skysight-inc/HackerNews huggingface dataset:
Headline just reminded me to disable USB debugging. Though I wonder how many exploits are available for more modern Android phones. Between USB debugging authorising the host, and the "Use USB for charging" option, how much space is left for this? I'll still be attempting to use my own chargers though.
Does this allow users to install custom OSs on devices with verified boot chains like game consoles and phones?
I'm pretty sure it's a lenticular display, so if it's running a standard 8K panel (~33 megapixel), your effective resolution is under 1 megapixel per angle.

Computationally, generating 33 megapixels spread across 45 views is very similar to generating 33 megapixels in one view, so if your rendering pipeline can do standard 8K, you should be fine.
I don’t think you have to be mirandized to give a confession, no?
Opinion Please: Feature to always open particular websites in incognito(private)
So how do you know if a new version of a model is better than the existing serving version?
I'm a live and let live kind of guy, if a company wants to compete for employees by offering all of that, that's great!

On the flip side, where do you draw the line? It's one thing not to work someplace, it's another to protest your own employer because they are not accommodating you with prayer rooms onsite.
YouTube is NOT suspending accounts that are no longer profitable
Where Do You Stand in Data and Analytics Maturity Level?
Previous discussions:
https://news.ycombinator.com/item?id=21503851
https://news.ycombinator.com/item?id=21506403
If you’re already keeping your social media protected/private, that seems like a pretty good sign that you’re not a political troublemaker or activist.

Private social media accounts don’t have virality or reach.

I keep my own twitter and facebook private because I have no interest in accidentally igniting a feeding frenzy if I post something wrong on social media. But it’s equally true that if I wanted to make a fuss about something at my employer or elsewhere, my posts will go nowhere since only a small number of people can see or access them.
The problem with political causes is that there is no objective definition of "good" and "bad."

At this point, the co-worker's discomfort of working with an African-American or an openly gay person pretty much helps bring these issues out in the open rather quickly.

(And yes, I've been in a similar situation when a co-worker freaked out that I don't believe in Jesus, that I see the Bible as literature instead of factual, that I fully accept evolution as scientific fact, and yet I somehow see "Jesus" as a good role model for life.)

Spying is a very poor way to handle situations like this.

Instead, include some basic diversity training in all onboarding, and periodically renew it. It tends to scare away racists and homophobes.
I have not read the paper, and I could be wrong. However, these appear to be attacks against the crypto implemented inside a TPM/fTPM.

The reference implementation of TPM 2.0 leaves the choice of the crypto library up to the platform vendor. If my suspicions are correct, it sounds like some of the platform vendors decided to use crypto libraries vulnerable to timing attacks. Hmmm...
I think more likely that someone donate to anti-gay cause in personal capacity and some gay right activist in Google finds out. So they go ahead and declare "GOOGLE IS A FESTERING HELL-HOLE OF ANTI-GAY SHITBAGS" or some such on Twitter. After that they organize a walkout demanding anti gay employee be fired to make Google a safe workplace.
> Can someone provide some good example of this? Not having used it much trying to understand what the advantages are...

Sure! Here are some ways I use notebooks:

Imagine any scenario in which you'd rather make a video to demonstrate how something works. For a lot of those cases, a notebook is a great way to show how the code works and how it all comes together.

Another set of use cases is you've done some research, need to call a few api's, post process the results, and share that with your team or have it ready for later to do something similar. You could think of this as a "Super Postman". For example, you need to run some api's in a loop, filter the results, and accumulate some things and print totals at the end.

Another use case is you're troubleshooting an issue, and want to keep notes of what you've tried, what the results were, and be ready to go back and run things again.
So in one place of the world professors and higher ranking academics are taking credit for the work of those working under them, in another place academics are giving credit to children who did not even contribute, and in certain disciplines (physics for instance, afaik) it is commonplace to just name everyone working in same the place as you as co-authors, whether they contributed to that specific paper or not.

Let's not forget about ludicrous amounts of bullshit-papers being produced to inflate paper counts and citations.

