skysight-inc/HackerNews huggingface dataset:
What kind of skills are required to get started in jailbreaking? I am guessing some assembly and C would be helpful. Not even sure what to search for to get started.

I am not really interested in jailbreaking iPhones, but I have some equipment from the early 2000s running software that are no longer maintained that I'd love to tweak.
Modern web as in...? Tinygram prevention is a TCP level actor, with no regard to whether it's sending db queries or webpages. With the prevalence of "smart" appliances and ever coming IOT, I'd argue it's more important than ever. I don't trust most vendors to get it anything close to optimal otherwise.
How an LMS Solves Learning Challenges in Remote Working
Moving to Android so you can jailbreak your phone to run a terminal sounds like a much, much larger hoop than just using a VM.
I jailbreaked to use the iPhone in europe, with any carrier and to use apps that weren't accepted in iOS back then. Now I don't have this need anymore, in fact my phone has the bare minimum set of apps to run.
Two questions.

uint64_t is 8 bytes, not 16. Why are you overreading up to 15?

How did you conclude that the test hurt performance? I have researched this for over a decade and my conclusion is that the bounds check is for all intents and purposes free, because it is hidden in the latency of the actual memory access (even if it comes from L1 cache). The only way the bounds check can ever hurt performance is if it adds additional memory reads.

That would indicate that you don't have a memory access for the upper bound at all currently, which sounds like you could overread an arbitrary amount, not just up to 15 bytes.
I am just curious to know if any effort has been made to find out who was behind the attacks? at least more information about it?
> Not to mention all gun laws are infringements of the second amendment.

This is phrased like a legal argument but it's missing all the important parts.
TIL. It looks like 1Password stores the key in the Secure Enclave and uses the "watch" constraint [0] to access it. This triggers the "Approve with Apple Watch" prompt [1].

[0] https://developer.apple.com/documentation/security/secaccess...

[1] https://i.1password.com/media/mac-apple-watch-prompt.png
> proof-of-stake rewards those who already have enough to stake

As opposed to people who have money buying mining hardware to make more money that can be invested into mining hardware?
Communists are people who would downvote, when they have nothing to say.
Not with DOH
Copying files over USB is ludicrously slow and requires cross-device trust and exposure to dirty USB.

Let's not deceive ourselves: Apple deliberately cripples standardised data exchange mechanisms to push iCloud and aht Apple ecosystem.
If you mean malloc() by that: malloc will return aligned memory so that you can store all data types, i.e. it is 64-bit aligned at least (so you can store double) but probably has even higher granularity.

It's the downside of malloc not knowing the type you want and returning void*. It has to assume the worst alignment requirements.

Which actually happen to be 128 bytes for SSE instructions.
Or the TS80? (which also sports USB-C)
The data was full of spam & was targeted at high profile customers. It was also run every hour for one period then ramped up to 500,000 concurrents. It was a DDoS :(
Gamers Nexus also does CPU tests, when reviewing CPUs. Gaming benchmarks are an aside.

Also if Apple's opening statement for M1 is that its industry-leading, then they should let these reviewers substantiate it, because that's what they usually review.
Can’t talk about this publicly, sorry :(
China was never communist but in name.
Could just be a lazy test for connectivity. Did you log any of the traffic?
The East India Company was a de facto arm of government; chartered as a state-protected monopoly. There’s plenty of examples of things that aren't formally states or formally linked to them taking advantage of weak or absent states to exert extreme power over people's lives (and plenty of examples of systems without a distinction between private power and public authority at all, e.g., feudalism), but the EIC isn't one of them.
"Device Warranty: 30 Days" => Totally illegal in my country
Pico-UTM: Cyber-Security Box for Work-from-Home
Hi everyone,

We are Lionic, cyber-security solutions provider of Taiwan!

We have launched a security box - Pico-UTM 100 recently, it is a truly plug & protect security gateway developed by our own patented Deep Packet Inspection technology and designed to protect home & SOHO and small business(ppl<50).

