skysight-inc/HackerNews huggingface dataset:
If I had to guess, I'd say they will probably roll out new XProtect signatures [1] soon, assuming they haven't done so already for these samples.

I also just learned that you can see when the last update was with the following command:

```

system_profiler SPInstallHistoryDataType | grep -A 5 "XProtectPlistConfigData"

```

And then any updates are added to `/Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Resources/XProtect.yara` (for macOS 11, at least).

[1] https://support.apple.com/guide/security/protecting-against-...
The phrase I’ve heard for this style of bet is “picking up nickels in front of a steamroller.”
It's a cool idea and I like the execution but if I'm at the point where I've uploaded the binary over and executed it I've already run `sudo -l` and checked my permissions (and I could be wrong but from my brief scan of the source code I don't think it attempts to exploit SUID but just sudo permissions). Probably would save a little bit of time with docker escalation but again pretty standard enumeration would've revealed that vector by then.
Idempotent -> singularly consistent

It's not a perfect definition, but I don't think execs really need to know what idempotent is.
10/10. It is a bullet proof success. Congrats from a top 2% SO user who just joined
When I visit TikTok without logging in I see a side bar recommending Will Smith, Gordon Ramsey, Kevin Hart, Selena Gomez, and SnoopDogg.

They may surface other stuff better than other platforms, but they definitely have the same "rich gets richer" stuff in the default landing page too.
In the movie The Matrix, Agent Smith explains that the Matrix is designed after the peak of human civilization, which just so happens to be the late 90s.
From the article: "Consumers who aren’t exposed to price risk have no fundamental incentives to conserve energy in times of need."

But, at the same time, consumers that have no visibility into their current electricity prices are unable to alter their behaviour. Until there's extremely high-resolution, real-time price transparency, this system is destined to fail.

Also consumers have base loads just like generators have base loads: you might defer doing laundry, but no one is going to unplug their refrigerator during a electricity price surge. Again, this simplistic spot pricing scheme is destined to fail if it doesn't meet consumer's need to have predictable baseline consumption rates.

I weakly agree with the author here that demand-based pricing is in everyone's interest, but that said, last week in Taxas was a systemic failure of immense proportions and everyone involved in planning Texas' electricity grid should be ashamed.
You're bringing up a limitation of the current tech, that it tethers you to a wall, to speak against this new tech. Does a student who has a gap between classes always want to find an outlet somewhere and deal with their computer sounding like it's about to liftoff? Does the video editor offloading some of their workload to GPU always want to find an outlet?

Apple is selling super quiet hypermobile performance here, I see them as occupying a niche with no real competition.
And to filter out who can answer questions.

45$/h will attract a LOT of attention online. And not from the folks who should be answering questions. Just look at what happened with Hacktoberfest [0].

[0] https://news.ycombinator.com/item?id=24658052
Never forget Troy Davis. Injustice abounds.

https://slate.com/news-and-politics/2015/03/innocence-is-not...
> The biggest reason why Go modules are a very poor packaging solution is the horrendous stupidity of tying them to source control

I think it's actually a great idea. It uses native things you use anyway, avoids an unnecessary third party ( a package repository like pypi), and adds in extra security ( remember those hijacked pypi credentials and pypi-only malicious packages that weren't in source control, so hard to verify?).

> This makes it difficult to develop multiple modules in the same repo

How so? You can justs use different folders and packages.

> requires your source control system to know Go

Not really.

> it makes internal refactors a problem for all consumers of your code

That's always the case - regardless of your package repository, if you change it, you have to update the new references everywhere. You can use go.mod to replace a reference ( e.g. use gitlab.com/me/library instead of github.com/legacy/library) without updating all the code. And then there's the goproxy protocol, which makes all of this optional.

I agree on v2 modules, that is very weird.
More like scammers, who are taking no risks because they're just taking a percentage off the top, are bad at communicating risks.
You’re presuming a society owes acknowledgment of the value stored in their investment vehicles?

