skysight-inc/HackerNews huggingface dataset:
> ..pedestrians glow in infrared; ..

> ..using a still, cold dummy..

The kind of infrared you're thinking of is probably not the kind the sensor can detect. Only thermal imaging cameras can detect far infrared range - the one that can help distinguish hot objects from cold ones. 'Normal' IR cameras only capture near infrared - which tells you nothing about the temperature.
The reason for so many messages at once -- in case it's not obvious to someone not using macOS -- is that this user had a lot of apps set to autostart at login...

So several apps started at the same time (upon reboot and login) and now needed explicit user permissions under Catalina, so they prompted for those.

What I don't understand is, why can't Apple have an app/panel where all standalone such nags are placed?

So, instead of 20 mini-windows all over the place, you get a single window, with the name of each requesting app and the nag, and even options like "deny all", "allow all", or some quick way to select some and not others (e.g. nags grouped by app).

And an additional idea: I'd have a physical led or similar mechanism on the computer, that only when a dialog is official and uses standard system UI lights up (similar to how a led lights up when the camera is on). I'd use secure enclave and make sure that only system APIs can set this on -- no userland code, except when it calls the specific legit dialogs, which should also not be hidable and have the highest z-index.
1957 is an interesting year. In the United States that's the year that Control Data Corporation was formed in the US. Seymour Cray, the namesake of cray supercomputers, would join it a year later and would go on towards the rapid process of turning what were glorified room-sized calculators into the computers that we now take for granted and that would rapidly take over all forms of technological development. In China that was the year that Mao Zedong would begin to try to implement socialism in China. Over the years that followed tens of millions of Chinese would literally starve to death.

Over the next decade to 1969 Mao would start his 'Cultural Revolution' which would see millions of Chinese 'purged', one way or the other, extensive class warfare, and the destruction of undesirable elements referencing their cultural and religious past. By contrast in the US in 1969 we would put the first man on the moon. In 1976 Mao would die and end up, after a brief power struggle, being replaced by Deng Xiaoping in 1982. He opened China to foreign investment and rapidly transitioned China to a system more driven by free market economics that persists to this day.

In the two decades from 1960 to 1980 China's economy grew about 165%. In the twenty years from 1980 to 2000, it grew 555%. In the twenty years from 1998 to 2018 it grew 465%.

In the two decades from 1960 to 1980 the US economy grew about 111%. In the twenty years from 1980 to 2000, it grew 95%. In the twenty years from 1998 to 2018 it grew 45%.

The only reason 1960 to 1980 in China looks not as awful as it was is because of rapid population growth, mass starvations notwithstanding.

---

Historically China was a world leader in technology. Wiki has a list of Chinese inventions which you can compare and contrast to their western counterparts in time, method, and source [1]. In modern times they made some bad decisions and at some of the worst possible times. Of course this should make you ask (as it did me) what about the mid ages? The period of time after Chinese tech supremacy but before the modern era? This [2] article offers an interesting argument that seems quite compelling.

One of the big differences is that China was a unified and stable empire. By contrast Europe was a chaotic land of never ending conquest and war. And periods of stability always had an underlying tension of imminent war. This competition and lack of unification within Europe meant that inventors, scholars, and others were free to do as they felt. If one country doesn't like what you're doing and declares you a heathen or other naughty word, so what? Move 100 miles and you're now in another country that's happy to go against the desires of the other country if not only because it's that other country!

China wanted stability and security. Europe wanted progress. It's interesting the compare and contrast this to modern times. No single answer fits clearly, but it's certain that times have changed.

[1] - https://en.wikipedia.org/wiki/List_of_Chinese_inventions

[2] - https://www.washingtonpost.com/news/wonk/wp/2016/10/28/why-t...
Latest Ryzen issues have been fixed btw.
My bank has terrible call waiting lines and they even overcharge for it! And it's not just banks that are being phished
> Looming at the repo this is implemented in Rust, along with Libra itself.

