skysight-inc/HackerNews huggingface dataset:
Its probably easier to just bribe/compromise the on-site DBA who has access to the physical hardware. Dump the raw data and decrypt/analyze it offsite.
I switched yesterday. I love it does not try to guess what i search for
The biggest issue for me is that github issues in the results don't have the issue title as title anymore but the name of the project. Makes it much harder to find an issue in all that noise.
> but you can purchase LTSC on Ebay

Doesn't sound like you purchased it. It sounds like you gave some [random] place money for a pirated (and maybe backdoored) copy of Windows.

That's likely a very bad approach. ;)
> They continue to offer options to use a local account for those that want it

But they're doing an excellent job of hiding that option. Over the last month, three people I know were unable to find it without help.
The headline is not that interesting, but the bigger news here is the vector used (WhatsApp, Pegasus), and how the exploit message was sent directly from MBS' number soon after they shared contact information.
I live in a building with a quite a few nurses that work at that hospital. It kind of scares me that one of them open mouth coughed in the elevator with me the other night. Probably nothing more than a tired nurse and a dry throat, but still kind of weird to read about a thing that is a block away from where you live.
If omit the user-agent string or, even better, the user-agent header itself, everything will be fine, too.

Tested with Cloudflare and many, many other servers over many years.

On the whole, taking the entire web into account, it is rare for a user-agent string to be required.

However, it has become common for servers to make many assumptions based on user-agent strings.

I would guess there are many tech workers whose entire job rests on the assumption that user-agent strings are always present, rarely manipulated^1 and accurately represent the user's hardware and software.

1. For example, changed using "Developer Tools" in the major browsers. Google's browser has some user-agent presets for "testing" in DevTools (Ctrl-Shift I, Ctrl-Shift P, Drawer Show Network Conditions). Those should be safe to use for logins to Google websites. Try them out, e.g., when logging into Gmail and watch how the user can request vastly different web page styles based only on user-agent string.
Having built a prototype SPIM microsocope, based on the original OpenSPIM (https://openspim.org/) project, this looks a fantastic project and nicely designed piece of kit.

Its especially great that the team are actively building a community around the project for exchange of ideas between lightsheet developers and end users.

For anyone interested and wanting to deep dive for example on parts list or laser selection recommend reading the wiki here: https://github.com/mesoSPIM/mesoSPIM-hardware-documentation/...

Very cool project - thanks X for posting this.
On the subway tangent, Tokyo does continue to have multi-company competition in its transit system, yet has continued to build out its network, including new lines through the middle of the city in 2008! (Fukutoshin)

There’s a lot about why the system works, but it goes to show that network effects aren’t insurmountable

It’s a bit more costly then some alternative systems, but it’s better to have an expensive line that exists rather than a cheap line that doesn’t.
Bad advice.

A decent filter's throughput is going to be multiples of your structure's air-exchange rate.

What you want to do is to filter the interior air, by passing it, multiple times, through the filter. If you put the fan and filter in a window, you're hugely multiplying the air-exchange rate (to no net benefit), but are filtering that air only once.

The net result is a much higher indoor particulates level.

So no, don't do this.
Even worse type in "What to watch" and now Google pushes its own app on you and pushes down legitimate web results for this search in favor of their web app solution for this search.

As an independent app dev I find this unconscionable.

I expect to be fed web results that are not tainted by Google's own offerings especially not in the form of an web app that pushes other independent results halfway down the page.

It's actions like this that make it clear Google is a threat to the web at large and this threat needs to be neutralized or we will all pay down the line.
In some cases (helping a favoured enterprise grow) the inevitable outcome of the effort is the desired result (Tesla increases revenue, remains solvent).

In other cases the inevitable outcome is not desired (cddb sold to private interest, required subscription for continued use, no recognition of contributions by volunteers).
A few initial thoughts/point:
- Great concept!
- I like the simple design and flow
- I suspect you plan may be to expand this into a full platform?
- Was abit hard to add staff / cleints/ family? Need to change the button/ drop down
- Will consumers receive it for free? I think it hard to make a b2c business model work in healthcare.

