skysight-inc/HackerNews huggingface dataset:
If it takes one guy six months to execute such a vulnerability, surely a staffed internal Apple security team could have found this in half the time. It does raise the question, though, of how much staffing Apple does have to addressing security and whether or not that level is appropriate.

'One guy in a bedroom for 6 months' is a level of resourcing a nation state can easily obtain. It's also one Apple should be capable of obtaining as well.
Here's a nice writeup of Materialize:

https://lucperkins.dev/blog/new-db-tech-1/#materialize

Not really mentioned here, but in standard postgres it might be quite expensive to update the view so you can only do it periodically. Materialize keeps that up-to-date continuously.
Your assumption is off by a few decades.

No robot currently exists that can replace even a tiny fraction of the tasks a 16 year old teenager with a hard-hat and steel toed boots can do at a construction site.
just brute force it. With a hash that small there's bound to be tonnes of collisions
The forced transition was the final nail in the coffin to de-google myself.

Even Gmail, can’t trust that it won’t be deprecated in the future.
My Google Assistant (on Sonos) will somehow always play the wrong version of the song.

Ask for War Pigs? Here’s the live version

Ask for a Come Sail Away? Here’s a terrible cover

Ask for Magic Stick? Here’s an instrumental

I swear it just picks the version of the song that pays the least royalties and plays that instead of the right one...
Why is there an expectation that every application should be free or cheap? IMHO $60 is very reasonable for a program that can save a lot of time for the user. And developers also have to eat, and might want to some day retire.
No idea I don't have Spotify or use any google assistant stuff, but i'm guessing it's supposed to make it so if you try to open google play music using a voice assistant, it'll instead play that album from Spotify. Maybe as a joke, maybe as a way to try and get a bunch of artificial listens.
SV is a crazy bubble to be in. Scroll through the very average 'middle class' $3M+ homes in Menlo Park / Palo Alto to get a sense of how distorted things are here
That was me in elementary school trying to do a research report at the crappy local 1970's era library.
Feel like this is a natural byproduct of the SEOization of Spotify. https://www.inputmag.com/culture/manipulated-seo-made-your-g...
This is an HR problem. Two HR problems really, as exemplified by both your sentences.

> They have a real problem finding developers that will want to work on it.

At most companies, you don't get to choose projects you want to work on. You get assigned a project whether you like it or not. Almost every other company functions like this, Google's insistence on being different is shooting them in the foot.

> You don't get promoted at Google for maintaining a product that isn't growing.

Maybe Google should be selecting for people who aren't interested in chasing promotions. There are plenty of 'workman' developers in the world who are okay with spending the rest of their careers maintaining legacy systems. This probably ties into good ol' Silicon Valley age discrimination: they spend so much time chasing young hotshots with chips on their shoulders, while most of the workman developers are in their 50s.
> That's part of the C code running on the phone, recording itself. Kinda meta. :)

Oh man that's cool. I'm working towards that level (C/C++) but coming from JS/Python where you can pretty much "do anything" it's challenging(typing problems in particular eg. array of assorted things of any length).

Oh interesting about the Vignetting will have to read up on that not familiar with the term.

> ffmpeg

Yeah that's something cool I gotta work with too at some point.

Thanks
Some good news. Modern dairy farms use sex selected semen to prevent males from being born, and use synthetic hormones to extend milk production. The combined result is that few excess calves are required.
I like Spotlight, and its CLI companion mdfind.
Definitely got sympathy for that position. Upstreaming changes often takes a long time to get across context, get community buy in to changes, get approval cut a release, whereas internally, it's often just a code review, which can be prioritised according to business needs.

It's quite common for long standing forks to exist, where changes get pushed upstream from the fork, and the fork gets periodically re-cut.
I'm so curious what the chances of this happening are.
Thanks!

The fonts on the images are Red Hat Display and Homemade Apple – I think both are available in Figma by default.
No not really. All countries have utilities to wage conventional war without going nuclear yet even with these utilities in place we are not waging war to the scale (in terms of %) as we did historically. The reason why there are less wars in the modern era is because there's no more tangible benefit in going to war.

