skysight-inc/HackerNews huggingface dataset:
Who would ever believe that this department only just found out about research that's been ongoing for a couple of years and has resulted in published papers? UMN isn't a small school, but I find it hard to imagine that it's so big nobody in the department knew about or reported this.

What does it mean to "suspend" a line of research that has already resulted in publications?

I think it's much more likely that this unprofessional/unethical conduct has now reached a level where they know they have no choice but to respond, so they're trying to limit their liability.

That said, I also fault the kernel maintainers, a little, for reacting the way they did - how much of the huge reaction and mass reversion was being angry about the ethics of the situation, and how much was embarrassment that much of it managed to go undetected? Though what they did should never have been done, it does seem like the researchers' point has been proved somewhat.
:D that's fitting for HN.

Instead of finding a more descriptive name or adding a short description below, they put it on a completely different site.
WSLg Preview – GUI App Support with Windows Subsystem for Linux
Can you share how you did that? I've been trying to achieve that for both Bluetooth and Location Services (mini-rant: not adding a CC toggle for that is such a dark pattern) but haven't been able to pull it off.
Hold up, what's your beef with Windows Terminal? I've really been enjoying it!
currently staring at what's left in a large legacy rails/activerecord app figuring out what to do with. the suffering is real.
The article talks about the tail's role in movement, but you have to wonder how much its little arms kept it from going faster. I'd think it would lead to balance issues.
Why should landlords extract more from their renters, just because they can?
Indonesia searching for missing submarine with 53 on board
All of these are based on the assumption that the attacker has physical access to the unlocked phone, right?

I'm trying to understand the risk profile here.

I guess I see the value for, e.g., a border crossing, where they can inconvenience you and ask you to unlock your phone, but instead of flicking through your messages briefly, they authorize a pairing and quickly backup your entire disk content. You expected a quick perusal by a human, but unknowingly gave them a lot more. If you've blocked pairing, they can't get nearly as much data as quickly.

But if you're being investigated for committing a crime, everything we think we know about device unlocking is still true, right? They'd need me to unlock it before it'd trust a new device to pair to, and they'd need a court order to get me to unlock it for them. Five quick taps of the power button and biometric unlocks are off--now they need my passcode.

Perhaps there's still value, even in that case, in that if I were compelled via court order to give my passcode, they still can't quickly / easily dump the disk contents from a device pairing. Although I imagine if you have the passcode there's probably many other ways of accomplishing the same result.
Setting Up a DHT11 Sensor on Your Raspberry Pi – The Easy Way
"free"

Sure there is Nitro, but I believe data mining is part of the devil's bargain.
Author here. We are Emanuele and Davide. We are building Saasform to make authentication and payments open source and easy to integrate with your saas. If you're making a saas, our goal is to help you launch fast and stay focused on their core features.

Saasform is open source, provides authentication (signup, sign in, social login, ...) and it couples it with billing; this way you know that users land on your saas only if they are authenticated and have a valid plan.

We worked hard to make it as easy as possible to integrate and we are ready to help you integrate it into your saas and support you if you need additional features.
Wow, that video made my day. This bit is key:

> "For example, by including a specially formatted but otherwise innocuous file in an app on a device that is then scanned by Cellebrite, it’s possible to execute code that modifies not just the Cellebrite report being created in that scan, but also all previous and future generated Cellebrite reports from all previously scanned devices and all future scanned devices in any arbitrary way (inserting or removing text, email, photos, contacts, files, or any other data), with no detectable timestamp changes or checksum failures. This could even be done at random, and would seriously call the data integrity of Cellebrite’s reports into question."

They've may have just got a lot evidence collected using Cellebrite from phones with (or without) Signal installed on them thrown out of court.

I don't recall the details, but there was an absolute unsubstantiated speculative and surely fictional rumor of at least one entirely theoretical zero-day non-gif formatted image file that exploited a similar class of vulnerability in what was probably not a market leading tool used tangentially for the same purposes, floating around well over a decade ago as well.

