skysight-inc/HackerNews huggingface dataset:
Does it matter? A full-chain zero-click remote complete compromise for either system is only $2-3 million. That is absolute chump change. 4-6% of households in the US [1], 5-8 million households, have sufficient assets to fully compromise every iPhone or Android in the world. If we consider businesses, I bet that is within the reach of no less than 50% of the businesses (including small businesses) in the US. That is an absurd number of entities where that price point is totally doable.

If a bad actor can derive just $10 on average per phone they attack, then all they need to do is find a way to deploy their $2-3 million exploit to 1 million phones for less than $5 million to make a tidy profit. Given that we are talking about zero-click remote compromises, which means the victim only needs to receive the payload, this means that it is profitable as long as the cost per victim impression is less than $5, a CPM of $5000. With that sort of budget you can embed your attack into an ad and then outbid everybody else by a factor of 10 for placements. You can buy a mailing list and embed your attack as a "payload pixel". If it is a zero-click text message attack then you can buy access to the spam-callers and mass deploy it that way.

These systems are between a factor of 10-100x off of adequate. To care about their relative differences is like debating whether paper mache or tissue paper is better at stopping bullets. One is probably better than the other, but neither provides meaningful protection, so it hardly matters. You need fundamental, qualitative improvements before differences between the solutions provide meaningful effects on outcomes.

[1] https://dqydj.com/average-median-top-net-worth-percentiles/
It's stolen property. They're never going to be able to keep it even if they do do some prison time. If their claim is that it's truly lost and they no longer have access, and then the funds ever move again on the blockchain, boom, right back to jail under contempt and other charges.
Did you just explain that everyone over 20 has PTSD, since everyone lived through at least one of those?
What are those weak points and how does Anu fix them? I found a technical example in https://anu.dev/documentation/associativity.html, but it was unconvincing. In their example, three way merge should produce a conflict for a human to resolve it. Which is good, we don't want a 'smart' tool to do the wrong thing and silently introduce bugs. If the argument is that pijul/anu reduce the number of conflicts by exploiting history, is there a quantization of this benefit for practical workloads, e.g. popular git repos?
Are you kidding me?

Thunderbird and Firefox are perfect candidates for snap.

Before with Thunderbird, the only packaged version of thunderbird was an extremely old version released. Even now on 18.04 the package version of thunderbird is version 68.

To a certain degree the same nonsense happens with Firefox. The version of Firefox provided by apt lags behind for security releases.

In contrast, the snap version is now released almost the same day for ubuntu 16.04, 18.04, 20.04 and 20.10.

I'm glad to be using snaps and Ubuntu. Finally I can now get an easy installation for getting the latest version of intellij, vscode, firefox, thunderbird with no additional repos or faffle.
iOS wasn't stressing me directly, it was that the UI is built to encourage compulsive media consumption and that was eating into other parts of my life like work (which is stressful.)
Hi all, I'm a long-time lurker, first-time poster. I just finished the MVP of my quarantine project, a web app to take notes with timestamps on YouTube videos, now online at https://sidenote.me

This is something I use for myself to create my own summaries of conference talks and content-rich videos, also so that I can easily jump back to the moment of the video that’s referred in my notes. Here is an example: https://sidenote.me/note/kFedP0DrC6la/how-i-study-languages-...

For now it’s just a little tool I built for myself, and I decided to open it up for others to create and share their notes as well if they find it useful.

Given that I'm not selling anything, I haven’t figure out yet how to grow a user base and even less how to monetize it. If anyone has ideas about that, please share.

Thanks for reading up until now, all feedback is welcome!
I do, and on multiple machines! Never got any corruption, but that's of course anecdata - also, I don't use the global search/index.

I personally don't think it's so terrible - ultimately, the email medium itself hasn't evolved for... never.

Definitely the address book is garbage in any possible way (both in the UX, and in the legendary Mork backend) - one has to use addons in order to get a sane experience.

Additionally, AFAIK, it's so internally tangled that after years, they couldn't make a tabbed email writing window. Another indicative bit: "Plans existed for Mork to be replaced with MozStorage in Thunderbird 3.0."¹.

My biggest worry was actually the addons. There has been a major API change at some point, and several of my addons weren't compatible. Took years for equivalent ones to be developed. Now... another API change (sigh).

¹: https://en.wikipedia.org/wiki/Mork_(file_format)
https://sfmayor.org/sites/default/files/CSF_Budget_Book_June...

Trains, streets, cops, hospitals, public works, 31k employees, and so on.
I've seen people take that position and I see a fundamental mistake. Look at rust belt cities. Look at NYC in the 70s. When employers leave the people left behind are not better off. This doesn't mean we need to kiss big tech ass, but we have a city where getting a job is a solved problem. Very few places on earth have that.