In the old days going to war meant getting more plunder in your coffers. Things like gold and resources. Today wealth is stored in information, knowledge, know-how and expertise. Going to war doesn't necessarily grant you access to this kind of wealth. I can't transfer the expertise of how to fab a processor by invading silicon valley with soldiers.

War even runs the risk of destroying know-how and infrastructure related to technology. The way towards wealth in the modern era is through learning, communication and espionage.

You would think this kind of thing is obvious, that everyone should know that the spoils of war in the past when applied to the modern era are basically useless. But alas the complexities and blast of useless information delivered to us by the media makes it hard to pinpoint the fundamental reasoning.
It’s generic filler music. It exists so that the uploader gets paid when someone says “OK Google play music” and the voice assistant inadvertently pulls up the album.

Ingenious if it actually works.
Ok dude. You know better.

I was using short hand when I said “spoke with the EU”. You chose to misinterpret that.

All I know is that Facebook needs to comply with this by December 21st. This was something we became aware of a few months ago.

If you think that’s impossible, fine by me.
I chuckled alot when I read this so thank you for the laughts. Its hilarious to go online today and hear all Trump supporters to scream “fraud” and trying to argue that it has to be fraud since Biden broke all possible records including number of votes, number of black votes etc. Its even more laughable since it comes from exactly the same people who like you claimed huge Trump 2016 victory and were proud Trump broke all the records.
Google home was already killed. It’s now the google nest home mini.
“Using Internet scanning, we found a unique signature associated with the hostnames of Check Point firewalls used in Circles deployments. This scanning enabled us to identify Circles deployments in at least 25 countries.”

Nice OSINT find!
Does the voice recognition understand “Ok Google Play Ok Google Play Music”?
probably based on this: https://lists.gnu.org/archive/html/emacs-devel/2015-02/msg00...

I don't understand the bits about RMS' email configuration, but in that message in 2015 he indicated that he did not know about the offer in 2005 to give copyright of LLVM to the FSF.
Your example isn't funny, it's just a clichéd way of emphasizing a point.
I've called the ugrep benchmarks into question, and I elaborated on it here (and this includes a frustrating exchange between myself and the ugrep author): https://old.reddit.com/r/rust/comments/i6pfb2/ugrep_new_ultr...

I've also re-run my original set of benchmarks[1] with ugrep included: https://github.com/BurntSushi/ripgrep/blob/master/benchsuite...

[1] - https://blog.burntsushi.net/ripgrep/
But the memory usage isn't considering growth. If I grow by doubling the size (seems common) at n+1 element where n is the last allocation, one would allocate n2 + n (the original until the copy finishes) vs. n (pointer(s) + element size).

But yes the size advantage is very reduced for most use cases. What would you imagine the cases where LinkedList is still a valid data structure?
Vector 0.11 Release: K8s, ARC, and metrics collection
Or maybe try to seek better mental health resources through some means whatsoever, instead of relying on an app to find someone as mentally vulnerable as you.
>pays the least royalties

This is a very interesting theory, I don't know if this was revealed somehow but considering how consistently terrible the guesses are on assistant devices... I wouldn't be surprised.
I coined "Brogdon's Law" (probably not original to me by any stretch) several years ago:

The answer to any technical problem will present itself within 30 seconds (sometimes minutes) of asking "Hey, can you take a look at this?"
I had the exact annoyance and figured it out.

If you say "OK Google play my likes on youtube music" it will play `Your likes`.

If you forget the `on youtube music` part even if your default player is set to Youtube music it will play the `my likes` song.
This makes sense for engineers but is detrimental from a user point of view. Google effectively taking what would be a few days of engineering time to update some API calls and instead amplifying it and passing it on to users.

