicotine”.
> Since when is the priority to not offend the drivers around you?

Caring about others is pretty much rule #1 about living in a polite society. People who don't care about others are called sociopaths, literally anti-social behavior.

Prioritizing safety on the streets, making sure you send clear signals with your actions, etc. etc. Its all part of driving and being a good citizen on the road. Part of that is absolutely understanding how others perceive your driving behaviors: if you're driving too slow, too quick, if your high-beams are too bright, etc. etc.

Its also about understanding why motorcycles lane split (safety + efficiency), and other behaviors. And a lot of it is cultural: different areas have different cultures so its not a one-size fit all approach either.
Rhum agricole and cachaça are made from sugar-cane juice. That's not as pure as refined sugar, but it makes a much cleaner spirit than molasses.

The bigger difference between White Claw and rum, i would say, is that rum is distilled, whereas White Claw is only fermented. I'm not sure there are any traditional non-distilled drinks made from sugar, and Wikipedia is down so i basically have no way to fake being well-informed as i usually do.
That's ridiculous. The more cars you drive near, the more likely there is to be a collision. I take off from lights to get away from the pack, and I drive away from the packs on the highway. If there's nobody near you, you can't hit them.
But what if you need them again?
What is a weekend? Honestly, weekends are super busy. I actually look forward to Mondays when I can go back to work and sit in front of a computer for much of the day.
And complex analysis informs number theory. An example from software development might be more useful.
In the article they discuss that it’s lkelly a publicity stunt.
It's also more satisfying, and you often end up with a better understanding of things if you try to deduce the solution to a problem before just typing in something you might not really understand (and potentially breaking shit).
This isn't representative of my personal experience nor my peer/friend groups' in tech. Anecdata: of the ~5 senior engineer friends I have at large tech companies only one of them consistently works much more than 35 hours a week.

I was actually really heartened to see this article on HN because slow mornings have been life changing for me. Spending 3 quiet hours in the morning on my own pursuits has been wildly mood elevating. Plus, I usually use one of those hours to read about tech (although HN is banned from my morning hours). Five hours of study a week is easily ~240 hours of spaced repetition even if you miss a few weeks, and I would bet good money that it's more studying than the vast majority of my coworkers.

Balance is thriving in SF/SV from what I can see.
"I've got a real passion for frozen yogurt."
I don't know, if you came in via the acquisition, seems like you would have used the correct company name and not "TestFlight".
In the case of these recent iOS bugs, they didn't "air them" until after the fix was released. So any "back channel", if you could call it that, seems to exist for Apple too.
Sounds similar to Norway, where only there is a max alcohol % (5%, IIRC) can be sold in supermarkets, and anything stronger is only available through the state monopoly, Vinmonopolet.

In Western countries outwith the Nordics, this may sound awful, but I've come to appreciate it. Vinmonopolet stores sell a curated stock of high quality alcohol drinks, and their staff are invariably both passionate and highly knowledgeable. In short, the ethos is "quality over quantity" - and I like it.

For some context, I live in the UK, but work for the Norwegian division of a megacorp, and have travelled to Norway frequently for decades.
I'm not convinced yet...

One of the uses of PSL is to separate mutual distrusting users to whom you provide a domain (eg appspot.com) and with the PSL, it actually sets everything up to prevent accidental cookie leakage... a perfect case of 'secure by default' for new customers, without requiring every developer to properly implementing origin policies.

As far as I see the PSL is still the only way to provide that security in a failsafe way. So let's perhaps redefine the PSL for just security and privacy and slowly move away from attempts to use it for quota enforcements, but let's not replace it with 'hope' just yet...

Disclaimer: had a PR approved for the PSL a couple of weeks ago, to be able to provide users I don't necessarily trust with development subdomains to play with but provision them with wildcard letsencrypt certificates (which is easiest if you just manage the DNS for them...)
Lead Recruiter
Figuring this out really blew my mind. All of these giant corporations from Apple to Chevy to Starbucks are just a bunch of people trying to figure stuff out. When I was younger, even in college, I really thought of companies as these perfectly organized machines with flawless processes that allow for continual success. Now I realize it's a bunch of normal humans doing their jobs while they deal with the other shit in their lives too.

Putting that together really helped give me the push to start my own business... if founders are just people with an idea who do work to make a company, I can be a founder.
One why do I care if the writer is gay ? Also “used to” , what do you mean by that ?
I'm a nightowl, and so are my kids. They will happily stay up to the early morning hours reading. Getting them out of bed in the mornings is a major pain in the butt. But, they will happily sleep in and miss the start of school if I'm not there.
Checkout orderflow, its inventory management and order management for small businesses. Let me know what you think
Yeah, it is too bad that Google or Apple didn't say more about that. For example, they could say that this example shows exactly why security and privacy matter: smartphones, computers, and the internet should not be used as tools for governments to track citizens based on their religion, culture, or political views.
How did Google bring them more orders? Perhaps people search for the restaurant by name and this button shows up?
Parent is building off of a clearly mistaken assumption in their post. And there was no need for them to be rude about it, either.