It seems to be just repeating something from the comment it's a reply to (though it is worded unusually, so I may have misunderstood in the opposite direction).
American University Hearthstone Team Holds Free HK Sign. Blizzard Cuts Broadcast
As a child in Sweden in the late 90s and early 2000s I recall that my dad had a hardware token to access his bank account. Though nowadays people in Sweden use BankID for the most part which is 2FA in the form of a mobile app. BankID is also used to login to most government websites in Sweden which is nice.

Meanwhile, banking security in the US is stuck in the Stone Age. Last I checked Wells Fargo, one of the largest US banks, still does not allow passwords greater than 14 characters in length and passwords are not case sensitive.
That is not "France" (typically or only), it is an EU wide thing with only a few little differences between countries, they are "quadricycles" that can be either L6E or L7E, depending on weight and max speed/power:

https://en.wikipedia.org/wiki/Quadricycle_(EU_vehicle_classi...

The article above has only a few country specific entries, though.

In France only people born before 1988 can actually drive a L6E vehicle "without license", people born later need some form of certificate (not an actual "full" driving license, still there is a throey and practice requirement) see (Axiam is one of the "big" producers of these vehicles):

https://www.aixam.com/en/legislation

A good visualization of the EU classification for these vehicles is on page 10 of this .pdf:

http://eu-live.eu/wp-content/uploads/2018/01/EU-LIVE_D_4.3_L...
The Kolmogorov complexities of the best programs to solve those two classes of problems, digit multiplication vs Starcraft, are quite different.

Edit: We don’t know the best programs, but we can approximate the bounds with some confidence that, unless some paradigm-changing discovery is made, the programs to solve digit multiplication would be significantly simpler. (This is not a formal argument, but the intuition is very strong for most people who study the problems seriously.)
Good idea - but here in the UK there was a scam where they called you and THEN suggested you call the number on the back of the card.

They then don't hang up, but play a dialling tone down the line until you dial the number. At which time they 'answer'. This only works on home phones, not mobile, but is worth considering, and warning your family/friends about.
Yeah but people expect when calling a business to be put on hold for 20 minutes and be dicked around on a phone tree. They don't want to deal with that.
Unrealised Potential
"As an example, one commercial QVGA OLED display consumes 0.3 watts while showing white text on a black background, but more than 0.7 watts showing black text on a white background, while an LCD may consume only a constant 0.35 watts regardless of what is being shown on screen."

https://en.m.wikipedia.org/wiki/AMOLED
Book Squire Is Ten Years Old
>> mobile phone operators don't seem to be doing much

It is in the protocol. Operators are not the only problem here.

https://en.wikipedia.org/wiki/Caller_ID_spoofing
I didn't realise it was pegged. So agreed without deep pockets it will be difficult.
Only, it wasn’t a fake dialog. This is the normal OS sudo dialog which has API to allow the prompt text to be set by the application.

The text could have been more specific what they need root rights for and how necessary the root rights are for continued usage, but they did not fake the dialog.

It’s so hard to correct wrong information from the past. Even though discussion stemming from that article has shown that it was the system dialog, all people remember is the misinformation (albeit possibly inadvertent misinformation)
It's not a gap, it's an absence, and the deficiencies incurred by eating zero fruits and vegetables are not analogous to a b-12 deficiency (which most meat eaters also suffer, just to a lesser extent than vegans). These deficiencies aren't going to be made up for in pill form. Not to mention consuming no fruits and vegetables means you are essentially on a very low fiber diet, which has huge health implications on its own and is probably a bad idea.

This is a lot of work to go to in order to hang on to a pet diet that is shown to cause arterial injury and doesn't lead to greater weight loss than less harmful diets.
There was a widespread phishing attack in the UK that used this approach.

On UK landlines the call is not terminated until the person who made the call hangs up. That is to say if I call you, you answered and then hung up, then waited a minute and picked up the phone again, I'd still be there and the connection still made.

