skysight-inc/HackerNews huggingface dataset:
More clarification on the topic would be nice. When I open the Signal app right now, I am nagged to "Create a PIN. PINs keep information that's stored with Signal encrypted. Remind Me Later / Create PIN".

Would be interesting to know if an app specific PIN resists cellebrite analysis. Screen unlocked, Signal PIN enabled.
What app can withstand attack from a rooted process?
CS works quite well for reading sheet music from a distance in the dark.
On high fidelity quantum teleportation for practical quantum networks
On one hand, it would currently double the time commitment from me (and my interviewing peers) per candidate. That would be a tough pill to swallow.

Interview processes are designed mostly for the employer, not the candidate. That's just the reality.
How does Facebook winning the fight against Apple asking you to opt in to being tracked help you?
It doesn't matter. You wait until the user auths and sniff the plaintext password out of memory. Root = game over.
I moved my team of 6 people to Notion when the company stopped paying for Dropbox Paper and moved to Google Docs. I'm a little taken aback by the tone:

> I am an unfortunate user of Notion. I have to use it in my day to day job because it is the tool of my company choice. I suffer every time I'm doing anything in it.

I put a good bit of time looking at alternatives to paper that allowed for concurrent editing by multiple people, rich support for technical documentation/code snipits, good tables, fast, etc.

Notion isn't perfect, but after going through a dozen offerings it came out far and ahead of all others, especially when you factored in its price. Over the last year they've also really moved ahead with new features, etc. We've moved all our docs and project tracking over to it and now we're fortunately off next-gen Jira.

We're a very technical team, and we share our docs rw to the whole company. Out of all the tools we use, I found this one pretty pleasurable to use to be honest.
Because a candidate can grind leetcode and prepare for a huge number of companies.

On the other hand, something like a homework assignment is typically good for a single company, and if you fail, it's time and effort and emotional energy down the toilet.
TLS does have a mode that uses a pre-shared key, but in TLSv1.3 I believe it's only used for session resumption.

Edit: Also, I recently learned about DNS Certification Authority Authorization (CAA) records. You can specify which of the public certificate authorities a browser is allowed to respect, for your domain. I don't think it's verified by all browsers yet, but it's a step.
>approval of your local sheriff

Unless MGs are treated differently than other NFA items in some way I'm unaware of, the new (2016) ATF rules no longer require CLEO (chief law enforcement officer) approval as part of the process, only notification.

Of course certain state laws still have a similar approval restriction
in place to comply with state law, but local law enforcement can no longer hamstring the actual NFA process.

>The final rule affects the NFA regulations by:

>...

>...requiring that a copy of all applications to make or transfer a firearm, and the specified form for responsible persons (5320.23), be forwarded to the chief law enforcement officer (CLEO) of the locality in which the applicant/transferee or responsible person resides; and

>eliminating the requirement for certification signed by the CLEO.

https://www.atf.gov/rules-and-regulations/final-rule-41f-bac...
> Did you know Norway, Denmark, Sweden, Iceland and Switzerland have no minimum wage at all?

That's not true at all for example Switzerlands minimum wage is not dictated at the federal level but its equivalent to 25 bucks an hour in Geneva. [1].

> There are jobs that are not feasible at certain wage levels.
> It is self evident when you look at it.

That's not self evident at all. People still work at unskilled jobs countries like Switzerland or Australia. How do you think the cleaning and fast food industries work?

[1] https://www.businessinsider.com/switzerland-geneva-introduce...
thanks I hate it
Someone taught me long ago that if you're using a debit card in a store you actually like, you should chose the debit option rather than the credit option, as the fees are lower.

