skysight-inc/HackerNews huggingface dataset:
Apple's security architecture is leagues ahead of Android's. They have bespoke innovative protections at the hardware and hypervisor level, as well as an actual security CPU (as opposed to TrustZone on Androids, which is always swiss cheese in one way or another). This is largely possible because Apple are building their own silicon (none of the other silicon vendors are anywhere near as competent in this field).

I say this as an Android user. Apple only gets hit with all these exploit chains because they are immensely valuable single target. All the Android phones are worse, it's just that hacking Android doesn't pay nearly as much (and that market is much more fragmented).

Additionally, Google's public bug bounty project for Android is dysfunctional and run by contractors without the slightest clue how to handle the reports.

On the other hand, since Android is a more open ecosystem, you can make simpler architectural guarantees than you can on iOS. For example, on a rooted Android you can set a long boot-time-only passphrase for full disk encryption which guarantees data security at rest, which you can't on iOS or non rooted Android (they force you to use your regular unlock passphrase, which isn't practical to make long, and in Apple's case isn't used for FDE, though Android is moving in that direction too). But none of that will save you from NSO runtime 0days, just from police seizing your phone and getting data out if you turn it off.
Show HN: Solutions to some of the linked list algortihm problems in Golang
> To me, at least, it's quite easy to imagine that the founder of the project -- the same person who posted this Show HN, AFAICT -- may have told the PJON community "Hey everyone, I just posted a link PJON to HN; here's the URL if anyone wants to join the discussion ..." or something else similar to that.

Coming from the project's Gitter that is exactly what happened. I am pretty sure some of us over there do not have an account at HN. As far as I am concerned, this is just the third time I wrote something here since creating my account in 2017.
Then that means it doesn't fit.
False, from plan9.
Dasung's E Ink monitor assists a Syndome Triple-A patient
Jeremie Rousseau, from France, suffers from a genetic disease called Syndome Triple-A, a rare autosomal recessive congenital disorder. There are several symptoms that result from this disorder - and one of these is alacrima - the inability to produce enough tears. Jeremie finds it very difficult to work with computer monitors - even after following his Doctor's advice to decrease the contrast and brightness of his LCD display.
Jeremie was looking for solutions that will enable him to work for longer times in front of a monitor, and he found a good solution with Dasung's Paperlike E Ink monitors. Jeremie finds that he can work for many hours in front of the E Ink monitors - used to read, write e-mails and read long PDF files.

We have recently reviewed Dasung's Paperlike HD-FT, which is based on a 13.3" 2200x1650 touch display with a front light. Jeremie has an older version, that does not include touch, but has a Wacom touch tablet which uses for his work.

Jeremie is not just a user of an E Ink monitor - he is also a developer and he created a special Paint application specifically for E Ink displays. The application can be tested here - http://essaie.fr and Jeremie welcomes other E Ink users to test and comment on his application which may help others.
The original case study: https://web.archive.org/web/20180224141009/http://www.argond...
Geothermal energy, the forgotten renewable, has finally arrived
>No wonder the Sobells tried to block the follow up study with lawsuits

It seems like there would be a totally reasonable concern about privacy here as well. If I participated in a study with finite scope, I wouldn't want my identity and medical information transferred to another group of researchers.
I still use csh, the original one without line editing. I find faster most of the time to perform string substitution over the history. There is no glory, it’s the use of the same tool every day for 20 years.
A lot of online games have a chat component to them so while not in-person in the strictest sense it's probably educational in some way. I learned English selling and buying stuff in RuneScape and I know a lot of my friends did too.
It's true, but it can not be discussed and researched further because it is very upsetting to a lot of people. Also explains why men are better in chess. (I don't mean this from a misogynistic viewpoint: The majority of men will never invent anything or become good at chess, just like the majority of women)

https://en.wikipedia.org/wiki/Variability_hypothesis
The revolution will be when we can use 1000's of printheads in parallel. I don't think that's SF, more of an engineering problem. A bit like a 'dot matrix' printer for PLA.
Distinguishing two members of a union with... 0 bytes of extra data? Sounds like magic.

