skysight-inc/HackerNews huggingface dataset:
Isn't this really only an issue if you use the companion app? I doubt the usb-c/lightning/bluetooth headphones can exfiltrate data if you don't have the companion app installed.
That's the exact situation right now except they aren't shutting it down.
Firehoses should do the trick
> If commercial flights all used 50/50 renewable fuel that would cut greenhouse emissions in half.

Airline emissions aren't that bad compared with everything else, but they aren't being decarbonised at the same rate like everything else, and on top of that they are growing dramatically.

In 2019 there were 4.5b passengers globally. In 2006 there were 2.25 passengers globally, so doubled in 13 years. Planes are slightly more efficient now, but there's a long tail of less efficient planes.

Moving to 50:50 biofuel may save a decade of growth, but it's not a silver bullet.
Windows builds are possible?
Can you tell me more?

I skipped Crystal because I absolutely need windows binaries.
When complex mechanical machines were big, we imagined pneumatic brains. Then we imagined electronic, digital, and now quantum computing brains. We also started to see the brain through the lens of these systems and how they work.

Meanwhile the brain continues to work however the brain works.
I doubt it's screen recording; as far as I know no third-party app can record the screen and even if they could there's easier ways to collect analytics than record a huge video which you then need to upload & process. I'm pretty sure the red bar also appears when an app is using the microphone in the background, which would be more likely in this case.
They author may not be able to control the social media embeds of this particular site, but they certainly have control over where the choose to publish. I see nothing wrong with taking them to task for this sort of hypocrisy.
I'm doing my first web project (self-taught), which is the prototype for an offering me and a partner are developing to become a startup. I was about to start deployment (for the first time in my life) this week, but now I'm afraid. It's a flask app. We serve users forms (POST), then I use this input to run calculations on the server through a python script which makes queries to a MySQL db, then I return results to browser my listing a result-array dynamically using a Jinja template. Is this unsecure? Any tip or accessible reading material to help me understand this matter? We don't store credit card info or other sensitive information for now, because we didn't reach any clients yet, but final version should have at least login functionality. Any light/knowledge/consideration will be much appreciated!

PS: I don't know exactly what you mean by "Stick an API layer in at the very least with key based auth" because I never used an API before and didn't know I would need something like this.
deny entry or arrest executives of the company if they try to enter the EU. Surely some of these people travel...
Google Play Services are the crux of the implementation of core services. If you're not okay with that don't buy the phone or install something else on it.
Maybe so but it is effectively imposed on all citizens of the world. Other than for the now rare cases that people are serving stuff up from their home.
Calculate watts/kg for the total system, and be sure to include cost of heating, which comes nearly free with nukes, and you'll lean back to nuclear. The barrier to nukes is usually programmatic, not cost or technical.
Just like Facebook's "download your data" tool used to not include the companies that shared information about you... until they decided to make this public (and provide a UI to see it) and then suddenly it appeared in the data dump.

I am not saying whether the camera behavior is incompetence or malice, I am just saying that "download your data" features rarely give you all your data, both for malicious reasons (in the case of Facebook) as well as technical reasons (some data in raw form might belong to multiple individuals so you can't just give them that raw version and need to write extra code to sanitize that data which might not have been done yet so until then you would be missing that data).
This is a technology problem.

It’s a symptom of an imperfect commenting system.

With a better system, just like in real life, I would more easily be able to only pay attention to the things I want to pay attention to.
No-one knows.

Masks may help, and if people can wear masks they probably should, but the evidence we have so far isn't great.

If masks were strongly protective it would be easy to see this effect in RCT, and we've done a bunch of trials of masks and respiratory disease and it's difficult to see the benefit.

Distancing and hand-washing remain important, and if people are focussing on masks but lapsing on hand-hygiene and distancing then we're probably going to see a rise in infections.