Which is ultimately my point. None of us have to view Apple as “valuable”.

It’s simply a political routine built upon exposure to previous political routine. Time series of the brain.

There’s a tax on our agency to keep propping up systems that are devaluing our agency to the benefit of a moneyed minority.

We’re under no political obligation to enable or protect that, no matter how much economic theory you copy-paste.

Imo the free market is not Apple and Dell computers, or Ford and Chevy cars. It’s between public and private power.

One has cost us reliability and resiliency for fiscal efficiency. We do not have to politically accept that.
... 'cos people are spending too much time looking at their phones nowadays?
What U.S. Startups Get Wrong About Expanding into Europe
It is possible they or I got our wires crossed about the fact that South America > Brazil. This story has been retold so many times that it is starting to become myth. Typically I use Switzerland as my go-to example of "Even if it's one country you can't assume one language." But Quebec is also next door - and to be perfectly cynical, you can count on people who only care about English and don't give a damn about anybody outside their bubble to have a politically incorrect Quebecois joke pop into their heads. They get it, even if they don't like it.
What did they ask you?

Did you get to clone their entire code repository?
Bitcoin Is a Useless Currency
you answered your own question.

when you trade your bitcoin out for Monero, someone else has received your bitcoin and its their problem.

did you just frame that person, or are the other people following the bitcoin transactions between addresses just wasting their time. do those people even know that one of the series of transactions they've been following for years was a trade for Monero? no, they don't.

this reality is indistinguishable between legal and illegal transactions.

for anyone passing by: the scenarios so far are based on starting with bitcoin, briefly swapping to monero, and ending with clean bitcoin. many people start with Monero, and only get the amount of clean bitcoin they need when necessary to pay for things, which completely alters the problems and solutions.
I completely agree on server-side derivation being flawed, which is why I made SrsPass, which derives child passwords for you client side, you can use across accounts, and ensures even if you end up making a password on a shitty site that plaintexts your credentials, it won't compromise your master key, as it's 128-bit salted.
The issue is how you define what a note even is. Some people say it’s just plain text; some demand support for images; some want to attach arbitrary files; some want rich text/markup, and some demand markdown specifically while others don’t care about the underlying format; some want simple tables, while others want full databases in their notes; some want to organize with folder and tags, while some just want tags, while some just want folders, while some want notes to live inside other notes.

With so many definitions of what a “note” is even supposed to be, it’s no surprise that we haven’t settled on a single way to create and edit them.
In NYC, back when movie theaters were open, all of the Regals and AMC had these variable rate energy companies setup tables near the machines where you buy tickets. Usually they were manned by 2 young people in their early 20s, possibly college students.

These promoters would aggressively advertise "Free $10 Regal Gift Cards" or "Free $10 AMC Gift Cards", on the spot. They would say there is no catch. All you need is to be a ConEd Customer.

Every household in NYC is a ConEd customer because it is the only electric company.

Then they give you a tablet, and have you sign into your ConEd account. What they don't tell you is that you are switching your ConEd bill to a variable rate energy provider. On average, your bill is actually higher per month.

Every time I went to the movies I saw dozens of people get conned into higher monthly bills in exchange for a $10 gift card. I highly doubt anyone that signed up knew what they were really signing up for.

In upstate New York, I recall door to door salesmen doing the same thing. In NYC, too many residents live in buildings so they setup in movie theaters instead.

I wonder what their deal was with the theater venues. Does Regal/AMC rent out floor space to these promoters, or is there a revenue sharing deal?
" a good thing somehow suddenly became "a scam"."

