skysight-inc/HackerNews huggingface dataset:
It’s default on kids accounts on iOS. This sounds more like she let her kid use her own iPad on her own account, not her kids account.

Also when you use the App Store the first time on a fresh device it asks if you want to use a password (or Face ID etc) on each purchase, where she chose not to.

I’ve recently set up an iPad for my kid and any purchase needs a password entered into her device then also gets sent for manual approval to our phones, and my wife and I have password/face protection for every purchase on the App Store including free apps.

I despise the predatory methods used by apps to tempt kids into IAPs but also in this case the mum specifically chose to disable passwords on purchased and let her kid use her iPad with her adult account without monitoring her.
What’s your game?

No one wants micro transaction games.
If you want to go further, it sometimes feels like the "who what where" pronouns are like sql prepared statements.

In English, we have question and answer

Q: Where do you want to go for lunch?

A: I want to go to that pub for lunch.

In Chinese you'd say

Q: You want to go to ?? pub for lunch?

A: I want to go to that pub for lunch.

It even works for numbers, like

Q: It is ?? o'clock?

A: It is 7 o'clock.
I entirely understand that the article was exposing a different era, thank you. Even in this era, I would argue that selling the "fun of driving" was irresponsible, because it brought us the car infrastructure that we live in today. Who else should I complain to?
Now do boys and female teachers. See nobody thinks it is sexists to have almost all your elementary teachers female.

Female Teachers Give Male Pupils Lower Marks, Claims Study
https://www.huffingtonpost.co.uk/2012/02/16/female-teachers-...
I think you need to distinguish accidents in cities, which are very frequent, but lethal "only" to cyclists and pedestrians, and accidents that kill drivers. The latter happen at high speeds and drugs are often involved, but the former happens all the time simply because people are in a hurry or inattentive.
This has several factors that lead people to make such comments:

Tech nerds like to describe things as boring, obvious, and easy to do, it makes them feel smart.

Certain politics lead people to assume that government is incompetent and therefore obviously it was an unsophisticated attack that breached them.

A lot of IT workers think every instance of a hack is an example of underfunding the IT department, or the IT department wastes the budget they do have.
Thanks Coca Cola
7) Robinhood making TSLA a meme stock.
...and YouTube videos. Of course, neither will help if you have a relatively obscure vehicle and need to do a relatively obscure repair on.
Interesting. What do you get out of ebay?
peasants. I only eat metal credit cards (my chase CC is metal)
According to the news articles about this story, some of the names on the list were working for western companies and UK consulates. Do you think those people list their CCP membership on their resumes?
In the Netherlands (as I understand it) the assumed-at-fault party in any crash is the one with the heavier weight-class vehicle. So a semi is assumed at faul over a truck, that’s assumed at fault over a sedan, over a motorcycle over an e-bike, over a bicycle, over a pedestrian. Or something along those lines.

Always seemed like a reasonable policy to me. The people operating heavier vehicles have a higher inherent responsibility to operate them safely.
I think it comes from the same place as “I could build that in a weekend”: people who know what most of the words mean but aren’t experienced enough to understand the difference between knowing in theory how something could work and successfully running a production-grade implementation.

Security has a certain cachet which makes people want to sound like experts and one way to do that is to minimize others’ accomplishments, implicitly saying that they aren’t challenging to you.
India achieved (or at least claims to have achieved) 100% electrification under Power for All policy last year. India also lifted 270 million people out of poverty just in past 10 years and spent $30 billion on fixing sanitation. Things are not in a good shape under any stretch of imagination. But the progress is at an unprecedented rate in Indian history.
This it the real story. I don't find the details of "sunburst" particularly interesting or clever. How this ended up signed by SolarWinds though..
This is the whole issue. A free market can not possibly correct what it cant see. In this case, consumers are not able to tell how repairable or well built a product is.