Scammers phoned people, told them there is an account issue and to phone the number on the reverse of their credit or debit card. The scammers keep the line open and play a recording of a dial tone to the target phoning back and then go through garnering all the details needed to rinse the accounts.

I believe in response UK phone networks are implementing time limits on one sided terminations
Show HN: Optimizing Brainfuck interpreter in F#
Google Is Trying Too Hard (Or Not Hard Enough) to Diversify
We should have learned this one a long time ago from email. If something comes through from a service which may require action, then go directly to the service and stop interacting with the email.

Phones seem just as dangerous these days. I don't answer them at all. Anyone who really needs to get in touch knows multiple services that will get through to me.
In Sweden we have BankID - a two-factor, two-way authentication using public/private encrypted keys that's bound to a smartphone as a signature.

The process is user-friendly while keeping security high:

- The place where you want to login has to trigger the authentication from their server on every login - and have to be certified for BankID.

- You then have to open the app, enter your fingerprint or 6-pin code before you can enter.

It's available for all state-run services including all banks and post offices.
ImprovementRavine – Martin Fowler (2006)
It was the OS dialog which allows apps to customize the prompt text. No need to fake anything. That article was wrong.

Check the HN discussion from back in the day
Dog Ownership and Survival
>> If a car spontaneously

This is false equivalence. A car is not $/£/E/50 piece of hardware.
>Apple has been neglecting OS X since Snow Leopard, thinking that iOS is the only thing worth investing in

What exactly is the evidence behind this? They have been adding several huge components/APIs/tools that they have working for macOS (Metal, APFS, Swift, CoreML, etc), they have had added the Mac App Store, they have tons of under the hood improvements (e.g. memory compression), and so on.

What exactly did you expect to see, or was seeing before "Snow Leopard"?

>I know people like to knock Linux-on-the-desktop, but you know what? I can go buy a Thinkpad, spend 20 minutes putting Debian or Ubuntu on it, and it'll just work, and I'll get software updates forever.

Then don't let the door hit you on your way out.

In my experience in most definitely not "just work" except with very careful selection of laptop/peripherals, and all kind of uses cases break too, including no major creative/office apps like Creative Studio, Pro Tools, Cubase, Premiere, FCPX, MS Office, and so on, which I depend on.

And every now and then this or that project will decide to majorly break stuff in some transition... (Gnome does it, KDE does it, X/Wayland/etc does it, ...).

And I've used Linux (and several UNIX variants) since 1997, and still do professional (as a server OS) everyday, so not exactly new to the game.
I don't say Blizzard has broken any law. It hasn't. I just tried to remind people that Blizzard is a private/corporate entity that will not endorse political debate because it may hurt its commercial value.

I'll add that Blizzard is absolutely right in doing so. Because, it clearly can't be an open space for expressing opinions. That's because its values may be in competition with those opinions. So any opinions expressed inside Blizzard stuff would be "tainted" by Blizzard's nature/control. So Blizzard wouldn't be very good at letting opinion being expressed. So Blizzard's decision actually helps to maintain the expression of opinions in place where it is most efficient : the public places, the parliament, etc.

And yes, that holds for FaceBook, Google, etc. Much of Internet is privately held => expressing public opinions over the web is tricky.

Now, following you reaction, I've checked the Universal Declaration of Human Rights, specifically article 19 :

"Everyone has the right to freedom of opinion and expression; this right includes freedom to hold opinions without interference and to seek, receive and impart information and ideas through any media and regardless of frontiers."

Which basically says that Blizzard should not oppose the expression of opinion (provided one interprets "media" in a wide way : speech is a medium).

I admit that the more I look into it, the harder it gets...
Mordechai Vanunu and 32 Years of Security Risks (2018)
Switch to a better bank. The only way you can make change happen is by using your consumer power.