Does Griddy push real-time cost information to consumers to enable them to react to situations like this? "Scam" might be harsh, but their model clearly failed.
Each patient’s allergy drops are prescribed individually by their physician based on their symptom history, allergy test results, and region. So yes, the northwest patients typically are treated for different pollens than those in Tennessee valley, however, it is usually even more specific than that: one patient in the same region will likely have different sensitivities and thus a different prescription than another in the same region. This is why the treatment has to be individualized per patient.
Think about this “just works” feedback, versus all the noise (mostly from Android, Linux and Windows users, though not sure why non-users’ opinion is relevant) demanding Apple break up the work they did to build an end-to-end ecosystem experience, demanding Apple “fragment” it.

Seems relatively clear that curated experience is the value prop.

I guess if someone is not in that ecosystem, makes sense to insist on breaking it up, so they don’t have to compete with it.
Many music artists use different names for different projects - they're very rarely "real people".

Only tangentially related, but The Archies were topping the charts all the way back in the 60s: https://en.wikipedia.org/wiki/Sugar,_Sugar
If you read the actual "leak" it's obviously that the article is twisting words. It suppresses videos where the ugliness of a person is the main focus, not videos with ugly people. That's a perfectly legitimate anti-bullying tactic. Ugly people don't make videos focusing on their ugliness, people mocking ugly people do. It doesn't say anything about censoring poor people, just videos where the environment is dilapidated. Saying that it leads to censoring poor people is a big logical leap. Most of the rest of the article is just filler that adds nothing to the central thesis. Classic "journalism".
You're getting hung up on tunable details. There's a way to find your way through them.
Oh, and, FWIW, most of the time Nim code runs much faster than Go. More like C/C++/Rust speed.
agree! I remember seeing still pictures from mars from the viking missions taken in the 70's and although they are pretty good this latest video quality and clarity means NASA/JPL has come a long way. Just seeing that alien surface where no person has(yet) walked is absolutely amazing.
It's a trick. OP's password is actually 29 chars long, but the attacker will now start at 30 characters, and never brute force the actual password. Nicely played.
That's also my suspicion. Their other comments seem equally unintelligible to me. Could also be someone for whom English isn't their first language, but I do suspect I'm going to find this account on some GPT-3 writeup in a few months time.
> Within a decade we'd have a manual on how to craft the best propaganda, how to best create discord, or how to best destroy a human being by just talking to them.

It seems like we’re close to that already.
Porsche and Siemens Energy, with partners, advance climate-neutral eFuels
"On the other hand, I find such code painful to look at."

It also pains me to see the opening bracket in its own line. (Being from a field where I don't get to use C# or SQL, I don't understand what the author is referring to)
I appreciate your comment but I didn't imply that the connection was seamless between ethnic groups. Your thinking assumes that there is a huge segregation between the two populations and anyone who cross-over would be 'Sinicization' / radicalisation. But reality is more complex than that. If you been or watched any videos from Xinjiang (unfortunately most not in English) you would see alot of locals (ethnic minorities) supporting the current way of life or even the law enforcement themselves (which I don't want to argue about its right or wrong here).

I don't see how the journalist story relates to this. I know exactly the kind of profile he has. Most people in/out of China know the limit of political freedom and the sensitivity changes according to political tides. It'll be quite strange that he pretends he didn't know the severity. But that's exactly my point: these events muddle the water and hide the real serious issues.
The issue with landing people on Mars is that you have to fly them back to Earth.

We have to be prepared to 'die on Mars'.
South East England was in tier 4 lockdown in December but I don't think there was much compliance. This was fairly typical: https://youtu.be/K_tQCW_abjo?t=1993
As a kid, whenever we’d take a family road trip - the front windshield would be splattered with smashed bugs.

Over the winter holidays, I drove 9 hours and don’t believe a single bug was in my windshield after that long drive.

I don’t know what’s happening with bugs but could it be related?
As to updates (and other aspects of API design too), I highly recommend taking a look at the solutions proposed at https://aip.dev - e.g. in case of update, https://aip.dev/134 - note the use of FieldMask (though there's some slight not-yet-resolved inconsistency observed recently by one user: https://github.com/aip-dev/google.aip.dev/issues/673)
RSA is extremely simple, it's just multiplications and powers. It can be reasonably explained to high school students. The tooling is mature and keys are trivial to generate safely with a openssl command.