When considering whether to learn/migrate to a Google service, everyone should consider this ratio at which Google values your time vs. that of their engineers.
That's a fiction.
Postgres is functional by default, no need to throw asinine "with (nolock)" hints on every join.
The UK is not an island.
Here's the thing: there are so many websites that would just simply be better without JS. So many simple blog posts that all the content is simple plain text and does not need anything beyond HTML and maybe some CSS. Us JS "haters" aren't arguing against web apps or interactivity - it's the wanton misuse and abuse of the technology.

By conflating our position with "well, just turn your computer off!" you're constructing a strawman.
Google illegally spied on workers before firing them, US labor board alleges
Yes, the standard allows this, but that doesn't mean inlining is straightforward, in the sense that the compiler can't just magically figure out unaided whether to inline stuff or not and all is well as the GP wanted. Whether two functions were defined in the same file has basically zero bearing on the desirability of inlining, so the fact that recompiling a whole file rather than an individual function is not particuarly onerous doesn't really help that much. Also, correct me if I'm wrong, but I don't think anything that sbcl does if you pass :block-compile t goes beyond what would already be allowed by the standard as default (by contrast, CMUCL's block compilation supported multiple files and thus essentially also whole-program optimization). The fact that it's not the default (despite likely non-trivial performance benefits) probably indicates that a majority of users would find this behavior problematic as default, regardless of whether it is standard conformant.
How did you deal with data redundancy / backups?
Couple other things that are crazy to me:

- ATP molecules are floating around the cell like little rechargeable batteries. Any portions of these operations that require chemical energy to be input not only need to have the structural features required to support the reaction, they also need to have the structures required to allow ATP to power that reaction.

- How sensitive the body is to various compounds. For example, vitamin D is all the rage these days. In a typical adult, there are clinically relevant distinctions between a dose of 10 micrograms and 50 micrograms. For a 100kg person that's one part in a billion.

- I just learned today that the polar nature of water causes it to differentially conform to various charge domains in the surface topology of proteins and that this provides essential functions for their operation - https://www.pnas.org/content/116/39/19274
You might well be right with your 95 per cent guess, but it
has proved frustrating and even embarrassing for me over the years to have recruited friends, family, colleagues and associates to some Google products/services only for the rug to be pulled later from under those who jumped aboard on my recommendation.

This has happened with Picassa, with Google+ (which had great integrations with other G services, and features I liked - such as one that let you group people into, say separately addressable units such as friends, family, colleagues, associates etc) and also the original Google chat (still around, but functionally degraded and headed for the chop, I fear).

I've loved some of these because of their features/usability. To me Google+ having few users and not having content pushed in my face was a bonus. Text chatting happily while in a Gmail tab (usually open when I'm working) but with minimal distraction and not having to context-switch - suits me. And now a lovely library of free 3D assets is for the chop.

Once upon a time I earned a little kudos for having my finger on the pulse and spotting decent emerging tech/trends. I was laughed at by many when, in 1994, I switched from a senior role in print news to one in the nascent online space - but many people took an interest because of my recommendation or at my urging.

I am no seer, I am rarely an evangelist, but I hate it that many people I know have invested time/effort in Google stuff on my recommendation. I feel as though I have let them down.
Testing Streamlit Apps Using SeleniumBase
Would you share your code?
Yeah, that's what other people are saying.

Damn, that's kinda lame. I was hoping it was tracks of phrases starting "OK Google" to make your Google Home flip out and do weird shit.

Wasted opportunity.
Robotaxis get the green light for paid rides in California
Yes I think they only need to hit 50% for approval. Conservatively they were getting 62% as I recall and the 'experimental endpoint' dose got them to 90%.

The Oxford vaccine is far cheaper (15x) and easier to store so long term it has a lot of competitive advantages.
> Is it possible to remove/deactivate it via adb or other tools?

I haven't tried, I don't mess with my phone too much because I don't want to trip the Knox fuse.

I'm surprised an Android 10 phone does not have Duo pre-installed. Does it have the standard Play store and associated google apps?