Rent prices are the underlying problem pushing people out. Underlying _that_ problem is a lack of supply. SF zoned for and issued permits for a large number of offices, but not the corresponding residential structures to house those new workers. So they came here and were forced to compete with existing residents for a place to live.

The fix is to keep the economic prosperity and build more housing.

> Meanwhile socioeconomic disparity is an oozing sore in San Francisco

I'd argue that mixed income neighborhoods are the best kind. Many of the mechanisms for disadvantaging poor communities require geographic segregation. School quality, policing practices, etc
From what I remember it sounded rather that the virus mutated faster in ferrets, not just because of their environment. I cannot find a source for it, so I might have misunderstood.
The politicians have shown their hand by not designing this legislation to instead have companies pay their employees more. Why do I say that? It's currently cheaper to pay the tax than give the raises to your employees. So politicians have shown it's just a money grab _For the Government_ more than for the employees.

Let's say I make $100 and the mean is $1. I'll pay 0.1% on tax payments.
Sure but that doesn't change how long they supported after end of sale which wasn't in 2013 but at least until 2017. So ~3 years of software updates from end of sale. Still OK but not anything special.
In that scenario, the coins ended up somewhere other than where the court ordered.

That didn't just happen. Someone intended it to happen.

Investigations and all available means will be used to obtain the coins. That could continue for the remainder of time all involved have here.
1. learning. I notice that people who have the fancy degrees or come from big tech are more interested in status/ladder climbing rather than the "work of the work". new things are dangerous to the status quo.
2. reading comprehension. they don't read the docs, their tests read like 'it works' if there's any.
3. tedious or technical work isn't "cool". the reality is, learning the obscure hard parts of the existing system and making recommendations to upgrade out or up is job security. they would rather start a weekly tech talk.
Yeah Naughty Dog was doing the same thing in Scheme apparently!
Have been on a similar journey within the company I'm at now. Starting out with fairly loose Python, and now seeing egregious bugs make it into production and hurt your team's reputation, you start asking "why the hell are we suffering from things that are highly preventable". You work your way through type hints, strict linting, code reviews, etc etc, but you end up realising you're in part just using a hammer to nail in a screw.
Right. It's nothing half a million dollars worth of jailing costs can't fix.
These days, building and deploying your own chat from scratch with something like Django Channels can take you just a few hours. But I can see the appeal of getting a ready to use solution for a little fee.
Even when people get land what's built on it tends to be very inefficient if anything is built at all. Even in very dense areas most of the land is 1-2 story buildings or parking lots. If there is any housing it's almost always detached single family buildings.
It's rewriten from scratch and authors didn't answer about compatibility so I checked it right now.
No, it doesnt' work with pijul repo at least in my scenarios
Good guess and thanks for the tip. All I could turn up from searching Reddit is that I’d need to disable the AMD iGPU to use the dGPU for games. This doesn’t seem a problem for me since I will use the dGPU for CUDA work only, and I’d expect that should work ok or I’ll return it.
That’s fine. The SF people think is SF, that used to be SF, does really well with 700,000 people and everyone with a shitty job.
This is so fucked. We've encrusted ourselves into this walled fiefdom, and there's no way to break free.

It's only going to get worse.

Chrome will be the only browser. AMP the only delivery mechanism. Video will require DRM. Eventually, text content will too. Binary blobs with no ad blocking.
Awesome project. I shamefully admit this is a hobby of mine as well. Glad to see I am not alone.
The text of the measure refers to "compensation", of which it gives a specific definition that includes commissions, bonuses, and equity (specifically mentioning stock options). The $1 salary CEO isn't excluded if they also have a huge equity package.

Although it doesn't mention capital gains, so if the CEO owns a significant part of their company already and doesn't have an additional vesting schedule, then they could make personal income from appreciation of the business that wouldn't be counted towards this bill.
I've been very disappointed with the pains of using git. I would really like something like this, but the steps to install it are:

> Anu is written in Rust, and can be installed by first installing Rust, and then...

Yeah, I'm not installing an entire language just to use your tool. I don't need to install a C or C++ compiler to run Photoshop or Microsoft Word. Why do I need to install a compiler, libraries, etc. just to try out your tool? No thanks.
>after just three years

The 5S was sold from Apple stores in India in mid 2017. So that's 3 years of updates from end-of-sale and this is an OS update for a 2 year old OS. So two years of support. Less than the Pixel.
Walking along the road with a backpack is more than enough to stop a deputy sheriff pretty much every where in the south. Areas in proximity to the AT are exceptional not typical.