It has powerful network security feature, Anti-Virs, Anti-Intrusion (IPS), Anti-WebThreat (Web Guard) and basic firewall to reinforce the protection.

To keep your original Wi-Fi router is a plus! The Pico-UTM 100 won't replace your Wi-Fi router.

Now, click here https://igg.me/at/UI2vNvPpz9I/x/23485151#/ to learn more and give us the support!

Thank you!
You could perhaps use Invidious's API?

Invidious is "an alternative front-end to YouTube" which can be self-hosted or you can use one of the popular hosted instances.

https://github.com/iv-org/invidious/
https://github.com/iv-org/invidious/wiki/API
> Proof-of-work incentivizes cheap & renewable energy investment.

Cheap yes, renewable no. Complete non sequitur there.

> The endgame is that all energy companies will primarily be Bitcoin mining companies, feeding their excess renewable energy into the grid to power homes, etc.

Absolute insanity straight out of postapocalyptic SF.

"The ancients destroyed their civilization by funelling an ever increasing share of resources towards some kind of elaborate game of numbers".
Same here. I jail broke the first iphone to use it as a handle held video camera.

I need to jailbreak to get music off it. Lost the orginal itune laptop hard drive where the music is on. Don't want to install some no free iMyPHone type of software to do the extract, don't want to run them on my computer, seems a bit fishy. I really just need root access and then I can scp off the music.

EDIT: iOS 10.x, old iphone.
Google is miles ahead with accuracy. Shame you can't switch providers...
I think users may find it easier to create a Docker image with `guix pack -f docker app1 app2` than to write a Dockerfile.

As a bonus, the resulting Docker image is bit-reproducible and recipients of the image can "map it back" to the original Guix revision.

https://guix.gnu.org/manual/en/html_node/Invoking-guix-pack....
But it isn't really a different browser, it's all Safari underneath. And Safari is deliberately crippled.
You're choosing to consider the case when the price is very high, but not when it's very low. The flip-side of that coin would be that energy not worth being put into mining, which would be sold at a loss to the grid, would instead be put into batteries and saved, to be sold when when market prices were high again.

But I think by the time Bitcoin becomes so universal that all energy companies are mining companies, it is likely to already be at the scale of USD/EUR, or even become the reserve currency of the world, in which case it would not fluctuate nearly as much as it does now.
Notwithstanding this (that Python will scale), Python will force you to scale horizontally a lot earlier than something like Rust. In mid-2013, NewsBlur was using 48 servers to run its Python/Django stack. The workload was reasonably precisely declared (and I could grudgingly see why it used so many servers for its stack), so I was able to run the numbers and confidently concluded that something reasonably efficient (which for me would now mean Rust) could have handled the same workload on one equivalent server, though not with a great deal of headroom, and further vertical scaling might have started running into I/O limitations. But for a one-man thing, I know I would prefer to use a single server as long as convenient, and a 98% reduction in hosting bill is very significant (though that’s a moderately extreme case, and I imagine smaller parts of the code could have been rewritten in a language like Rust to get a meaningful fraction of that resource usage reduction).
Side node: Just to prevent any life expectancy changing surprises:

> with confidence that the person in the right lane will never, ever change lanes without a signal and mirror check

Always expect someone to sleep at the steering wheel and switch lanes at an instant without so much as using the signal. Especially when you are going 200kph.
Perseverance Rover's Interplanetary Sounds by NASA
Shut this thread down, the fundamentalist capitalists have arrived
Makes me think of Terminator 2, when JC teaches T to flip the sunshade for keys instead of mashing the ignition key hole.

That in turn makes me think about that - was it common during those days to do that, store the keys there? Perhaps for shared service vehicles?
I think that shouldn’t cause much troubles in DO. I had it running for a while without the prometheus operator, and I didn’t have any issue.

In the beginning I was even running everything on a one $10/mo “cluster” (cheapest DO offers). Even Postgres and Redis, all inside the cluster.

As I got more customers, I needed something less risky, so added more nodes, and moved the database out.