I sometimes do the reverse when I'm in a shop that I don't have good things to say about, especially if I think they just cheated me in some legally defensible way. Like Captain Ahab trying to kill the whale with his pocket knife. Fuck you, I'm taking 1.5% of your life away!
It's not "believing they are always bad". It's "being unable to determine whether they are good". If you simply don't know enough to evaluate a source, it is correct as a matter of epistemology to view its contents with a large dose of suspicion. Any historian will tell you this; a pretty sizeable aspect of the study of history is the weighing of sources, working out why they said what they did, what they're not telling you, and what they're wrong about - because every source is incomplete, biased, and contains simple factual errors. I might sit back from a book and go "wow, that was good", and it's possible for a book to be "great but wrong" - but I can only reasonably conclude that a source's contents are correct if I have got more evidence for its thesis than just that one source.

So the situation is bad enough when I am encountering a new source. But if I'm already familiar with a source, and it's consistently wrong about the things I know, then I can only be even more suspicious of everything else they say; and sadly, an awful lot of publications do fall into that category. Finding a mistake in a book does make it more likely that it contains other mistakes, and it does make any given fact in the book more likely to be wrong.
See my response to superkuh elsewhere in this thread. This would introduce new problems and, overall, would probably make Web PKI worse.
It was a long time ago; I think I mixed in miralax. I don't remember any gut issues.

40, 38, 36, ... -> freedom
> Not always. Sometimes it has a repulsive effect. Like trying to score a first date when you're already flaunting the fact that you're engaged to someone else.

In what universe is this an acceptable analogy for anything?

Edit: Make sure to include the quote.
I never understand those kinds of questions. What do people expect?

Let's take the example of Jesus: I've been teleported to Judea, around the time of crucifixion. Who expects me to be able to just stroll up on Calvary and have a look at how it happened?

Who expects me to just visit the pyramids of Gizeh? And if someone asks me what I'm doing at the construction site for the pharaoh's grave, I simply say "just having a look, I thought it's interesting"?

Let's change the question a bit: If someone from a thousand years from now could choose to visit our time, what would he see and experience?

Simple, approximate answer: what I'm seeing and experiencing.

And I have to say that I cannot give a definitive account of Bin Laden's death. Or Trump's shady deals. Or what exactly happened to Nawalny. Or how the German government party decided to just introduce gay marriage (virtually without any forewarning, just like that).

Living at the same time as some historic event (even if it's not recognized at such until later) isn't really the same as having access to it.

(I admit that I first overlooked the invisibility option, but even then, it's still hard to enter the Oval Office, I suppose.)
Angular and Nest, a match made in heaven
This blogposts show the similarity of Nest and Angular. It illustrates how similar the CLI commands are and how you can use them to generate a backend and a frontend in less than 10 minutes.
Used jwt for our web app before - changed to session cookies. To make jwt secure for web apps it feels like you are reinventing session authentication.
Nothing, except that then you're inheriting all the complexity of JWT for not even a pretense of the JWT's supposed benefit of statelessness. You should do the simplest thing that works for your application; usually, the simplest and safest thing is session-based authentication with a random session ID.
Which is why McDonalds has no employees in Australia or Switzerland? It's not self evident at all looking at higher minimum wages in the 25ish countries with higher HDI than the USA and higher minimum wage.
‘Elon Musk lies a lot’, Sandy Munro discusses Tesla vs. the auto industry
Cellebrite isn't a responsible security research company; they sell tools to the government to break into devices using security vulnerabilities.
> I distrust most media sources because I've not once seen one present rigorous, transparent, verifiable research about a current event of interest to me.

"Because I've never seen it, clearly it does not exist."
Notion has had some great marketing, and has some useful features, but I don't think its as great as the hype around it suggests. YAWT, Yet Another Writing Tool. To be forgotten? in a few years.

When I used it, it seemed like a Jack of All/Master of None type of tool. Seemed like it was focused more on those who enjoy and find value in the act of taking notes rather the value of the note itself. I'm probably not the intended user, but for a lot of daily uses (Meeting notes, TODO lists, etc.) I found a barebones GDocs/Word/Pen and Paper to be more efficient and less taxing to pick up.
Btrfs is really only comparable to ZFS, which is also CoW, feature rich and written in C, but has been considered stable for a great many years.
Oh yeah, that's actually what I like about the Internet. In general, communities stay isolated. The problem with the guys on Reddit is that they'd leak out. I'd be sitting there enjoying my photos of San Francisco when suddenly, out of nowhere, bam! "(((Chesa Boudin))), Jew Extraordinaire, son of Weather Underground Illuminati will stick you full of Israeli heroin and marry your daughter off to a homeless guy who kills police wives". Yeah, no thanks. Back in the box, you go, mate. Back. In. The. Box. Fortunately, Reddit goes after the big hives of these people, and when that's done they actually just go away to their own community, with blackjack and hookers, yelling all the way about free speech.