I will have a bit more of a play over the next few days and come back to you with more detailed feedback
So here's the thing... Apple is able to recover your backups even if you forget your password. Therefore they can decrypt it without your password.
Are you referring to the data center breaches exposed by the Snowden leaks? Because Google claimed that they were unaware of the breach and quickly took action to correct it [1]. Are you suggesting that Google was complicit?

[1] https://www.zdnet.com/article/meet-muscular-nsa-accused-of-t...
> Soon you'll have ads in your car, or on home appliances.

No, I won't, because the instant that I see any of that happening is the instant that I'll be getting rid of that car/appliance/whatever.
Although the site mostly works properly without JavaScript, the actual download links require JavaScript to replace href="#" with the actual href, which is unfortunate.
Hi, you should change the name. You're using a registered trademark that looks like it's owned by patent trolls GPHI.

IRIX is a Unix OS. It's still used, still loved by people out there, just not developed or maintained. The rights however, are owned by some litigation-happy people.
I feel like that's a counterexample to the OP's claims? AFAICT he was saying that homoiconicity in Lisp enables DSLs which enables code compression.

But those languages aren't homoiconic and I would probably call them DSLs themselves, not as general purpose as Lisp, Python, or C.
Springtime in Switzerland – Damian Conway [Free Raku Class]
WINE does two things. The first (and easier) thing they do is they implement a loader for the Windows executable file format(s); think of it as transpiling a Windows binary to a Linux binary. The second (and more difficult) thing they do is they provide an independent implementation of the Windows API.

These two things are largely orthogonal. WINE also provides Winelib, which lets you compile a Windows application into a Linux ELF binary--doing the second thing without the first one.
If you aren't a high profile target, you may not be worthy of being targeted specifically. Of course, as in the Ashley Madison and Equifax cases, you might be compromised along with thousands of others.

Zero days are expensive for individuals and small companies, but what happens when state actors are involved?
ive tried several times and cannot seem to comment. I think that speaks more to the impact of miscarriage than my words could. I’ve had 5. They’ve all been different. You are a mother the moment you are pregnant regardless of how long. There is an unspeakable, unbreakable connection between a mother and her children. That connections dies slowly over time, not the moment of loss. For me, every miscarriage is something I still process and heal from. They are all my children though they’ve never had names nor did I ever meet them. I felt them and hosted them and would have given anything for them as I do my other children.
I personally think that there is still enormous room for improvement in applying even modern cutting edge techniques to real world usecases and industry.

Also, I think interpretability and the introduction of better understood priors will lead to extremely large, sparse networks being used across multiple modalities in applications and software.
Is there any community woke scolds won't ruin? (In relation to firing of SE mod Monica).
I mean, he wasn’t wrong. He pretty definitely proved that we are collectively a bunch of dumb fucks.
I had a windows tablet sit collecting dust for months because every day when it ran an update it installed a broken sensor driver that borked screen rotation. Eventually I gave up and installed a third party Windows Update blocker. I can't be the only person sick of my computer telling me I'm a fucking idiot who's only good for shelling out cash to keep advertisements out of my file explorer.
I honestly can't imaging who this could be "done well".

> Lets say Apple launched iTunes2 as a separate product and one day you opened iTunes and saw the banner "Try iTunes2!" would that be equally upsetting?

Yes.
There's going to be some reverse flow around the corners of the exhaust-side, but net net, so long as you've got sufficient flow and a sufficiently-rated filter, you'll be moving air through the filter and trapping particles within it.

A circular exit mask might help slightly, but you're talking a few percent efficiency improvements, not a quantum leap in efficacy.

Simple, cheap, available, and effective are the goals here. Diminishing returns set in early.
Definitely learn Python. It’s extremely popular with data science but also makes for a great general purpose scripting language. For Web Devleopment with Python the most popular options are Django and Flask. Django is an opinionated framework (like Ruby on rails) and has a large setup while Flask is un-opinionated and very easy to start something from scratch (like Ruby on Rails).