If we assume 20% of the population have asymptomatic covid, and that masks reduce risk by 40% then about 200,000 people have to wear masks to prevent one extra infection. (Page 18) https://www.fhi.no/globalassets/dokumenterfiler/rapporter/20...
Working with Cloudflare workers has been such a treat, and now they're going to enable Python support! Such an awesome tool.
Laziness? Don't you mean unpractical and financially unviable? If I support Firefox do I support Edge, Opera, Android Webview, UC Browser? Explain how pragmatic prioritization can constitute as laziness.
Here is an example:

https://electrek.co/2019/06/11/hydrogen-station-explodes-toy...

Hydrogen needs to be treated with the proper respect at all times when it isn't safely bound to something else. It really doesn't take much to set it off. That the Hindenburg ever got off the ground is what is impressive about it, the amount of care that went into ensuring that a static charge could never reach the reservoir must have been massive.

Hydrogen plants have exploded in the past as well. Given aircrafts' tendency to build up static charges and to be hit by lightning I would not bet on that particular technology to work out.

The Hindenburg was - and that a pretty weird thing to write - about as good as it gets for an accident like that. Only about 1/3rd of the people on board died and it happened during a time when the aircraft was already fairly low (during the last stage of mooring). Had this happened at altitude likely all hands would have been lost.
A solution that doesn't merely change masters but gets rid of them entirely would be to get a phone with LineageOS. When I need a new one, the Lineage supported devices list is the only list I care about.
Euro dollars are constantly traded without going through the US.

CLS currencies and any currency which is fully convertible can be used in transactions without any involvement of the jurisdiction that minted the currency in the first place.

The USD has a huge settlement infrastructure that is completely independent of the US.
This site seems pretty decent: https://www.bankofamerica.com/mortgage/closing-costs-calcula...

Your bank should be upfront about their lender fees, points and origination costs.

Third party fees are either fixed or a simple percentage of the sale price.

The rest can be tricky, but should not be a deal-breaker for a new homeowner. Basically you are just paying the expenses for a short while up front. Interest through the end of the month, real estate taxes through the end of the quarter, Home owners and mortgage insurance and real estate taxes for the escrow account to cover 2-3 months.
This argument seems to be ignoring the propensity of wealthy people in redistributionist environments to send false signals about their own level of wealth. E.G. Stalin commanded the wealth of a global superpower, but he dressed in uncomfortable military uniforms to signal solidarity with a poor majority. That kind of 'wealth falsification' seems likely to cause its own inefficiencies not present if wealth is considered the result of better serving the market.
I find it hard to say without a specific example, but I'm afraid that you might very well be right in the general case.
Hello, this looks slick- can you import browser bookmarks and do things like detect duplicates?
There were two things that happened when Apple got rid of the headphone jack: (1) they added water resistance, (2) the phones got thinner. Plus, Apple had seen the trends heading toward wireless headphones.

They still included a dongle to give you a standard headphone jack.

While Apple could likely have gotten their water resistance even with the headphone jack, they couldn’t have made the phones as thin. People may disagree with the product choice, but I don’t see any reason to think that those weren’t the real reasons.
Mass Consumption Is What Ails Us
This reminds me of "crackit"[0] from a few years ago with Redis. A lot of folks kept their Redis server bound to 0.0.0.0 with no firewall or published port 6379 by "accident" with Docker and by default Redis uses no password. It was a lot worse than meow because with some Redis configuration magic anyone could inject their own SSH keys onto the server.

This article says Redis is affected but I would be curious to see which version of Redis was being used because they changed their default configuration after crackit was wide spread.

[0]: http://antirez.com/news/96
Great first order impact. Now consider second order. Exxon and Co buy distressed assets at depressed prices and resume production with an even better margin.
This seems like a flaw in property taxes not churches.
You can also usually lock it down by IP address.
A Chinese agent used LinkedIn to hunt for targets
> So that's what I was doing there: codata and corecursion. Who woulda figured?