Not 100% sure about the terminology. Pick whatever word might fit it better. I just called it a sentinel.
We were consultants to an HFT firm; supposedly set up correctly but I didn't see that part of the project.
This theory doesn’t any hold scrutiny: some academic or academic-like fields are dominated by women despite having the same formal organization as the STEM ones.
Not necessarily. You could have many printheads side-by-side leaving you still very general in terms of what you can do but much faster.
This reminds me a lot of c-amplify. I didn't see it in the author's list of languages they tried so I thought I'd mention it, it has a lot of neat ideas for building a lispy C.

https://voodoo-slide.blogspot.com/2010/01/amplifying-c.html
https://github.com/deplinenoise/c-amplify
Honestly all joking aside systemd timer units have a lot of nice aspects. The only drag is that crontab entries are so much more terse and quick to add. Just one line instead of two unit files plus enabling/starting the timer. You can actually get the best of both with systemd-crontab-generator (not from the systemd project, just an unaffiliated third party).

https://manpages.debian.org/buster/systemd-cron/systemd-cron...

It creates transient unit files based off of a standard crontab on boot and after any file modifications. If you want to extend one of your cron jobs with something that you can't express in a crontab you can just mv it from /run to /etc and modify it however you'd like.
is Herald the one Covid-safe in Australia uses?

That thing utterly murders the battery on new phones as well.

I have a Note 10 + 5G and my wife has the S20 Plus and running that means having to recharge the battery multiple times a day or risk running around without any phone.

Sometimes my wife has noticed that the battery will go DOWN while being charged. so we uninstalled the app and the problem has gone.

I was an advocate for it when they were talking about releasing it... but as usual the Australian Gov is technically incompetent.
Guy wins $1M for re-inventing the wheelchair
Exactly my point, there is a conflagration. And on-line the bar is set there probably because it’s so hard to moderate otherwise.
Why Netflix Is the Best OTT Platform
Mob censorship here is really surprising. But when the system is conductive for it, it's even worse. It's basically built to silence any dissenting views, because hordes of click trolls downvote such comments and nothing stops them.
Exactly these were the challenges I faced when using plain js
Jean-Louis wrote imho a pretty good book on his time at Apple. In fact I think it was better than Bill Gates book at the time.

https://www.amazon.com/Third-Apple-Personal-Computers-Revolu...
For all this talk about the Mac-ification of GNOME, as a primarily Mac user I absolutely cannot stand Gnome 3. There is nothing Mac-like about it, it is just bland, weird, and terrible. MacOS does not force you to use the Launchpad, for example. The menu bar is still here. The Dock works as it always had. To me one of the worst developments of the Mac UI recently is the disappearance of title bars, but this was a thing in Gnome long before it caught on at Apple.

A decently configured KDE or XFCE is much better, and much closer to how a Mac works.
I'd also put more of the blame on GNU than Apple. Apple probably would have continued to ship bash if it hadn't switched to the GPL3 license.
I remember going through the Verizon specs for phones and manufacturer at the time (N9 wasn't properly out yet, so we were targeting N900). Verizon had not updated their hardware requirements so it was impossible to get approval for a modern phone at the time.

For context: less than 18 months earlier the phone manufacturers had finally agreed, after a long consumer campaign, to all support combined data and power over a single cable. This allowed to get rid of custom chargers everybody hated.

Verizon's specs at the time still mandated that any phone they sold had to have separate power and data sockets. How do I remember? I spotted this brilliant piece of malice in their specs and raised it with the project lead, who then took it higher up.
Early stage startup is irrelevant detail, unless you mean to say you can’t spend a lot of money right now. Attackers don’t care where you are in your financing rounds.

If the traffic gets to nginx or your app you’ve already lost. You need to block the traffic farther out. AWS Shield is where you should focus, that’s what it’s for. If it’s only blocking a small percentage of the unwanted traffic consult with an expert about Shield configuration.