Switching accounts is easy - see https://www.currentaccountswitch.co.uk/ - all your bills are autoswitched, your pay cheque gets redirected, and it happens pretty quickly.
Fuck that's clever
Be careful with trust if you call them back. There are possible ways to trick you into either staying on line, or just taking over your connection. GSM has pretty shitty security.
This is not necessarily true though. If you could use that 3600 to become 7000 in the same time it would definitely make sense to sell for 3600, and reinvest that money into a even more profitable investment.
I actually prefer "he was nervous". It gets to the point and keeps the story going. There are a lot of books that are unreadable to me because they refuse to get to the point and want me to dig up the point through layers of prose.

I guess I like books that have a point, rather than just spend some time surfing on prose. Both are probably valid experiences, but I have a clear preferences.

I tend to prefer older SF writers like Clarke and Asimov, which were pretty good at getting to the point. With modern writers I tend to prefer their older books from before they learned to bury the point under layers of prose.
Pooling the data of 3 837 005 participants, dog ownership was associated with a 24% risk reduction for all-cause mortality as compared to nonownership (relative risk, 0.76; 95% CI, 0.67–0.86).

In analyses of studies evaluating cardiovascular mortality, dog ownership conferred a 31% risk reduction for cardiovascular death (relative risk, 0.69; 95% CI, 0.67–0.71; I2, 5.1%).

Dog ownership is associated with lower risk of death over the long term, which is possibly driven by a reduction in cardiovascular mortality. These results hold implications for future studies on lifestyle interventions.
In this thread and every other threads like it: people complaining about Windows/MacOS hostile path, yet refusing to use Linux.

You know, "vote with your wallet" also means "vote by changing the products you use".
I’ve tried getting them to give me a checksum to verify validity. For example, tell me the sum of the last four digits of my card number. They always refuse, so I always hang up and call back. Too bad they don’t understand that giving out a checksum is not insecure.
Obsessed fan finds Japanese idol's home by zooming in on her eyes
Analysing Time Series
But there is, also, no thousands of scientists working on create some space ships to attack the earth.
Interesting thanks for the write-up.

One thing that I've frequently heard is that in any type of fraud call you should always hang up right at the beginning and call the bank back.

Seems like no matter how sophisticated the attackers, this defense will always foil anything along the same lines of what happened to you. The only way I can see this countermeasure failing is if the scammers can somehow manage to intercept inbound calls to the bank's customer service number.
They are better. One of my banks offer a hardware token which requires my card to be physically present and for a correct PIN to be entered. The other has an app with push notifications which can be used to approve or deny transactions.

Seriously, switch bank.
But, if I don't hang up the received and the counterparty hangs up, then the line tone is the one of the "busy", not the one of the "free", and I'm unable to dial anyone until I physically hang up to reset the line. Or at least that's how it works back home. Is it different in UK ? I suppose it's something that less attentive people might fall for anyways.
If I try to reset my password bank screams at me in every possible way, including the pope calling himself and asking if thats legit. Actually there is a 50% chance I'll lock myself out of the account when doing this, because I misstep at some point. Seriously what year is that?
We already have 0.9°C warming. 1.5°C isn't that far off.
These Weeks in Firefox: Issue 65
> Phone 2FA would be good but a bit pointless because the 2FA app is on the phone, and so is the banking app.

This is exactly like having a physical token with you. If it gets stolen, they have the tokens.
But, at least, having token on the phone app is waymore convenient for customers and also has another layer of protection (think of the fingerprint/passcode ecc you need to access your phone)
> Treat your users like dummies

Clearly you've never seen a "user". Dummy is tame, I would have described them differently.
In my experience, Trusted path and Trusted UI tend to fail due to significant UX challenges. It tends to be quirky and require user training.
How to use React refs with useEffect hooks
This is probably the best security technique in terms of simplicity vs effectiveness, one that everyone and their grandma can use. I wish there was more effort in educating people to use it.

