skysight-inc/HackerNews huggingface dataset:
I don't think FB or Apple can win a bidding war with state actors, and especially not a wealthy monarch. I think the problem is these 0 days are worth more to bad actors than the bad press costs companies.
Is anyone surprised by this?

It could be for many reasons too, including average people forgetting iCloud passwords and wanting their data back. Does Apple unlock an iCloud backup in that situation?

Perhaps a pro-privacy compromise would be for Apple to offer the feature but have it turned off by default, which means 99.99% of users won't ever change that.
>Boeing should not be selling a plane into a market that don't cover markets natural variant in pilots and airlines. That's like selling a car only F1 drivers can safely drive to the general public ( and crucially without telling them it's really F1 driver only... )

This reminds me of that fatal crash with "Fast and Furious" star Paul Walker: the Porsche he was driving really wasn't fit for the road, and was only safely driveable by a race car driver. It was too powerful and the center of mass was too far to the rear (thanks to Porsche's idiotic rear engine placement), giving it a strong tendency to fishtail and lose control.
Actually, this is my second question. How much money FB/AAPL are ready to pay for a security researcher who can find 0 day in their software to work full-time for them? Is Nefarius Inc. really competitive with them, salary-wise? I just can't grasp the economics here. Back in 90's, being a bad guy was probably more lucrative, but now, when established IT companies have market cap in trillion zone... what makes people work for nefarius inc?
You do realize that an author's own blog or site is hosted on a platform of some kind, right? Authors wouldn't be choosing Medium over setting up a Wordpress instance on HostGator if it wasn't easier and didn't get them readers.

You can choose to not read Medium articles, but authors are using it for a reason.
I always scroll past the ad to click on the "real" URL. I don't want to add to the statistic showing support that behaviour.
Reading people repeating again and again the same stupid fairy tales about the lazy southern europeans and the diligent northern europeans is frankly annoying. For example the author says that:

> "I don’t think they have siestas in Germany…"

A wild siesta cliché suddenly appears.

You are really funny. For your information, workers in Spain don't have "siestas" since XIX siecle, we have electricity and cars also. I can understand how for many young europeans the entire experience of Spain can fit in a blurry weekend in Magaluf, a bleeding nose and maybe a broken arm after jumping to a pool, but the country is a little more than that.
Fair enough. Curious if you have a gut feeling for what alternatives are?
I think the idea is that a strong SEO site doesn't have to pay to be seen through searches.
Maybe the mechanism is in the cynicism. After some time people forget why they are freaking out over something that never happened as far as they remember.

A bit like the Y2K bug that was supposed to end the world but nothing happened but nothing happened because we took measures successfully. There are many people out there using this as an example of alarmist to draw parallels with the climate change concerns.

Maybe we as a species need to have people around who remember things and when they are gone we simply re-learn the lessons. Writing seems to be effective on passing the knowledge on how to do or avoid things but not very effective about the reasons.
Where's the Feds on this? I don't find it comforting that attacks happening on the US's free press go unanswered by law enforcement.

We should be indicting MBS.
He also proposed some pretty serious cuts to the CDC last year. Not sure how much of those actually made it out of budget committee, I suspect most of them didn't make it through, but certainly is an indication of his priorities.
For physical ailments, I use Brave + incognito (and search with DuckDuckGo), then manually look for webmd hits and such. Still, I have this feeling that 5 years later, I'll be reading about our ISPs ratting us out to insurance providers.

Other suggestions welcome.
Do you have any personal recommendations on DIY iCloud alternatives?
As someone who lives quite close to the hospital in the article, it was interesting seeing reactions this morning at the office. Some people immediately wondered about their immuno compromised friends and family, while others (myself included) just sort of said "huh" and went about our day. It will be interesting to see how this plays out.
I've used DDG for many years now, and I'm admittedly one of those weirdos for whom political statements about freedom and privacy matter, so I'm a "loyal customer" in a sense.