But to be honest even the 1 instance $10 cluster was fine.
> The only change is that now they are doing it in public.

They very conveniently started to do it in public when Stallman's reputation was severely damaged by the media spreading lies about him, when he lost his home, when he most needed support. And they started by publishing a vague defamatory statement against him, and they used the GNU projects website for that. And they continued to defame him on the mailing lists.

Could there really be any excuse for their actions? Was it acceptable even if they believe that they were doing it for the good of the GNU project?
And it is easy to install software that's not packaged by distribution, ungoogled chromium [1]:

$ nix-env -iA nixpkgs.ungoogled-chromium
$ which chromium
/home/sergeykish/.nix-profile/bin/chromium

[1] https://search.nixos.org/packages?channel=20.09&show=ungoogl...
I would love an iPad pro to run Xcode, I think prototyping an app where you have direct access to a touch screen and all sensors would be really productive.
Ok, so which country was?
I'm not sure which energy intensive industries you're thinking of, but bitcoin mining has the potential advantage that it can be turned on and off at a moment's notice, and doesn't require constant human supervision. That's not true of a lot of industrial processes.
The problem is that mining can never reduce its energy usage. Any efficiency gains are necessarily eaten by increased difficulty. And in fact, energy usage has to incease in proportion with the value of the network.
It's just reverse engineering. You want to find some kind of actions that let you cause non-standard behavior in the implementation of privileged libraries.
It's hard for me to get interested in any hardware or software security news with ransomware amok and none of this addressing it.
I've opened up the front door of our old house before (when I was like twelve? ish?) with a bit of wire I found in the shed; my parents didn't lock the door and the latch on the inside was hook-shaped, so getting in with a wire through the mail slot was pretty easy. I learned it on TV, a segment criticizing that exact type of lock, lol.
and yes, people have proven that it's possible to build something like podman or buildah on top of containerd / buildkit! No need to reinvent the wheel!

https://github.com/rancher/k3c
https://github.com/genuinetools/img
I want to say the Pinecil, which I've been anxiously awaiting, is significantly less expensive... But shipping of $11 (though looks like I accidentally selected courier shipping so it's more like $50) brings it up closer to parity with the TS-100 kits you can get on Amazon for the TS100s.

I'm still really excited about the Pinecil though! I don't solder a lot, so I'm looking forward to having a quick kit I can whip out instead of my whole toolbox of soldering tools with my ancient but trusty Weller.
Get your GitHub repository timeline
Reposlib is the web project that allows you to get your Github repositories timeline. You can see the list of repositories on Github sorted by dates of projects.

https://github.com/okandavut/reposlib
Thanks, it is nice to see different perspectives!
It's got nothing to do with "feeling safe". It's such a poor form of rhetoric that's completely disingenuous. You should stop using it.
It wouldn't be a nice interface for packagers to use.

More importantly, it's not enough to implement grafts because it's not recursive, as discussed at https://guix.gnu.org/en/blog/2016/timely-delivery-of-securit... .
> Every other OS and languages have tried their own variant of the libdispatch and from what I have read they all failed to some extent.

LibDispatch is Apple's re-implementation of SubmitThreadpoolWork WinAPI, introduced in Windows Vista 3 years before libdispatch. Thread pools work better in Windows because OS kernel support.

In libdispatch and similar cross-platform libraries, OS kernel is unaware of the thread pool. The kernel implements individual threads and schedules them fairly, the rest of the code is user mode.

Windows has I/O completion ports (IOCP) in the kernel since forever, more specifically since NT 3.5 shipped in 1994. That newer Vista API is probably built on top, or uses same kernel features.

Here's an important part from IOCP's documentation:

> The system also allows a thread waiting in GetQueuedCompletionStatus to process a completion packet if another running thread associated with the same I/O completion port enters a wait state for other reasons, for example the SuspendThread function.