Whoever thinks paper counts and authorship are good metrics for anything at this point? In fact I believe they are more likely to mislead than be useful.
Graham essays are, as a rule, good. But for each mention of Lisp, they are half as good. Half as good can still be pretty good, but one mentioned Lisp more than two dozen times. There was very little good left.

This one doesn't mention Lisp at all. It's pretty good.
I did try, but have yet to hear anything from them.
Yep I'm in contact with someone at the company – hopefully they might be able to help.
Your comment doesn’t answer any of my questions. Where are you going to build 100 dams with enough water to store gigawathours worth of electricity?

The problem with massive projects like that is that you simply cannot build them just about anywhere.
Isn’t Dell private again though?
I just got a yubikey and found this guide today. It's quite good.

One thing that I still haven't found a good answer for that's not mentioned in the guide: what's KDF for?

The new yubikey firmware has release notes here: https://support.yubico.com/support/solutions/articles/150000...

This is the bit that has me lost:

> To remove the transmission and on-card storage of OpenPGP PINs in plain text, the YubiKey supports the Key Derived Function (KDF) functionality. With the KDF function enabled, the PIN is stored as a hash on the YubiKey. When entering the PIN to the OpenPGP Smart Card, the OpenPGP client will only pass the hashed value, never passing the PIN directly. KDF functionality is set on the card itself, and communicated to the client; it is transparent to the user. Should the KDF functionality not be enabled, the PIN function will work as previously. The KDF function is listed in section 4.3.2 of the OpenPGP Smart Card 3.4 spec.

Can someone explain to me how KDF matters at all here?

It seems like the keys are encrypted on the yubikey via pin, or at least protected in hardware via pin, and that the pin is stored on the device. KDF seems to take that plain text pin and replace it with a hashed pin. If you steal my yubikey, it looks like KDF would prevent you from... dumping the PIN? But if you could dump the pin, wouldn't you just dump the key instead? I can't seem to figure out the threat model for this feature.
Or maybe not. The possibility is in any case not germane. If you're gay, it's stupid to count on your shining personality reforming a homophobe.
You could always do Linux on a PC but you were on your own. There are still deadenders trying that.

There’s always been at least windows alternative, am not sure if there’s a win-tablet
And that is different than the Monroe Doctrine? Or vietnam's claim. Or taiwan's claim.

Or it could just be the rampant anti-china propaganda as a result of the trade war?

The fact of the matter is everyone is driving the world's biggest lift truck and everyone is insecure. Especially those who bring it up in the first place.
IBM is not going to let them make claims w/o legal review.
Huh? That’s not true at all. Vitamin D was added to milk as a part of public health policy to prevent rickets since milk consumption was near universal.[1]

[1] https://phpa.health.maryland.gov/OEHFP/OFPCHS/Milk/Shared%20...
BamTech has the experience, and they built the platform that Disney bought. It’s not a new team
Top Fastest-Growing Open Source Projects by GitHub Contributors
It is, technically, but with caveats. It has to be buried deeply enough that any gasses created by decomposition won't be released or escape on their own.

More worrisome is that, done at a scale that would matter to the atmosphere, it would have to be buried in containers that are impermeable to water forever, lest all of our underground aquifers become contaminated by bacteria and heavy metals that are naturally occurring in plants.
They can't stand a little taste of their own medicine.
Ink marks on the laler can be chemically analyzed, and I am sure forensics teams learned long ago how to identify a photo copy.
https://weatherspark.com/compare/y/1548~98866/Comparison-of-...

Appears that Reno gets colder for several months and hotter for about 2 months
But it has got a weird system to it.
As far as I can tell, a fake “milk” is generally white (or white ish) and it has to be used in situations where milk would usually be used.