I for one am very glad that these hypothetical issues have almost surely been fixed.
There was no way to make changes, it was sign or walk away. But I still wanted to know what I was signing. I was told over and over 'this is all boilerplate'. The part about their selling my new address and personal info was not boilerplate and had an opt-out option in the fine print. I just exercised the opt-out - something I had to send in separately.
> the paper is deliberately misleading in an attempt to overstate its contributions.

Welcome to academia. Where a large number of students are doing it just for the credentials
I also read my mortgage, bank man said no one had ever done that and he clearly had not read it himself. The agreement obligated me to pay the bank unlimited money (in fees) and forbid using the loan for the purposes it was advertised for.
Doesn't this only affect arbitrage traders? Other defi users shouldn't be affected by this and if some hedge fund bot loses money, that's fine with me.
I don't think it's orthogonal; no traditional contract actually facilitates the burglary, whereas poorly-implemented smart contracts do.

If the "real" contract is the one enforced by law, and the "smart" contract is the one that might facilitate a burglary, why not dispense with the latter?
Nice self promotion w/o any disclaimer
does cellebrite appear in any legit court cases? from this blog post it sounds like only "authoritarian" regimes use it. i doubt it would appear in any legit case. it's a shady tool. they'll use it to gather info but will not present this info directly in court, instead use it to gather legitimate proof, if needed.
I agree, applescript is a warning to anyone going down the hypertalk-derived road

I am adding things like CSS literals:

https://hyperscript.org/expressions/#css

in the hope that we can increase the expressiveness (and distinctness between different elements) that we don't fall into the wall-of-text nature of applescript.

It's a speculative project, we'll see how it works out.
M1 Mac takes 4 seconds to open 74kb Word document in Pages
Riya Collective (YC W20) Is Hiring
Oat milk is great for vegans or lactose-intolerant people and froths way better than the other non-dairy milks, so I'm not sure where the oat milk => Starbucks jab comes from. Either way, my local coffee shops started carrying oat milk much earlier than Starbucks.
Like “kebab”? Are words like “steak” oppressive? “Egg”?

Can you explain your perspective here? I’m genuinely confused and curious about your point of view.
Would you be able to comment on how this compares to the standard CSV module [0] / PEP 305 [1]?

[0] https://docs.python.org/3/library/csv.html
O(n) cache size is a very novel approach in computer science. This "cache" is crucial part of implementation and limits project applicability.
This is the classic definition

https://dl.acm.org/doi/10.1109/12.4607

"An interrupt is precise if the saved process state corresponds to a sequential model of program execution in which one instruction completes before the next begins. In a pipelined processor, precise interrupts are difficult to implement because an instruction may be initiated before its predecessors have completed."
Same, it's a joy to use.
I've been using it for a couple of months now (by patching the applications which haven't upgraded to Electron 12 yet) and it's been working great for me.

Is there anything in particular that is broken and/or missing from Electron's Wayland implementation? Or are you referring to GNOME's refusal to implement server-side decorations [1][2] as a limitation of Electron?

[1] - https://gitlab.gnome.org/GNOME/mutter/-/issues/217
[2] - https://github.com/electron/electron/issues/27522
It seems odd that you are responding with a threat, or at least a threatening hypothetical to a (the?) moderator.

The way I understand it is that unnecessarily angry or confrontational posts tend to lower the overall tone. They are cathartic/fun to write, fast to write, and tend to get wide overall agreement/votes. So if they are allowed then most of the discussion on a topic gets pushed down beneath that sort of post.

Hence why we are asked to refrain, to permit more room for focused and substantive discussion.
That isn't quite right. Although it's commonly used to describe something that's been stolen, it's more generally used to indicate that the speaker doesn't want to talk about where it came from. That's how it's been used in this article.
Wiki about the Amiga computer and OS, hosted on an Amiga 1200
I compared WER of Coqui with Vosk https://github.com/alphacep/vosk-api. Unfortunately WER of Coqui is much on the lower side. See for details

https://github.com/coqui-ai/STT/discussions/1853
"A GSuite admin can view drafts in Gmail" seems like a better headline than answering an unasked question.
If we took the case into the real world and it became "we decided to research how many supports we could remove from this major road bridge before someone noticed", I'd hope the IRB wouldn't just write it off as "not human research so we don't care".
Book Review: Global Economic History
No, this did not teach anyone anything new except that members of that UMN group are untrustworthy. Nothing else new was learned here at all.
Yeah - and usually stops short of causing actual damage.