This is the unique part which can't be implemented in a user mode library. If you create a thread pool with 1 OS thread per hardware thread, and call any blocking API from the pool, a hardware thread will go to sleep. If you create a thread pool with multiple OS threads per hardware thread, the OS will use all of them concurrently and you'll get overhead from context switches, also latency spikes.

The problem can only be solved in OS kernel. That's why in Windows, thread pools usually works OK.
I know I can find someone feels the same in the comments!
Then you cut out videos you were interested in the first place.
The protocols used in this system can apparently integrate with protocols.io, a github for scientific protocols
Relatedly, what is going on with that header image? I kind of love it, but it nevertheless leaves me confused.
> the student can skip learning 11/12ths of the required muscle memory. That's a very significant, and very measurable gain.

Citation needed
The crime is bribery, which determines the jurisdiction is federal.

Which laws were being overlooked by the bribe is not relevant.
Donut County has a great soundtrack too, and it's on Spotify and Apple Music.
I'm sure professional thieves would know how to disable the GPS tracker quick enough.

I had a colleague of mine whose BMW was broken into at night. He woke up to police in front of his house (called by BMW's own alert system), there's an atmospheric pressure sensor inside the car and everything.

No sign of the thieves, so he booked an appointment to have the window fixed and didn't think much of it. But then he realized the side panel (in the door column? the column between the front and rear doors) was tweaked over a bit.

The thieves had gone in and cut the cable tree going to the roof of the car, which contains amongst other things the antenna and connection to BMW's alert service. Their plan was to come in the one night, disappear, hope the victim didn't notice that (and the garage doesn't check for it), and come in to steal it for real the next day, or maybe even the same night after the police has gone again.
New aircraft spy opportunities amid aerospace woes
I have to admit that if I were a bored tech industry billionaire... I would find a way, through at least 5-6 levels of abstraction and cutouts/shells, to fund implementation of weird projects like this.
This is super, super interesting. Is there other stuff out there like this? Seems like a cool way of making very native-feeling, impactful demos.
In what state won't you be prosecuted for murdering someone stealing your laptop?
Yes, I'm choosing the case where the price is too high, because most people rely on energy being available and that's why there's a number of laws (depending on the country) that protect from disconnection. In practical terms, I prefer my freezer not to stop working and spoil stored food rather than having universal world currency which fluctates less.
Belgian security researchers demonstrate flaws in Tesla Model X keyless entry
Yes, that's how most businesses work. You start with a capital investment, often times through a loan, and through smart management, make a profit on the margin, that you can choose to reinvest to stay competitive.

Proof-of-stake is completely unlike this. People who "have" are not required to exchange any effort to reap new reward. They retain purchasing power while the "have-nots" lose purchasing power.

I dunno if I struck a nerve with you with these points about proof of stake or something. I'm not completely against it - I think it should be tried, and Ethereum is a great network to try it with. But I also don't think it's completely perfect. I also think proof-of-work is very defensible and likely to succeed in unexpected ways.
It happens, I mean I've stupidly run out of fuel on the highway before. I think this is something that should be practiced at least once while taking driving lessons (like how you practice emergency braking and evasion on a motorbike)
I think the TS100 has a big advantage that you can easily rig up a barrel DC connector to XT60/XT90 connector, and use it to solder directly from a charged portable lipo battery.

https://www.google.com/search?q=ts100+lipo+cable&client=fire...
Exactly — you could even automate this and add it to a CI pipeline, no? Very, very cool.
The entire world was communist from the time cave paintings were drawn in France tens of thousands of years ago, to about 10000 years ago.

Whereas capitalism has only existed as the predominant economic system anywhere for a few centuries. In the US, with two economic crises in the past decade, Covid at a peak, global warming, racial strife, riots on streets etc., I am not sure what is working in the real world with the economic system here.
If e.g. you want political thinking in current events than you'd probably value recent videos more.

