skysight-inc/HackerNews huggingface dataset:
I think there's a (hopefully strongly privacy preserving) combinatorial explosion here though. If current models can be trained to accurately-enough recognise me with, say, 100 training images - this tool might produce unique enough perturbations to require 100 images for each of the possible perturbations, potentially requiring you to train your new model using tens of thousands or millions of cloaked versions of the 100 images for each of the targets in your training set.

(If I were these researchers I'd totally be reaching out to AWS/Azure/GCE for additional research funding... <smirk>)
https://metrics.torproject.org/

The data are a bit richer and more granular than that, albeit imperfect. Take a look for yourself.
The real question here is how documented/open the boot loader is gonna be and if (how) it'll be possible to just boot whatever ARM64 code instead of going down the hypervisor way.
Cave reveals signs of human activity in northern Mexico 30k years ago
Step 1: Type in stolen username

Step 2: Type in stolen password

Step 3: Click log in button

Step 4: ( •_• )
( •_• )>⌐■-■
( ⌐■_■)

Step 5: I'm in

One example of a "sophisticated" attack
Remember those madness animations? And that madness flash game? I loved that shit when I was 12.
Seems like competition for WSL
At first I thought this was implanted, and thought it was insane, and now I’m disappointed it isn’t! (Unless I’m still reading it wrong)

Nifty stuff, I do think we’ll get to some kind of bio-luminance that is computer controlled in the next few decades.
My guess would be about 50% for retail. We are in NZ, so unique circumstances apply - there is no Covid on the loose, so things are all normal as far as retail goes, but entire industries such as overseas tourism have vanished for now, so there are many candidates for every job.
Hi!

> In my opinion the syntax of layerci is relatively simple

That's awesome! They've definitely built a nice product for some use cases, can't disagree with that.

> Reploy only works if my app fits in the runtimes that were preconfigured by you

Reploy actually supports any arbitrary runtime. Checkout our docs: https://docs.getreploy.com

> their aggressive docker-like layer caching allows very substantial speedups in not only builds, but tests as well

Makes sense; Reploy actually won't run your tests (or any other CI-esque things to that note). We're very much focused on only spinning up environments!

Overall, there is definitely overlap here. I'd argue that if someone wants to spin up a frontend, backend, db, etc., it makes a lot more sense to enumerate your `services` rather than try and serve them all in a single runtime (I think this is called a Layerfile?). I'm not sure how a use case like this would work with Layer, but that would be my hesitance in trying to set things up.

Layer seems like a great option for running long jobs to really take care of that speed up.
Yikes... Now I'm glad I have been telling all my friends who are considering using genealogy database services to use fake names.
Linux is just an app that runs in macOS and windows.
self plug: an easy to use go library built on this with smart optional caching https://github.com/asvvvad/exchange
Might be, and I'd agree with you.

But who knows? Maybe a big European or Japanese carmaker (many of them have mentioned their desire to pursue H2/fuel cells cars) decides to acquire them to speed up the transition, in which case, even if it's all vaporware, the stock might be worth something.
The FAQ there addresses that, suggesting you can "dilute down" the ratio of normal-to-cloaked images in the public data sets the model creators train on, and hence reduce their future accuracy.

(So now you just need to somehow get as many cloaked photos of yourself uploaded and tagged to FB as they've collected in the last decade or so...)
Flash cartoons were also a big deal, off the top of my head: Homestar Runner, Happy Tree Friends, Family Guy, Harvey Birdman, Fosters Home for Imaginary Friends, Squidbillies, Metalocalypse, and tons more.

For all the problems with Flash, we definitely lost a lot when we dropped it.
Link to paper: https://www.nature.com/articles/s41467-020-17115-6
If you have CloudFront in front of your bucket, the bucket shouldn't even be world-readable, let alone world-writable. Permission should be delegated to CF to read out of the bucket.
"The company denied there had been a breach of its data."

This is about as serious a breach as it gets. To have (or claim) zero knowledge of it is pretty bad.