EdDSA is another level entirely. I don't know how you can recommend elliptic curve cryptography with a straight face if you think RSA is hard.

P.S. It's a myth that EdDSA is faster. This depends on operation (signing vs verification) and key size.
I've read that Gyroplanes are dangerous to beginners because if you get in trouble the instinct to pull back on the stick like a traditional aircraft can be fatal to gyro pilots. They have to un-learn one of the most basic skills they learned as pilots.

Edit: I mean push on the stick. Sorry, had a brainfart. Good thing I'm not a pilot.
I think a difference is that Elixir is deliberately dynamically typed, so you don't expect type safety. You write the happy path and rely on "fail fast" and the actor hierarchies to write robust code.

Besides, Elixir/Erlang has the best dynamically-typed equivalent of algebraic types (tuples + atoms + pattern matching) :-)
re: best practices. I inherited an API that always responds with 200s, even when there's an error condition. When a document can't be found it returns a 200 OK with a response body "NOT_FOUND".

By ignoring existing standards and re-inventing the wheel with custom errors the previous development team made the system harder to maintain & harder to onboard.
Obligatory audio from Venus, Venera 14 lander: https://www.youtube.com/watch?v=8jZDW53U8qQ&t=0s

With annotations:
https://www.reddit.com/r/venus/comments/7vpr1w/sound_recordi...
Do you really believe that journalists, of any nationality, in China feel free to express their honest take on this (or any) event that affects how people view the CCP?
Well the “factual” observation comes from training data, which unless created in an unbiased manner creates a biased dataset and biased inferences. Unless you believe that American law enforcement is an unbiased process, in which case I don’t think I can help you.
That's interesting! I had no idea about sodium batteries! Thank you!

Nickel-iron and lead-acid batteries have a lot of historical use for grid-backup applications, and lead-acid ones are still cheaper than lithium, but I don't think the resources are there to scale to an all-solar civilization. Nickel-iron batteries might be cheaper (the resources are a lot more abundant) but nobody sells them anymore I think?

There are whole classes of all kinds of energy sources that haven't been industrialized yet, including, to a great extent, nuclear energy. EGS comes to mind. The critical thing about PV is that it's crossed the chasm to mass production and the ensuing price drops. So I think it's crucial that current lithium production won't scale to the needs of an all-solar grid — but that oceanic extraction could.

If you liked this thread, you might also enjoy https://news.ycombinator.com/item?id=26219000
+1 that is demographic data, not a niche.

A niche is creating a product management tool targeted at SaaS companies building digital marketing tools.
I think its about adding semantic web stuff for mochiweb servers in their response? After clicking through a couple links I'm still not quite sure what it does.
These are almost certainly ATMs for the Institute for The Works of Religion; essentially a private bank for the Holy See & its employees. Those ATMs may not be in publicly accessible. I’ve looked too.
You would have a public company afterwards, it's the hot alternative to an IPO. I think the short answer is: 'inappropriate for anyone 'kicking around' the idea as a financing option and asking internet strangers'.

If you wouldn't have an IPO (of your own), I don't know why you'd merge with a SPAC.

If you would, then it's basically equivalent, just one mechanism by which you might do that, for technical or hype reasons, and you'll be talking to investors, banks, SPAC managers about that, not internet strangers.

(Shrug no I haven't been part of one.)
> The reality is that manual entry is even more error-prone, bias-prone, with more people falling through the cracks.

It doesn’t have to be. But when it’s subjected to the same incentives that produced this software and perpetuated its broken state, we should expect the result to be much the same.