If you wanna see a great video on some obscure implementation detail of some electronics gear from the soviet era it doesn't really matter if it was uploaded a year ago or 8 years ago.
Hey, and yes that would also work, as you say, for profile information that doesn't change that often it would perhaps be the better option. However, since this is a tutorial blog post it's aim was to inform readers of "one" way you can use Twitter as a CMS. There are of course many other ways to achieve this.
I know modding the official client is against the rules, but how is a replacement client in breach when there’s a public API?

Does anyone know the specific rule, in the ToS, that Cordless breaks?
Apple will never have a comparable CPU. Not even Intel has one.
I don't believe they're less analyzed; they're just less published about. Car theft is a big industry.

The last one I heard about was keyless entry systems being abused; thieves carry a briefcase-sized antenna around, amplifying and directing the signal from the car asking the key fob to unlock.

Of course, ideally they want to break into your house and grab the key.
You downvote this, HN, but this is spot on.

You keep gobbling up this shit, you all drool over the toys Intel and MS push into your faces. Shoveling this manure up your own asses for decades. Now you are complaining and claiming you have no choice. Yeah, _now_ you don't anymore, but there is still wiggle room to influence the future. If we all go belly up and give up dystopia will come sooner than you are comfortable with.
Do you really think that Bitcoin, the first prototype of a decentralized currency, will be the primary electronic currency ever? We've only just begun exploring the design space, and it's terribly arrogant to believe that we'll be stuck with this prototype even just 20 years down the line.
Personal attacks will get you banned on HN. If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html and sticking to the rules when posting here, we'd be grateful.
Another threat that was not discussed, is HF (Flouride gas) release from Li-ion battery packs during a fire. [0]

I contracted for work on EV chargers software in the past, those R&D garages had HF detectors. The H&S procedure is to literally GTFO as soon as that alarm goes off.

HF gas will burn any human tissue upon contact with moisture, that _includes_ your eyeballs.

HF detectors should probably become standard gear for Fire departments.

[0] https://www.researchgate.net/publication/319368068_Toxic_flu...
I don't know why this seems so dystopian to some. To me, it seems like a financial incentive for a decentralized, robust, renewable future.
grinding down our habitat into shit swag via sweatshops...

shame on you
I don't know if I could make out the difference at 1000 feet in daylight, let alone 30,000 feet
I have no idea about Sunkara's particular virtues or failings -- or what his actual case was regarding Romanov children -- but I can tell you that Dreher lives in a glass house on this front, having penned an incoherent yet enthusiastic jeremiad against coronavirus mitigation efforts earlier in the year and describing robust public efforts to preserve life as living under the power of fear/Satan.

Apparently he finds sacrifices of life in the cause of his values worthwhile while finding such sacrifices made on the basis of other people's values unacceptable. To use Dreher's rhetorical standards, that's just who he is, I suppose.

For the people who aren't as quick to catch on to the substance of the topic: personally I'd strongly agree that there are moral issues with any execution, and the execution of children more so. But there's also moral issues with monarchy, and what's your plan for putting a decisive end to one with the cultural momentum of hundreds of years behind it? If you're an American, the plan of those who birthed the present order sure involved violence and we've got a culture which doesn't merely ruefully acknowledge its necessity but actively celebrates revolution with quotes about the tree of liberty being watered with blood echoing in discourse down to the present moment. If folks like Dreher are going to be horrified at Sunkara's acceptance of violence, they should at least have the decency to be sobered by its acceptance at the foundations of their own culture.

But then again, that'd require the same higher level of thinking he failed to do in his coronavirus rantings earlier this year.

I don't know why he's some kind of big name in Christian thinking circles; as far as I can tell, there is nothing in any of the writing I've been exposed to that is remarkable for either its Christian or intellectual character, and his status on that front likely exists far more out of the desire for conservatives & Christians to tell themselves the story of how they have their thinkers rather than any serious interest in the work of either discipleship or philosophy.

If he dislikes Sunkara, then Sunkara has my favor to lose on that basis alone.
Is there some trick to make file.pizza work? I'm leaving the tab open and trying on various different devices, but it just stays at Peers: 0 and nothing downloads.
Note, tips are the same!