If the details of the story are correct, it would imply the attackers had full database access. I would not be surprised to learn the attack vector was gaining a privileged user's credentials, similar to the Twitter hack.
You might be interested in this video, specifically the parts of how boot security works: https://developer.apple.com/videos/play/wwdc2020/10686/
But do you see any reason why such tooling could not be built?

I suppose it's mostly an under-investment of time, not a shortcoming of the format itself.
Postmates using robots to call in food orders
Or you buy distressed properties.

A friend of mine invests directly in tax liens, and develops very good relationships with the people who were underwater. He usually works out an agreement with the homeowner to buy the house (lump sums are very valuable to these people) and rents it out to them for life, at a rate they can afford.

Sometimes, the people take the lump sum and run (and he gets the property). In other circumstances, he has a super loyal renter-for-life.

I might have gotten some subtle parts wrong, it's been a year since he last explained it to me. Obviously it's not for everybody, you really have to be a people person with a lot of empathy. :)
> Quora Banned Me For Saying The Earth Isn’t Flat

1 + 1 = 2

> From a scientific perspective, no flat earther has ever given me a rational response to why it is incorrect. So rather than answer the field of science, they reported my answers as spam.

Flat-earthers are free to think this nonsense, despite being proven wrong over and over again. But of course. If they can't attack the authors argument. They attack the person by getting them banned.

As soon as Quora was breached, the bots came. I stopped looking at Quora a long time ago.
Does Postgres support column-oriented formats, like Parquet?
There's an app called iSH on TestFlight that gives you precisely that for iOS as well ;)
> If this doesn't impact costs for bad actors, it's hard to see how it impacts costs for good actors, since, in the status quo ante of this program, both good and bad actors shared the same vectors to get kernel access to devices.

Oh come on... I am a security researcher, and I have definitely had multiple opportunities to buy a stolen prototype device (as I am sure you would have also... but I also assume you don't need it as your company is one of the only companies in this space I have seen actively consulting for Apple--which I frankly feel like maybe you should be disclosing here? I guess you might still not have access to dev-fused devices as I have some vague memory of figuring out that you worked on server security... still :/--so maybe you don't pay as much attention or are as tempted as those of us on the outside); like just about every legitimate person who stumbles upon this, I said no, as I don't want to do something actively illegal (such as trafficking in stolen goods). Are you seriously trying to argue that I should be doing actively illegal things to do research?

> I may just not be understanding you; maybe we just agree that this program doesn't change a whole lot.

I never claimed the program (which I will assume you mean the device program, though I think this also mostly applies to the bug bounty program itself) did? I said "anyone who wants to should be able to buy such a device" and "this ends up feeling like yet another flat gesture" (and then cited numerous specific ways in which Apple clearly works against security research on their devices).

You are then here responding to a comment where I am defending against someone who is claiming anyone can do security research (as Apple can't legally stop me... which is "technically true" but "useless" as they can still sue me--as they did my friends at Corellium--and I can't afford to defend myself) and this device is sufficient as anyone can get one (if only they are willing to get over a few "hurdles") by explaining why most security researchers would not take part in these programs (which is, in fact, an argument for why this program "doesn't change a whole lot"). The argument is that Apple needs to do _more_, to put good actors (who have nothing but these programs and bootrom exploits for older devices) on the same level as bad actors (who have comparatively little issue doing research).
> I don't think many people are immune to PTSD

PTSD is real but lots of people still go to war and not everyone comes back a basketcase. Most don't, in fact.

No, I've never had a job watching pictures of mutilated children all day. But like a lot of naturally curious people, I've searched out and watched bloody videos of beheadings and car accidents and whatnot. It wasn't pleasant, but it wasn't really traumatic either. If I didn't already have a much more lucrative career, I don't think I'd suffer too much as a Facebook censor.

Does that make me a sociopath? My wife and son don't think so, nor do my close friends. I'm not sure if I should feel a little offended here.

On the other hand, I may still have PTSD from those days of cold calling as a junior software engineer 25 years ago. I hate phones. Maybe people are just wired differently.
“Log entries from a failed software build” made me think they were talking about build logs initially.

