skysight-inc/HackerNews huggingface dataset:
Might iOS Mail hiding sending address be leading cause of successful phfishing?
When designing a internal CRM we incorporated a few extra features such always displaying link addresses (mailto and url), which works so well at making the majority of phfishing emails so obvious I just cringe every time I use IOS Mail.

Which got me to wondering if IOS Mail's refusal to add a setting to display the sender's email address right in the inbox might actually be a leading cause of successful phfishing attacks... If you can see right in your inbox that "xyz.abc@def.jp" is claiming to be "Rackspace Support" and was the sender of "Important notice regarding your Rackspace account" there is NO need to open or interact with the obviously fake email... wipe left and be done with it.

But Apple (and other clients) continues to not only hide that important info by default, but does not provide an option to display it in the inbox. (Even Apple's Mac Mail client development team has made some ill-informed decisions in this regard.)

Of course, an IOS user CAN see the sender's email... after they OPEN the email, TAP the sender name, then TAP it again. For every message. Explain THAT to your grandparents.

I suspect the extra steps mean it only gets used by more sophisticated users who sniff something pfishy about the email itself. Not the people who need it most.

It seems to me that any responsible email client provider ought to recognize the importance of the sending email address as a first line of defense against the simpler attacks such as the example above.

IMO a 2nd line of defense email clients ought to add is link-expanders too. For example in our system if the link label includes "homedepot.com" but the actual url is not a homedepot.com url we expand it to look something like "NOTICE: see more at www.homedepot.com LINKS TO xyz.abc@def.jp" right in the email and remove the active link.

Link expansion makes pretty marketing emails look not-so-pretty.

It also makes the most common bad-guy emails we see stick out like a sore thumb.
Check out https://culdesac.com/ if that's what you're thinking.
> I feel like you'd have to expend so much literary energy constantly explaining how they shake the basic, ubiquitous surveillance we're used to,'excusing' the characters from overexposure.

Cory Doctorow does a fairly creditable job explaining that in his Little Brother / Homeland/ Radicalized series.
I would be stunned if Apple outsourced any part of their CPU/ GPU design. About the closest I could see to that would be offering discrete graphics on some of their top end models.
I think your missed the point of the comment you were replying to.

Why would we on HN, care about whether or not the recording was legal?
That hasn't really stopped colleges before. I've had quite a few classes where the textbook cost more than a Windows license.
I've tried giving a shit as an IC, and have basically learned and been told repeatedly that it's just a waste of time, and there's no point in caring about a company beyond what it takes to fullfill your responsibility as someone being paid or about your duties beyond how much the people in charge care about them. Startups in particular don't reward giving a shit about anything much at all, most of the time, but enterprises are no different. They reward getting tasks done quickly and measurably, in a way that poses little risk to the company, and that's exactly what this asshole is saying. There is almost no market for giving shit, and it's not worth your mental health to try.

"But we serve millions of people, and among those are people who might need us to take a different approach to this webapp for accessibility reasons. Sorry guy, Brad who's on vacation and decided on this pointless project to help him get promoted needs this done by X date and your opinion isn't in line with his"
Google started encrypting communications across its data centers (even though they were on private lines) because of this revelation. Here’s a news report from 2013 [1] about this.

[1]: https://www.washingtonpost.com/business/technology/google-en...
Surprised no one has mentioned the color-eyre[0] crate yet, which gives very nicely formatted errors with stacktraces if desired.

The author gave a great talk about error handling at this year’s rust conf[1].

[0]: https://docs.rs/color-eyre/0.5.4/color_eyre/
[1]: https://m.youtube.com/watch?v=rAF8mLI0naQ
hooray for zstd compression!
I bought Wacom's tablet for $70 a few years ago. It seemed to work just fine, I just didn't use it as much as I thought I would. Not sure how a more expensive tablet would differ though.

Unless they want a specific model, you can all sort of prices on Amazon.
Amazon is announcing a new thing every week at this rate.
Cross-dimension probe. Like an antenna. cf Ian Banks "Excession". the big glowy balls ("foo fighters") weren't very subtle, this is.
Here is an interesting study showing that our solution to a problem greatly depends on the metaphors used to describe the problem. This isn't necessarily good or bad, but it does mean we may think we are coming up with solutions to the problem but be unaware that we are greatly constrained by the words used to describe the problem.

https://journals.plos.org/plosone/article?id=10.1371/journal...
“How coronavirus tore through Britain's ethnic minorities”

https://www.bbc.com/news/uk-52894225

“Socio-economic inequality means we're more likely to catch the virus, while our biology means we're more likely to die”

Literally just the first link that 10s of Googling found.

> from someone point internet out that certain skin types are not suited to certain environments

That’s because this is a crassly overloaded dog whistle statement.