It turns out just discouraging them from having an SSO that lets them go to the other parties is enough to get them to leave you alone.
Probably? At some point in the process comes acceptance. Doing something was better than doing nothing.
In one case? Nothing.

But if you get 100s of cases and it appears that ever user of this software without failure is stealing despite no other evidence and all of them protesting their innocence, then you might wanna reconsider.
I love Notion and use it lots and every time Cmd+A can’t select the whole document I die a little.
That's a point a lot of people have made, because it's basically true. JWT is a bit of a cargo cult.
Yup, it's certainly gaining traction as one for the history books from our age. Here's the US president using the font in a meme: https://twitter.com/realDonaldTrump/status/12075082802070118...
I really wish the data science/algo community weren't going in the direction of Jupyter/Notebooks.
It's an atrocious experience from a development standpoint, several steps backwards from even just editing code in Windows notepad.

With that said, this project looks amazing. Interactive/interpreted C/C++ would be great to have even outside of data science applications.
Protests at Indian iPhone plant offer a lesson for investors
Is there a meme for that ? like the dog in fire saying "this is fine" ?
I'm not a fan of "regulators must allow actual harm before intervening" here.
Htmx is boring. That's why I like it.
I’ll grant you the boldness, naïveté and arrogance of my 2006 self - he could be an insufferable a$$. But looking from the vantage point of 14 years on I think the statement is accurate and that researcher understood why. There was simply nothing on the horizon that remotely held as much promise as Alain Aspect’s and Serge Haroche’s quantum optics work.

Just because I was a graduate student does not automatically mean I was wrong.
I don't know much about dating. My advice is about interviewing. I think it's completely different.

Also your analogy is wrong - you are suggesting to go interview after you accept an offer, which I agree is off-putting.

I am suggesting to go interview after you receive an offer but before you accept it.
Although this is welcome to hear, it's not something a candidate can count on reliably nor something they can really control. After all, a candidate can come off as likeable to one interviewer and unlikeable to another.

Versus just being able ace through leetcode problems - that's a more objective criteria a candidate has more control over.

Personal anecdote. I interviewed at a FAANG, got rejected. They actually offered feedback, and one of the key reasons I apparently got rejected was that "I asked too many (clarifying) questions" about the leetcode problem.

Fast forward a year, I retry. I take the above feedback to heart, and refrain from asking too many questions. I get rejected again, and given feedback. One of the reasons given? "I asked too few questions".
A mobile user interface that actually is designed for a mobile device?
You’d be surprised.

Specially in small/medium companies, a lot of the times businesses don’t know what they are looking for.

I know of a place that was looking for a “hardware engineer with 10y experience”. The average salary for this kind of job posting is not that high, they offered way more, but that’s because the actual position was “we’re looking for someone to become COO, and we need him to understand hardware development because the rest of the team doesn’t”.
Yes.

Check SQLite wrapper, used either statically linked library or a DLL.

You can use C++ classes as they are, just need advertisement, SOM_PASSPORT_BEGIN/END :

https://github.com/c-smile/sciter-js-sdk/blob/main/sqlite/sc...
I'm the author of the article that seemed to alert everyone to Apple logging that app launch data.

Apple does indeed care a lot about user privacy. The system that was logging that data was an effort to prevent malware on end user systems. They are taking steps to encrypt the data, and I would be unsurprised if they use bloom filters to keep the list of apps clientside only.

The privacy issue with Apple isn't that Apple is some shade of "evil", it's that Apple takes the view that your data is safe with Apple because they won't misuse it, and that they know how to keep it safe.