Was scratching my head at the idea of a build system spitting out 3 million log lines.
Extensive discussion: https://news.ycombinator.com/item?id=23916729
>Ignoring prostate cancer is in fact a common way to handle it,

Most people find this kind of advise difficult to swallow. Ignoring is equated with negligence, conversely heroic efforts (chemotherapy etc.) is glorified even if most of them produces no appreciable positive outcomes.
I too am surprised at people who continue to eat take out. I don't trust restaurant workers to stay home when not sick and take precautions with the food to make sure it's not contaminated. It's hard enough dealing with food delivery every few weeks. Most people won't change unless they are forced to. I hope indoor restaurants and bars are shut down again soon. Completely unnecessary services. Everything that can be should be curbside service.
The header file likely has comments that didn’t make it into these docs.
Tesla picks Texas, will redesign Model Y for European production
This is a great way that various disciplines in sports, dance, martial arts etc. could be captured and preserved. A great first step. Adding in support for additional programming languages like say python could open this up to a wider audience of DIY mocap.
Sony pays millions to inventor in Walkman dispute (2004)
"Hey Bob? Check out this lykahb person. There's something _off_ about them. No Facebook, no Twitter, not even LinkedIn. Probably up to something, we should keep an eye on them. Add them to the list." -- some NSA/GRU/MSS/Mossad contractor
‘Given’ Hardware Behavioral Testing Is Needed ‘Then’ Use AD2 with Behave
As someone who more or less did a generic CS degree in their undergrad, how would I go about correcting for the lack of a secondary specialty? Would I have to get a masters later on? Focus on taking jobs at companies in specific domains?
That star system is young, and the planets are therefore hot enough to produce their own infrared light. That light is what the telescope saw.

So, there was no need for the planets to pass in front of the star to be detected.

In fact, if you click on the picture in the article, you see two planets and the star quite a distance from each other. Those planets are much further from their star than any of the (known) planets in our own solar system.
WSJ: Amazon to Face EU Antitrust Charges over Treatment of Third-Party Sellers
Haven’t you heard it sucks working there? If you are replaceable by a grad student, they will let you go before your options are vested.
Amazon has 10k employees dedicated to Alexa
The Costco I go to (Sunnyvale) does this too. Although I usually park further away anyways, as the spots near the entrance are usually full.
You are wrong. Disclaimers are a quick and simple way for users to let others know that there might be some specific view, or conflict of interest, or bias, so that the others can take that into account.
How did you find ActionScript compared to other more modern languages?
It also depends on the person. I was a kid named Andrew who read Enders Game and the sequels growing up. I then went to an engineering university that emphasized “engineers have a duty to society and must understand the impact of their work” in multiple classes. So for me, the answer is “a fair amount”.
It was pretty frustrating that they did not readily offer any example images for inspection, so against my better judgement I downloaded their binaries to run some experiements.

First, a source image at an approximate resolution that you might find on a social networking site: https://imgur.com/a/9szcC1m

Text output of the tool, which ran for about 3 minutes: https://imgur.com/a/fZtfrmm

The resulting cloaked image: https://imgur.com/a/OSHXdbO

I applied a difference filter between the two images in Photoshop, to show an example of the actual pertubations performed: https://imgur.com/a/q4zC7Ms

Since it's hard to see, I compressed the output to highlight what the program actually changed. It does seem like there is a good amount of disturbance to the image: https://imgur.com/a/1Sx68o3

Now, the real test. First, a Google reverse image search for the original file - identification is pretty bang-on: https://imgur.com/a/5HJwjPx

A Google reverse image search for the cloaked file: https://imgur.com/a/QByXBfS

The only difference I'm seeing is a few images that are one or two images swapped in the "visually similar images" category.

So, I figured that that's the "best case" for the cloaked image - giving the search algorithm the full, unfiltered data, and the program still failed to disguise it. For fun, I thought I would use a "low-pass filter" (Google Lens pointed at my computer screen) as well, just for thoroughness. And the result surprised me!

