skysight-inc/HackerNews huggingface dataset:
> I'm not sure why the "new" allegations from the emails are surprising to anyone, or how anyone could instantly dismiss them as disinformation based on the priors we already have.

This is like accepting a cryptocurrency payment because the sender can prove they have access to the public key.
It would be great if the API specification could be written once and then consumed by both server and clients, not only for functional validation as shown in the article but also for the server to use the spec to validate and serialize inputs/outputs.

As described, there is a disconnect where you went to all the work to create the openapi oas.yaml file, and can feed that to your test client to ensure the API responds to that, but the API still had to be coded by hand to comply with the spec.

A way to feed the oas.yaml code to flask-smorest somehow so it derives the endpoints and schemas from that (hey it already makes a ton of assumptions about how to structure the application, requiring e.g. a set of methods named exactly as the endpoints so they can be easily matched) would make it so the single oas.yaml file drives both ends of the implementation, would make coding work easier as the schema doesn't need to be described multiple times in multiple languages/formats, and would provide quick feedback (FAILURES) if I change the schema without coding the required endpoint support.
You don't have to mono crop or go "3-sisters" midevil farmers in Europe generally had many small fields - Barely on the highland, wheat in the best land... (3-sisters is American Crops and so not an option before Columbus). They achieved the same risk reducing diversity without having crops that directly harm each other next to each other.
I actually switched away from Discord to Mumble, for higher audio quality & lower latency.
Discord's "server" language is a throwback to non-centralized voice chats like Teamspeak or Ventrilo, where each group of users really would run their own chat server. I wouldn't be surprised if they drop that language eventually, especially since most of the users who would have recognized it have probably already migrated.
There's limitations. iOS requires a passcode after so long and after so many bad attempts or after a reboot. The time law enforcement would have to use your face to get in is pretty short.
Now that Discord has taken such a strong foothold I wish they would offer an "enterprise" skin or something like that because I would love to replace my work's Slack chat with Discord. Discord is miles ahead of Slack in terms of stability.
Discord wins because it allows you, the member of an existing community to set up a new subset of that community over which you have power. For a while I thought discord was paying people to create communities for everything but then I realized, they don't need to; the joy of being in charge is enough.
I see what you’re saying about real world identity but digital identities don’t [have to] share those constraints. Digital identities can be instantiated and discarded at will.
So basically, the exponential function is the function whose slope at a point is equal to the value at that point.
Congrats on your launch, always great to see Bubble apps topping HN!
> When the Christchurch massacre happened, suddenly there was "growing white supremacy".

That white supremacists are expanding their membership and becoming more violent is in fact objectively true and "growing white supremacy" is an objective comment on the political circumstances that led to the Christchurch terrorism attack.

Honestly, and I know this is an ad hominem: you declaring that such a view is "subjective" says a lot more about your politics than it does anything about journalism. So I looked at your HN profile. In fact, looking at your comment from 6 days ago[1]:

> [James Watson] [b]lasphemed against contemporary morality by taking the "wrong" side in the nature-vs-nurture debate. See his Wikipedia page for details.

That is not why James Watson got in trouble. James Watson got in trouble because he said directly that black people were dumber than white people, and that this is due to genetic differences. He has only flawed circumstantial evidence for the former, and absolutely zero for the latter. His claim is strongly disputed by anthropologists and sociologists, who have considerable evidence that African art, technology, and society is just as sophisticated as the European variety. His claim is also disputed by human geneticists - again due to a total lack of evidence.

The fact that you

a) dishonestly sanitized his actual views with a cowardly euphemism, and

b) apparently agree with him that Africans are dumber than Europeans

makes me suspect you aren't "objectively" concerned about the media reporting on increasing white nationalism.

[1]: https://news.ycombinator.com/item?id=24762396
Extensions are tied to the browser pretty tightly (think UI, bookmarks, open tabs access, etc. etc.), while QtWebEngine (which qutebrowser uses) uses a more low-level part of Chromium which only shows a single tab (the so called "content API").
WYSINWYG
My understanding (that is, I was told by a lawyer I know) is that if the person receiving the information thinks there's an attorney-client relationship, there is. Presumably there's some defense of "a reasonable person wouldn't have thought that", but this is why lawyers tend to be very diligent about saying "this is not legal advice".
Funnily enough, I'm trying this right now with a personal project using JSON Schema and quicktype [0]. It's phenomenal how it's nudged me to really think about the boundaries between components, and I get type-safe serialization code generated for free!

[0] https://github.com/quicktype/quicktype
When you're writing small, short sentences, there is something off putting about periods. It's just part of the how text based communication has become.

Emojis are good because words can be interpreted with a tone that was unintended, and can lead to all sorts of communication problems. It's small and simple, but an appropriate emoji helps convey our emotions in a way that is more difficult to in short, text based messages.