In the age of warrantless FISA orders (known to some as PRISM, which we know thanks to Ed Snowden) mentioned and counted explicitly in Apple's own "transparency report", we now know that that isn't true. Apple knows it, too.

If the government can take any of your store user data at any time without a warrant, at what point after you have become painfully and totally aware of this fact do you become complicit in the fact that you are part of the state surveillance apparatus? At what point do you have a moral obligation to stop collecting data from your customers, knowing that if you save it, it will be available to the state, without a warrant, for all time?

This is the issue with Apple, not some lack of focus on customer privacy. Apple cares a lot about customer privacy, but they seem to have punted on the fact that Apple having customer data also means that the state surveillance organizations have access to all of that same data, as well.

Apple's surveillance-enabling lack of end to end cryptography (or the backdoors they've placed in the end-to-end encrypted parts like iMessage) is the real issue here. I don't think Apple wants to surveil your non-e2e iCloud Photos or nudes in iMessage attachments in your non-e2e iCloud device backup to sell ads or something - but they know or should know that the state does want to surveil this information, and they definitely know that the US government victimized 30,000 Apple users in that fashion last year, without a warrant.

https://www.reuters.com/article/us-apple-fbi-icloud-exclusiv...
Companion blog on ScyllaDB's site: https://www.scylladb.com/2020/12/23/jepsen-and-scylla-puttin...
Note: now tokio-postgres works fine.
> environmental damage

That's what the price tag is for.

> animal cruelty

Depends on how do you compare it with not being born at all.

> health downsides of eating steak every day

That differs from person to person, each with his specific problems and issues — and my neurosurgeon actually have recommended me to eat more red meat. It would also be very healthy for me if I could gain some weight.
I had a much more boring thing happen with a discount broker: they didn't execute a good until cancelled limit order in after hours. I kinda get it, but if I wanted to sell 100 shares of ZVZZT at $50 and it happens to hit $50.01 in after hours trading, sell it, or at least give me a check box to enable this.
I understand that. I am from the south of India and in the villages, women get the names of their clans and names of their husbands tattooed on their arms after they get married. There are tattoos for soldiers, for achievements and tattoos for shaming. South Indian original tribes probably have aboriginal roots than Polynesian but I suppose the intention was the same.

But everyone is somewhat ‘urbanized’ now and we don’t live in tribal societies anymore. That has its advantages but also makes those who follow older customs more vulnerable.
This seems like something different to me. Most books, TV shows, movies, etc that do anything with technology above the most basic level usually get at least one thing incredibly wrong. It's not necessarily a deal-breaker though - almost all stories are written to present and advance an interesting plotline, and almost all of them gloss over various inconvenient realities for the sake of a better story. Consumers can usually suspend their disbelief and accept the story for its own sake.

Problems only really come in when ignorant people read too many stories and start to think that how they present things is actually real. And some people who know a particular area very well may find whatever the story does too patently absurd to suspend disbelief.
Hmm, yeah that is odd! Maybe its a bug in the alignment tool?
Thank you so much for the explanation. How do you know all that? I am interested in learning about motherboard design and wonder if there are books you would recommend about it.
There is something which Signal could do to help even in this scenario. Give the user a logout option which leaves nothing but ciphertext on the device (e.g. by encrypting any plaintext keys with the passphrase). To login again you need a passphrase. Then as long as the user has enough time to click logout they are safe even when the device is out of their hands. Of course, after that, it might be prudent to consider the device compromised, and thus not login again afterwards in case it has been backdoored.
A Switch Story
Yeah the original press release from mail.ru [1] says "Daegu Limited (member of Parity.com Group)". It is not at all clear that this is a Korean company.

[1]: https://corp.mail.ru/en/press/releases/10761/
Is KFC marketing team trying to compete with RAX?