I’ve been programming with JavaScript for 20+ years now and learned Python only a few years ago. Actually I did some a very small project in it over 10 years ago but didn’t remember enough so I had to relearn (and it’s relatively quick to learn compared to other languages I feel). I’ve used it at 3 different jobs now for a variety of scripting tasks that I would have previously used C#/.NET or other languages for and I've developed a number of sites with Flask now (both on Linux and Windows with IIS).

If you are based on the US a lot of companies here that look for hire for C#/.NET and Java. Larger corporate type companies for .NET while Java is commonly used for high traffic sites (game engines, etc).
Well, it doesn't have to be that complicated.

Just underfund the security department, don't adopt systems/languages that prevent the worse bugs, and keep the core protocol proprietary.

On the other side let the governments invest in operations to hack the product.
They are betting that a key component of the US Military Industrial Complex survives long enough to pay back the interest or whatever profit tool the loans operate under. I'd take that bet.
No problems yet...

Updates work just fine and are only performed at reasonable intervals
> You're free to define experience differently but usually it devolves into defining unknown by unknown.

Many philosophers would suggest that we don't bother "defining" anything at all, strictly because of the tendency for things to devolve into a semantic death-trap. So instead, we just kind of take it for granted that everyone knows what an experience is, at a base level. For instance, it was an Experience to see Jimi Hendrix. However, I definitely have not had that particular experience. There are experiences I could have, such as the experience of going on a roller coaster, or going into space, and ones that I could not have, such as the experience that an anglerfish has when it eats. The question at hand is whether or not these experiences have anything to do with each other, whether there's a "Grand Unified Theory" of experience and consciousness that allows us to make mutual sense of these disparate experiences, or whether there's some limit to what things might constitute an experiment - e.g. the experience of being a rock thrown through a window.
> ... it's simply blanket opposition to all telemetry.

You make that sound like a bad thing, when it's not.

MS deciding they control what my computer does, rather than me - the owner - is fundamentally just not on.

The concept is extremely basic. No idea why many other people seem to not grasp it, let alone MS. :(
See DNS CAA https://en.wikipedia.org/wiki/DNS_Certification_Authority_Au...
I don't think Google has given us any reason to believe that it was not complicit. For instance, why not include warrant canaries on gmail accounts?

There is not really any fundamental difference between abetting the data center breach and opting not to offer warrant canaries. Likely tens of thousands of Google users are searched every day due to easy FISC warrants and wide investigative nets.

The state sponsored attacks on Google would of course allow Google to plausibly deny cooperation, but obviously Google has every incentive to cooperate fully, as is evidenced by the lack of warrant canaries.
There is a set of "Luftwascher" ("Air washer") designs which effectively do this.

These do filter out particulates, but also add enough humidity to the air that this is billed as a feature of the system. In high-humidity conditions this is less than ideal.

https://venta-usa.com/product-category/airwashers/
> it would send any app-search you had to Amazon to recommend stuff to you

I remember that, too. It was when I stopped recommending Ubuntu to people.
I hope you like TEAL
My journey of getting a green card in the U.S.
I'm so glad that I finally got it and live the life the way I want to live. Just wanted to share my story about getting a green card in the U.S.

https://medium.com/goodnightjournal/my-journey-to-get-a-green-card-in-the-u-s-6258bd92b56e
...huh?

My window manager is currently taking about 65K of RAM, and X is using ~800K.

Granted, I run a pretty lightweight setup, but a 'normal' ship can't be 4 orders of magnitude higher, can it?
FaucetML: High speed mini-batch reading from Google BigQuery
Regarding Reuters’s report that Apple dropped plan for encrypting iCloud backups
What is the distinction between DEs and WMs?
The Russians used a Saudi account....
> I can just as easily split comptime into

In Rust, generics, macros, traits, compile-time evaluation are different constructs with drastically different syntax (and generics and value generics are different features, implemented at different times, but I can accept them as a single construct).

> It has no way to constrain a comptime type argument (traits)

It does: introspection, just as Clojure can constrain arguments, only Zig does it at compile time.

