skysight-inc/HackerNews huggingface dataset:
What would you suggest as a better alternative to protect your privacy?
I've heard this too but need to see the numbers. I wonder if it's the caffeine per dry weight or per brewed serve. But don't get me started on what a serving of coffee is.
The general public was allowed in as spectators at "The incubator doctor" with only their curiosity as a reason. The med students have a real need to observe patients and conditions as part of their training.
Nobody goes there anymore, it's too busy.
Think of how much advertising Coke does. It's so they can remain on top.
If it was a one-stop shop that fed me all the reading i could do, i would happily pay £10 a month for it. Maybe a bit more.

But if it's narrowly focused, the value is proportionally less. If someone does really good curation of obscure Soviet aerospace technology, i'm interested, but that's no more than 5% of my reading.

But then, i am a generalist, and fairly stingy. It seems like a repeat of a very old story to say that niche curators will have to find either price-insensitive generalists ("whales"), or focused obsessives.
Nilometer
Facebook Reality Labs | Full-time | New York, NY | ONSITE (initially Remote) | Research Engineer - Neural Interface Interactions

Last year, Facebook acquired CTRL-Labs [0].

Now, there's an opening on my team, working on EMG interfaces at Facebook Reality Labs! We're looking for Human-Computer Interaction experts who can prototype the full stack: from data modeling to novel front-end user experiences. The best part: you're surrounded by neuroscientists.

The position would be initially remote, but eventually would be onsite at Facebook's offices in New York City.

[0] https://www.theverge.com/2019/9/23/20881032/facebook-ctrl-la...
[1] https://facebook.com/careers/jobs/192919848600413/
Don't really disagree with that. On the other hand, npm/yarn is generally a dependency you can't get away from - so if your needs aren't complex, I'd say in general, you're better off with a simple npm/yarn config, than pulling in another dependency.

Of course pulling in python in a python project is free, if python is tightly coupled to the js stuff anyway.

Often eg: the front end will be just js/ts - and reusable/useful without any python.
If the adversary controls the phone network and the baseband processor - not much.

If only a small percentage of the population buys encro phones, it might even be worthwhile for the authorities to log and plot all their movements and interactions, all the time. Even without breaking encryption, the traffic analysis alone would give valuable insights.
How Much Money Americans Make
385k BTC is $3.6 billion USD.

I doubt he made _that_ much out of his parent's house.
As I point out elsewhere it’s possible to have both performance and C-extensions, but the extension interface needs to be minimized so Python implementations have some breathing room to make optimizations—today almost any optimization would break the expansive extension interface. There are projects (like this: https://github.com/pyhandle/hpy) which aim to make a smaller interface, but the community must adopt this overwhelmingly before the old interface could be deprecated and work could begin to optimize any Python implementation.
WireGuard on Raspberry Pi
That's completely different from asking two different countries to withhold information from multiple criminal investigations for political gain by a specific group of US politicians.

European countries don't even trust US politicians anymore with information about ongoing investigations, due to the blabbermouth president. Why would they even communicate this with them to begin with?
Oh my. He has fitting quotes on his web page:

"How you handle criticism will define you."

"If you have character, that statement will change your life. If you have no character, you'll remain an average complaining hater like most other people."

"A man's character is not judge by how he celebrates a victory, but by what he does when his back is against the wall." - John Cena
> Not sure why you've decided to turn this into such a weird personal attack against the character of someone you've never met!

> Pretty sure you're just trolling for effect so I'll just flag you and leave you to it.

It isn't a personal attack, it's just the truth. The fact that you think that social status is something you can conduct "experiments" against by presenting as one vocation or another, and not something that is the gradual accumulation of a lifetime of personal experiences, indicates that you don't really understand how social interactions work and so you are trying to simulate that using a rationalist, scientific method. But, this is a flawed approach, because it doesn't obviate but rather magnifies the observer bias -- you.