You don't get to rob a bank and then when caught say "you should thank us for showing your security weaknesses".

In this case they merged actual bugs and now they have to revert that stuff which depending on how connected those commits are to other things could cost a lot of time.

If they were doing this in good faith, they could have stopped short of actually letting the PRs merge (even then it's rude to waste their time this way).

This just comes across to me as an unethical academic with no real valuable work to do.
In case it isn't clear from reading the article PDF or this HN thread, DNSSEC doesn't encrypt DNS. If you want encrypted DNS, DNSSEC isn't the answer, because DNSSEC doesn't encrypt DNS. The main thing DNSSEC does is create outages.
I agree. In most industries (finance, mobile gaming, gambling) where "Whales" are common, their presence certainly leads companies competing for their attention (read: money) to very perverse incentives.
In the exact same boat.
Mine just died a few weeks ago - battery holds charge for maybe 2 hours. Going to be buying a new one here shortly.

I should probably add: the battery died after 3 years of use.
Tenure does not generally prohibit for-cause termination, and there is a whole pile of cause here.
Match Group: App Store fees are largest expense, will exceed $500M a year
No. If content is published for 0€, it's free. If you want money, charge for it. That's the only business model that ensures that businesses serve their customers and thus the only legitimate one.
This would allow them to run Outlook natively in EdgeOS, their fork of ChromeOS, in which the default search engine, Bingle, is a proxy to Google Search with nice backgrounds.

(all of this comment completely fictional).
I'm sorry. I didn't mean to be _gratuitous_, nor particularly insulting to you.

I wanted to acknowledge the possibility that our respective political beliefs, whatever they may be, might lead us to look for different types of issues in different places as root causes.

My own beliefs lead me to characterize choosing to believe that economic inequality is not integral to the Black experience in America as tantamount to wilfully ignoring a root component of the problems people face. If that belief is insulting to you, we may tragically be living in different worlds of experience, and might not ever have a meeting of the minds. That's what I was going for.

Despite that concern, from what you said, it seems like we might actually agree on a lot -- as you put it,

> If you see people like yourself getting shot by police for reasons that seem absurd, over and over, you don't feel safe. You don't believe in a bright future. You aren't happy.

That sounds spot on to me, and I absolutely agree that the fear of violence affects wealthy Black Americans too.

Regardless, the outpouring of rage from the community certainly transcended just the fear of violence from police. Violence is one particularly horrifying aspect of how the system hurts people, but people are being crushed all over, and people are mad about all of it.

Here is one quick example[1] of this being stated, sourced in one of the Wikipedia pages I originally linked (which explicitly lists "inequality and racism" as a cause of the George Floyd protests). This article is an interview with the Surgeon General of America, and says:

> The surgeon general pointed to Covid-19 disparities and other health care gaps among communities of color including maternal mortality rates and the opioid crisis, saying these issues and the frustration surfacing across the country are intermingled.

> “It's on the top of my mind as a black man, as a father, as a brother, as a son,” Adams said.

The brutality of the police is certainly the salient, focusing point of the protests, but the overall causes and broad outpouring are larger than that. The protestors have often called out the broad systemic aspects of racism, like healthcare access, home ownership rates, debt levels, access to quality education, and investment in communities of colour. Those sorts of things impact Black people's lives daily on scales far greater than police brutality, and they are economic issues at heart.

Police violence is uniquely horrific in its instances, and is the central igniting issue here, but the issues as a whole are much bigger than it alone.