“Ethnic minorities should supplement Vitamin D in winter” and “pale people should wear sunscreen in Australia” are in no way controversial or sensitive statements in science or academia or in the media. Trying to morph those into an argument that black people “aren’t suited for” Northern Europe is the racist, non-scientific bullshit people lose their positions for.
Doing interesting things on open web today is about as hard as it was in 2000.
> The instances feature an 8th generation, 6-core Intel Core i7 (Coffee Lake) processor

For those wondering
I've long been an AI/ML positivist in the field of protein structure prediction (but not in drug discovery in general), admittedly a bit surprised it was now and not 3-4 years from now... And for a long time I have been saying that a "heuristic" model for folding is going to win (and it looks like it has). However, I would also caution that, there are going to be protein structures that are not in the opus of known structures (being able to solve the structure at all is itself a biasing factor) and AlphaFold's capability to figure those out will be interesting. I would not necessarily be confident it could. (think of issues, like face detection algorithms not being able to correctly identify minorities, e.g.)
How can the tech be "ancient" if they are the first ones building it, even if slowly. There may be many new designs by the time they deliver on an older one but that hardly makes the tech "ancient".
The ground up physics principles for fusion give you ITER at best. Everytime someone has a brand new concept, they get some promising results and then reach the same problem: we need to build a vacuum chamber 10 meters in diameter to see if it'll produce power. And then you're back to ITER - which is what its exactly trying to do (the internal diameter of ITER is...about that scale).

We know rockets work inside an envelope we can see, it's a matter of how to do it cheaply. What we know, today, is that fusion doesn't work in envelopes much smaller then ITER.
Speak for yourself, chief.
It's typically not treated as a "drug", but as a supplement, and widely recommended even outside covid.
Not because of this, but it has a perceived image of (intellectual, cultural and professional, while not economic) superiority because this is the only large city in Russia that has the bulk of its population being actually city dwellers for generations.

See, all other cities have ever been overrun by Nazis with the bulk of their populations evacuating East and never returning (there was nothing to return to), being spread thin over the country and intermixing with villagers, or stayed and then ran away with Germans, or to Germany and then further West (or got caught by Commies in the end of war and sent to gulags or killed), or just simply died during the occupation, or left cities to survive in the countryside. St. Pete on the other hand, was blockaded for most of the war. Around 1/4 to 1/3 of population starved to death, but the rest stayed, wartime migration being minimal. These are the people who lived in the city and had urban professions for many generations, unlike anywhere else in Russia.

Especially not in Moscow, which while never occupied, is now deserted by most Muscovites as they can't compete with millions upon millions of hungry and talented people from the provinces and from whole of ex-USSR, and live elsewhere by renting out their flats. Bulk of today's Moscow is first and second generation urban dwellers...
This feels like a criticism that takes the straw man version of dijkstra's essay and burns it. Too easily, all told.

I have issues with how he is often portrayed, but I have rarely seen Dijkstra portrayed as ignorant. The more common view is of arrogant. Even from friends that completely valued his cutting remarks.

Such that this feels more like a piece designed to get visibility from attacking a great in the industry. :(
The sun fires off its biggest solar flare in more than 3 years
2% of the land area of Germany would suffice to satisfy all energy demand of the country. Sunnier places fare even better. There is very little "nature" near human settlements. Almost all of the land is used for agriculture. For example, replacing the 2.4 million hectares Germany uses for "energy crops" with solar panels would cover a large part of Germany's energy demand.

And while trash is indeed a problem, I don't think stopping global warming in exchange for more trash would count as no improvement at all.
I thought I was smarter than I was and I was trying to do a lot by myself. It didn't work and my ego made me not admit it wasn't working far longer than I wish I had spent on it.

It was all a very humbling experience.

In the future

1) recruiting at least 1 other person to work on anything like a startup with me. The bar for me is can I get at least 1 other person to work on this and do I have a plan to get to the first 5? If not I'm not doing it.

Worse case you build a great team and have a good time with them making something and hopefully get acqihired or better. If you're by yourself and it doesn't work out you're likely just getting another job...

2) Recognize what your strengths are and recruit to fill in the gaps. You only have 24 hours in a day 6 to 8 of which you are sleeping if you want to be effective for the rest at all... So even if you were a super hero at all the things you need to be to make a business successful (hint: you wont be) you will run out of time in the day if you can't get other people to help.

If you can't get ^ in your own project join other people's projects until you can.
> As always, I asked the EC2 team for access to an instance in order to put it through its paces. The instances are available in Dedicated Host form, so I started by allocating a host.