The problem for people like you is that you believe that your struggles with social status are generic (vocation based) rather than individualized (you). But the more likely case is that you are in a vocation that tends to attract people who have difficulties with social status. This is the same line of reasoning that people who self identify as "involuntarily celibate" take. It's a misattribution of cause and effect. You overindex on surface level factors (such as vocation) rather than on deeper factors (personality, charisma). Most importantly, there's a "schroedingers cat" type effect where your belief that your vocation negatively impacts your social status becomes a self fulfilling prophecy -- indeed, people will be reluctant to want to associate with /anyone/ who thinks that they are treated poorly on account of their vocation, because these kinds of people have a victomhood mentality that almost ensures they will project personal issues onto purported external factors!

You can go ahead and flag me if you want, but I think the idea you are espousing is really seductive and dangerous, and more common than I would like. Worst of all, it can seem accurate because it's a self fulfilling prophecy, as I indicated above. And that's why I feel the need to speak out against it -- I don't want other in technology to fall further into that trap.

If you feel you are lower status because of your vocation in technology, there are enough counterexamples available of it being vocation based that you ought to be able to reconsider whether that is the case. If not, I think you have some personal problems you need to work on.
>A friend of his offered that if he stayed at some random house ...arrested along with others

with friends like that, who needs enemies!
Assuming your story true (and based on ones I've seen on 'Locked Up Abroad'), I think what happens here is that higher ups are giving the police a win. Everyone in some of these areas is on the take, but the police still need to show arrests once in awhile. So throw some guns and drugs in a house (cost of doing business), put some randoms in there, and call the raid.
One mod on one subreddit? Which ones? Again, it is simply not true that this is being generally censored. That string is everywhere on reddit:

https://www.google.com/search?q=site%3Areddit.com+thedonald....
In the UK specifically, it's definitely possible to get guns with the right connections, but it's not completely easy.
Considering they operated in France and the Netherlands and even 'had a shop there' (whatever that means): Yes, but looking at all the articles I'm pretty sure they are also building a case against EncroChat for participating or actively facilitating criminal behavior, in which case the point is mute anyway.

Some requests can be made to ask you participate making you sort-of free of prosecution as you are cooperating, but I doubt they would do that with companies with shady structures and owners.
IMO, if a company is very serious about hiring for the role, they must offer a 1 week trial period (PAID!). The candidates get a fair idea about the kinda muck they might be getting themselves into. The team(s) get an idea as to what kinda schmuck they get to deal with over next months.

It's too easy to fake "expertise" and "culture fit" over a 2/3/4/5 round interview each lasting an hour or so.

Most companies who deem this mode as not an option, simply aren't looking for great experts or engineers, but rather a cog in the grand system of wheels to keep the show running - or what HRs end up calling - a resource!

Solution: What can engineers do for this problem?

1. Propose this option (1 week PAID work trial) to HRs
2. Keep a backlog of technically engaging, but smaller work-items which could be taken up with least amount of background-knowledge , or something that has an easy-ramp-up-path for a newbie in the realm
3. Iterate and improve

This is just an extremely condensed internship of sorts. And many firms understand the value of intern-to-hire path.
Looks like another episode of how democratic systems try to solve one of the many problems they have. And in fact, in this case and from this prospective, successfully.

I am not positioning myself here, but I would say if this was a "failed war" on drugs things would be different. Just take a look on how things look like in some regions of Central America.
the difference between blue collar crime and white collar crime is one uses guns, while the other uses pens.
Ultimately Trump is just one (albeit powerful) dude - I imagine intelligence and other agencies have built up relationships over a much longer period
SweatNet 3D Nightclub with Holograms
This is a 3D nightclub with hologram performances as a response to the Covid crisis shutting venues in London
Out of context perhaps, but rings true:

"...SQL is a direct consequence of the Heisenberg uncertainty principle..."
Too small a sample size: 1100
I really don't get the "Using malicious SSH server to trigger server side RCE" section. The language would do well with being a bit more clear wrt exactly which client and which server, and exactly where the RCE is happening.