The Commercial that Killed a Fast Food Chain https://www.youtube.com/watch?v=uEcz8I64Mz0
This is true. Calibri takes effort to peruse. I confuse letters and words all the time and have to reread after losing context. Comic sans is certainly not the worst font out there.
Totally ask if they’ll cut you a deal. I recently purchased a hotel robe that wasn’t listed for sale for all the reasons you list.
I would say it doesn't apply to most medium sized or larger tech companies, or even most medium sized or larger non-tech companies that have formalized leetcode-based hiring practices.

You can come off as the most awesome person to work with, but they'll typically reject you if you can't solve the leetcode problems to whatever minimum standard they're expecting.
It's the opposite. For the purposes of corporations, ethics don't exist.

Corporations are a people-group where everyone validates each other's decision to pursue profit ("we work for the shareholders") to the exclusion of ethics or morality. They're finely tuned mechanisms to exploit human's group-mentality in order to circumvent people ethical mores.
According to your standard: to "flash" something, at least you need to use the bootloader itself, or possibly at a lower level? Well, calling the process of uploading a firmware image to an embedded device during early boot via U-Boot as "firmware flashing" is well established, so we can start from here... thus, uploading a new Android image in Android Recovery is not "flashing", but uploading a "recovery" image in Android bootloader is? Now, would you call firmware uploading via iOS's DFU mode "flashing" too? Or do you believe that the DFU mode is end-user accessible, thus not low-level enough? Then, would you accept that uploading the firmware to the baseband processor (which I believe uses its own EEPROM) via DFU "flashing"?

I guess the definition varies, it was what I meant by "an appropriate context".
It's actually user-serving. Users want to be a part of the decision of whether or not and how they are tracked by ad networks. Always.
Generally true. Particles generally reach your lungs, and the cooked food goes through chemical reaction and so on, so you ideally don't want that.
The Mixed-Up Masters of Early Animation
First Dinosaur Tail Found Preserved in Amber (2016)
To be fair dependency mgmt is a C++ issue in general, so it's not the cling teams fault
AGI is the main goal of DeepMind. They try to mimic human planning by finding similar strategies to what the human brain does, although of course there's never guarantee that their way is the right way.
I propose to refer to facile references to "Gell-Mann Amnesia Effect" here on HN as the "Gell-Mann Amnesia Affectation"
I hear there's a much harder thing market makers do with ETFs rebalancing, but ETFs put a lot of effort into getting fair prices when they rebalance, so it's definitely harder.
Erlang Authenticated Remote Code Execution (2018)
Functional Shell: A Minimal Toolbox
Taking functional approach in bash scripts one step further: how to define your reusable functional toolbox
I was "converted" away from shell script to Makefile project management years ago by a formet co-worker and I'm still thankful he persisted in convincing me.

Makefiles can be horrendous when you encounter them in C projects, with all the templating and generation and what not. But just a single Makefile at the project root with phony targets for all common tasks is a godsend.

One pet peeve of mine is to make `make` the only requirement to bootstrap a project dev environment from scratch. Since make is so ubiquitous you can pull in just about any requirement and dependency with clever use of targets, order only prerequisites, and files.
https://github.com/stjepang?tab=overview&from=2020-12-01&to=...

"""smol (likely discontinued, since author left rust)""" doesn't seem well supported and smol is used by async-rs these days iirc.
That’s why you never say “you are looking for $100/hour”, you say “I’m making $100/hour but conditions here are nice”.
Adding to this, schedule your interviews from least desired role to most desired. You will get a ton of practice interviewing and white boarding, and have offers in hand before you interview at your goal role. This is doubly true if your goal role ends up having an exploding offer.
Probably high-heat cooking of anything (e.g. pan trying) will pollute quite a bit even on an electric range.
That's an awful idea for a privacy feature.
Do you still use a fitness tracker?
How We Saved Dot Org
I think you should lighten up ;)
I don't understand why Facebook is worried about Apple's changes. After all, if Facebook tracking is indeed good for users, then users will overwhelmingly and enthusiastically opt-in.
Why not make a compromise?

Assume that software has no bugs if there is a publically available machine-checkable proof of the program correctness.
Quotes by Vinod Khosla
Teaching a Self-Driving A.I. To Make Human-Like Decisions