I am not disagreeing with your theory. Just thinking about what walking is like in the south and how it differs from other parts of the US based on nearly a lifetime living there and meaningfully traveling the west in recent years.
For anyone having trouble keeping up with the renames: "Google Apps" was renamed to "G Suite" in 2016, and was recently renamed again to "Google Workspace".
I'm playing with this. Jeremy Howard of fast.ai was kind enough to share how they test fast.ai notebooks[0] with `nbdev_test_nbs` to help us support them on iko.ai.

I've been trying to fit them into our images but it's not that great. We'll build smaller images just for the course because the requirements aren't tight for the earlier versions of the course (v1 for fastdotai and pytorch errors with workarounds on the fast.ai forums), and the later fastbook has other requirements.

- [0]: https://twitter.com/jeremyphoward/status/1319991862552215553
highest paid executive makes 100 times or more its median worker’s salary
Earlier discussion: https://news.ycombinator.com/item?id=25001173
Is Facebook still giving Zuck bonuses or new stock issues? Isn't Zuckerberg's wealth composed entirely of stock that he already owns? So how is this going to affect Facebook?
> There was a competing bicycle dealership next door (Apple) that one day began selling motorized vehicles--expensive but attractively styled cars with their innards hermetically sealed, so that how they worked was something of a mystery.

In retrospect, I think Neal was referring to a specific aspect of Apple's products when writing 'hermetically sealed', but I view almost any Apple product, as a whole, that way. (Apple doesn't want you to service them yourself, or know how the software works.) Even after 20 years, some things never change.
I'm one of those scientists, working in industry R&D. I use Python for everything from Jupyter notebooks to a roughly 8000 line program that runs a prototype of a product. Python pulled me away from Visual Basic several years ago, and then I have a longer history going back through Turbo Pascal and ultimately originating with primordial BASIC. On the hardware side, I use C within the Arduino ecosystem. I've got roughly a half dozen other scientists at my work site using Python at various levels.

Confession: Code quality is a problem. I care a lot about code quality. My team recently brought on a couple of people with real programming background, and I've asked them to help me bring myself up to date on good techniques, and it has helped. I was lucky that some of my former training, e.g., in Pascal, was not just about how to program, but actually how to write good code (for its time).

But here's my view. Don't just tell us that our code sucks. We already know it, but we're under the same pressures as anybody else, and programming is a force multiplier that we won't give up. We need instructions that we can understand at our level, that will help us do this stuff better, perhaps incrementally. Starting with a strict discipline is hard, but Python supports the ability to go back through working code and improve it.
Why do you credit Tesla, when StreetScooters have been roaming the streets for years already?

https://en.m.wikipedia.org/wiki/StreetScooter
My uderstanding is that they wanted to change the algorithm and that the codebase needed a major refactoring. I think there was performance issues with the first implementation and design so they had to make very large change.

https://discourse.pijul.org/t/is-this-project-still-active-y...
The few times I've needed a vector graphic quickly just typing an SVG into Vim always felt like the path of least resistance. (heh)
The issue I have with pure electronic voting machines are numerous: it's hard to audit them and it's been shown many times in the past how easy it is to compromise them.

But if you put aside the security or the bug free status of the whole thing, a true democratic vote has at least 2 properties:

1. it's anonymous

2. it can be audited by a layman

Because of the complexity or bugs or whatever, #1 cannot really be guaranteed. Voting machine vendors will say they have no way to track voters until someone finds a flow or figure it out. Or machines could be altered or hacked or...

But really the biggest problem is #2: because if there's a problem, you need a paper trail. Because in the event of a recount, you want your average joe or jane to be able to recount ballots.

You could bring all the blockchain stuff (because I often hear that) or what not into the argument, you still wouldn't be able to do both #1 and #2.

So to me, voting must remain a paper thing.
I only use Thunderbird on all my devices for all my different email addresses. No other client. Happy with it. Also works nicely for dual-booting and sharing a config between Windows and Linux.

One feature I miss is sync. Something like Firefox Sync would be very useful.
This is a myth. Neurogenesis changes with age and is mostly prevalent only in specific brain areas, but is a well investigated phenomenon.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3106107/
https://www.nature.com/articles/nm1198_1313
https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4812798/
Yeah, that's because the various national railway systems are poorly suited for international traffic. There are various EU efforts to improve the situation, but the governments try to protect their national monopolies etc. The end result being that in most cases it's easier to ship international freight by truck.
Somebody who is too lazy to choose a good variable name in IntelliJ would also have chosen a bad (or even worse) variable name without the tooling. I don't buy that argument.

For class names it might be true that long compound names are driven by auto suggestions from the IDE. But I'm wondering if they're really as bad as their reputation. Somehow it's similar as for variables. You can still come up with more meaningful names if you want but I admit that auto suggestions do more harm there.
How often do people rename identifiers for that to be a particularly useful feature? If it's not that often, you might be served fine with something like

sed -i 's/foo/bar/g' **.rb

It's not precise, so it might take some manual work and tweaking with the patterns, but for how often I've had to rename identifiers, it works good enough to handle the bulk work.