> so you get error messages like C++ templates

You don't because in C++ templates are programmed in their own sub-language with SFINAE tricks (at least in the C++ versions I use; they've probably added new ways to do this, as they do). In Zig, it's just Zig computation. You'd get similar compile-time errors as you would get, at runtime, in, say, Clojure or Python.

> When you want to combine things, you manage phase ordering and idioms by hand, basically re-implementing Rust-like concepts at every use site.

You don't need to reimplement things by hand at every use site; you just call a subroutine at compile time.

> Sometimes one or two more concepts in the language makes things simpler.

I agree, but I think that Zig's comptime brings revolutionary simplicity to the very complex subject of partial evaluation which is so important in systems languages. How well it would work in practice remains to be seen, and I may well be disappointed, but I find Zig's approach of simplicity first very appealing. I agree it's a matter of taste.
https://tildes.net/register?code=EPFF9-HWU9Z-4D5U6

https://tildes.net/register?code=B2M91-W6VD5-ABFG8

https://tildes.net/register?code=LGG9Q-26K5G-LU8RK

https://tildes.net/register?code=GBLXM-N3GPO-V4MN4

https://tildes.net/register?code=MWMSC-2970F-VPWYM

https://tildes.net/register?code=2LDQG-FJ1N2-SM8F0

https://tildes.net/register?code=GLF5C-JHMWP-MV4YH

https://tildes.net/register?code=9HBBF-WC5CC-LBJQX

https://tildes.net/register?code=ASYR8-V3KQJ-U96N7
it's not exclusively UA, but in this post the author does say taking the most up-to-date Chrome UA did resolve his issue I believe.

You would be SHOCKED how many bad actors use an outdated UA or some random string they think is funny. This portion of CFs mitigation isn't meant to be hyper-advanced detection, just bounce out the low hanging fruit. They have other security services that aim to mitigate the more advanced stuff (like the WAF).
You may want to reconsider the name.

> IRIX is a discontinued operating system developed by Silicon Graphics (SGI) to run on the company's proprietary MIPS workstations and servers. It is a variety of UNIX System V with BSD extensions. In IRIX, SGI originated the XFS file system and the universally adopted industry-standard OpenGL graphics system.

https://en.wikipedia.org/wiki/IRIX
Yes, a ban button has been on my search wish list since Google existed!
Pavel Durov also said

> The encryption of Signal (=WhatsApp, FB) was funded by the US Government. I predict a backdoor will be found there within 5 years from now.

He seems to enjoy throwing out loosly supported accusations. He might be right in some of them, but stopped clocks and so forth.

He's also been accused himself of deliberately sabotaging the security of his own encrypted messenger app (Telegram). There's no real evidence, but he did hire a bunch of math PhDs to figure out encryption from first principles

> The team behind Telegram, led by Nikolai Durov, consists of six ACM champions, half of them Ph.Ds in math. It took them about two years to roll out the current version of MTProto. Names and degrees may indeed not mean as much in some fields as they do in others, but this protocol is the result of thougtful and prolonged work of professionals. [1]

Note: Signal, like TOR, is funded in part by the Open Technology Fund of Radio Free Asia, which is controlled and funded by Congress. So far there has been no public evidence that this funding has come with any malicious strings. The stated goal of the fund is to promote democracy in developing countries, and Signal and TOR are obviously in line with that overt goal. Radio Free Asia used to be a CIA front during the Cold War, but there's been no public evidence that the transfer of control away from the CIA to Congress was in any way a sham.

[0]: https://techcrunch.com/2017/09/18/signal-moxie-marlinspike-t...

[1]: https://news.ycombinator.com/item?id=6916860
Why not just use text messages?
Sure. The approach seems like it works for you (so far), and sounds like it worked out well for whoever got money out of you.

But, please don't encourage others to put themselves at risk. aka fall for a scam on Ebay
I use BitWig on linux with LinVST and run lots of win vsts just fine. Not all though, but most
Except that Word is complicated, big, slow, and takes a long time to start up. If WordPad does what you need, it's the better option.
PM2.5 particles are small enough that they pass through many materials.