Here's Google Lens pointed at my screen with the original image open: https://imgur.com/a/1BVRFG0

And here's Google Lens pointed at my screen with the cloaked image open: https://imgur.com/a/uoppuit

So, it would seem that the algorithm's distortions more effectively come through in worse quality images! But, based on my full-resolution result, I wouldn't trust it to disguise something that is being directly uploaded to a social network.

Now, one important note is that reverse image search is probably not using a facial recognition model, but more like image chunk hashing - although I would also consider that something a privacy tool should defend against, which is why I included it.

All in all, very interesting and thanks for convincing me that I should actually test it out.
It's 3% . It resets itself to zero after 100.
#qlisp on Freenode IRC is dedicated to hacking on quilc, an optimizing compiler for quantum programs, and QVM, a high-performance simulator. If you want to write computer-sciencey software that interfaces with real quantum computers, that’d a good place to join.
oh right I forgot about Gremlin leader's "patterns" you're certainly right about him.

I should play StS again, but when I get the craving for a deck builder these days I'm playing Monster Train.
Best A/B Testing Strategies for Your E-Commerce Business
It does! (I just picked the first one that I found, the rest also have comments.)

$ cat /Applications/Xcode-beta.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/
System/Library/Frameworks/Virtualization.framework/Headers/VZBootLoader.h
//
// VZBootLoader.h
// Virtualization
//
// Copyright © 2019 Apple Inc. All rights reserved.
//

#import <Virtualization/VZDefines.h>

NS_ASSUME_NONNULL_BEGIN

/*!
@abstract Base class of boot loader configuration.
@discussion
VZVirtualMachineConfiguration requires a boot loader defining how to start the virtual machine.
VZBootLoader is the abstract base class of boot loader definitions.

Don't instantiate VZBootLoader directly, instead you should use one of its subclasses.

@see VZLinuxBootLoader.
*/
VZ_EXPORT API_AVAILABLE(macos(11.0))
@interface VZBootLoader : NSObject <NSCopying>

+ (instancetype)new NS_UNAVAILABLE;
- (instancetype)init NS_UNAVAILABLE;

@end

NS_ASSUME_NONNULL_END
Show HN: WizAtHome – WFH Policy Management SaaS Platform
> I also need to test on IE

How unpleasant. Have you found that the W10 VM takes way more disk space then seems reasonable? I had to fire one up the other day, and between the VM image and the VM it took 50ish gigs of space iirc.
How many faces were in the database you tested with? Face re-ID is much simpler for a small cohort.
Right, maybe this is where I’m being ignorant, but would there be a way to do the actual sequencing down to a consumer device?

I presume the machines used are pretty complex.
... and then looking for someone to pay for given solution
The problem with this is finding/getting the SWFs and compatibility, but newgrounds.com seems to be using this to make old games available, e.g. https://www.newgrounds.com/portal/view/81219

Unfortunately not all games are compatible yet. (Edit: actually, I could only get two games to run - the above-mentioned Fishy and Divine Intervention https://www.newgrounds.com/portal/view/136337; everything else fails)
Yep and Coral is also open sourced as AWS Smithy, it makes no sense to assume AWS usage means anything or vice versa.
You can do it in 3 stored variables
Including the clueless posers that fill 90% of hospital positions!
There's also a chance Google image search is looking at the filename of the image to get a bit more context. Does the reverse image search of the cloaked image still work if you rename it something unrelated?
Wow I think I disagree with all your points. Whatever works for you I guess but this is definitely not genetically the advice
I'm not sure if you're trying to be sarcastic, otherwise, I don't think a straight answer can be satisfactory for you.

Also, it might not be the best use of this forum.
Might it be though? Protobuf's tooling seems like a byproduct of the fact that you can't read protobuf and it's strict and type safe enough that you can generate lots of things.

Ion is readable and (seemingly) not very strict about schema. Seems like that would not readily incentivise additional tooling.
What if the data is mostly faked with the rest scraped from phishing attacks?

You can’t prove a negative very easily.
That's making a pretty lazy assumption that even a quick read of the original article leads me to be sure it's incorrect.