> In order to exploit RCE we needed to build a virtual test environment that fully copies Telia's PHP client. Step by step we have gone through the sequence of Telia's commands sent over the SSH. And finally we got a malicious SSH server and a test libssh2 client running in our test lab. With this server we could fully control the protocol and start fuzzing.

> In the first few days of the fuzzing we got some crashes and partially confirmed that RCE may be exploited.

My first understanding of this:

- They eavesdropped on the "requests" (HTTP? Is there TCP tunneling involved?) using a malicious SSH server

- They replicated the HTTP (?) requests using some php code they wrote

- They then caused segfaults/infinite loops in their own PHP code

(Witness the task manager in that screenshot gif running on their own windows machine showing high cpu usage for a PHP process.)

This seems a bit away from an actual "Remote Code Execution on Telia Routers", unless I'm misunderstanding this fundamentally.

Perhaps their high-level thought process is like this?

1. The version numbers in the "php client", triggered by the change-your-wifi-password website, from a trusted IP (10.0.98.251) indicate that this client runs a version of libssh which allows for the password eavesdropping they did, and the php runtime, which is sometimes insecure.

2. Someone could perhaps use the fact that Telia is using PHP to hack their "remote management client" using a malicious ssh server at a customer endpoint.

3. Profit?

This is a very poorly written vulnerability report.

Anyway, @dang - I think the title "RCE on Telia Routers" is pretty incorrect. Suggestion: "Possible Telia consumer router security issue".
It could also be implementation-based.

A few years ago they rounded up a ring of crime phones in the Netherlands.. They were using PGP encryption, however instead of each phone generating its own private key, they generated them centrally and kept them in a database. Obviously this introduced a huge vulnerability.

The police compromised the server and was listening in (through cooperation with Canadian police as they were using Blackberries) for quite a while before they started kicking doors down :D They basically got all the evidence on a silver platter.

I'm surprised someone with the skill to develop such an app and service platform doesn't have the skill for avoiding such common mistakes. Or maybe they weren't able to explain to their users that the fact that they couldn't retrieve their messages after forgetting their pincode is a feature, not a bug. Either way, the police was really happy.

https://nationalpost.com/news/canada/canadian-judge-releases...

Not saying the same would have happened here, but crypto is hard to implement correctly and the algorithms are only part of the problem. And this kind of network is a massive target for law enforcement because the ratio of criminal users is huge.
Intel Lakefield deep dive: the first x86 hybrid CPU
Anti police brutality but also anticrime body cam always on recording in overwrite daily loop mode. Live streaming, a plus
It was not IMHO meant to deflect from DDG. It was a more general statement about peoples responses. I dislike trendy phrases but the one in play here is "outrage culture". Its not good and it's getting more common.
Physicist help needed: From my near null knowledge of quantum mechanics it seems they decrease randomness in phase and amplitude measurement by increasing uncertainty in mirrors position. So, this is interesting because the mirrors are macroscopic objects that interacted with the light in a rather simple way and conditions. On the other hand... Don't they require the mirror position in a well determined position to measure the gravitational waves?
A $4m Launch with Jay Cruiz of Ampifire
CSS Grid and Flex Box solve all of the use-cases of tables; it's only a matter of browser support these days. For a page created 3 years ago, it might still make sense to be using tables because some users are on older browsers, but for any website created from now on, it gets harder and harder to justify still using tables.
Right, let's blame the intern game.

Didn't that server endpoint need an upkeep? Didn't they wonder why it's getting all the traffic? Maybe they were DDOSed or something?

Multiple people in that company knew exactly what they were doing.
The start of 8-bit personal computers was around 45 years ago.
> So, you do collect information just not the kind you would classify as 'personal information'. I wonder if my personal domain with my full name qualifies?