You don’t get grape milk and or orange milk for example.
But it’s written in Go and that makes all the difference!
It is indeed online, sans paywall: https://docs.oracle.com/en/operating-systems/solaris.html

Of course, with some Illumos distributions/derivatives/whatever-we're-calling-them, things are different due to using different tools or otherwise deviating from upstream Solaris. Better to start with your specific distro's documentation and use Oracle's Solaris docs to fill in the gaps, adjusting as necessary.
Are there any particular downsides you have with storing secrets as environment variables? It's working in my app, albeit configuration is done via the web UI [of elastic beanstalk] to keep secrets out of SCM.
Are you saying that chronic stress causes ADHD?
Very not cool
Knowing everything is religion.
There amount of details you know gives you accuracy.

We didn't know everything with the Newtonian laws, but no one is claiming that apples don't fall from the tree.

Contrary to climatology, where for some reason, people still come out and favour a non catastrophic outcome. And that despite the models lived up to make predictions within their accuracy, and even rather systemically too low for the last decade.

Do we know everything? No, but that's hardly an argument to suggest the apple will fall up the tree.
Evidence of the four horsemen[1]. Child porn, terrorism, drugs, and the all-encompassing "organized crime" — which can include money laundering, which in turn can mean having enough money the government wants to steal it.

[1] https://en.wikipedia.org/wiki/Four_Horsemen_of_the_Infocalyp...
No one is saying it is a requirement, rather that WebAssembly design oversells security by not doing those checks.

Even if they would be at word level, it is already an improvement over the actual design.
The problem with an "adversity score", as stated in another comment, is that it doesn't actually measure the adversity that an individual faces. It's not chocolate milk, it's diarrhea milk. It doesn't accurately measure the unique stresses or difficulties that a student faces in life. Plenty of students do fine being raised by a single father or mother, and some have a terrible time being raised by two terrible parents. Some students have mental health issues or are victims of bullying. Some students have disabilities that affect their academic performance.
An Apple store employee ‘helped’ a customer by texting himself an intimate photo
That may or may not be true, but it's definitely not the responsibility of any individual LGBT+ individual to try change someone's mind. Especially when said person will likely have a pretty bad time while interacting with someone who hates who they are.
Just like any other programming language, so what is the problem?
If you just want to learn about the theoretical side of things or if your discipline is purely theoretical (maths, etc.), then sure: You can learn from books and online materials, though chances are good it will go wrong in some way.

For instance in a field like maths it can be important to have someone correct you if you got some fundamentals wrong and it is hard to learn how to formulate a proper proof without someone checking and correcting your first attempts. It can be done, it might just take you a lot longer.

Other areas however require labs and expensive equipment for the practical applications. Some skills you can't learn from books alone.

That would be (almost) like saying: You don't need an actual bicycle to learn riding one, just read a book!
Elon Musk on the AI Podcast: Neuralink, AI, Autopilot, and the Pale Blue Dot
This sounds downright terrifying.
> Clearly there is room for competition to reduce costs

Unless you know the average outcomes and standard deviations choosing procedures based on cost is suboptimal.

I've never met a pre-op individual that knew how to properly choose LASIK procedures. They all use price signaling and word of mouth from post-ops.

The same is true for me in medical areas where I do not have expertise.

I think that reducing procedure selection to cost and expecting competition to fix it is an error.
True but you can dive into the benchmarks more if you visit the techempower site. They run it on the same standardized hardware and in this .NET is very competitive on cpu and ram.
I've been very pleasantly surprised by how easy it was to get everything set up on NixOS:

```
programs.gnupg.agent = { enable = true; enableSSHSupport = true; };

services.udev.packages = [
pkgs.yubikey-personalization
pkgs.libu2f-host
];
services.pcscd.enable = true;

environment.shellInit = ''
export GPG_TTY="$(tty)"
gpg-connect-agent /bye
export SSH_AUTH_SOCK="/run/user/$UID/gnupg/S.gpg-agent.ssh"
'';
```

The only surprise I had was that I forgot to tell gpg to trust the imported key after I imported it.

