skysight-inc/HackerNews huggingface dataset:
For one, the clipboard snooping problem.

If you’re using a password-manager (like we’re supposed to!) and use it to copy passwords (say, your Amazon employee internal credentials...) while you have TikTok open, the TikTok app would see it and could upload it somewhere.

...and we only know about this issue now because iOS 14 adds clipboard snooping notifications - and that was only a month ago! Think about the stuff that the app could be doing that we don’t yet know about.

There’s too many bloody-obvious security vulnerabilities that are decades old but don’t get fixed until they either become a meme (like SQL Injection) or the platform vendor does something about it (iOS 14 clipboard notifications) - and don’t forget that the SIGINT community is sitting on millions of dollars worth of zero-days that they won’t disclose to vendors unless they feel like it - so I fully expect there to be more surprises in TikTok - and other apps - in the years to come - probably indefinitely.
> we can specify some that are a no-go.

Oh, that's very interesting! I knew about the PIN requirement as an example of control outside the work profile, but I didn't know this was possible. It makes sense though.
Unfortunately, the ability text is all wrong:

Whenever you activate one or more creatures block, flip a coin.

There is no way to "activate one or more creatures block" in M:tG. So you 'll never get your extra turns :)
with all the daily (justified) outrage against FB/Google I struggle to understand why the community here is happy to applaud these companies for its innovation on specific projects or the work of specific engineers, ... whether it's project-zero or some fb framework we seem to be OK with praising their employees while at the same time hating how they use that innovation.

some serious cognitive dissonace is going on - either that or it's the effects of the news-cycle making us blind to it. Maybe we should think twice before applauding FAANG engineers in future posts because Technology isn't neutral.

note: a company can't be evil. it's just a group of people who can be evil and who hide behind the facade of the "legal person" statute. I'm happy to celebrate individual breackthroughs but let's not forget that without (metaphorically) nailing the culprits to the cross who are responsible for ICE contracts or privacy invasive tech there isn't even a point in complaining about all the horrid stuff these people (working for these companies) do.
I'd ask for a citation, but I know you're arguing in bad faith. If you were here for an honest debate, you'd act like it.
> Removing support is a passive action; you accomplish it by just doing nothing. Calling exit() is rather more on the aggressive side.

It's more graceful than the program exiting in a bad way because you passively decided to stop support.
Here's the fun philosophical question: Do you have a below-surface level understanding of anything? I mean, sure you know that if you do this, something else does that, but do your really understand?
There’s a handful of others, including some that support both platforms
https://youtu.be/Zof-TH8hZ20
I think what they mean is their threat model is more drive by random attacks rather than concerted efforts by intelligence agencies.

For the former a piece of tape is enough.
Well Purism laptops have hardware switches for the microphones too.

But it's not even just for hackers. Zoom had the SUPER annoying habit of turning your cam on when the meeting organiser selected that everyone should cam.

This led to several colleagues being unaware they were being shown at that time. One was even lying in bed and called in from her phone. That's her business, it was 8pm at her location. But now everyone knows.

A hardware slider would have prevented all of these real-world problems.
The problem is not that the endpoint is not available, rather that the endpoint is returning garbage on which the parser chokes. Of course you should always write parsing to be 100% resilient against any kind of garbage input (even malicious), but my point is that your marketing SDK could still be a ticking timebomb.
It's not random though. They likely show most contrasted area (with maybe some face detection).
True, the patient could receive treatment. The risk, given a pre-existing condition, to become infected with the virus is still an additional burden, but perhaps not death. Conversely, some number of people with pre-existing conditions, who chose to avoid hospitals and who did not die as an outcome, could have also died had they visited.

I imagine that the people who chose to stay home are in a set where it wasn't obvious that staying home meant death. Thus, I think it was a good bet given what we know about coronavirus complications, spreadability, and virulence.
They were acquired by Talend in late 2018, I think.
Type Safety in Two Easy Lemmas
Yeah, but the “climate of fear” arises only because powerful people with prominent platforms are afraid of being criticized. And criticism is protected speech.
My story with coLinux was that it was also my first experience with Linux, also around 2008. I wanted to try it but the thought of installing it and dual booting seemed a bit scary to me, so when I came upon a solution that supposedly let me run Linux and Windows at the same time, I was thrilled. However, since I was very young and knew nothing about Linux or even computers in general, I never managed to actually run any Linux programs with it. I don't remember if I just didn't install a disk image with a distribution on it or what, but since I didn't get it to work, I assumed that it was some sketchy project that amounted to snake oil.