However, 10 years ago I honestly felt DDG is not really worse compared to Google. And here's the problem: DDG hardly changed over last I-don't-know-how-many years, while Google surely did. And while it seems primary Google users are constantly upset about the nature of the changes, I, on the contrary, quite often appreciate how it behaves, especially on the mobile. In fact, when I bought a new phone this autumn, I, for the first time didn't change Chrome+Google Search as my default search engine.

I'm still mostly content with DDG on PC, but Google is actually better at answering questions I mostly want to ask on the go: to look up badly misheard brand or person's name, find some local shop and show me the time it closes, or — the thing DDG is most useless for — brief me on the real-time news everybody is talking about for the last couple of hours.
I too have created command line terminal application specifically for this. My solution is to be able to add any metadata to bookmarks with full text search. No release yet, there are bugs but it's perfectly usable (have been using it for months now). https://github.com/tryffel/bookmarker
As someone who likes modern PHP and hopes to see old stereotypes go away, this comment made me sad.
Is arxiv.org mirrored on archive.org? The latter has its Wayback Machine of course, but that might not necessarily follow .ps and .pdf links.
Loooooved Costa Rica when I was there Mid December. Spent 9 days there and could have spend 9 more. This story brings back good memories. Good read, thanks!
If you have good SEO and drift to the top of queries that actually are relevant for your site then you don't need to buy as many Google ads.
They can stop providing updates and let it go stale.
yeah duck duck go is actually great for coding!
Patreon is much better fit for continual software maintenence. You get a monthly income to keep improving the software.

That said, video games aren't unheard of on Kickstarter. There's a final product to deliver to the backers so they can check the "successful Kickstarter" box and then move on to a new project.
SARS has a higher fatality rate than 10%. It's more like 25%. The reason why the numbers are so low is because China underreported the number of deaths. Look at Canada for a more reliable number. And that's not including any long term problems the infected people got even after recovering.

My dad was in China during the SARS time. He said they shut down entire hospitals and basically let people die from it. These are things you don't hear about at all.
In that case, isn't the web server storing the E2E key to decrypt for serving it up via the icloud web front-end?
I travel almost every week and washing my hands every time I can plus never touching my face have kept me ill-free for a couple of years now. Of course I also take other precautions like avoiding closed spaces with sick people, good sleep, drink water and exercise regularly.
Why bother eating anything except cold gruel?
Why/how would you be smart enough to run custom firmware on your router, but not set your password, even while enabling remote administration?

(Are routers pre-loaded with Tomato being sold to naive people somewhere?)
It turns over data more often in response to secret U.S. intelligence court directives, which sought content from more than 18,000 accounts in the first half of 2019, the most recently reported six-month period.

When you think about it, that volume is staggering. 36,000 iDevice-using intelligence targets every year? Imagine the amount of analyst time required just to go through 36,000 iCloud backups every year!
> (b) we don't really have all the facts of the case

According to Folha de São Paulo there is a recorded conversation where Greenwald mentions to one of the "hackers" that The Intercept Brasil had saved all the submitted files, hence there was no reason for the hacker group to keep them:

https://www1.folha.uol.com.br/poder/2020/01/sem-ter-sido-inv...

The plaintiff considers this is a proof of Greenwald assisting the group.
I really like the range picker, you should consider adding time into the date picker. Many times developers have both date and time requirements. Most of what I do in my domain, requires precise time down to the second due to legal requirements.
>Does this mean that, for instance, if you're writing a novel, you start without a structured outline?