I agree about rapid short messages, I hate receiving 8 notifications about 1 short paragraph of text.
Just wanted to say that I love that you do the parsing in a sandbox. Very well written!
In some other teen circles it's a negative status symbol. In the "you wasted your money on that?" sort of way.
what? Apple does not have your face or fingerprints.

FaceID and TouchID both record any data they need in parts of the enclave that can't be used for anything else, and cannot be extracted. The information that they do store is not a picture, and cannot be reversed even in the case where someone does manage to get that data.

They have repeatedly documented how these features work.

Similarly touchid and faceid aren't sending your touchid/faceid data to a third party (because again, even if they wanted to, they can't), they're simply gating access to credential data on successful local authentication.
There is a huge natural variance between individuals that goes far beyond testosterone and includes height, bone density, vision, other hormones, etc. No one realistically expects a level playing field. But everyone has to play by the same arbitrary rules. In practice those differences only matter at elite levels; at casual amateur levels you can overcome natural disadvantages by training harder and playing smarter. The best player on your company softball team probably doesn't have a super high testosterone level.

Testosterone supplementation can induce erythrocytosis, but you can accomplish that more directly with EPO. (I don't recommend doing that.)
Long term request for the next Turing ( mixed CPU cards together - in a Box! )

+ ARM cards

+ X86 cards

+ RISC-V cards
possibly, but they have to be quick about it:

>To use Face ID, you must set up a passcode on your device.

>You must enter your passcode for additional security validation when:

>The device has just been turned on or restarted.

>The device hasn’t been unlocked for more than 48 hours.

>The passcode hasn’t been used to unlock the device in the last six and a half days and Face ID hasn't unlocked the device in the last 4 hours.

>The device has received a remote lock command.

>After five unsuccessful attempts to match a face.

>After initiating power off/Emergency SOS by pressing and holding either volume button and the side button simultaneously for 2 seconds.
If you haven't tried it already, given that you also have lower back pain, try a posturologist, if you can find one... It's hard to find much info/practitioners. I'm also not sure how legit some are. Usually I would avoid non-conventional treatments (though I have been taken by family to everything from osteopaths to chinese medicine practitioners), but previously similar fields (e.g. chiropractors) had sort of helped, so I went. It has literally changed my life. I had chronic headaches since I learned how to speak (they were not so often then). Me and my family had tried everything. I had progressed to the point where it was 24/7 pain, highly depressed, could not work/go to university. Within the month my pain was down 25%, within a year I was 50% better overall, no more 24/7 pain, started studying. Now I'm about to graduate. I still go once a month but am 90% better. I'm also not downing pills like crazy. I was on 3-4 a week (this was just to numb the bad episodes), now down to 2-3 a month (mostly due to me overexerting myself).

It does not work for everyone (it helped some family members with back pain but not others or not immediately so they stopped going), but can't hurt to try. It is very similar to going to a chiropractor but "softer" is how I would describe it. There is not as much cracking and popping. Half is stretches. There's lots of checking specific points for pain, also the whole body is looked at. And unlike chiropractors or massage therapists there is a noticeable change in mobility and posture and other things (for me decreased light sensitivity) after a visit.
Another reason for me to use punctuation, proper grammar, and more advanced vocabulary in Slack is purely personal: I enjoy writing, both as a creative endeavor and a social one.

I like to think that sometimes, my chat style gives others a little bit of break-think amidst all the rapid-fire.
IS this not a mixer?
It's a shame they have a messy pile of API-specific hacks to propagate the "user gesture". Chrome solved this problem with a change to the spec (which they called "User activation v2" [1]). It's basically two flags and a short timeout, and it covers basically all cases. Safari's approach means you have very specific codepaths, and if you do something async outside of that, tough luck, you can't use the feature and will have to nag the user to touch the screen again. This already affects APIs like clipboard (want to copy something that takes async work to generate? tough luck), limits APIs like OffscreenCanvas (want to move your game engine to a worker? tough luck, you lose access to all user gestures), and this too. Hopefully Apple can consider aligning with Chrome on this.

[1] https://www.chromestatus.com/feature/5722065667620864
You put your fingerprint into a black box and that black box phones home to Apple servers. From a security standpoint, we must assume that they have your fingerprint unless there's a way to prove that they don't. iOS is closed source so we can't prove that.

From an epistemological point of view: I don't know if they have it.

From a security point of view: they have your fingerprint.
I was definitely thinking of NTB, for host-to-host connectivity. As you say, it doesn't provide a whole lot of capabilities. However, there's been a pretty competent ethernet driver available on Linux since Linux 3.9 released April 2013. There's out of kernel NTRDMA if you want ibverbs like communication that will make really good use of the PCIe bus too.