You can use lower-efficiency (higher effective particle-size) filters ... but you'll just be blowing the bad stuff through them rather than removing it.

The net metric is how fast the room particulate level drops, which is the treatment goal. Flow rate is a red herring.
Thank you for elaborating on the deeper issues surrounding MCAS. Where can I read more about Boeing's design philosophy around FCC redundancy, or more about Boeing vs Airbus philosophies?
Scala's type aliases are pretty similar.
See: https://venta-usa.com/product-category/airwashers/

They do an excellent job of humidifying the treated space, which may or may not be ideal.
Why? I have an 80 key keyboard and even that's too many, since I have a bunch of layer-changing keys.
This reminds me of the book "Will It Fly?" His approach wasn't targeted to SV startups, but the concepts are similar.

https://www.amazon.com/Will-Fly-Business-Waste-Money-ebook/d...
Try using search engines like Qwant. Give others a fighting chance.
Not orchestrated, but happily tolerated. All Google needs is to be able to plausibly deny complicity, but the other practices of Google (such as not offering warrant canaries on all Google accounts) indicate that Google is eager to cooperate and please governments, so it would have been easy to leave a few doors unlocked, hire a plant (with solid itsec skills), etc.
Yeah, at that point, you have your phone out and airpods in your ears.

This is just texting with more steps
I am 50 and have been programming since I was 11. I learn new tech all the time. Just enough to find out if it is worth learning deeply or whether it is just another flavour of something I already know. 95% of the time it is just another flavour of what I already know so I can safely leave it alone until I need it (again 95% of the time I won't ever need it).
Show HN: XQ iMessage Encryption
Wow. Looks like a lot of old computer can be put to good use.
You probably can't get one, but ten of them would be around $50.
Thanks for the reply!

This is very interesting, I will surely take a look. Only issue I see is that it seems to use DNS, and that's not exactly secure either.

In my mind I am thinking of something that would be more theoretically secure from any remote attack (closer to a form of key-pinning maybe?)
This is worse. Feature-rich languages like C++ and Rust always end up adopting pretty much every nice feature from every other language. The trick is to have fewer features, not more; at least that's my aesthetic preference. In other words, brag about the features you don't have, not the features you do :)
one thing that needs to be accounted for is that, IIRC, we just recently had US AG Barr make a stink about encryption based on Facebook tech (either WhatsApp/Messenger i believe) being some anti-law enforcement issue.

does the theory suggest that US DoJ does not know how to exploit these backdoors, but other agencies (CIA/NSA, foreign intel services) do?
First the swine flu kills half the pigs in China. Now this thing.
Personally I'd say they ignore the areas of the country I won't move to anyway. I'm already in a large liberal city with a good job. This company can't move locations unless 1+ million members decide to move to the same place as well.

If that was Georgia or Texas, the political landscape would change dramatically though I'd rather show up 10 years later than right now. Neither are appealing states.
There's an option you can enable where the modifier always registers as a modifier if you press another key while holding it, no matter how fast.
As an engineer that has basic permissions to our build and deployment system (unrelated non communication application) I could pretty easily think of multiple steps in the build where I could inject and link in pretty much arbitrary code.

For instance, anything that can hook directly on a build machine, or artifact upload, or even just simply precompiled into one of the black-box 3rd party dependencies that basically never get recompiled.

All of these mechanism have vectors that would be easy to obfuscate and don't rely on any changes to any repo code. I think there is a good chance that a normal engineer could likely hide something that could make it into a final build product.

Now, combine that with the fact that even the most open of companies have some sort of protected infrastructure (Could be permissions on an S3 bucket, locked data-center or even just a locked away Cat-5 cable in the process. Someone high in the org could easily inject some process that could stay hidden from even the most prying of internal eyes.

Now, while I agree that it's a bit tinfoil-hat-y to believe that this actually -is- happening. I absolutely believe that the technical capability is both there and well within practical effort. And combine this with a few bad incentives it's easy to see how it -could- happen.