It could, but there's no reason you couldn't start with a terrible outline instead of diving right into prose. The point is just that when you see something your brain will stark noticing all the ways it sucks and it gets things going.
Great book about this (and, more broadly, the rise of medicine as a scientific endeavor):

https://www.amazon.com/gp/product/0143036491/
Whatever happened to following their own stupid advice about not having more than three ads via ad-sense, not having a bunch of ad's above the fold etc?? I do a search and I see four ad's and more ad's on a map and it's the entire screen. Thanks Google!
The WHO is a policy org. They don't have any power to do anything on their own. They can only recommend things.
Hospital masks by itself would not help prevent things like SARS. In Toronto, health care workers were getting infected even after following the strictest protocols.
ChromeOS is a joke if you are offline or need to do any local work. Their 'file browser' has got to be an inside joke its so bad.

Its a great device for browsing + youtube/netflix + FB + gdocs. Which is why its so popular in edu because they basically give it away. And its enough for most people.
I can only offer my reason: I don't know it.
DDG and Bing are so bad, there is nothing on the market right now that can replace Google search for accurate results. The auto complete for instance in Google is no match.
Are folks actually questioning the "just" nature of a law, really? If so, which law?

Or are folks questioning whether that law is being falsely applied in this instance?

I think it's the latter. Folks are saying, essentially, that he wasn't part of the conspiracy to commit a cybercrime but that he was working as a journalist who simply received information. That's a very fact-dependent claim. I don't think folks here would say that journalists have blanket immunity to commit cybercrime or anything like that -- this seems like a dispute over the facts. Of which we have basically none.
The question and his answer were both completely clear. And most importantly, it's perfectly consistent with what Apple has said multiple times. You can believe they lied to a federal court and Congress if you want, but I certainly don't.
"Steal"?

If customers searching for your brand are happy to buy from your competitor with a different name, maybe your brand isn't so strong?

And if you are profiting from advertising your brand to people who don't choose your product over alternatives, isn't your marketing just "stealing" purchases from competitors?
I could maybe understand this for the home edition but people pay extra for Pro. The whole point is to not spend 30+ minutes removing crap.

Also those registry fixes frequently get reverted by updates. It’s happened to me multiple times. Even if you succeed your greeted with a start menu that looks half broken.
I’d love to see some of that money. I’m Canadian and you’re right, the stuff that gets put out as AI is quite sad. They tried to pitch me as well to get my feedback on their platform.
You need to take a step back, take off your engineering hat, and realize that the issue is not about private keys. This is about a company (Apple) needing to follow the laws of the country that it operates in or else it is banned. It doesn't matter if Apple was selling bread or handbags, they MUST provide the government with data about their customers when compelled. This is the case with all companies operating in China, foreign or domestic.
Presumably because the attacker(s) assumption was that Bezos would open a message coming directly from someone he trusted and had direct communication with, in this case being MBS?

That brings a lot more questions though; who actually sent the message? Was it a man-in-the-middle situation? Was MBS's WhatsApp account compromised? Did someone else use MBS physical phone to do this? Was it a third party?

Interesting and strange story all around.
>I don't think FB or Apple can win a bidding war with state actors, and especially not a wealthy monarch.

Depends on your personal risk profile, I guess. If I was a highly professional security researcher (one can dream!), the one can find 0 day RCE in whatsapp, well, I would happily accept 10-20M bounty from FB and retire for life, instead of bargaining with wealthy monarch and accepting non-trivial risk of being dismembered with some blunt tools in embassy of Turkey or somewhere else.
From a distance, to me it's interesting to read about fears of the FBI snooping in our phones and email, and see how quickly the discussion jolts to how immoral (or amoral) corporations are because one of them is not completely defying government.
> both are absurd creations that can't possibly exist, though.

How so?
Google 'likelihood of P = NP' or 'efficient market hypothesis P = NP'
You can host a peer-reviewed selection of papers as an "Overlay" over an open-access archive such as arxiv.org, at trivial cost. Closed-access journals don't even fund their peer-reviewers generally, so it's not like the "overlay" journal would be offering a worse deal from that POV.
> over the years PHP has managed to get itself a reputation of messy codebases, inexperienced developers, insecure code, an inconsistent core library, and what not.