I can't quite make out the tone of it, and guessing tone is a fool's game, so I'll take it literally. I think that this is one thing that people miss who complain about the proliferation of mathematical terminology in modern functional programming. I see no reason to think that you're such a person, so, just to be clear, when I say 'you' below, I am addressing only a hypothetical such person, not actually you.

No-one wants to force you to think in terms of codata, coinduction, and corecursion if you're comfortable with your mental model of what lazy lists are doing; the point is rather to allow you to think in those terms—to leverage the vast theoretical power that already exists in the mathematics, rather than requiring it to be re-discovered in an ad hoc way.
Name one economically valuable resource on the moon that isn’t far cheaper on Earth and far more accessible on Mars. I’m including H3 which is a valueless myth.

Then name any scientific value of manned moon missions and compare them to the fact Mars may have or had life.

Then compare 1/6th gee in a vacuum alternatively frozen and roasted over two week periods, to 1/3 gee in an actual atmosphere with moderate climate and abundant water.
8.3M is the top 2-3% of the population. It’s a very diverse group of people. I imagine many would chip in 10-100K if it meant crashing global CO2 emissions.

Also, on its own, the money it would save in flood or fire insurance would make it a rational investment for a big chunk of them.
It does. The language design leads to very clear ownership semantics between threads. It also recently added async await.
Should everyone become a novelist? No. Should everyone know how to write, read, and have basic literacy? Yes.

Should everyone become a coder? No. Should everyone know basic computational thought and logic, to understand both the capabilities and dangers of our digital world? Yes.
Depends on the phone. Most 2015-2019 Qualcomm phones use niceness to determine CPU allocation, whereas Android 10 has more complete cgroup support where different groups are assigned to different cores and the APIs categorize tasks / threads / processes by what they are doing into different execution profiles. Pre 10 had some fixed cgroups available but it wasn't as comprehensive.
People need to fly more.
You also can't get firmware updates if you don't install the companion app and allow them to spy on you.
Five Things
A weekly newsletter that covers five things, mostly on the intersection of politics, tech and culture.
LiveScript is JavaScript, "JavaScript" was just a rebranding in a joint Sun-Netscape marketing effort, while other Netscape technology stuck to the "Live…" naming scheme, as in LiveWire or LiveBridge. When there was still a language attribute to script tags, "LiveScript" was happily accepted as a synonym for "JavaScript" (or, rather, the other way round).
Shutting down petroleum overnight would completely shutter the economy and starve/kill millions of people.
There's no denying that kids can do things on an iPad you don't want them doing. But for of those of us who mostly grew up with the Internet, "screen time" is just a very strange category. From my perspective, it's like noticing that kids who start reading from a young age often skip homework to read or read dirty fanfics you can't approve of, and arriving at a dark consensus about books.
A bleepingcomputer article linked below mentions it's possible Garmin would be violating US sanctions by paying the ransom, since Evil Corp (the supposed operators of this ransomware) was sanctioned by the US Treasury department

https://www.bleepingcomputer.com/news/security/garmin-outage...
So it seems are parts of Chinese law.
https://qz.com/1875863/hong-kong-national-security-law-cover...
> Aside from that, english is just such a meh language. Asian kids get higher math scores in part because mandarin's numbering system actually makes sense ('eleven, twelve, thirteen' don't include the words one, two, or three, while the numerical representations include 1, 2, 3).

This doesn't represent a fact of any sort of linguistic truth whatsoever.
Re: Personal fitness and menstruation history - Is that shocking? They're earbuds, but they're marketed as fitness buds that track personal data. It looks like Fitbit for your ears. Fitbit and Apple Health (or whatever it is called) does these kinds of things as well.

Re: Bose collecting all that stuff

I can see "why" they would want all that, in order to optimize their sound output of their buds to the kind of music and environments for which they are used. That should, of course, be opt-in, but I don't think it is evil.

Do I necessarily like the latter example? No. I believe, like the "cookie policies" that exist on many websites, there should be "Needed permissions" and "Please thank you" permissions, and they should incentivize the consumer to help them out. Amazon does this on their Kindles: $20 off if you let them run ads on the lock screen.