Cloudflare is another widely-used option.
Some older VMs like Erlang's also do very well in avoiding GC pauses.

In Erlang's, the key is that garbage collection is per process. (Note that Erlang processes are analogous to Golang green threads, not OS prcessses.)
Even more fun, make tetris on a microprocessor, play on terminal via serial port. I did this as a diversion during my master's thesis - multiplayer tetris with two microprocessors, communicating through the radio protocol that I was building.
> He's also living proof that you really can't go wrong with dieting

Survivor bias, anectdata, etc. You can give yourself heart problems, gallstones, etc. from rapid weight loss.
history is written, there is no reason to hide that fact

i still remember everyoner jumping at V, calling the dev a liar and a thief because it was becoming popular
> Is ethics not taught in Israeli Computer Science curricula?

...Is ethis taught in any CS curriculum?

It sure wasn't in mine (but to be fair, that was in Switzerland).
I actually chose fish over zsh since I didn't want to spend time configuring zsh. fish was pretty much okay out of the box apart from colour scheme.
Zero to one!
Just tweeted to @brilliantorg https://twitter.com/Al2CHY/status/1340939489699512320 Wonder if they are going to ignore again. Gosh their customer service has always been horrible.
Can you imagine moving to the Bay Area in the 80s? To grow up when land was still cheap, before college competition was cutthroat and unaffordable, when relatively simple competence could get you a solid job and VC/PE firms weren't plundering and incentivizing the latest 30-second attention-span app to reach $1B?

It would be me living in Los Altos now, instead of the old rich people who I curse for refusing to die or reform Prop 13 and free up some affordable place to raise a new family.

Oh well.
> I'd encourage you not to just accept others.

You should be more hospitable in interpretation and use less passive wording. I agreed with someone else after hearing their point of view. Implying I'm a hapless sheep that agrees with whatever I'm told for that is going a bit far.
> The truth? Especially in anything related to alcohol/substance abuse, there most often is no objective "truth"

I dunno, sounds pretty objective to me:

> Out of the 20 patients the Sobell study claimed were moderately drinking, only one arguably was still moderately drinking a decade later.

Of course, to conclude from a 20 person study that moderate drinking can never work is another thing. But simply ignoring the study can't be the solution either.

> What does help however is "housing first"

This is probably true, but you didn't give any empirical evidence for that either. Also, not all alcoholics are homeless.
"nearly zero overhead"

I can't call anything "nearly zero overhead" that can generate large amounts of code. Not at least with a pure conscience.

I've seen enough many cases of better performance with more "overhead" but drastically smaller code size.
Great, works out of the box. I'd add an anonymous option to the login, even though you can leave the password empty.
Also, an indicator if TURN is used and if it's non-encrypted or encrypted would be great.
That article from The Atlantic uses outdated information. The figures Glaser used for AA efficacy do not come from peer reviewed science and are inaccurate. See https://www.thecut.com/2015/03/why-alcoholics-anonymous-work... for a direct rebuttal of that 2015 article.

The current science shows that Alcoholics Anonymous is an incredibly effective treatment for many alcoholics. Indeed, the 2020 Cochrane Review on AA shows that Alcoholics Anonymous is more effective then other treatments in getting alcoholics abstinent. See https://www.nytimes.com/2020/03/11/upshot/alcoholics-anonymo... or https://www.wbur.org/commonhealth/2020/03/11/medical-science...

Keep in mind that Cochrane reviews are the golden standard for high quality meta analysis of science, as pointed out at https://en.wikipedia.org/wiki/Wikipedia:MEDDATE
The example image in the wikipedia section on ECB is pretty damning:

https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation...
Next logical step is 3d-print those Aluminum molds.
Some of my most competent security friends work or used to work for Apple.