RTFA? My sentiment is not about the language so much as the culture around it. You can certainly write great code in it, but I also have worked plenty of PHP dev shops and have no desire to ever go back to that life. It's clear you're hurt that the language you know has a bad reputation. My condolences on that. I don't need to list off languages that I like to know that I don't want to use PHP or work with PHP developers.
It can be argued that the entire recent resurgence of VR started with a few random comments of support from that same John Carmack.
Excellent point. This would have been reason enough to kill the idea irrespective of the CAC calculation.

Speaking from extensive marketplace experience: A pattern of long term relationships will lead almost surely* to supply-side defection in your marketplace, which is when the supply leverages its relationship with the demand to set up a side deal that cuts out the platform. This can quickly take both supply-side and demand-side churn to levels that are an existential threat to the business. And of course, fraudulently inclined supply side firms may turn defection itself into an optimized business process if it's lucrative enough to do so.

High defection rates ultimately killed Poppy (babysitting marketplace) and Tutorspree (tutoring marketplace), and they continue to plague even platforms like Rover and Airbnb despite (or because of?) their scale.

* Despite what many folks believe, it's is possible to run a successful relationship marketplace without significant supply-side defection; you just need to structure it to leverage the relationship, rather than trying to break the relationship into a set of one-off transactions. (As an existence proof, I'm running such a marketplace right now.)
They should have paused all building of the 737MAX long ago, and switched to other models. The 777 in particular seems to at least have a stellar reputation still.
I'm not sure regulators would look kindly on an pan-industry cartel explicitly designed to suppress smaller business from appearing in the marketplace.

That's a pure antitrust play.
It's pretty funny watching HN downvote these statements. Statements that everyone in the industry agrees on.

I don't know if HN is getting worse or has always been an uninformed mob, but the amount of ignorance and blind downvoting around the max 8 issue has been pretty eye opening. The quality of discussion here is only marginally less uninformed garbage than on reddit. Suddenly everyone is a backseat aerospace engineer and aviation safety expert on the side.
Or someone/group/agency who was able to compromise MBS phone or WhatsApp account.

There are a lot of possibilities here, what a wild story.
This is a nice feature, do you know any other language that has something similar?
> If your reason for rewriting the code is that you don't understand it, you should not rewrite it.

Which is just another example of Chesterton's Fence: https://en.wikipedia.org/wiki/G._K._Chesterton#Chesterton's_...

I once lived through a complete application rewrite. The rewrite was necessary to add a new feature that didn't fit into the existing code organization. We were able to reuse large parts of the old code, but it still took twice as long as estimated. And the result was the most bug-ridden version of the app ever. But ultimately it was successful, and the new feature was much loved.
Yes, genius if the content is asynchronous.

Any real-time or interactive display will need to be able to stream at sub-frame latencies. At 60fps that means less than 16ms, at VR friendly refresh rates ~90fps that means 11ms.

While their approach works beautifully for their core competencies, static and non-interactive streaming content, it doesn't really work for any other application.
I think ISP's probably did more for distributing browsers at the time.
“Mitigated” normally only works in the positive, i.e. that something has reduced or compensated for problems. Here it appears to have been used as a negative, that something has reduced or compensated for benefits. It’s a subtle yet important distinction that will jar any native English speaker.

“Diminished” would be a more suitable synonym, but “mixed” appears to match the intent of the whole post.
I use duckduck go on mobile because it doesn't prevent me from saving images.
It isn't intended to be merged, but it is intended to be used with Wine. As such, one can envision it being provided by default with Wine.
My kid recently moved apartments from one served only by Comcast to one not served by Comcast. He filed the cancel request online and took his cable modem to a Comcast office in a nearby mall. The cancel process took about six minutes total; nobody called to beg for him to stay or stall him on the phone for over an hour.