But if all the manufacturers do this, then what competition is there to push them to change?
Another company collecting and selling your personal data right there in Silicon Valley: https://eightfold.ai
Two words: Private equity.

You can’t buy what’s not for sale.

Alternatively, they could transfer the oil assets to a separate company, and take that private.
How exactly does a headphone app have access to your alcohol use and menstruation history? Where is it pulling this data from?
"Don't expose MySQL databases to the internet."

Trouble is modern web-development is so dumb they just treat databases as dumb-blackboxes. So hence they end up in situations like this where security is thrown out the window in the name of minimising any obstacles to get data from the database (and no doubt dump it all into a stupid array in the frontend).

This creates a self-perpetuating lore amongst devs that databases are "slow".

But this is largely because they can't be bothered to use the database in the correct manner (correct schema design, sprocs etc. etc.)

And don't get me started on the "portable query" junk ! Sure you can write dumb queries that run on everything from SQLite to Oracle, but its far from being a remotely sensible thing to do.

Rant over. ;)
It is also much faster than GitHub based on a bit of browsing i just did. Project pages, etc opened almost instantly whereas on GitHub everything takes a while to open.
HN purposefully removes emoji:

https://news.ycombinator.com/item?id=20776571
Maybe I'm making my point poorly.

Allowing violent people to post online is fine. Allowing them to post violent content is bad. I don't care who the person is. I care what they post. As long as they're not advocating harm to a specific person or group of people it's fine.

I'm okay with people saying racist things from a free speech perspective (it's still despicable). I'm not okay with them saying people should go burn down the synagogue in downtown Seattle.
Also, Hydrogen isn't a fuel, it is a storage medium, a battery if you will.
The context of the FTC article is healthcare.

There are simpler mechanisms for communicating price fixing - like saying "we won't be beaten on price" - that don't need to mention the price at all.
Has anyone had any experience with new Bose headphones? If you use the Bose Connect app, I believe what the author wrote is accurate. But that app doesn’t work on the newer headphones (at least, not the ones I have). Instead I need to download the “Bose Music” app which doesn’t seem to give you the same options for privacy. And if you don’t use that app, the headphones are much less useful (eg, no hardware controls to switch which device you are connected to).
60% meaning what though?
That being said, if anyone has unused corded Apple EarPods and the 3.5 to lightning dongle, hit me up!
fearsturbation > reality
The phones are thicker now than they ever were with the headphone jack. In fact, the 7 was the last version to get thinner.

https://i-cdn.phonearena.com/images/articles/301929-image/iP...
Okay but replace that with most governments and the point still stands.
I wonder if aws would have given the same refund if the author wasn’t a cloud evangelist with a twitter following highly relevant to aws.
Do they care about you? If so, they might leave if you do.

There has to be something better to go to of course...and I just don’t see that right now.
Hydrogen is not only in contact with the tank but with other materials en route to the fuel cell as well. And the problems don't need to be insurmountable in theory, they need to actually be solvable and that is a different thing entirely. I'm fine with people trying it out but I'm very skeptical about this ever making it to production. I think this is more of a PR piece than anything substantial.
Why in the world would anyone need headphones that need personal info?
> copying other people’s behavior without asking why

Yielding to a shared meaning is the entire point of language.
Looking at my collection of Beyerdynamic cans... they collect data?
No need to use a laser if there’s an incandescent bulb in the room: https://www.wired.com/story/lamphone-light-bulb-vibration-sp...
The article doesn’t explain well why the male mating strategy is so successful or preferred.

Is male sociability a critical feature to be selected by females?
That goes for lots of things including powdered sugar and flour. But that vaporization step usually happens in a relatively controlled environment which makes it manageable.
I've said it on here before, but the way in which Elasticsearch used to lock away critical security functionality (like TLS support and RBAC) behind a paid subscription whilst making just enough functionality available for free such that users could shoot their foot off is disgusting. This only ever changed after Open Distro for Elasticsearch came onto the scene and forced Elastic's hand.