They are, indeed, not "IT people and cybersecurity people from the enterprise realms", because those would be wholly unqualified to work on iOS security. The people actually working on iOS security are hackers and embedded security experts. As they should be. The enterprise cybersecurity world has approximately nothing to do with something like security of a mobile device (e.g. the people in that field wouldn't know the slightest thing about cutting edge exploit mitigations or hardware assisted countermeasures like pointer authentication, memory protection and IOMMUs, etc).
Nice pun :)
> But Wintel will own business desktops for probably a decade, unfortunately.

Do you see this as being different from what was going on pre-M1?

Aside from shared math libraries, seems like most stuff required cross compilation just to work - I’m not clear that M1 adds more work on top of that.
you are all dancing around the point, which is that the middle class very much still exists.
I was an happy Unity user and as Ubuntu moved into GNOME 3, I really tried to love it, as I was into GNOME back in the Gtk vs KDE early days.

However its use of JavaScript for any customization, broken use of UNIX workspaces and overall slowness pushed me into XFCE as well.

In spite of not bing a C fan, I am even less fan from polluting the GNOME experience with JavaScript everywhere, instead of pushing Vala forward.
I really struggle with this.

I think it feeds strongly into imposter syndrome too. It's easy to devalue your own contributions when you suspect anyone else could make them.
If you are trying to think of an idea, you're already doing it wrong. The best ideas are motivated by problems you encounter yourself, not by trying to think of ideas. This is the biggest mistake you see with 20-something founders. Best way to come up with ideas is to use existing solutions and realize how shitty they are. Pretty much every single company was formed this way.

> They are programmers, not creative after all.

Damn, this is a bold comment on HN. Since when does profession determine how creative you are? I've met "programmers" and "geeks" who are more creative than "artists". Your profession has little to do with your innate creativity -- it just determines how you are able to express that creativity.

Unpopular opinion, but lists like this are stupid for people who are trying to build companies. You have to try things and be pissed off at the status quo to find real problems. Nobody is going to find real problems for you, in the same way that no quant school is going to reveal their hedge fund's trading strategy to you. Finding ideas in a list is the last advice I would give to anyone. If it's public, it's probably not a profitable idea.
Differential Topology with Prof. John W. Milnor (1965) [video]
It depends on what you talk about with "performance". Some years ago, Allegro had the faster GC than SBCL, but SBCL certainly had the best code generator of the three Lisps. So unless your runtime is constrained by the GC, SBCL really shines for performance. And it gives you a lot of knobs to optimize the memory usage.
I was under the impression there were, but I'm no expert. [1]

[1] https://www.iacr.org/archive/ches2009/57470001/57470001.pdf
there's always an untapped place somewhere. in the 80s people were saying this about someplace else probably.
Japanese toilet seats as well. There's a distributor for Australia, but they're hilariously expensive given that it's basically a small heater and a water pump with some trivial controller. (Starting at $1.4k ‽)
Link to GitHub repo
https://github.com/threema-ch
Given the time that's passed since then, you'd be one of the old rich person.

Austin sounds like an up-and-coming Valley, as do a few other really gorgeous locations around the US. The trick is to pick one and settle in early.
Very interesting how they made this work on iOS, given so many failed (before the Apple/Google protocol was released). A lot of the design documentation references the UK market, I wonder if VMWare were asked/volunteered to help with the NHSX app that tried to ignore the Apple/Google "blessed" approach.

> Provides a number of approaches to workaround the ‘iOS detection in the background’ bug in iOS to a point where detection and continuity is superior to existing protocols

The technical details on the protocol (seperate from the "payload" which is contact tracing specific data) are here[1], and the iOS library here[2]. I would be interested if anyone else has verified these claims.

[1] https://vmware.github.io/herald/specs/protocol
[2] https://github.com/vmware/herald-for-ios
Thermoforming (aka. vacuum / pressure forming) is the faster way to achieve large format shapes. You begin with the skin which can arrive either pre-cut or in rolls. You then heat it in a large scale oven usually based on ceramic heating modules. Once pliable at a polymer-specific temperature use your aluminium mould to obtain a desired shape in combination with positive and/or negative air pressure. The alumnium's conductivity assists with cooling the part to set the new shape. Then withdraw the mould.