In addition to mapped memory, there are some other modest capabilities: support for ringing the peer's doorbell (one way), & scratchpad configuration. There's a pretty good 2016 presentation on NTB in Linux here: https://events.static.linuxfound.org/sites/events/files/slid...

Interesting to note, Nvidia has docs for settings up NTB on their Pegasus & Xavier systems: https://docs.nvidia.com/drive/drive_os_5.1.6.1L/nvvib_docs/i...

I for one think more people should be investigating & harnessing the open-source Linux NTB tools. Switches are a bit expensive, but compared to ethernet switches their cost/throughput is great. Alas, yes, the whole ecosystem is woefully undersupported, under-developed. Isn't PCI part of the whole PC thing, this great revolution in computing that allowed interoperability to rise? Such a pity that all the PCI SIG's seemed to fizzle out, that not a lot of people participated. Sure we got some SR-IOV but that feels like as far as we got.
Washington targets financial institutions over China’s Hong Kong crackdown
As with everything, intent matters, but in spirit I agree with you.

As much as I despise what Twitter did, I've been thinking about it for a couple of days and feel that the best option is a large number of strong Twitter competitors, rather than specific regulation. The slippery slope going the other way (silencing platforms) is just as bad as the one we're on. Throw the baby out with the bathwater.

Problem is you run into a physical limit at that point, there's only so many social media platforms we can be on, so creating such competition would be... hard... at this point.
Beware "experts", they don't know everything, you should also think for yourself.

My son is now 16, at 3 he was diagnosed PDDNOS (Pervasive Development Disorder Not Otherwise Specified, first rung on the ladder of autism, but a symptomatic "syndrome"), they said he would need a full time care/assistant with him in primary school. I laughed out loud, I thought they were joking.

It came about because the district nurse said at age 3.25 (roughly) he only had 12 words. I couldn't believe it, but then I looked closely and maybe 12 was right, but he had no problems communicating.

It wasn't helped at the time by the mother wanting to play the "I am too sick to work, but not too sick to look after the children" game, and she was encouraging any/all possible diagnosis.

School couldn't get funding, he went anyway, there was no problems.

Fast forward he is 16 now, one year to go in high school, top 5% of studends easy, 1% in some subjects, works part time at local engineering consultants, plays multiple musical instruments, taught himself piano to surprising degree, as well as maybe a dozen computer languages, via youtube and kahn academy. A little unusual, but a lovely child.

His sister is 13, for other unrelated reasons recently ended up at the child psych and left with a formal diagnosis of autism. She is the most normal person in the house, yet the only one with a definite diagnosis. She is similar academic status to her brother.

I hate what to think what might have happened if they had both been labelled at a young age, it can be a self fulfilling prophecy.

I am by no means saying everyone just ignore the drs and go your own way, but you spend a lot more time with your child than any medical professional, take what they say and apply common sense and question everything - you have to be careful there are whole industries set up around wanting to diagnose your child, more help isn't always better, but often a little help is.

I grew up in NZ, I live in Australia, when I grew up strange children were just, a little strange. Life went on. These days the "normal" pigeon hole is very narrow and if you don't fit in it is like alarm bells immediately go off everywhere. What might be less than a years difference in developement in one narrow area all of a sudden becomes a big problem.

I wonder if in todays world if someone brilliant like Dirac would not have got shunted off to some institution and never heard from.
This only makes sense if you have multiple personality disorder. if there are many alters that shares one body, after successful biometric authentication, the machine might need to request password for authorization to prevent unsolicited access from another alter in one body.
Indeed, it wouldn’t take much for them to legislate to make the whole ring signature mechanism illegal.
With the impending sunset of Google Hangouts, I've been using discord for family communication. It is nice that the barrier of entry is low enough that you can actually get people to use it, and that you can use it on desktop (otherwise you'd just use SMS)
Cmon apple, just add NFC to macbooks already. Fido cards are the most obvious solution to this.
I love Woz, but he did so, because of what he was given. Apple was raking in tens of millions from the Apple 2, why didn't they give Woz a team of chip designers for the follow on products? I mean, the Mac was launched similarly with TTL based logic "GPU", compared with the Commodore Amiga 1 year later which launched with 3 custom ASICs just like the C64.
> It's really stupid simple to follow safe practices for absolute majority of apps.

That’s what C programmers tell me about memory management and buffer sizing.

And yet: https://www.zdnet.com/google-amp/article/microsoft-70-percen...

Thing is: even if you are careful, you only need to make a single mistake to lose everything.

Just like there’s is benefit in memory-safe languages, there is benefit in environments where a single .innerHTML instead of a .innerText doesn’t mean an RCE.

But that wasn’t really the point of my initial comment. Just as I can accept C programmers thinking they don’t make mistakes, I can accept you believing never making any mistakes either and thus I can even accept electron having a footgun mode.

What I took issue with wasn’t the general availability of such a mode but the fact that this mode is a silently chosen default.