Of all the things I have had fail, very rarely do they fail in a way I would have expected. Recently I had a fridge die because the light bulb fried which caused a short somehow on the main board frying the entire board. I could not have possibly predicted this was a problem so I could not have used the info to select a better made product. This fridge was from one of the big name reputable brands.

All of the big and reputable brands are doing the same thing so its almost impossible to find the well built stuff unless you are looking at something trivial like a shoe or non power tool where a basic observation will tell you its build quality.
The first thing I've done for the last few releases was immediately search the release log for "bluetooth".

I agree with you. Bluetooth works, but just barely, and it feels like it's getting worse.

Somewhere between 5.8 and 5.9 reconnecting became incredibly flaky for me (XPS 9300). Headphones will pair and connect fine the first time, but then completely fail to reconnect properly if I turn them off or walk out of range.

Sometimes I can connect to them again, but they don't get registered in pulseaudio, even after killing and restarting it.

Sometimes they will connect, then immediately disconnect again 5 seconds later (rinse and repeat until removed and repaired)

Sometimes they fail to connect entirely.

I end up consistently removing the device, restarting the bluetooth service, and then repairing fresh. In which case they work until the next disconnect.

---

It's hardly the end of the world, and it's a little amazing that my biggest complaint about linux desktop these days is flaky bluetooth, but it's certainly annoying.
Signed malware always indicates a very high quality of craftsmanship, but it looks like SUNBURST takes it to another level. The larger story here is how SolarWinds was just the stepping stone. The actual pivot was/is the entire USA.
My interpretation of "driving for fun" is doing entertaining maneuvers, usually putting myself or others at risk when on public roads. Not driving to get somewhere fun.
You can also use reading glasses if you're perpetually too close.
Is that also the case for BPA-free plastics? "Plastics" covers a wide range of chemicals, and I'm not up to date on the latest health information in this area.
...the BBC series "Tinker Tailor Soldier Spy"...

Just to save everyone 15 minutes of googling, it's not on Netflix or Amazon prime, but it is on Britbox: https://www.britbox.co.uk/programme/Tinker_Tailor_Soldier_Sp...

Edit: and on YouTube according to a comment further below -- https://news.ycombinator.com/item?id=25413572
It is hard to believe this when women are given female quotas and companies are forced to hire women.
Saved by a Whale’s Tail
Hyper / mega / etc all are hype up type words
Blockchain - tons of hype

A ton of techno folks build products that do privacy / security but don't really have a use case or user base perhaps (outside of the unsavory types).

Blockchain has this same issue. A lot of use cases around payments for kidnapping, drug deals etc and endless endless scams.

Wasn't there a "megaupload" file sharing site where the guy went to jail for computer fraud (perhaps unfairly).

Anyways, I would folks on what your product does, and just avoid the hyper blockchain mega drive space swarm language.
I totally agree with you at the surface, and Microstrategy has been officially saying similar.

However, the company is starting to look more and more like a Bitcoin ETF. The CEO is out promoting bitcoin much more than his company's services. The stock is trading increasingly in line with the bitcoin price...

This may very well be a genius strategic move on their part, but lets call a spade a spade. At this point, in the eyes of investors, the company is increasingly tied to the success or failure of bitcoin.
I don't understand how people are giving children idevices with credit cards attached to them in the first place. This is madness.
> bellingcat has also done a pretty remarkable job of identifying state-employed hackers and spies just through buying russian passport control information and other private information that's out there on the market

Wow, I just looked some stuff up on bellingcat. It appears that Russia is pretty bad at covering its tracks. This is a good example: https://www.bellingcat.com/news/uk-and-europe/2019/11/07/how...
Sure. I meant vouch for it if the post warrants it, and not otherwise. If it deserves to be buried, leave it buried.
Yes it is clear that the control flow construct was invented in this form, and that programming languages evolved. It’s still true that this use of “else” paralleled use of “else” in English, and that it’s appearance in programming languages, while interesting, is not a “mystery” or a misuse of language that was “invented” by German programmers.
I liked the NY Times obit better [0]. Goes a bit deeper into his troubled childhood, the fact that his father was a charlatan etc. A memorable quote from the article is that his children gifted him a poster playing on the famous motivational one in World War II Britain, reading, “Keep Calm and le Carré on.”