1 - https://www.politico.com/news/2020/06/01/surgeon-general-pro...
I think you are letting Trump appointees at the CDC off far too easily: https://www.propublica.org/article/inside-the-fall-of-the-cd...

'McGowan reached his breaking point when Redfield asked him to stop the deportation of a dog, according to people who worked closely with him.

In late June, a Peace Corps volunteer evacuated from West Africa was told that the rabies vaccine of her dog, a terrier mix named Socrates, was not valid. Rabies vaccines are marked with pink dye, and a photo of Socrates’ vaccination showed a clear liquid, a CDC email said. Border authorities said Socrates had to be sent back to Africa, revaccinated and quarantined there for 28 days before returning. The Peace Corps volunteer sparked a #SaveSocrates outcry on social media.

CDC experts told McGowan that the last foreign dog with rabies that slipped through had cost more than $500,000 in public health charges, including shots for 44 people who had been near the animal, an email shows. Making an exception threatened to render the policy unenforceable for the 500 animals that are deported every year.

At a time when the pandemic had killed nearly 130,000 Americans, McGowan spent an hour and a half on the phone with the HHS general counsel and other senior officials to figure out how to make an exception for a dog. All the while, he told colleagues, his mind kept returning to the fact that the same administration was using the CDC’s quarantine power to deport thousands of children at the border with Mexico.

Later that day, Brian Harrison, the HHS chief of staff and a former labradoodle breeder, announced the liberation of Socrates. Secretary Azar tweeted out the news with the hashtag #SaveSocrates.

Privately, McGowan fumed.

“He was sad, downtrodden and defeated,” a colleague said. “This was really the final straw for him: How we are going to let dogs in, but basically we’re going to require children to be carted off and out of the country? And all in the name of public health.”

McGowan resigned in August.

The following month, Caputo took a medical leave after he hosted a live video on his personal Facebook in which he accused “deep state scientists” of “sedition” and warned his followers to stock up on ammunition in anticipation of political upheaval. In that rant, which was reported by The New York Times, Caputo said CDC scientists had only changed out of their sweatpants to meet at coffee shops and plot “how they’re going to attack Donald Trump next.”'
Maybe there is?
I'm not convinced of my own position but I'd suggest there is a difference from an outcry sourced in people that are well informed of their complaint and the sort of brigading/bandwagoning you can see come from personal details being posted under a complaint.
The Sound of iPod
Hyland Purchases Alfresco
Your in depth knowledge of the stats for years gone by is truly impressive. These events, this is why we love the beautiful game
I'd wager there's vastly different quantity of spam sites for things like gardening than more technical topics.
Does Conway's name only appear twice in this article?
Plus a healthy dose of making up or adjusting stories to fit whatever they're writing about. Self-help and pop-business books do the same thing, a lot. It's a similar style. I think people who are really good at the "tell me about a time when X" questions in interviews do some of the same (likely leaning more to adjusting than completely making them up, but I wouldn't be surprised if I'm wrong about that and well-told, rehearsed fiction gets you the best results there)
Less safe does not mean unsafe. Marginal gains in safety after a certain threshold may not be worth it. People wear helmets on bicycles, but no one wears a helmet just walking around.

Several years ago I read a German interview with a construction engineer who complained about the industrial lobby that pushes more and more regulations that, incidentally (/sarc), increase a (forced) demand for their products.

He gave several examples, of which I remember one. It is now law in Germany that new homes with French windows must have extra strong glass in them. The reason? What if a toddler on a tricycle ran into the glass and suffered serious injuries or death?

Now, said the engineer, there are no cases in Germany of this actually ever happening, or at least we do not have any records of them. But this what-if theoretical scenario increases construction costs of new German homes by a thousand euro or so. (And increases a basically guaranteed demand for products of a few certified safety glass vendors A LOT!) Take forty or fifty such extra requirements together and their cumulative effect on price of the finished home starts being significant.

But no one wants to be known as a potential child killer, so it is not worth opposing such measures.