Considering they have operations in the EU, I would imagine that would fall under what the GDPR considers personal information (https://gdpr.eu/eu-gdpr-personal-data/), or risk being in breach of it.
Adding to the "Ambition vs. Reality" section- COVID-19 has shown Americans have no tolerance for even minor inconveniences like wearing a mask. The minute something gets more expensive or a high-density housing project gets approved in someone's neighborhood the bellyaching about how the climate projections and expert opinions are wrong will begin. Any climate legislation must come with a cultural shift or enough barbs that it cannot be easily repealed.
In case you aren't being sarcastic he likely means $385k in BTC.

Edit: I was wrong holy shit that's a lot of money.
Hey, thanks for your comment! The solution is now fully functional, and used so far to request the planting of more than 5000 trees (In Indonesia and Haiti so far). Working hard on it these days, trying to get tens of thousands more planted in the next few months.

What we need right now are more clients, please tell me if you know companies that would be interested in integrating the API. The solution is 100% free, only 1$ per trees n eeds to be paid directly to the reforestation organisations.
Setting the SSID of a Fios Home Router to an Emoji
Telia routers in Sweden can be managed remotely from Telias web page. I don't mean port forward, but some other channel talk between admin tool on their website and the router. (You can also connect locally on the LAN and admin the router that way.)

Tangentially related Swedish bork:

https://medium.com/@rikardhjort/2-7-medical-calls-breached-i...
But that was in the 90's. All the tech must've changed the trade by 2020.
How much is a country mile in attoparsecs?
... any other browser?
Location: Leiden, Netherlands
Remote: Preferred (NL or RO could also be of interest)
Willing to relocate: Maybe
Technologies: Scrum, Agile, Kanban, SAFe, Agile Release Train, Agile Project Management, Product Delivery, Process Management, Product Roadmap, Continuous Integration, Continuous Delivery, DevOps, e-commerce, Data Analytics, Mobile platforms, JIRA, Confluence, Quality Assurance
Résumé/CV: https://www.linkedin.com/in/cristianmihaila85 https://app.enhancv.com/share/77556062?utm_medium=growth&utm_campaign=share-resume&utm_source=dynamic
Email: cristian.mihaila85@yahoo.com
> So are you saying that ⅓ has a finite presentation in decimal?

Yes: ⅓
Importance of Data Analytics for Business
Also useful for cherry crops: a rain at just the wrong time can ruin an entire crop.

There’s basically fleets of helicopters on standby around crop areas that are just there to fly above cherry trees and blow off the moisture if it rains late in the season at night.
Honestly, Facebook weathered all their challenges quite well. I don't use Facebook, but compared to other social media sites they resisted pressure in the interest of their users, so kudos to Zuckerberg.

I hope they keep strong against ambitions to scrap politically uncomfortable content. Should give the people removing 'hate speech' a rise though. Or therapy, it is probably needed. Would have been easier to ignore all that, but well...
I get the feeling you don't want to understand at this point, but ok, I'll byte:

The difference is the action of encryption and decryption is completely transparent to the user in the case of Signal or this thing they used. You don't encrypt anything, you input plain text and then the system takes over and you have to trust it. If the rumors are true the authorities compromised the servers, pushed an update to the app and the encryption no longer happened.

Just one example on how to do it yourself: using PGP you can use any hardware (not a phone marketed to criminals) and keep it completely offline. And use a phone (worst option but whatever) in which you input the encrypted thing directly. So you don't have to trust the network device. Bonus: neither do you have to use something that makes you stand out to authorities.
I don't know if it's insightful to think of this as "pure, unrestrained capitalism".

Imperialistic nation states of the 1700s and 1800s followed this playbook, in a time where the biggest enterprises were state-owned (in Empire of Cotton, Beckert refers to it as "War Capitalism").

But those systems fell apart because they were too volatile. Eventually, an inability to control that volatility compelled the same imperialistic nation states to divorce themselves from private enterprise, and took the monopoly on violence in the settlement; so far, it's been a more stable equilibrium.

Both systems are "capitalist", in that they permit the private accumulation and investment of wealth. I would argue that the main difference is the state-owned monopoly on violence, eminent domain, and regulation of financial sector.