A bit of forethought when first naming things works wonders, too.
Building infrastructure to support audio research
Apples (ha!) to Oranges. Personal computers cost, on average 2-4 times what the 5S cost in its day, and are expected to last much longer than a phone (as evidenced by the lack of uproar that all phone vendors including Microsoft drop support within 2-3 years ... except Apple).
This was the 2011 city council ballot for Frankfurt am Main:

https://chalog.files.wordpress.com/2011/03/stimmzettel.jpg

Every voter had 93 votes, one for each seat in the city council. It's a rather complicated system, where you can freely assign up to 3 votes of your 93 votes to each candidate, can strike candidates from the list or simply vote for party lists.

Federal elections are way simpler, with just 2 votes. But often several elections are combined. But there are less elections overall in Germany, as we usually only vote for: city council, county council, state and federal parliaments, and finally EU parliament. 5 in total, most of them every 4 years, so on average 1.2 votings per year.
How does this compare to svg edit.
CEOs are all just going to move out of San Francisco.
If that’s the case, they’ll make a single 300 km trip or day. I doubt that the business case for that is strong. With autonomous Semis on the horizon, the potential reduction in costs with the scaling of hauling in km / day will drive costs down. 300 km a day won’t be competitive in that space.

For a buyer of semis, the cost of running one is arguably the most important factor. Producers need to focus on $ / km and there range is quite important (as well as charging infrastructure)
I find it interesting that you frame income inequality as "wealth polarisation." Are you implying a bimodal distribution of some sort?

My personal theory of "inequality" is that it isn't necessarily a bad thing. A distribution of income levels will always have a long right tail as you cannot make negative income but there is no theoretical limit to the maximum income. If all wages grow by the same relative amount, you would see increased inequality.

I think it is a problem if wages aren't growing for all portions of the distribution, but that is precisely because of the lack of growth for some and not because of the existence of growth for others. So, yes, I do think that growing income inequality may be a societal issue, but only if it is an effect of wage stagnation for middle and lower classes (which it is).

I do not believe that the rich getting richer is the cause of the stagnation, though. If anything, automation and globalization have been the main reasons for stagnation among middle and lower income levels. Automation and globalization may also be the cause of the continued growth in the very high wages. Even if they share the same underlying cause, one didn't cause the other.

I understand, but don't agree with, the argument that increased inequality causes social problems on its own. According to this theory, as I understand it, you can't have the differences among people be too great because it will cause too much power imbalance and resentment and eventually the masses will rise up and destroy the system from within. I don't agree, I think social problems come from the difference in reality compared to expectations of how one thought their future would go -- in other words, it is much worse for someone to see low wage growth in a stagnant economy where their standard of living is declining relative to their parents than it is to see moderate wage growth in a growing economy but there are some other people getting super, super rich. I don't think one's life relative to rich people is that important compared to one's life relative to personal expectations.

So, in that sense, I don't agree with redistribution schemes that intend on fixing a symptom of a problem (that rich people exist) rather than fixing a cause (wages are stagnant).

If the idea isn't to just reduce the inequality, but rather to supplement lower incomes -- there is absolutely no version of "taxing the mega rich" that we could do which would raise enough money to redistribute to the rest of workers such that it compensates them for the lack of wage growth at the lower end. It can't be done, there's not enough money. Eventually you have to tax the (productive) middle class.

From that perspective, I prefer policies that focus on wage growth for the lower and middle classes, even if that's a harder problem to solve.
Thanks for making this point. People focus on types but it's the whole smorgasboard of modern features missing from Python - lack of proper (idiomatic) support for functional programming, None types, etc etc.
k3s looks like it removes some of the "moving parts" from Kubernetes, but for a single node setup, docker-compose might be simpler to manage.
A refreshing and straightforward, opinionated writeup.

Cuts through the noise of the big cloud providers, who are ironically incentivized to keep things pretty complicated.

Traefik isn't that complicated though, definitely worth learning.
IMO the short answer is, yes pardons can seemingly be bought in the Trumpian era of American politics. Whether $1B is enough, I don't necessarily know, but I don't see why the likelihood is something to dismiss out of hand.
that calculator took 35 seconds to load on my ipad pro... not a great first impression (and the ui lag was quite noticable as well)
Since this is transparently easy to game, i wonder which people is it supposed to be pandering to?
I was unable to benefit from the battery replacement due to a chip in the screen they discovered after I got a CS code to do it: https://i.imgur.com/Gr1bPTU.jpg
For people who point out that this incentivizes companies to leave San Francisco, that's probably not a coincidence. Many SF politicians see tech as the enemy and would be happy to see companies go elsewhere.