The level of safety gained by such measures is nevertheless dubious. People didn't die in homes built to the less stringent standards of 1990 like flies.
They don’t seem all that happy about it. :)
Spot on. This is no knit-your-own-yoghurt altruistic move. It's all part of a well-coordinated effort to re-establish Microsoft as _the_ place that everyone does compute. "Commoditize your complement" as Joel Spolsky put it [0]; "windows on every desktop" for the cloud era.

Ballmer went head to head with open source and thought he could crush the threat. That didn't work, and things weren't looking great for MS before he was ousted.

Nadella's strategy is far more subtle: not quite Embrace/Extend/Eliminate, more Embrace/Neutralise/Replace.

Linux is a threat to server-side windows? Fine. Let them deploy on linux, so long as those linux boxes are in Azure. But that means devs get familiar with linux at the expense of windows, which means (a) they'll want linux on their desktop and (b) things are more readily transferable to AWS/GCP/whatever.

So: give them linux _in_ windows. Make appealing tools like vscode available free to create good will and positive sentiment towards Microsoft. Re-build the advocacy that hemorrhaged in the latter days of Ballmer's tenure.

And they're nailing it. By comparison to Google/Facebook/Amazon, there's very little negative press for Microsoft. And lots of positivity, even just in this thread.

It's hard not to be impressed by how successful they're being. And I say that as someone who still bears the scars from the 90s/00s hegemony. Microsoft was positively reviled by swathes of people in those days. Their attitude and market abuses rightly got them into hot water with the DOJ.

So, whilst I respect the turnaround, I'm wary. Microsoft is cruising inexorably back to dominance. History says that wouldn't be a good outcome.

[0]: https://www.joelonsoftware.com/2002/06/12/strategy-letter-v/
It’s interesting to see people feel this way about JS.

Lately I’ve been trying to learn kotlin... and man... that stuff (gradle) adds a weird amount of boilerplate to everything.

JS / TS on the other hand. It’s a package.json, or tsconfig. Not much else is required.

Jump into deno and you don’t even need those. Feels like JS is one of the better languages in this regard
Protip: value village has hoards of teapots for cheap
Monetization can also be a problem if you don't provide enough tiers for users (same as any hosted web analytics alternative to google analytics).

I.e: my blog has like... 200 visits per month? I don't have comments right now - only link to twitter/reddit - but I expect I would have a dozen comments per month, tops. At this point I don't even care about anti-spam, but if a tool asks me $10 a month, I can't justify paying it. Make it $1 and I'm in.
So You Want to Learn Physics, Second Edition
Of course. I'm entitled to block ads and I'm entitled to watch things that are offered for free without paying. If you want to be paid for something, don't give it away for free.
Someone made a good case that the IRB may have just been doing their job, according to their guidelines for what is exempt from review & what is "research on human subjects".

Nevertheless it is clear that UMN does not have sufficient controls in place to prevent this kind of unethical behavior. The ban & patch reversions may force the issue.
at one point the iPod bootloader was extracted by playing it aloud: http://www.ipodlinux.org/stories/piezo/
Every stone we can put in the way of surveillance helps.
This is one of the things that turned me off from WSL: not sure if something has changed recently with WSL2, but for example installing Node deps would take forever on the old WSL, to the extent of ridiculousness and just not being worth using
You might even say Bolton has been wandering for a while
Since humanity still hasn't fixed the problem of drunk drivers I guess I'll start driving drunk on the weekends to illustrate the flaws of the system.
Turkey is not going to fight the Russian airforce in the Donbass which is bolstered by the most advanced IADS and modern jets with F-16s. It would be a horribly bad idea.

Turkey never fought Russia in Syria. They fought Assad's government with some help from Russian irregulars, even then they got stalled and recently had losses. Russia was however unwilling to escalate and there were no air battles, for example.
Yeah, some circles. It's guys getting to middle-ages or retirement age, having more time on their hands, feeling a bit nostalgic and are tinkering. That's fine, I do have a weak spot for Lisp and FORTH myself, but don't confuse that with applicability in the industry.