Regions with strong criminal underworlds tend not to to be governed by institutions with such monopolies.
For what it's worth, during those "dark ages" web pages conveying useful information were typically no heavier than ten times the character count of the information. Sure, we had the <blink> tag, and garish geocities pages, hamsterdance and the rest. But that web delivered information really efficiently. Maybe we can start a movement to bring that back. Let's call it MarsMission: let's build web stuff that might be usable by the crew of a mission to Mars when they're hundreds of gigameters away.
Well, there are people who have bad reactions to gluten, but most of us don't need to eliminate it from out diet.
The fact that you could easily earn more on unemployment than not was a bizarre feature of the US COVID response. Most, if not all state unemployment schemes cover part of your wages if unemployed, not more than you made before.

It creates a strong incentive to be considered partially or fully laid off.

I'm pro basic income, but definitely don't support paying more to be unproductive than productive.

This benefit ends this month (July), so that is good.
OpenSSL Expands Partnership with Huawei
This whole thing is utterly mental. I think that given that for many FOSS development is just a non-paid hobby, a bit of self promotion can be tolerated, but straight copying without not even a single mention of the original creator is immoral, permissive licence or not.
That seems to be a relatively common second way to pronounce it. I’ve watched a ton of aviation videos and I’d guess it’s 60/40 for tur-bine vs tur-bin
Branched flow of light observed for the first time in a simple soap film
People buying drugs do so willingly.
Police has legal rights (given they do it by protocol and with judicial oversight) for most kinds of interception and monitoring, whether they do it by force or by asking does not matter - in most or all of EU.
That wouldn't change anything regarding the guns or the amount of crime - career criminals don't do it because they believe in selling drugs, they sell drugs because it's an easy way to make money.

In that regard: keeping a black market for drugs may even be a good thing. Otherwise they'd move on to other ventures that might be more harmful, kidnapping, murder for hire etc.
Ask HN: Anti-ad-blocker makes Safari “reader view” gibberish?
I have an ad blocker on my phone. Sometimes the reader view will allow me to see content despite a news site demanding that I disable my ad blocker to read it.

However, this article just shows gibberish. Is this a new method or am I just running into it for the first time? And how do they do it? Is the content “encrypted” somehow and then fixed in javascript or something?

https://www.twincities.com/2020/07/01/protesters-close-westbound-i-94-in-st-paul/
what's your time horizon?
If there was an actual shortage of workers, wages would be rising for the essential workers.
Heroku sucks, kinda. How their pricing pushed me to ask questions
I couldn't find it on the web site, but I found something similar here:

https://apps.apple.com/se/app/telia-smart-wifi/id1459248896

https://play.google.com/store/apps/details?id=com.teliacompa...

They allow login with BankID (Swedish authentication system using Personal Identity Number) or a Telia login, implying I don't need the admin password printed on the back of the router so it ought to use the same type of backdoor I'd expect support personal has and the Lithuanian web site has.

Judging by the comments of both apps though, it seems it doesn't work at all... maybe they need to add more than 5 PHP workers.
There is one project called SideQuest that--if you enable developer options on your Go or Quest, which requires a developer account with Oculus--uses Android side-loading from a PC to get apps onto the Quest. When you side-load an app on the Go, you also have to have a key file embedded in it that was generated from the device's own serial number, so SideQuest has to have you generate an OSIG for your device, upload it to your profile, then hack your OSIG into any APKs you download from their store. Quest doesn't have the OSIG requirement, but you still need the developer account to enable developer options.

And you're still stuck using Oculus' APIs. There are no open source APIs for accessing the device sensor data or rendering. Regular Android apps (minus Google Play Services) can run on the devices as tiny windows, and then you can get some super-hacky input as touch events on the app view, but it's really not usable. I think it even forces software rendering, because I've seen some really bad performance out of it (I found out about it after not having an app configured incorrectly before uploading it on my own for my own development). It's basically there as a fallback for Android's default Settings view, which you use to configure the developer settings like enabling USB debugging.