I think your legacy will carry on,sir. RIP

[0]https://www.nytimes.com/2020/12/13/books/john-le-carre-dead....
Depends on the face mask you're talking about here. A friend of my brother works for a company that makes unrelated clothing, furniture, and other comfort type items. They make all of their products here in the USA. They started up mask production in march. They're high quality washable cloth masks. I bought a few and have been using them when I need to go out. They're about twice the price of similar ones on amazon but much higher quality.

As for mass produced surgical masks? Yeah we don't have the manufacturing base for that sort of thing anymore unfortunately.
Bicycles and cars is a very specific probelem. Speed is almost irrelevant given the different masses involved. The only complete answer is not to play, to separate the vehicles. Separate road/paths for bikes, protected by actual barriers. And conversely, no bikes on the car paths. This has largely worked already for pedestrian safety (no driving on sidewalks, no people walking on road etc).
The mother then went on to accuse the games of being "completely predatory" in encouraging spending by younger users. "What grown-up would spend $100 on a chest of virtual gold coins?"

looks around nervously. But, in all seriousness, I've spent thousands probably in online purchases (skins, ccg cards, gems, battle passes, etc) and I'm an adult (supposedly). Most of my friends do too (though I'm perhaps an outlier in how thoughtlessly I spend money), so I don't think this is a good argument.
I can't believe how much blatant lies there are with products now. I was looking at tools on Amazon since I was given a gift card for it and I see tools listed as being "stainless steel" but in the reviews you have 90% of the reviews saying the product was blessed by Jesus and 10% giving one star reviews with pictures showing the "stainless steel" was rusting immediately and fracturing under normal use.

How does a product flat out lying about its specs and getting called out end up still on the store selling well?
Odds are, if you're a programmer, that you'd have come up with a very similar scheme, given knowledge of the kinds of messages the software is expected to send or receive. I.e. leave the envelope plausible-looking and stash the payload in the random-seeming bits.
Not everyone reviews their credit card statement every month. I'm sure they should, but you may have a situation where 1) almost all (legit) purchases are put on a credit card, 2) fraudulent charges are almost never put on, 3) multiple adults share a credit card, and 4) credit card description lines are...not descriptive(this is getting better), it seems possible to miss charges.

My wife and I put ~$6k/mo on our shared CC over hundreds of transactions. I do review the charges, but it is extremely tiring going through every single one, trying to puzzle out what it was for, and then bringing in my wife to see if she knows what it was for.

The only saving grace is that Chase lets me get an email for every transaction >$0, so I review purchases approximately immediately after they are made, and not once at the end of the month. But, I can understand why that might slip past a lot of people.
Totally agree. Plus most purchases in the physical are returnable, even after some use. There's no way to argue that it's technically infeasible to "return" digital points or whatever. That's just apple and devs just being dicks saying "sorry we have your money now and there's nothing we can do..."
Unvoweled
>How can you blame software engineers when they are given literally 0 credit for developing software with security in mind and 100 percent credit for simply shipping as quickly as possible. Developing with security in mind will take longer and is literally the opposite of what companies ask for.

Police are credited with making arrests, but are almost never credited with treating people with respect.

By your logic, police should be encouraged to treat those they're supposed to protect and serve with disrespect and err on the side of locking people up, rather than trying to create a safer, more prosperous community.

Doing the right thing for the right reasons is (or should be) a thing. That it isn't doesn't say much for those who ignore an important aspect of software design.

I've always striven to meet the ideal that "if it's worth doing, it's worth doing properly."

I suppose that I shouldn't hold others to the standards I set for myself, but sometimes I still do.