Dedicated Hosts (https://aws.amazon.com/ec2/dedicated-hosts/) are more pricey than virtual instances (most EC2) and Dedicated Instances. Not sure if it's possible to containerize/sell as many virtual instances off a dedicated server without paying a separate high license fee to Apple.
this seems like an example of a good solution being the enemy of the great one.

I don't think anyone is suggesting that simple bloodwork would be disallowed from other sources and this could be a good incentive.
No idea, but the clarity is astounding:
http://www.bradshawfoundation.com/bfnews/uploads/colombia_ro...

I also don't understand the ethics of this though

> The discovery was made last year, but has been kept secret until now as it was filmed for a major Channel 4 series to be screened in December: Jungle Mystery: Lost Kingdoms of the Amazon
What's a serious use case for this?
Just an aside: all populated areas of Japan have a age of consent from 16 to 18 that supersedes the federal 13 age of consent.
Nothing you suggested is ever going to happen. Nor, imo, should it ever happen. So let's be practical here.
Use EC2 Mac Instances to Build and Test macOS, iOS, IpadOS, TvOS, & WatchOS Apps
Mac instances run macOS 10.14 (Mojave) and 10.15 (Catalina) and can be accessed via command line (SSH) or remote desktop (VNC). The AMIs (Amazon Machine Images) for EC2 Mac instances are EC2-optimized and include the AWS goodies that you would find on other AWS AMIs: An ENA driver, the AWS Command Line Interface (CLI), the CloudWatch Agent, CloudFormation Helper Scripts, support for AWS Systems Manager, and the ec2-user account.
Forward and Backward Compatibility in IC Designs
Well, it is reInvent time so there's more than normal. But you are right - follow their news feed and there's several changes happening weekly.
"they explicitly say the paper doesn't show masks are ineffective"

No paper can ever show that. You cannot prove a negative (except in extremely bounded cases, of which the mask proposition is not one).

This is why statistical studies attempt to provide evidence supporting an alternative hypothesis. If you cannot accept the alternative hypothesis, you must accept the null. Studies do not attempt to disprove the alternative hypothesis, and accept it otherwise.

This study attempted to find statistically convincing evidence that masks provided personal protection, and failed to do so. Does it mean that they have proven that masks don't work? Of course not. There are many reasons why they might have failed to detect a real effect. But it does imply that whatever effect is being hypothesized is smaller than the power of the study they used to detect it.
Ooooh, yes, I remember talking about this article with a coworker some months ago.

> we are greatly constrained by the [metaphors] used to describe the problem.

Linguistic relativity might be controversial, but this, I feel, is a "correct" kernel of that idea. (Forgive the slight recombining of your sentiment!)
It's not that surprising.

Africa has dramatically lower rates of obesity, a younger population, less asthma, less air conditioning, and as a sibling comment notes, the people get more sun exposure, hence Vitamin D.

Everything we know to track with high mortality, Africa has less of. They also have very little testing, so the infection rate is unknown and somewhat irrelevant, since few people are ending up in hospitals and dying.
If you are only required to keep data for one year and you keep it for 2 years, you can still be subpoenaed for that 2 year old data if you keep it. Thus, keeping data for longer than you are required is an increased business risk.
InMoov: The Open-Source Life-Size Humanoid Robot You Can Print at Home (2015)
If the cost is $4,000 it is almost below the level that insurance is even necessary (if you're on a high-deductible plan with an HSA, you'd be out-of-pocket for it). That's less than the cost of a 10 year old car.

If it's $40,000 yeah -- still that's on par with the cost of an ER visit for a traumatic injury and a couple of days as an in-patient, exactly the sort of thing you have insurance for.
Not service outages though.
> EC2 Mac instances with the Apple M1 chip are already in the works, and planned for 2021.

Also for those wondering
Seems like a major new growth vertical for AWS and gives Apple the ability to vet this [if its successful] for potentially launching their own offering one day.
We have an internal application that would benefit from having local access to our network infrastructure (VPC) without needing a VPN.
They deleted it -- but you can still tell it was there. Look at the last paragraph in '1. Access to services'. The list beginning 'You represent and warrant to Company that' is missing an element because they deleted without reindexing.

It looks like they copied the terms of service directly from another one of their products, a browser for doctors: https://www.lumosbrowser.com/terms.pdf

This also explains the broken formatting: they copied from a PDF.
>Furthermore, it's ridiculous to condescendingly imply that Dijkstra was simply unaware of Piaget whose work was already at the height of popularity well before that time.

It's not so condenscending given that his entire essay is basically a bunch of unsubstantiated hot takes, for example:

" It is probably more illuminating to go a little bit further back, to the Middle Ages. One of its characteristics was that "reasoning by analogy" was rampant; another characteristic was almost total intellectual stagnation, and we now see why the two go together. A reason for mentioning this is to point out that, by developing a keen ear for unwarranted analogies, one can detect a lot of medieval thinking today."