My point was just to clear up a fact that seemed significant to me in the thread. The fact actually stuck out to me when I originally read the article.

IANAL so I can’t comment on the different implications of pursuit of a stated suspect vs a dragnet with no known suspect.
"The Spaceline. By extending a line, anchored on the moon, to deep within Earth’s gravity well""
They added new "efficiency guidelines" that require you to make at least one sale a month or the account gets dropped. This hasn't been a problem for me, but definitely adds a barrier to entry that wasn't there when I started.
The #1 factor in collisions is actually speed differential.

If you are driving at a dramatically different speed than everyone else, you increase the chance of collision. I'm not saying drive like grandma: I'm saying drive the same speed as everyone else, to minimize the risk of collision. If you're too slow, you are as dangerous as going too quickly.

Someone going 40 mph in a 60mph zone is just as dangerous as someone going 80 mph in a 60mph area. Speed differential is what causes accidents. If everyone is driving the same speed, its relatively difficult to actually hit anyone (as long as you stay out of people's blindspots). That's why downshifting to 3rd (or even 2nd) to reach 60mph ASAP while getting onto a highway is important to me.
Were making about that - but as we have recently quit our jobs, it’s no longer a side project :P
Probably not:

https://www.roadandtrack.com/car-culture/a28942079/tesla-mod...

They might be there to do some testing but not to attempt a timed lap.
I have a rule of thumb: Multiply p by 10. In other words, p = 0.05 is as good as a coin toss. This is consistent with the so called replication crisis.

In my view, understanding p-values won't help. Feeding data into a formula that produces a p-value doesn't account for things that can go wrong with experiments: Uncontrolled experimental conditions, biased sampling, hidden correlations, and simply non-ergodic systems. It is possible that some systems can't be controlled to the point where it's reasonable to start looking for real effects.

I suspect that if the results were any good, the precise interpretation of the p-value wouldn't matter. Physics has lived without an agreed-upon interpretation of quantum theory for a century.
An Extremely Detailed Look at the Porsche Taycan's Engineering
It's tiring how any attempt to contextualize why some people like Mugabe (which I don't! I repeatedly criticize him in my comment!) needs to be represented as saying that he's not deserving of criticism or that the only people criticizing him are white imperialists. Yes, he did plenty of bad things, but someone who has only read a caricature of him will ultimately be flummoxed when they meet a fan of his.

If you've had many encounters with Zimbabweans, you've run into people who do think he is a hero. This would be perplexing to the average HNer who has only read (accurate!) stories of authoritarianism, human rights violations, and hyperinflation.
I bet you can train a model to predict your skill based on your google searches related to software development.
Ah. Well, no one offers that feature currently. In fact, are you aware that a typical automatic emergency braking system will always hit the thing in front of you if you're going faster than 45mph? That is if it sees it at all.
There is truth in this troll post: An individual and creative captcha solution won't be the target of mass attacks. If it requires to write a new program to solve it, and there is little gain (like only the ability to put spam on your blog post), chances are high a solution will hold.

A particular domain specific examples are math captchas such as https://math.stackexchange.com/questions/2266227/solving-mat... or https://packagist.org/packages/cismonx/math-captcha-polynomi... . While in general such captchas are seen as ridiculous, they ask for domain specific knowledge. A person who comments on a higher math related blog may find it easy to answer such a captcha.
That's really smart! Curious why did the original owner sold it to you?
It seems awfully odd to write a full article about this without mentioning that S3 has completely different guarantees due to the cross-AZ design. I tend to think that you probably can trust the cloud from a data integrity standpoint, but I would never feel safe depending on EBS.
Can you use it on an Oculus quest?
Well if we can get a cable to the Moon, we could attach it to a crank at the North or South poles to generate electric power.
Lots of Americans believe different things. The people who think of America as a fundamentally white supremacist state are not the same people writing slogans like "America Has Always Been Great."
It's way easier than trying to use Outlook for that purpose. Tbh I don't even know how to share tasks in Outlook.
My chart was taken from a Quartz report, and has the author listed in it. The journalist made the charts, presumably by collecting it from the individual transparency reports.

https://qz.com/620423/heres-how-often-apple-google-and-other...
For reporting actively exploited vulnerabilities?
We could also say that about American healthcare system or how the life expectency is greater in cuba than it is in the US.
> Pretty impressive that these "scientists" have been researching this topic for over 10 years. Must be nice to have that kind of funding for researching dumb ideas.

The Holographic principle in string theory has been around since circa 1978.

https://en.wikipedia.org/wiki/Holographic_principle

I'm not a physicist but AFAIU it's a fairly mainstream theory as these things go, though perhaps only a minority of theorists pursue it.
Yikes! Attacking another user like this will get you banned on HN. Can you please review https://news.ycombinator.com/newsguidelines.html and stick to the rules when posting here?
I tried this regime back in the 90's for a year or so in my late 20's. Woke up at 4:45am, showered, coffee, quick listen to the news on Radio 4 then read a book for an hour, fiddled with some code for work then jumped in the car to head to work at 8am.