Have people explicitly opt in or out of this safety feature. Don’t assume they want to shoot themselves in the foot by default.

That was my concern and this is the pet I hope we can all agree about.

That I personally also think that turning off context isolation should be impossible is another matter and not really part of this discussion and I’m even willing to accept that people could change my mind about that one.

But having an unsafe default is craziness in my book.
Sorry for being repetitive, but when a teenager girl from Sweden had enough of the hypocrisy and decided to cross the Atlantic in a freaking yacht to prove the point, the same group of people also made fun of her... for using single-use utensils in a train.

All one has to do is to decide that they hate "climate activists" - humans are fallible, so it's not hard to find reasons to hate every single one of them, be it Al Gore, Greta Thunberg, or Michael Mann.
Menu Toggle with Pure CSS
> or, in the case of macOS a horribly outdated one.

The latest version of macOS defaults to zsh instead of the outdated version of bash.
I have a power speaker that goes on a big tripod, but I only use it for Karaoke or when I need to crank loud music outside.

The JBL Flip 4 I have used for just casual music in the garden.
I have been chatting via text, as a major form of communication, for more than 20 years and at least 2/3s of my life. Before this thread, I have never even contemplated a period having any meaning more than the end of a though. And I certainly had no position of authority, so that didn't affect anything.

I am really curious how this evolved, and how I missed it being something people think. My biases tend to lean towards viewing people who don't use punctuation and capitalization as being less professional. I couldn't care less in something like a random chat in discord. But for Slack, as a work tool, I prefer to stay "professional".

I wonder what other seemingly unspoken biases are out there? Especially in a time where we are spending much more time in text instead of in person.
I see! Thanks! Interesting to know that!

Yup, feels like medicines & bio-engineering have such a high barriers to entry (which well makes sense too).

I have been thinking a lot about going back to school for an undergrad. Hope schools in Germany still take none-EU students like myself who are “past their prime” as undergrads. Or maybe I will look around in other places.
> why would I trust my password...

Do you use the same password everywhere, by any chance? :)
There is some discussion in the diquis about them providing a server you can run yourself. So if you have a fleet of servers you don't have to share with crowdsec but instead can share only with yourself (my read, perhaps a hybrid)
If citrulline were Rx-only in the US, then I doubt Doctor's Best would make it and I doubt Walmart would sell it:

https://www.walmart.com/ip//150061958
A user would have a difficult time leaving the platform, even if they preferred an alternative, unless all of their friends and communicates also left, similar to why leaving a platform like Facebook or Reddit can be so difficult.
> In that pre-announce video Apple dared to insinuate that attestation by current devices is de-anonymizing, when that isn't universally the case.

Most hardware devices use batch attestation, where some group of (say, 100 000) keys all get the same private key. This does still provide some data for correlating users based on make + model + batch of their authenticators.

ECDAA was meant to be an approach to solve this with pairing-friendly curves and crypto, but the industry stayed clear of this as an unproven algorithm.

Apple (and the rather similar SafetyNet approach by Google) use a service. The interaction between the device and this service is black-box and we do not yet know how much information is exchanged. By its nature, this service can change in the future and we will not know.

However, it _could_ be limited to an RSA or EC-based DAA attestation from the Secure Enclave, a curve point on P-256, and a SHA-256 hash value to embed. There's no reason Apple needs to know either the specific piece of hardware or the site a user is going to.

> Further, it's up to the site to decide whether to use an anonymous attestation or not. The user will not be informed either way.

Several browsers will give the user the option to not send attestation if a site asks for it, to the point where capturing attestations is a UX-impacting action. You could say the UX impact is intentional - not only do basic attestations leak some tracking information, but they limit user choice in how to authenticate.
As you should. Bash --- at least bash 3.x --- is available literally everywhere and has many features essential for robust programming, like local variables. Instead of writing for some antique shell, we should all just write for bash or zsh or something modern. I don't care about being compatible with some random AIX installation that's from 1870 and powered by a steam engine.
As far as Apple devices are concerned, biometric data never leaves the Secure Enclave, so risk of data leak is non-zero, but sufficiently low for everyday life. Compare that to the massive number of people who use password123 as their password for every account across the web, and yes, biometrics are far more secure. :) More secure than a random 30 character string? Probably not.

And if you’re targeted by individuals who are sufficiently motivated to steal your biometrics and the physical device, then neither the password nor the biometrics will be enough to protect you.
Most (all?) new apple laptops have touchid, but I agree this seems most useful on iPhone/Pad which kind of makes sense as the majority of 2fa keys (yubi, etc) still plug in.

That would surely be more awkward than using the already built in SEP and authentication system.
In the US, 1 Calorie = 1 kcal elsewhere.

We refer to kilocalories with capital-C "Calorie". I don't know why.