For super high speed boat building, you could use a combination of this and maybe ultrasonic welding to rapidly fuse multiple sheets and build up a higher body. The challenge would be fusing to a superstructure while maintaining integrity.

Currently, this process is only used for dinghy-scale vessels.
Code golf is generally the most interesting when the rules are specific enough that every entry has the same constraints.

In this case, "to-do app" and "general purpose library" are so general that it becomes a game of semantics. The winner will have the broadest definition of "general purpose" and narrowest definition of "app".

I don't think we should criticize the person who posted this. It was a silly prompt that was guaranteed to get controversial submissions that people would pick apart.
"Cybersecurity" is a meaningless buzzword, but I can give you more specific statement.

Which tech companies devote enough care and have competent personnel working on embedded consumer device security?

Answer: Apple and Microsoft (Xbox group).

(Google is nowhere close because they don't design their own silicon, and the OEMs they rely on are incompetent in this field, so their efforts can only go so far, no amount of hiring competent sec folks will fix that problem).
Yes, Australia’s COVIDSafe app uses Herald.
I would find such a lag very irritating, but it's fine on Linux. Using Bash for years and I realized that I could never remember all its corner cases - fish is much easier to fit in the head. And _personally_ I don't need to be POSIX. (The function loading system is pretty simple and makes so much damn sense after years of .profile etc)
This comment is like the liar paradox, if people do what the comment suggests they are conforming to what another person tells them to do.
I have read an article on using 3d printing in metal for the inner mould (plug) for alpine ski boots. I think this was just an experiment that the manufacturer was doing with some of their top athletes.
Windows can surely do that, docking stations for Windows mobile were a thing, then there are tablets and 2-1 hybrid laptops.
Threema apps are now open source under the AGPLv3
I've been really interested for a while now in titanium, and while I think laser sintering is a really cool application, something caught my eye when trying to find videos about the material: some of the titanium-alloy hammers you can buy at the hardware store are made by molten metal casting in ceramic molds. For some reason it really fascinates me to see titanium being used that way, because it's not the way most places use it (it is a notoriously hard metal to work with). I wonder, are laser sintering and other techniques fundamentally slow or can they be improved to be more competitive?

https://youtu.be/p1Vk2hMO0ME?t=83
Where are you located? Isn't the Toyota Hilux really just the same thing as the Tacoma?
> regularhours.net and holdmydoor.com appeared on a Turkish CERT list in November 2019

> we observed MONARCHY and SNEAKY KESTREL continue to use these domain names in attacks through August 2020.

Interesting to see that the malicious hosts are not in any standard blacklist or safe browsing databases for browsers while Turkey's CERT has been sink-holing them via ISPs on a national level since at least 2019.
New York city probably. That place has been huge and expensive for like 100 years now. The new untapped places to look at might be Austin TX and Boise ID
Thankfully all of this native API is abstracted away in C#.
First of all, MPEG-4 Part 2 was an evolution of the h.263 spec. While all the h.26x have commonalities but they don't all have a linear relationship. Their commonalities are in high level concepts, not necessarily implementations.

As I said and thought I made clear, MPEG-1/2 were unsuitable for streaming on consumer hardware of the era. The lowest practical bitrates for either was far higher than common dial-up rates. Neither spec supported Sub-QCIF frame sizes or frame rates below 15fps.

Similarly audio was a problem as the specs wanted to use MPEG audio which likewise did not have super low bitrate modes. A software decoder could handle such things but the content was outside of a spec so you'd need the encoder and decoder to work hand in hand to work reliably.

No one decided to develop h.263 and MPEG-4 just for funsies because MPEG-1/2 handled everything with aplomb. Low bitrate/high latency conditions (dial-up, cellular) were not well served by MPEG-1/2.
The only reason Bash exists at all is because of the very same reason Bash switched to GPLv3. There could be no theoretical world where Bash exists but stays with GPLv2.