Fast forward to earlier today, after using Linux (proper) for the past 12 years, I came across another comment on HN that mentioned it and realized that even today I didn't really understand how the promises of coLinux were possible - how can you run Linux and Windows at the same time? Was it some kind of userland virtualization, like Wine, or was it just a fancy virtual machine, or what? After reading about it I realized it was in fact a very real project that actually did work, and that it used a very novel method of running two operating systems together without "virtualization" as people typically know it, where there is a "host" and a "guest" separated by hardware isolation mechanisms.

Instead, it works by literally just running the Linux kernel inside of a Windows driver, with some bootstrapping code to allocate memory to it, some glue for Windows/Linux context switching (with control yielding from Linux to Windows after a time slice, and control passing from Windows to Linux via a userland daemon in Windows calling into the coLinux driver on a timer), and a mechanism for ferrying interrupts between the two kernels. This basically amounts to "cooperative multitasking", which hadn't really been a thing since segmentation and paging were introduced at least as far back as the early 90's, and as far as I'm aware hasn't been used as a technique for serious virtualization since (for probably the obvious reasons).

It was pretty fascinating learning that this thing I'd tried so many years ago (and hadn't managed to get working, sadly) had such a novel approach to virtualization, so I thought it was interesting enough to share here.
> A vanishingly small percentage of beef comes from the lands under discussion.

I don't doubt at all the environmental destruction being wrought. However, the land's use is supporting some market for beef though, or else why would the question of $1 leases to stockmen exist?

Is it just that it's cheap and marginal (in both cost and quality) land that can be used for marginal production increases, or is it supporting some niche high cost beef sub-market based on its wilder place of production (high alpine beef)? It can't just all be a UBI scheme for alpine beef ranchers.
> There's a reason Zukerberg's laptop has its mic and camera tapped up.

Virtue signaling mostly.

It’s not difficult to open a laptop and remove those components all together. Especially for someone like Zuckerberg.
SNL is still fairly popular, as are Brooklyn Nine-nine, Late Night, The Tonight Show, etc. And 30 Rock and Parks and Recreation wrapped up not that long ago.

They also do have a major ace up their sleeve as the official American broadcaster of the Olympics.
The key word/concept I got from this concentrated finance.
I think you could for a few moments at least. Of course if this is an endurance race, you're destined to lose ;)
Don’t you have bright lights outside? Do you like being woken at the crack of dawn?
Sounds cool, but what exactly is the advantage of doing it like that?
Amazon does have breakout shows. They have won the last 2 emmy for best actress in a comedy TV series.
zsh + oh-my-zsh is a hassle-free batteries-included power-tool with a large community and lots of plugins.

I don't use my shell for intensive computing so I've personally never perceived any slowness or clunkiness.
The attack most people are worried about is your camera being activated while your laptop is open. Huawei's approach seems worse since you can't just apply a cover to it.
It’s different in that it was such a long time ago people still had horse and buggies
I remember reading this a few years ago. Well worth the re-read.
Why on earth would Netflix want their blog behind a paywall?

Absurd.
We don't necessarily have to scale this. I think a better approach is to build decentralized food systems using these practices. At the neighborhood or household level, these practices are very practical. It does not require rebooting the whole system. It does not require venture capital, because you're not trying to make a big return. It does not require waiting for conventional farmers to change their practice.
Should really use quote marks I guess.
Simulators, for one, are very complex and take a lot of time to master, and buying them for that much (or more) money is well worth it. It is like buying a $200 math or physics textbook: you'd spend so much time and effort studying it that the price would not seem to matter in comparison. (Not sure about other kinds of games; vendor's focus on the DLC might be the biggest problem there.)
> In the book [Dreyfus] argued that an important part of human knowledge is tacit. Therefore, it cannot be articulated and implemented in a computer program. [...] [...] [...] These skills cannot just be learned from textbooks. They are acquired by instruction from someone who knows the trade.

This is a classic example of the Mind Projection Fallacy [1], where a property of how you think is assumed to be a property of reality.

It's true, for humans, that it is simply not possible to be told how to ride a bike and then be good at riding a bike. No matter how carefully and completely you explain to a human what they will have to do, when you put them on a bike for the first time they will struggle.

The mistake is assuming that this "have-to-really-do-it" effect is a limitation intrinsic to bike-riding-knowledge instead of a limitation in human learning and communication mechanisms. The mistake is assuming this property will generalize to all bike riding systems.

In a computer system, what would be tacit knowledge for a human is no longer tacit. If you create a computer program that can successfully control one bike riding robot, that program can be copied to a freshly built bike riding robot of the same make. The new robot will then successfully ride a bike the first time it is placed on it, without any hint of the human "have-to-really-do-it" struggling phase.

It can be intuitively useful to imagine computers as having the ability to "super communicate" in a way that humans simply can't. That has its advantages, and its disadvantages. If you had super communication you could super-explain to a blind person what it was like to see and if they ever did gain their sight there would be no "Oh so that's what you meant" moment. On the other hand, a heroin addict could super-explain being addicted to heroin to you.