Duo has 1 billion+ installs in play store, which basically means they pre-installed it on every phone.

https://play.google.com/store/apps/details?id=com.google.and...
Don't forget how your knowledge becomes out of date with frightening speed. I can read a novel and that knowledge will be good for decades. Documentation on your favorite web framework? 6 months if you're lucky.
Show HN: Poetry Link, a website for writing poetry collaboratively
WebAssembly is used by the Orthanc project for a teleradiology solution
Give what a few minutes?
Apparently the new brand for speakers and displays with Google Assistant is now "Nest" -- as far as I can tell the Nest Mini and Nest Hub are the same hardware (?) as the Google Home Mini and the Google Home Hub. (And the "Nest Audio" is the new version of what was the original "Google Home".)
I'm about to drop my next album in early 2021, "Ok Google Play Ok Google Play Music"
It's hard to come up with something funny to say on the spot, but thanks for sort of making my point.
Are you implying that Microsoft bribed The Guardian?

Or are you perhaps saying that the The Guardian have some kind of indirect interest in massaging Microsoft's rollback into an admission of guilt?

I'm curious why you suggest it might be corporate propaganda.
PC's are still the preferred business platform and I don't see that changing any time soon. PC's may not be "cool" or "sexy", but they run the world. Their gaming power also helps the platform's support.

Mobile conventions essentially cripples the UI's when productivity matters. Mousing and large-screen-oriented UI's are simply more productive on average.
Thanks, that's really helpful. I'm a heavy user of xylitol at present and find it okay but not great for all baking.

Does Tagatose caramelise? That's one of the things xylitol won't which is frustrating for some recipes.
A decade ago when the OP was an intern it was 100%! Non-ad revenue source have grown by infinity percent!

I made a very specific claim and I'm not sure what everyone's problem is. Google has found other sources of revenue and is actively trying to grow those sources. There are other hoses. I have never claimed it's not an ad company or that ads have somehow gone away. Because that would be dumb and factually wrong.
As George points out above, we haven’t added our native persistence layer yet. Consistency guarantees are something we care a lot, so for many scenarios, we leverage the upstream datastore (often Kafka).

But to answer your question, yes, our intention is to support separate cloud-native storage layers.
Note also that VA and MD are in this category for very different reasons than KY, AL and WV. Virginia and Maryland are extensions of the Washington, DC government complex (the Pentagon is in Virginia). A large portion of the Federal spending that goes to these states is direct expenditure (salaries, rents, purchasing) for goods and services, while for WV it's much more biased towards entitlement spending (social security, disability, Medicaid, Medicare).
https://meta.wikimedia.org/wiki/Cunningham%27s_Law

Cunningham's Law states "the best way to get the right answer on the internet is not to ask a question; it's to post the wrong answer."

The concept is named after Ward Cunningham, father of the wiki. According to Steven McGeady, the law's author, Wikipedia may be the most well-known demonstration of this law.

Cunningham's Law can be considered the Internet equivalent of the French saying "prêcher le faux pour savoir le vrai" (preach the falsehood to know the truth). Sherlock Holmes has been known to use the principle at times (for example, in The Sign of the Four.)
I mean the question was literally "Is it like this across the USA"

If anything the answer is, no it's not (see: places I mentioned)

But realistically it's a poor question.
Do all CAPTCHAS discriminate against non-Americans?
My niche skill is not in demand (Neoxam or Filenet).
I got it after many attempts but, I confess, by tinkering directly with the `cheapHasher` JS function in the console. With that in-game form? it could have taken ages to guess.
>workplace surveillance

How do you define that? I ask because I am guessing people who are angered by this have no idea what data employers can already access. Have you seen the data that most MDM or network monitoring software can provide about employees? That is much more sensitive data than what Microsoft is reporting and I haven't seen anyone really object to it in large numbers. The Microsoft stuff seemed intrusive and wrong headed, but odds are if your employer wanted to use that they are also using some much worse stuff too. I might even consider the Microsoft tools helpful as a canary in a coalmine for other bad practices that are much harder to see.
DuckDuckGo's privacy abuses– current, historic, and by proxy
Vaguely reminiscent of when Marco V released a track called "C:\ del *.mp3"[0] out of frustration towards mp3 rips. Still amusing to me that he didn't quite get the command right.