There's quite a lot of comments here that stink of Dunning Kruger candidates, who read the headline and first paragraph, then just started typing their random "wisdom" assuming they're smarter and better informed that the team of PHD researchers who wrote the paper being discussed. (Am I just overly grumpy and judgemental today? Was HN always this bad?)
I would highly recommend “The Uninhabitable Earth”. I’m 27 and for at least 10 years I’ve been aware of the people trying valiantly to sound the alarm about climate change, but only recently has this disaster sunk in.

Maybe it’s because it was the right book at the right time, but reading through I could felt my connection with the emergency in my stomach.

I can only guess that this is true, but at times reading it I’d sense an uneasiness in myself like I was learning of an imminent world war. Given what Climate Change is and what destruction looms, it’s the most appropriate disposition I’ve had towards the problem.
And on this note, people are also extremely reluctant to too horribly piss off the gorilla: I called Apple out on the morality of these clauses with a pretty harsh and personal speech during the initial bug bounty program meeting, and I had a bunch of people come up to me afterwards telling me they agreed strongly but were too afraid that Apple would lock them out if they were to say anything themselves (and of course, I was never invited to any subsequent meetings, not that any of us--even among the people at Apple who championed me being at the meeting in the first place--ever believed I would be: I sort of get the impression that some of them mostly wanted to demonstrate to their managers that what they were doing wasn't universally liked, but understood the fear).
A former colleague of mind is building a solution to this:

https://onceivegone.com/
The entire point of proof-of-work cryptography is to make things slower, and blockchain is built on proof-of-work, so yeah, applications are limited to situations where slowness is a feature. That's very few situations.

But there is an entire world of crypto outside of proof-of-work and I'm glad people are more interested in these more useful parts of crypto now.
Corporate or government leadership?
KDE Slimbook: Linux Laptop with Ryzen 4000
Isn't that closing the barn door after the horses left?
In addition to these promising results, note that southern U.S. states have been dealing with a dust storm from the Saharan desert, which increased air pollution in late June, https://www.yaleclimateconnections.org/2020/06/saharan-dust-...

> The dust cloud is bringing dangerously high levels of fine particulate pollution (PM2.5, particles less than 2.5 microns or 0.0001 inch in diameter) and PM10 (particles less than 10 microns in diameter). Air pollution aggravates COVID-19 symptoms, leading to expected increases in hospital admissions from the disease in regions where dust concentrations spike.

We don't yet have good data to correct for the health impact of breathing in these minute particles from Africa, especially for those with pre-existing conditions.
I don't understand what this article is about, but it made me self conscious about something I believe to be productive (and enjoy) doing. Whenever I'm communicated of a decision the team reached without me (because I wasn't in the project yet, for example), my first Instinct is to poke holes in it and try and see how it can fail so we can think about it together. It's helped me immensely over my career, but now I'm starting to wonder if it just introduces chaos.
You're getting downvoted because one true statement - "PHP is banned for internal use" - does not imply the other - "they will not care".

Google also bans PHP but has official PHP client libraries for all its APIs.

Both companies care about having and maintaining PHP SDKs so long as their paying customers want to consume their products/APIs using PHP.
Security Flaws in [the Korean] Coronavirus Quarantine App
One Network Operating System to Rule Them All
Isn’t this just the HV FW that exists already? Would you really expect the API to change between x86 and Apple ARM chips?
"Everything to do with web and mobile is very solved at this point."

"640K ought to be enough for anybody." - Bill Gates 1981 (or supposedly.

So there is a long way to go in all of these areas, and there is even a longer way to go in adjacent areas, and we're not even touching all the other things startups can do - you know - the other 95% of the economy?

Healthcare, biotech, materials, energy, construction, auto, food services. You know 'everything that's not your iPhone'.

If VC were structured differently I think we'd have a solution to hair loss and possibly sagging skin by now. Those two markets are worth 2x Google and Apple put together. People will pay for their 'youth' before they give 2 cents for a mobile phone. As the tip of the iceberg.
Unless they want your demise attributable to "natural causes"

Yeah, no one is going to go to all this trouble for some schmoe from the middle of nowhere. But imagine something like regime change as a motivation.