1: https://en.wikipedia.org/wiki/Mind_projection_fallacy
Thank you, I would recommend to go for it. Would be nice to tie the GPS into some blog that would track where you are (aproximation for privacy reasons maybe).

A floating solar-powered server, should be nice!
How many miles did you go? Where did you sleep or eat?
Has anyone here not heard of duct tape?
They're sociopaths.

Probably rich white dudes too. Pretty easy to love the notion of a 'dog eat dog world' when you're born into being on the top and have never seen the other side.
My Mac Mini has neither :)
> I don't think GP asserted that the U.S.'s claims were any more valid.

They've left it up to our imagination what they think is valid.

Edit: After reflecting on your response, I've taken out the offending line.
> Like many UI related assertions, absolutely no concrete evidence is being provided to support this point.

Microsoft did massive amounts of user testing, just because you don't know about it doesn't mean it's not there. This is a good starting point if you have about 20 spare hours: https://docs.microsoft.com/en-us/archive/blogs/jensenh/ They also backed their tests with a ton of data and metrics.
House of cards also had the benefit of having a 2 time Oscar winner on the cast.
My work laptop (a Thinkpad) has a built-in plastic slider that physically covers the camera. If something activates the camera while that cover is closed, it won't see anything.
same on google play. and as far as i'm aware, those two are the only platforms that Quibi is offered on. Cancelling my trial before i was billed was really simple on Google Play, but i did have to remember to do it.

it's also interesting to note that the only way to get a quibi subscription is via the two major app stores, which both take a 30% cut. So unlike netflix, apple, disney, etc who all allow purchasing via lower-fee methods, quibi is paying 30% for every subscriber.
I don't think anyone suggested removing the LED camera indicator if a camera cover is added. They serve different functions, even though there is an intersection. The camera LED indicates whether the camera is powered on or off, when the LED functions correctly. The cover guarantees that the camera cannot capture video when closed.
> Life in general and your brain in particular may very well be more than "just chemistry". We really don't know.

That claim has roughly the same epistemological status as Last Thursdayism ("the world was created last Thursday in a state where we have memories and see evidence of past events but those events aren't actually real.").

> What we do know at this point is that no amount of "just chemistry" has ever managed to create even the most rudimentary form of "life" from inert chemicals.

How do we know that? Are you just talking about humans practicing chemistry?
You should join the Computing for COVID team!
Awesome! I hope this will put some pressure on Apple to add support for critical PWA features (e.g. push notifications) to iOS.
Can you back this claim with references?
That's unfair. Hofstadter said he thought it wouldn't happen until AI programs were our equals in general; he emphasized he was guessing and that his colleagues would disagree; and the explanation was of his worldview that led to the guess.
If the last period of monoculture (the IE one) had persisted, most sites wouldn't have worked for any iOS users. iOS might not been feasible at all.
I'm not sure. If we think about it mechanically, and the output of the a computer system is a function of it's input, then perhaps we are woefully underestimating the role of the body as both a monitor and input system.
Enlightenment liberalism is losing ground in the debate about race
> As with every Chinese company, the problem isn't that they're Chinese. It's that as a Chinese company, they exist only with the blessing of the CCP.

This, 100%.

The Chinese government's word is LAW. Just look at how many American tech companies have either a) been kicked out of China for refusing to hand over data to the CCP or given them backdoors or b) started censoring their services to stay in compliance and be allowed to stay in business there.

If the Chinese government wants something from a Chinese business, one of two things happens: 1) they get it (whether you find out about it or not) or 2) the business ceases to exist.
GCC 11 Compiler Lands Intel Sapphire Rapids and Alder Lake Support
Out of curiosity: what‘s the difference between a REPL and a shell?
https://anchor.fm/valuehive
www2.ed.gov/rschstat/research/pubs/misconductreview/report.pdf

Employees of the US public school system abuse several orders of magnitude more children than the global Catholic clergy. Maybe I shouldn't be taxed to pay the rapist employees of a system my family and I don't benefit from before we start talking about the churches.
Pretty powerful statement. You can only do one thing with the stuff you can't control - appreciate it.
With so many imported operators renamed with an added haček, it seems fair to call this type-Czeching.

I'll see myself out.
Both companies are huge and contain multitudes; they can easily do praise-worthy and scorn-worthy things at the same time. It's worth calling them out separately rather than trying to unilaterally love or hate the whole mess at once.

That said, with FB/Google these days the bad weighs more than the good.
How severe is the pandemic where you live? Check this map
On top of that, old shortcuts still work. For menus that disappeared more than a decade ago!!
To claim otherwise is to claim that there is some barrier beyond which scientific inquiry is not allowed to cross or is incapable of crossing. The epistemological status of such a claim is roughly equivalent to explaining something about the Universe by saying "it's because God did it."
I've been an Xfce user since 2004 (and was a core developer until 2009), and continue to use it to this day. My biggest worry is that, since the GNOME folks control GTK+, it will morph into something that non-GNOME projects (like Xfce) can't realistically use.