Feel free to be offended, but I stand by my original statement:

"4. But the most egregious offenders are software developers, who often just bolt on weak security measures or just ignore security altogether, rather than design with security as a primary consideration."
Wow, a C backend sounds interesting. Should be super portable if they maintain it alongside LLVM.
Shareholders were informed of the plan well ahead of the bitcoin purchases. They were offered the chance to sell their shares. Existing shareholders have proven they are onboard with this change of strategy.
> There was only one case ever in any vaccine or trial of a side effect showing up after 6 weeks

That is not true: https://www.cdc.gov/vaccines/vpd-vac/rotavirus/vac-rotashiel...

It was approved August 1998 and removed from market October 1999 - more than a year later.

Edit: Oh, I see what you are saying - the intussusception happened within 2 weeks of receiving the vaccine.

But that's not really comforting, if it took more than a year to understand that it was linked to the vaccination.
At least with the Milwaukee tools I've had repaired (and that's three so far) they sent back the original tool fixed - I could tell by the markings on said tool.

It's understandable that at some point the "replace" becomes cheaper than "repair" but even now that line can be crossed.
Maybe availability has improved now. As the child suggests it was about the Tesla shingles.
Depends on which wireless card Dell shipped in your 9310. The Intel card should already be supported. The Killer WiFi AX500 2x2 does not have all the supporting patches merged in, as of this morning I'm carrying 27 patches to make it work.
You can buy a couch or fridge, or clothes or a TV and still return it after trying it out, and that includes massive re-packaging / shipping costs. There's no way in hell it's impossible to return digital points!
I'm sharing the display as well.

The USB switch electrically disconnects and reconnects any attached USB devices, moving them between a USB port on my desktop and a USB port on my docking station. I have a keyboard and a Logitech receiver connected to this switch. The advantage of doing it this way is that it works on any operating system without any additional software. Things that might not make it through a HID emulation layer (e.g. scroll sensitivity, firmware updates, RGB LED control(?), etc.) just work the way they would if the peripherals were connected directly (because they are connected directly). You could also add other USB devices to the switch if you wanted, like an audio interface, drawing tablet, thumbdrive, etc. (although you'd want to be careful about unmounting any drives).

The video source is set by the monitor. Doing this via the monitor's OSD menu works, and also doesn't require any software, but is annoying. So the small bit of optional software that I've added is a script that waits for the keyboard to disappear (which happens after I press the button on the USB switch), and then tells the monitor to change input. It saves me four button presses when it works, but I can still perform the switch manually if it doesn't.

The no-software approach allows this setup to work even if a friend shows up with a TB3 laptop without any special software and wants to work at my desk.
I _love_ cars. I also _love_ bicycles. I'm not saying I'm normal but perhaps I can provide some perspective. Even before I went fully remote 2 years ago I took a combination of bicycle and train to work here in Seattle where public transportation is okay at best. Before that I biked 10 miles one way to an office in Missouri after selling my car.

I don't depend on cars for my lifestyle so if I do have a car I want it to be one I enjoy taking to the store or driving to the mountains or whatever. They are cool machines and driving can be fun.
I think it depends on how different the kernel is. At the time I did it, nvidia had no published drivers that were compatible with the linux RC
What does a "tool that allows you to think through problems" look like? This claim is unsubstantiated. You have provided nothing to discredit an assertion that no such tool exists, and certainly haven't provided any criteria by which your claim could be falsified.

Your claim is:

1. Such a tool(s) exists -- how can I know?

2. PHP is not one of these tools -- why not?

3. PHP practitioners don't value these tools -- huh?

It's a total non-sequitur.