I even remember a thread here in HN were one three-letter agency authenticated themselves to a user with this method, calling his numbers and saying, this is the FBI/NSA/etc but for you to be sure, please hang, look the website for the public number, call, and ask to be put through with $Agent from $Department.
> But you can also gain back a phone number

...at which point the attacker has already taken over all your important online accounts and changed them to a different phone number.
How easy would it be for an attacker to (at least temporarily) outrank the bank in SEO so that when people google the bank's number they find the top result being the attacker's number?
Then your definition of Free Speech is something different from the one generally agreed upon and implemented in many constitutions.

You can look at it that way: If a private entity is prohibited from deleting user content, isn't that also an infringement of free speech? And at what level are they prohibited to filter such content? Are they allowed to require an account? Are they allowed to delete spam?

No "Right to Free Speech" can be enforced between private persons or entities. Nobody can be forced to listen to you, nobody can be prohibited from taking measures to not read or hear you, just because you claim a right to free speech.

Thus the only correct level to fight against this particular instance of private censorship is indeed the private domain, and that's mainly counter-speech.
Is there a way to detect a spoofed phone number?
> It's slow and freezes even on tiny projects.

This statement is false. It's way too broad a claim to hold up. With all due respect I'd consider it harmfully incorrect.

Counterexample: I use CLion to work on Cataclysm: Dark Days Ahead. It's ~360,000 lines of pretty hairy C++. It's fine.

There may be conditions that make a stricter definition of the claim true. I don't know what those conditions would be. A link to Jetbrains' definition of the issue would be good.
Cascading Cache Invalidation
hey hey it was me :)

1. they promised this would be ethereum community fund's first ever investment
2. they promised q2 2018 token release guidance
3. they promised jun hasegawa would mentor Lucas Geiger to lead a huge marketing campaign
4. they promised other investors were in the round: golem, augur, matt mullenweg, wendell davis, david lee (refactor), dhvc, hashed, qtum and others are investors. i never confirmed if they really were all invested, but this is what was marketed to me
I got halfway through, and baffled by how badly written it was, figured the author was writing ironically.
> It is better if [...anyone...] include a security warning / specific reason the code is sent with the password reset pins and similar credentials.

I think anyone building such systems (either via e-mail or SMS or whatever) should at least remember THIS.

Send something like this via SMS:

> The password reset code you requested via our website is 12345. We will never ask you for this code except when you requested a password reset.

1. What is requested
2. How was it requested
3. Is it safe to pass this to some other human being

Okay, 4. in better English ;) As opposed to:

> Your caller verification code is 12345, please read this code to your banking agent to verify your identity.

Also, ChipTAN is great: https://en.wikipedia.org/wiki/Transaction_authentication_num... If your bank would use this, it would be require extraordinary smart social engineering (or a really naive user).
since then - i simply cannot reach lucas geiger or the advisor sizhao, who was the creator of farmville and has a ton of followers on twitter for thought leader type posts. sizhao said he invested in wireline, but now the company denies he ever did. he has since blocked me and doesn't respond
What lookup tables for powers of 31 do you mean?

The HashMap implementation internally uses lookup tables (arrays) with sizes that are powers of 2, which might be what you mean? The incoming hash code can happily use all 32 bits of the int type, and its calculation is allowed to overflow and wrap. When indexing into the hash bucket array, HashMap masks off the extra bits that would lead to an index out of bounds exception otherwise.
That is great, wish you a luck for your 1M target.
> I expect applications to have access to my desktop. I do not need to be asked.

You mean the place where your mom stores her confidential banking statements ?

> It would be like asking permission to access my clipboard,

You mean the place where you often copy paste passwords ?

> or read my keyboard.

You mean the place where you type your sensitive infos ?
Save this as userscript, or convert to bookmarklet.

document.body.style.filter = "invert(1)";
document.body.style.backgroundColor = "#141414";

I use a fine tuned custom stylesheet with Stylus chrome extension.
Also suggest reading "How to Lie With Statistics".

Classic, short book about fundamental stats concepts everyone should know.