Granted, Xfce has gone through a toolkit change before, but switching again would be too much of a burden.

I feel like there was a sweet spot in the mid and late 00s when there were efforts to promote cross-desktop standards (the "XDG" in those environment variables means "cross-desktop group") that made it easier to write apps that would integrate well with any environment, regardless of what toolkit you were using. But at some point in the early 10s that degenerated into GNOME ramming "standards" down people's throats and going their own way without any attempt to work with the rest of the community.

It's an interesting coincidence that systemd's rise (with similar standards-forcing and advocacy for tight coupling) was somewhat concurrent with GNOME's descent into community hostility.
People forget because you have to train yourself to remember, and outside of intelligence agency personnel, no one is doing that

I'm sorry, do you mean to say that only intelligence agency personnel are capable of remembering a simple habit such as sliding a camera cover? Not too long ago we were all using flip phones, many with extendable antennas, and no one was having trouble remembering to flip open their phone and extend the antenna before using it.

And as the sister comment said, no one suggested removing the LED indicator.
> I know some companies doing business logic automation in Google Docs

Sorry, but I have to post this now:

https://github.com/learnk8s/xlskubectl

"xlskubectl integrates Google Spreadsheet with Kubernetes."

"You can finally administer your cluster from the same spreadsheet that you use to track your expenses."

It's a (working) joke of course, but a hilarious one.
So, like LinkedIn and Reddit? (the site that the "researcher" behind these NYT-cited claims is using) [1] You could run through the toplist of apps and find hundreds that exhibit the same behavior.

Not trying to derail this via whataboutism, I just feel like the core HN ethos is lost when we mindlessly repeat the obvious geopolitically-driven narrative here without any critical thinking.

What I definitely do understand is Amazon's concerns with just the base level of data collection that's seemingly the norm in our industry. Which prompts the quesiton, why are we comfortable as a society with this sort of collection, by anyone?

[1] https://www.businessinsider.com/apple-ios-14-catches-reddit-...
Students at schools that previously performed badly will have their grades downweighted?

The article does not make it easy to understand how the actual model works. According to the IBO [1]:

We will use a calculation that is based on the relationship between coursework marks, predicted grades and subject grades to estimate the subject grades candidates would have received if the exams had gone ahead. If the relationship between these elements shows that in previous sessions candidates globally tended to achieve higher outcomes on their exams than their coursework, the calculation used this session will reflect that.

You can call this "reverse affirmative action", but really it's anti-grade-inflation. If you attend a school where students historically perform much better on coursework than on the exam, your predicted score on the exam will be lower. On the other hand, if your school tends to perform better on the exam than in coursework, then your predicted score on the exam will be higher.

So why would one school underperform on coursework and another underperform on exams? Grade inflation. Lots of schools make their coursework easier to try and boost the chances their students get into university. The whole point of standardized testing is to counteract that.

So in this case, it may be very unfair to some students who might have been outliers on the exam, but there's no way of knowing that without actually running the exam.

[1] https://ibo.org/news/news-about-the-ib/covid-19-coronavirus-...
We have lots of evidence of how the processes of life are chemically driven: Photosynthesis captures energy from sunlight, metabolism of sugars produces ATP which is then used in a variety of ways by the cell's proteins, the DNA->RNA->Protein pipeline builds proteins from the sequences of base pairs stored in a cell's DNA, and DNA copying enzymes pass that information from generation to generation. Since you probably already know about that stuff, I guess I must be misunderstanding what kind of proof you are looking for. What sort of discovery would count as "proof" to you?
Apple Scholars in AI/ML
Is there actually a non adhesive camera cover that is .1 mm in thickness? Smallest I can see is .55 mm.
So much bull crap stuff. The fastest way to find something is to search for it.

And...search for a menu item is a 2nd class feature on the OS. I wish I could click a text field on the menu bar and find stuff. I wish the actions were indexed with the documentation. Oh—and I wish that the keyboard shortcut for that was standard. Not on my Mac, but I’m pretty sure that I had to type it in from a Mac productivity magazine.
Good point. Unfortunately, the lena image is quite bad for comparison, there's almost no texture (except for the blue kerchief). I wonder what would happen for a heavily textured image; say, white noise. Would knusperly smooth it only along the block boundaries and leave it alone elsewhere?
But even then, are you sure the computer whose PCB you tested hasn't been swapped or modified since then? That Chinese operatives didn't splinter cell it while you were out grocery shopping?
I didn't get any paywall
$374K ARR
You can have both the light and cover.