[0]https://www.discogs.com/MarcoV-Cdelmp3-Solarize/release/1334...
The US already has all the most haves.

Most of the IPs are US owned (by Intel, AMD, Texas Instruments, NXP, Apple, Broadcom, Nvidia, Qualcomm, ARM etc). It's just the manufacturing capacity and fabrication facilities.

Intel holds some shares on European based ASML which is the crucial partner for TSMC. The US could even force both ASML and TSMC to not sell products to Huawei even though Huawei was paying a lot of money. The US can effectively kill TSMC anytime.

I don't think mass-scale in-house semiconductor manufacturing is really critical as much as having the tech and the IPs are. Also the US has enough influence on manufacturing, and enough emergency manufacturing capacity already in place. I think public cloud (AWS, GCP, and Azure) is more critical today than mass production semiconductor manufacturing.
No. All events being probabilistic is still realism, just in a weaker sense than Bell.
At a meta level, does minority even truly mean “minority” anymore? If I said “minorities” referring to people in California people would assume I’m referring to Latinos and not White people even though there are more Latinos than White people.

Is there a more accurate term I’m not aware of?
The half dose was an 'experimental endpoint'. Always planned but not seen as critical. FDA rules now stipulate you can only register on primary endpoints declared before the trial starts. I suspect AZ have argued that the accelerated nature of the process should take this into account.
I did not think it was necessary to clarify that the amount of money you brought up would not build an entire nuclear power plant. That was not me misrepresenting anything.

I'm always perplexed by the people that claim it is clear that nuclear power is a lost cause. If the evidence is so strong that renewables are the best economic choice, why is this company making up shit to draw people away from nuclear? Why do people resort to disaster scare tactics if nuclear isn't at least competitive on price?
> If you stumble across an open source or just some other random project by a single dev, you have an instinctive expectation that the project could die at any time.

Ironically at this point, I'd place more trust on an open-source project because at the very least, if the maintainer abandons it, I could fork it and potentially self-host.
Just in case people see the misleading "ikigai" Venn diagram https://medium.com/@support_35468/ikigai-is-not-a-venn-diagr...
The best part of this teardown is that Ken is sending it to Shahriar from The Signal Path for a proper RF assessment (and if history is any guide, repair). I can't wait!!!
My inability to find quality hard sci-fi I haven't already read would beg to disagree.
Gotcha. Yes, that was what I was referring to as well. I don't think I was very clear in my original comment. I just meant if AWS doesn't offer M1's via Mac Minis that someone else will.
Well there is a 5nm TSMC fab coming to Arizona, maybe thats the needed lead-in.

https://www.tomshardware.com/news/tsmc-arizona-fab-investmen...
To quote the OP, "There is no second hose."

My statement is that yes, there is a second hose.

I've never said they're not primarily an ad company.
> I myself drink milk and eat meat while acknowledging the obvious moral superiority of veganism.

In my moral belief system, the highest good is human pleasure and thriving. Eating meat and using animal products and using animals for research advances that.

Veganism tries to sacrifice human pleasure and thriving, and is therefore morally inferior.
Why would a live version of a song pay less royalties than the studio version? Similarly for the instrumental version. The only one that seems like it would pay less royalties is maybe the cover, if the cover band has a weaker royalty rate with the provider.

I think the far more likely explanation is just that these home assistant products suck.
Personal opinion only ...

HN doesn't hate humour, there are cases of humour not merely tolerated, but significantly up-voted.

But most of the things people try to pass off as humour are simply just not funny to a large enough proportion that they get down-voted and flagged. Most of the "funny comments" are tired, derivative, old, or predictable riffs on things we've seen far too often. Some of us have been around a long time, and when we see things like this we just sigh. It's tedious.

Your comment (2) above, for example, just really isn't funny. It's common, unoriginal, uninformative, unhelpful, and just ... not funny.