At the time I was also a field engineer so I could be sent off on a 400 mile round trip to resolve a customer issue on-site. The drive to the office was 50-60 mins as well.

During the working week I often I wasn't getting home until around 7:30pm and by 9:30pm I was dead to the world.

It was shit. I had no social life and wouldn't see friends until the weekend (usually a Saturday because on a Friday I was buggered - I did in fact fall asleep in the pub one night after just one pint).

In the end I thought "fuck this", went back to my old regime of fall out of bed at 7:45am'ish, coffee, jump in car and life significantly improved. I got to see my pals in the evening if I wanted to and could also spend a couple of hours in the evening fiddling with code, reading books and even watching a bit of telly.

So yeah I kinda wholeheartedly agree with your comment.
This content is pretty meagre.

"the world would need to slash its use of oil, natural gas and coal within 30 years"

More like 10 years, given recent IPCC reports.

"Our dependence on fossil fuels is often likened to that of cigarette smoking, but the analogy doesn’t hold up.

Smoking is an unhealthy habit some people choose to engage in, and if they choose, they can try to kick that addiction without changing their life.
Fossil fuels are the foundation of our global economy, and it’s nearly impossible to go about our lives without using them in some form."

Bad analogy begets bad analogy.
https://news.ycombinator.com/item?id=20886914
Side note, but when you see a missing reply option it's an attempt to slow down fast replies.

You can still reply though, you just need to click on the time stamp above the comment and you'll get a reply box for that comment.
I believe addition of water (especially at higher proofs) also creates short term reactions with the alcohol and amphipathic molecules (such as guaiacol for Islas) in suspension, before finding a new equilibrium -- bringing them to the surface of the liquid and creating more flavor/aroma.

ref: https://www.nature.com/articles/s41598-017-06423-5
And then at the end, they don’t even really abide by those forms anyway. It’s like getting Shell to stop selling oil or Merck to stop selling drugs: Facebook isn’t going to stop doing what its entire raison d’être is until we use the iron force of law to make it so.
I understand now, props to you my friend :)
The problem with reporting is it's actually a liability. You're legally responsible for reporting accurately to shareholders so there's a non-trivial amount of work to ensure you get it right. You could do that in real-time but there would be a significant overhead to it. There are also other problems, for example the sales team will always make sure their paperwork is completed in time for the end of quarter to hit their targets, if you're reporting continuously you're going to see a lot more noise in the sales reporting figures that gets averaged out by only reporting the quarter. You aren't gaining information by reporting more often, you're just exposing your investors to a noisier signal.
It’s forms all the way down!
This is the real life of folks with kids, so if you have coworkers with kids be a bit emphatic, now imagine them doing all this and having to worry because maybe one or more of them happen to be sick. If you have kids, either you become good with time management or life will beat the crap out of you.
How do you know why project zero exists?
The end result doesn’t have any sugar in it
Which will ensure that not only Facebook but also every other social media outlet will now have your face tied to your identity.
To me, all it says is you enjoy your fast car. I don't see any reason to take offense, and if you're ahead of me, it means you're not in my way.
> This requires non-trivial time and resources and is risky.

Absolutely true. You need to take a risk to take advantage of an opportunity.

> Without the resources you can only try it a few times in a lifetime.

If you have time and determination, you really do have all the resources that are necessary (unless you're wanting a get-rich-quick type of thing, of course). There's nothing that limits you to a few times in a lifetime.
Even in Belgium, we have better price, and we have the most extensive prices in EU.
>>Are they wearing IKEA bedlinen?

This made me laugh. I can almost see the person arguing that that is just part of his daily wardrobe with a very matter of fact face.
The british NHS claims that vaping is at least 95% more safe than smoking.

https://www.google.com/amp/s/www.independent.co.uk/news/heal...
Oh man, you came to the wrong town, my friend.
Minor point - SHA1 root CA certs are trusted by identity, so SHA1 is of no consequence.
"Alaska Airlines did not answer any questions about the employee who caused the commotion, saying it does not comment on personnel. CBS 2 reported that a source told them the woman has bipolar disorder and had missed her medication."

an allegedly mentally ill airline employee, harassed and assaulted pax, and raised a false alarm and i would project, made a false security report.

This should be quite enough, its time that airline security was returned to a realistic stance, and such individuals were removed from service. Its a damn good thing this didnt happen in flight, and involve operation of the aircraft.

there was already a single case of a small air craft pilot having a passenger suddenly take over the yoke and violently resist attempts to stop him holding the plane in a nose dive. This incident in submission is not a rare one, but everyone took her seriously, due to recency of other lethal incidents
Thanks for the help. I had reached the same conclusion as you from my very brief exploration of the two technologies so far. Flutter seems more self-contained and coherent, at the cost of taking the risk to not integrate well with the native OS (which TBH is the least of my concerns at the moment as long as flutter is able to provide me with something close to iOS 7 feature set support).
Rational angles and only a finite number of points are not illuminated. You can still get points that are dark, but not regions.