My view is that the indication is how a company treats you when you leave versus when you arrive and, at least this once, Comcast did well on both.
Just wanted to shout out the Fountain plugin for VS Code: https://marketplace.visualstudio.com/items?itemName=piersdes.... Nice syntax highlighting and generates a live preview as you type which you can then export as a PDF. After trying to format things vaguely correctly in Google Docs for a while it felt like I could finally focus on just writing the dang screenplay!
It's about keeping up the habit even with the most half ass effort vs no effort at all.
Hedge Funds Not Led by White Men Outperform Nearly 2 to 1
Maybe Aldi is a better example?

Edit: Didn't know this, but Aldi bought Trader Joe's and currently owns it.
I own a Google Pixel 3 and use Hangouts and other Google services like drive, photos, and notes everyday. I find that it's super convenient to have all of my data (including search/location history) integrated in a single account and synced between my desktop, laptop, and phone. ex: I misplaced my pixel recently and was able to find it from a Google search providing an immediate option to have the device make noise.
That said, I also dabble in using inconvenient software for moral and learning reasons: I use Gentoo on my desktop. It feels better to use open-source software, but often I'm exhausted because things just don't work by default.
It's far more elegant and concise than any other scripting language I can think of using to accomplish the same thing.

As the article points out, other languages will have a lot more ceremony around opening and closing the file, breaking the input into fields, initializing variables, etc.
Agreed. Not all languages are powerful enough to offer a lisp mode that'd be sufficiently lispy though. The whole point of LispSyntax.jl is that it's lisp syntax while still respecting julia semantics, which are basically just lisp semantics.

Of course, LispSyntax.jl still has some glaring omissions that someone should really get around to implementing.
If you're scared just read the wiki on SARS - the previous coronavirus infection - to refresh your memory.

https://en.wikipedia.org/wiki/Timeline_of_the_SARS_outbreak

It was a LOT worse that time - Chinese government basically covering up for the first 6 months, virus isolated only much later, sequenced months later.
I'd go with Ruby on Rails if it's mostly CRUD operations. You'll be very quick to get something up and running to power your frontend.

You could also use some hosted services like https://firebase.google.com / https://www.contentful.com but that depends on your use case and if you want to be dependent on someone in return for being a bit faster.
It seems unlikely it would be MBS himself pressing the button, but a reason why Saudi intelligence might use his personal account is because Bezos would be far more likely to open a video sent from MBS than from some random account.
Scammers use the messaging of legit companies, and vice versa, because by assumption consumers can't tell the difference and companies use the most effective messaging they know.
You would build that into the cost of buying "no ad above my top result."
I agree with your #1 point, humans aren't quite as different from our ancestors as we think.

That said, I don't think the author of the article really supported his points adequately. He seems to have a very strange view of the world and society driven by and centered on his own experience rather than research or any kind of science. This paragraph:

"Online public spaces are now being slowly taken over by beef-only thinkers, as the global culture wars evolve into a stable, endemic, background societal condition of continuous conflict. As the Great Weirding morphs into the Permaweird, the public internet is turning into the Internet of Beefs. "

...Is a good example. I don't think many people would agree that "the global culture wars" are a thing, or that continuous conflict as he sees it is a stable condition or endemic.

I get the impression he's a young person who has bought into the snake oil of the Internet being the Thing That Changes Everything and now that he's tired of waiting for the singularity to occur, he's disillusioned and griping about it.
Unfortunately it kills the performance on Linux

https://twitter.com/phoronix/status/1219645628298539008
I'm not currently doing any filtering. The content is in Markdown, and I'm using a home grown static site generator to make the final output. For everything under /txt/, I just append a simple header section. You can see the really hacky code I'm using to generate it here:

https://github.com/anderspitman/anderspitman.net/blob/master...
> what makes people work for nefarius inc?

No idea about nefarius, but when I talked with someone in a similar role the answer was work conditions. It was apparently easier to get a remote role with a flexible schedule at a more "sketchy" company.