Your criticism reads as "PHP solves problems differently than how I want to solve them". That is a totally reasonable opinion to hold (many do)! That's not really a reflection of PHP, it's a reflection of yourself. And that's okay! You don't have to like PHP. But it is a little offensive to try to justify your preferences in a way that passes sweeping judgement over anyone who programs in PHP. Especially when your argument insinuates that PHP programmers must have a deficit in their ability to think through problems...
> The start should be the cyclists obeying the same rules as the cars (which would help with not pissing off numerous car drivers daily)

The problem is that as your parent commenter pointed out obeying these laws also pisses off drivers. Drivers get pissed off when cyclists take the full lane, and they get pissed off when cyclists come to a full stop in front of them at a stop sign. I don't run red lights and stop signs on my bike and it annoys me when people do, but I feel like the many violations drivers commit every day are just normalized because there are so many more drivers than cyclists.
That's disappointing to hear, as for the longest time the availability of parts and repair information for American vehicles was much better than foreign brands.
That is a static snapshot of the world. Over time, I would expect job openings in Austin to go up and for them to go down in the Bay Area. Those new + existing employees in Austin would be doing the jobs of the former employees in the Bay Area.
This is missing the point of the article. The main reason for the current state of affairs is the petro-dollar system and the need for US to run deficits. Changing regulations for domestic manufacturing has very little to do with it.

There are quite a few European countries with very robust manufacturing bases who are far more regulated (both from a labor and capital perspective). So, minimum wages, labor unions etc have little to do with the US' manufacturing base. In fact, one could argue that weaker unions, if anything, have contributed to the decimation of the manufacturing base.
(from the linked nypost article)

> Over the month of July, George bought add-on boosters — starting with $1.99 red rings and moving up to $99.99 gold rings — that allowed him to access new characters and more speed, spending hundreds of bucks at a time

oh to be a fly on the wall in the kickoff meeting where the gold ring was explained by the revenue team. I'll bet you a 99.99 gold ring that more than one person in the room was like wtf wtf wtf.

Not saying this is wrong or bad, certainly not saying this is illegal, but I certainly would think about my life choices were I in this room.

also better receipt technology would help with this, receipts are somehow in the stone age
Are you going to call?
Facebook’s ‘independent’ fact-checking certifier exposed as Hillary supporter
>Is that also the case for BPA-free plastics

be careful, the "BPA free" plastic products on the market might have just replaced BPA with BPS (or other plasticizers), which might be as bad as BPA when it comes to your health. https://en.wikipedia.org/wiki/Bisphenol_S#Health_Effects
lolz what a legal scam :Ð
Someone actually responded to me (see below) implying that this attack could be developed by a single person in a single day. Impressive confidence.
the true volatility of this security isn't zero, its the standard deviation between the two outcomes, zero and 1200, or about 848. This is exactly why high volatility is associated with higher risk - you can think of volatility as a spread between high and low values that this security can take on randomly. Just plug in those two outcomes, 0 and 1200 into excel stdev calculation. that's the volatility.
Expensive babysitter.
We rely on basic observations - that worked a century ago, now not so much. We need some better mechanism - especially for people who doesn't know properties, failure modes etc.
> Police are credited with making arrests, but are almost never credited with treating people with respect.

> By your logic, police should be encouraged to treat those they're supposed to protect and serve with disrespect and err on the side of locking people up, rather than trying to create a safer, more prosperous community.

No, by their argument, to the extent your first quoted sentence is true, police are (not “should be”) encouraged to treat those they're supposed to protect and serve with disrespect and err on the side of locking people up, rather than trying to create a safer, more prosperous community.

Which seems pretty accurate.
Holy this is one hell of a sophisticated attack.

Most of the SolarWinds tools run on Windows only. Some of the obfuscation they use reminds me of how complicated PSD is to parse.

Finding that you've been infected with this malware should trigger a critical response. I wouldn't even feel safe until I've nuked all the servers and rolled as many credentials as I could. And even then who knows how much data the attacker could have already exfiltrated. Frankly this level of sophistication is terrifying because you really never know for sure how deep they managed to get in.
Perhaps false should have been -1, to preserve sort order and so that boolean values aren't big or little endian.
That's due to the "leave a good review and we will give you a gift card" tactic that's been somewhat common these days.

Example: https://sellercentral.amazon.com/forums/t/here-is-how-they-g...