This is essentially the unreflected pop-culture reading of the middle ages as the 'dark ages' (I also have no idea how Dijkstra determined that reasoning by analogy was particularly a feature of medieval society), which happens to be wrong, and ironically is in itself a sort of sloppy analogy of the kind he just denounced
Unfortunately, the part left out of the analogy - that which is different - tends to be the more complex part.

So although we may be able to establish a baseline along analogous terms - and may be able to use that understanding adequately well in explaining the deeper concepts (or underlying truth) we do need to get to a point of understanding where whatever analogies we used to scaffold out explanation can be discarded.

Which leaves me wondering the depths to which we must be expected to delve to explain a deeply technical subject matter in a university context - and what the scaffold actually achieves.
SpaceX is very nearly an exercise in how messed up the government procurement and funding process is in the US. A lot of SpaceX's innovations are things like "maybe you friction stir weld aluminum panels together rather then machining a solid block into a tube". This is innovation that could've been done anytime in the past few decades by the big players, but they never had an incentive.

Even the Raptor engine, though it was never widely used, was initially built by the Russians decades ago. The concept is known to work.
If Vitamin D had such a major effect, I would have expected death rates from Southern Europe (Spain, Italy specifically) to be a lot lower than from Northern Europe (e.g. UK, Germany).

From my anecdotal experience people in Southern Europe spend a lot more time outside (in parts of Spain you can still go to the beach now, where I live there is snow on the ground...), and older people seem more active and able to live independent lives (i.e. not in a care home).

Of course this doesn't mean Vitamin D isn't at play. The one thing this pandemic has taught me is it seems there is very little we know about how it works :-) Maybe production from sun exposure in older people drops greatly, so the difference in sun exposure has little effect on overall Vitamin D levels.
CI/CD for iOS, MacOS, and React Native builds. Right now the pricing for Mac instances for builds via Github, Gitlab, Circle, etc are ludicrous. For a certain developer velocity, these instances will probably be much, much cheaper than running builds through the CI/CD SaaS providers.
Phishing.

And yes, it’s a known issue not just in iOS/macOS mail, but other mail software, too.
you really can't compare stats like that. Those are independent, uncorrelated measurements. When you take RMSD measurements on a molecule they are not independent (for example, atoms near the core are less likely to be "inaccurate").
Builds without having to maintain your own macs.
I have the same question. Why would I want this over a Linux instance (assuming the latter is cheaper)?
If you follow Apple stuff, ask a random non nerd about something that recently happened in the Apple universe and they’ll typically know at least half of the story. They may not understand, but awareness exists. Ask people about any other company except maybe Facebook. They have no clue. Nobody knows what version of Windows they have, etc.

Apple rarely has more than a half dozen SKUs in any category. Everyone knows what they are. Even people who complain about Apple know about the products.
Build/CI systems for Mac and iOS apps, I would guess. Definitely not for running generic web apps.
The biggest work from home mistakes: Harvard Business School remote expert
Custom CI agents perhaps. Or maybe on-demand / shared build / debugging machines for a development shop that does mostly cross-platform mobile development and (very) occasionally encounters ios-specific bugs.
Fuzzing binaries comes to mind as well.
It's odd how many people who share this anti-Whitism express this sentiment in the very same breath in which they denigrate, demonise or humiliate Whites.

Either they don't actually believe it and are just zealously taking the opportunity to revel in their socially-acceptable racism, or they're supporting this trend I'm seeing of Whites becoming ethnically conscious and collectivising in the face of the hostility they are being exposed to.

It's probably the former, but the latter is the effect regardless.
Interesting. The deciding factor for our family when buying a Mac or Windows 10 device for my wife’s small business was actually my need to upload iOS apps for review by apple.

I’m an after hours hobby developer, and use a windows desktop. It’s powerful and has all the tooling I require. And it supports all the games I want to play from the steam store.

So - I think apple will lose a little bit of business from people like me with this announcement, as I’m sure we would not have purchased a Mac when we did only a few months ago.
Build servers for iOS apps, it can also be part of a CI/CD flow for mobile or cross-platform apps because you need to be running MacOS to upload apps to App Store Central
Automated testing using browsers on target operating systems as well as other testing that requires the target operating system. CI/CD pipelines using Mac build tools is another.
All of the things you suggest take freedom of choice away from individuals. This is the authoritarianism I spoke of.
The reason I shared the PyPi link is that USD is quite a massive build, and this is the first time an official prebuild of the library is available courtesy of Pixar and Nvidia.
You don't understand the structure of the deal. GM risks nothing and has upside.
How are you developing iOS apps without xcode?
Write Your Own Arbitrary-Precision JavaScript Math Library