I entirely agree the vendors are (partially) to blame here.
If you look at the EN-ROADS calculator, reforestation has a very negligible effect, even in the most optimistic scenarios.

https://en-roads.climateinteractive.org/scenario.html?p55=0....

If you believe their numbers and models, it's improving geoengineering and carbon taxes that will have the largest effects.
If other CDNs do it and cloudflare doesn't, then it's harder to switch.
> Religious practice is fine but withholding a secular education from children or ditching modern medicine, or attacking the rights of women or exercising corporal punishment isn't.

So a religion is fine as long as it is watered down to the point it does not teach what is right.
factette then.
It's one of the data types apple health can collect. The headphones app probably asked for all possible types of healthkit data.
The status quo will starve/kill billions in a few decades and make 10% of the earth’s land mass uninhabitable:

https://www.nytimes.com/interactive/2020/07/23/magazine/clim...

The least destructive time to take action is right now.
At least GEM for MS-DOS and Atari called them "applications" or "application programs" back in 1985 and they ever had an .app extension.

EDIT: also Windows itself uses the term to refer to any program. I do not have the older stuff around, but at least since Windows 3.1, the reference help file that came with some compilers uses the term application everywhere.
It sounds like you are probably fine. Your python flask script is the API layer. Just make sure it can only run sql that you want it to run (ideally, read only until you get it authenticated), and that it escapes user input, and that no one except admins have access to the actual db underneath, and you are totally fine.

Also, for that matter, its a good idea to run backups too, just in case something goes wrong and you need to restore.

This is literally people allowing users to run arbitrary commands on their fully exposed db, and then being surprised when someone runs a delete.
I really like profile READMEs that are powered by GitHub Actions (see https://simonwillison.net/2020/Jul/10/self-updating-profile-... ) - this collection doesn't seem to have a way of sharing those yet, which would be great since getting the Actions YAML right can be tricky to figure out at first.
Change in Manjaro Team Composition
One of the most important factors making languages like English or Spanish central to the internet is that they are spoken widely across the globe by people of diverse nations and cultures.

What are the odds of that happening with Mandarin?

Sure, it might be “central“ to understanding the discourse of almost a quarter of the world’s population, but then the same argument could be made for Hindi.

Also, let’s not forget that Chinese discourse is not free, and that will negatively affect the centrality of all of its languages.
Ask HN: Is anyone using KeYmaera X for Cyber-Physical Systems?
I have been studying CPSs Cyber-Physical System as a natural progression from my embedded experience and MBSE (Model-Based Simulation Engineering)for fun and self-study and as it applies to my work. I purchased the book (PDF is free from Springer) Logical Foundations of Cyber-Physical Systems by André Platzer. It uses KeYmaera X described as "An aXiomatic Tactical Theorem Prover for Hybrid Systems". I have played with Coq and I was self-studying realtime systems and high-integrity applications using Ada and SPARK2014, and I find KeYmaera X to be inline with my other studies. There seems to be an approach of using algorithmic vs. dynamic logic verification systems (which is what KeYmaera X is). Can anyone share their experience with using any verfication system as it applies to CPSs or autonomous driving systems? Thanks!
Could be a reference to "geoengineering" patents like Myhrvold's StratoShield, but he is a huge patent troll so I doubt that development is far along.
Why is that worrying?
Original title seems like click-bait but the content is really good and to defend the title SPJ really puts Haskell in the useless category right in the video. Of course the more interesting thing is his way of classifying languages along two axes of useful/useless and safe/unsafe and that he sees a general trend of movement along the safe/unsafe axis.
Even though I know the correct meanings, no matter how hard I try the word “flammable” sounds to me like “able to flame” while “inflammable” sounds like “incapable of flame”.

I hate English.