Combine this with GoPass... its the start of something good :)
Not sure why you'd say it's not designed for this. They call out the fact that it was specifically certified for such use and to be resistant to such attacks.
If you do you may have a hard time getting 1.8 amps out of the charger. D+- lines are used to negotiate, they’re also used to identify various chargers. Apple is a prime example of a unique ‘footprint’ a charge chip can look at to know it’s attached to an Apple switch mode power supply and can draw more than 100mA.

I recently selected a charge chip for a work project that took care of the negotiation, so I can’t quite remember the details but it was something I had to pay attention to, and definitely needed to layout the board to use the data lines even though we don’t take data in.
> symmetrical crypto with shared key across all clients

:/

> no support for roaming clients like phones

This isn't that uncommon. I think OpenVPN might not support that either.

> or clients behind NAT

:(
Ja a good rule/tip I learned about scaling: Everyone knows their first bottleneck... be the the db, the search service or the webserver... very few ppl know their SECOND bottleneck. Sometimes the first bottleneck is fixed suddenly(new upgrade, fixed config) but few people knows their second item in the chain that's the bottleneck and get hit by this in production.
Agree completely.

We already know what happens when you don’t have enough dopamine (Parkinson’s disease - dopamine analogues are used to treat it) and too much dopamine (schizophrenia - dopamine blockers are used to treat it). Saying more is better is a major over simplification.

Dopamine is involved in a number of different neural structures that all have different effects. Not to mention there are several dopamine receptors subtypes that all have different actions.
Worth noting that, IIRC, this was never included in production/release builds of the dashboard.
Countries have held much higher debt levels than the US currently does without being the global reserve currency.
That depends on what you are protecting, but in general if you are high-value enough that it's worth it for somebody to try to attack you through VM instances sharing the physical machine, you should be managing your own hardware and using physical HSM's to protect keys.
With no carburetors, alternators, starter motors, fuel pumps, fuel filters, oil filters, oil leaks, gas leaks, exhaust buildup, spark plugs, timing belts, radiators, head gaskets, mufflers, rings, manifolds, belts... and with brake pads that last forever... it's significantly less maintenance.

And Teslas are not designed to milk the consumer for repairs over the years; they are designed to convince consumers that electric cars are a better choice.

The Model 3 is designed to last 1 million miles. So sure, it will be fascinating to see how they do... but that's like 25 or more years from now.
bots and shills are different. The idea that someone can make a bot to effectively spread propaganda without being detected is far-fetched. The idea that you can convince someone to write propaganda is real.
They can also cause hearing loss.

Which is pretty depressing.
That incorrect results might lead to security exploits, the same way that browsers now get exploited by taking advantage how their VMs work.

So hand waving such security issues is rather strange, when it should be the top concern when selling an infrastructure to run code from unknown sources.
No kidding. (I wasn't complaining btw nor was I even focused on OS support, I was curious about which arches people use it on).

What are the popular use cases - either ones driving current development or ones where it's best suited?
Awesome answer, thank you!
Elon Musk: Neuralink, AI, Autopilot, and the Pale Blue Dot
On company issued hardware it's a fair assumption to make that they log everything you do and MITM your HTTPS requests.
I think the implication is that the employer is one of the platforms.
On my 6S, the last item is "Research," and while it's pretty much fully on the screen, the margin below it is cut off enough that at least to me, it's obvious that there's scrolling to do.
Saved this writeup for future reference, thanks. Agreed that privacy needs more analysis than trusting a few rather opaque OS knobs.

I am a little skeptical about some of the claims in that gist, though. One example is when they claim that APNS pushes require app access to a globally unique iOS activation identifier. That seems false. According to Apple’s dev docs at least, those tokens are device-and-app specific and have to be re-requested at app start time since they can be regenerated for a variety of reasons: https://developer.apple.com/library/archive/documentation/Ne...

Seems to have nothing to do with an activation UUID from a quick glance.

I appreciate a lot of the reference material in there, but this seeming mistake of conflating 2 different UUIDs makes me a little skeptical of some of the conclusions.