When you pull back and try to look at it with fresh eyes, our prison system is abjectly terrifying. It’s designed to funnel wealth to private entities, not to implement justice or rehabilitate criminals or whatever other worthy goal(s) you might imagine for it. This story (as horrifying as it is just by itself) is only one little corner of the monolithic perversity of the system as a whole, and the executive powers involved in steering that system are about as close to evil as you can find in the real world.

The whole thing needs to be torn down and rebuilt. As long as it exists, it puts the lie to our claim of being a society that values freedom and justice.

Circling back, I guess the point is that the ideas about how to do software in your last paragraph have no chance of being implemented in the system as it currently exists. To fix “systemic problems”, we will have to aim a lot higher with a much bigger gun.
All of the tech mentioned are broadly in the same domain - connecting people together or connecting people with information. This domain has saturated now. In fact there are no more niche areas untouched. All innovation now is about quality and economy. It just boils down to biggest bang for the buck.
Try srspass.com which runs argon2id in the browser. Takes about 3 seconds on my ARM phones for the unlock, which uses quite heavy argon2id parameters, above the recommended memory and iterations.

I don't think a 3s wait for a session, for greater security, and that on an unoptimized device is going to be breaking UX.
The US Navy reports that the Hospital Ship Mercy treated fewer than 200 patients in total.

“ By the time of Comfort’s departure, the approximately 1,200-person crew and 1,000-bed hospital had treated just 182 patients, of which approximately 70 percent had COVID-19”

So I guess we were both wrong.

https://www.navytimes.com/news/your-navy/2020/04/30/hospital...
Sustainable Energy Key to Covid-19 Recovery in Asia and the Pacific
I am not an GPT-3 robot and I do not even having access to API or model while I am on the wait listing. I do not speak of native ENglish and maybe no great writer. Please excuse this deficiency.
> You’re presuming a society owes acknowledgment of the value stored in their investments?

Not really. Also I’m not copying and pasting anything here.

Notice that the person I am replying to is the one who is talking about ‘iron clad economic realities’.

You’re welcome to deny the value of anything you like, or the existence of it for that matter.

Nobody is obliging you to accept any reality you don’t like.

> There’s a tax on our agency to keep propping up systems that are devaluing our agency to the benefit of a moneyed minority.

Why are you propping them up then?

> Imo the free market is not Apple and Dell computers, or Ford and Chevy cars. It’s between public and private power.
One has cost us reliability and resiliency for fiscal efficiency. We do not have to politically accept that.

It’s not clear what you are trying to say here. Can you explain?

What do you mean by a ‘free market between public and private power’?
I don't think you want a factorial involved.

With unknown size, cracking 30 characters takes time proportional to n^30 + n^29 + n^28 etc.

Cracking just 30 is proportional to n^30.

The difference is negligible. A percent or two.
My allergies are seasonal and pet related, and they provide me some nuisance every year but aren't generally debilitating. That said, itchy eyes and a nasal drip are annoying and there's probably some amount I'd pay to just not have to deal with them.

I think my worry is that I'd start something like this and experience the same low grade symptoms (e.g., a treatment like this might improve my symptoms, but only take them from low-grade to low-grade.) As someone who does take an allergy med during seasonal allergy seasons but is able to function without them, is there much benefit into looking into SLIT? Or is this something that's designed to treat folks who are experiencing a certain level of quality of life impairment?
We can use your existing results. Email team@wyndly.com and we'll collect your allergy test results in a HIPAA-compliant manner.
I posted under another comment, but this to me is a software-literacy problem. You shouldn't have to hire an engineer to fix or adjust business rules in 2021. Period. The people who know the domain should be able to maintain (and really, create) any automation of that domain themselves.

This is partly a failure of education, partly a failure of organizational structuring, and partly a failure of software accessibility. But it's a gargantuan failure all the same.
Don’t many modern ships already have this? I recall watching “Big Ships” or some such on
Discovery Channel about 15-20 years ago where they explained ships already having multiple stern and aft, starboard and port, “pods” either with jet streams or rotors.