Edit for correction: I think I misread this part of the gist. They never directly say that the activation UUID is given directly to the app developer, just that Apple can track your social networking app pseudonym over APNS, "and possibly the social networking service" will be able to, as well.

This to me implied that the social networking service had the activation UUID, but the author never directly said that. If the notification has your pseudonym in it and Apple's storing that when a notification goes to APNS, it does seem like Apple would be able to tie that to your device if they're peeking inside the notification payload. The solution to this would be for the app developer to not include sensitive info in notifications or for the user to disable push notifications, but an E2E encrypted trustless notification solution provided by Apple would be much nicer.
What if your co-worker participates in Twitter outrage mobs trying to get people fired for something you believe?
Next.js vs. Gatsby vs. Create React App
Because they want a nice paycheck and to go home at 5:00PM.
I just want to know what happened to dilemna.
3 nodes of a component in parallel would give you 99.9999% for that component.
What I meant is that I'm not being pedantic for the sake of being pedantic.
When I hear this, I hear jobs and the most revolutionary green company are not welcome. If that's the case, Berlin is lost.

There is good and bad to gentrification. You don't hear stories of the people who bought their house for 50k in 1980 who then sold it in 2010 for 1.3MM. Or the people thankful they don't have to walk around in fear of gangs for themselves or their children.

TO me the biggest problem is the State. In SF, among many many other things, it's their zoning policies that caused the housing crisis. But they run education and media. So people blame the most revolutionary green company, or others bring wealth to the area, instead of the State.
What Is the Next Bitcoin? Top Leading Cryptos That Could Overtake Bitcoin
This makes it sound unprecedented, but there used to be a 17" model.
That will limit the amount of power you can draw to 500ma. The data lines are needed to negotiate power supply above that e.g. quickcharge standard.

A proper usb condom has some smarts which acts as a middleman, that only passes traffic relating to power negotiation.
The new NAFTA (and CETA) aren’t going to improve access/prices much.

NAFTA will allow access up to 3.6% of the dairy market tariff free.

I think CETA was supposed to allow Tariff free cheese imports to make up 9% of the market instead of 5. Not a massive change.
"Search for something generic like "computer" and you can see an example of how hard it is to get information instead of ads"

I see ads panel for computers, followed by wiki, videos about computer, questions, map with computer shop and list of links related to computer terminology.

I don't use ad blocker. Still get relavent results.
One could be construed as “lead” as in the element/metal.

Therefore lede is a more clear and appropriate though somewhat less widely-understood word.
really haven't been following but just curious if these people weren't happy why didn't they leave and go after the company instead of their peers?
Wayfair - you can listen to the NPR podcast "How I built this" where they talk about building their entire business around domain names and pay-per-click advertising (7 billion market cap).
> "People who believed in that openness would just expect that everyone's work schedule, and lots of other information besides, would be online so that all their coworkers could effectively coordinate."

If that's an accurate characterization of what the employee doing the calendar tracking was doing, then I agree that it was reasonable in the context of Google employment. However that would mean the article is very misleading as I suspected. The article says the subjects of the tracking felt unsafe, which says to me the tracked employees weren't sympathetic to the cause and believed motive for the tracking to be intimidation or harassment.

I have never and would never work for google so I can't say for sure, but I doubt openness as espoused by the company ever meant using openness to intimidate or harass others. IF that is what the employee in question was in fact doing, then it seems plainly unreasonable to me that anybody would defend it. I find it hard to believe such behavior was ever part of [official] company culture.
New 5G flaws can track phone locations and spoof emergency alerts
> “Israel is probably just too small of a market”

I’m not sure if size has much to do with it. Tesla is in remote countries like New Zealand (1/2 the population of Israel) and Iceland (about 1/20th the population of Israel), as well as neighbouring Jordan (similar size to Israel).
I suggest checking "Nancy's" dairy line, made in Oregon.
False comparison. Google users are voluntary. No one forces someone to use Google like the Government forces someone to pay tax.
Nah that’s SpaceX, not Tesla. The S and X use a lot of friction stir welding, which machines do anyways not humans.