skysight-inc/HackerNews huggingface dataset:
Besides it maybe not being Apple’s fault (except for not telling anyone) - it is maybe Apple’s fault because they explicitly state they are reviewing apps, and did not catch this issue. So they obviously have a huge blind spot and their customers were impacted because of it. Considering the scope and scale of the App Store and the massive revenues from it, it is also pretty hard to believe some better scanning or analysis software wouldn’t have caught this pre-emptively?

Since I remember the ‘Apple was not doing true binary level review’ coming up when I talked to an iOS developer literally a decade ago about the App Store (back in Android 1.1 SDK days) - he even mentioned this type of attack as a possibility - and they obviously haven’t changed that, there are probably a ton more like this out there that have slipped under the radar due to smaller scope, or less clear impact.
I don't want to defend Amazon for that, but are they at least still skipable?
Netflix Drive – Netflix TechBlog
Considering most folks have been working from home the past year Id think most bills would be at least 30% higher for the last 14 months or so.
It's not neglible at all. I generated 10 million uniform numbers and made a histogram of the log10(probability) - there are dramatic differences in probability for different pages. Now, since the random page is just for fun, that may be considered acceptable.

import numpy as np
import matplotlib.pyplot as plt

n = 10_000_000

np.random.seed(0)
a = np.random.random([n])
a.sort()
b = np.append(a[1:] - a[:-1], 1 + a[0] - a[-1])
plt.hist(np.log10(b), bins=100)
plt.show()

Some highlights: The lowest probability page had a mere 1e-14 chance, while the highest had a 1e-6. The 90th percintile was 20 times more likely than the 10th.

https://imgur.com/a/WBLh3kQ
The bigger issue is that the good counterfeits can get PSA or BGS graded (either officially, or a fake slab). PSA guarantees that their graded cards are genuine but Beckett does not.

With an Alpha Black Lotus going for over $500K, it's only a matter of time before undetectable counterfeits exist.
I think China secretly believes this.
Also there are a lot of fortran compilers using llvm now. Fortran has the information for noalias as well.
The lower the tax - the more money will stay and will be reinvested into the local economy.

That should be easy to understand.

Just as robbing productive people with taxes is not going to work.
You apparently confuse operations costs with costs of establishment including site acquisition. Anyway, the die is cast. https://en.wikipedia.org/wiki/Loran-C#Loran-C_in_the_21st_ce...
I actually did the exact same thing, for the same reason, a long time ago. I wanted to see just how bad things were getting, what sites were doing what kind of terrible ads, and how badly it was tanking both cpu and network usage.

Ultimately I quit doing that and installed an ad blocker because I felt there wasn't really any point to knowing this. It's the same story on every commercial site, and there's nothing I could do about it anyway.
That's not a result of high taxes but of either badly designed/balanced taxes or of lack of enforcement.
This is very needed for the industry.
I'm a co-founder of agtech startup https://geopard.tech, we act as a platform and infrastructure for ag businesses (provide analytics and APIs) in the precision agriculture niche. When we created the company, it was the idea - to support agtech companies to launch their software faster/cheaper (our engine analyses yield, soil, topography, satellite, ground sensors, drone data and provides analytics on top of it). Before GeoPard we had another agtech company acquired by ag giant Bayer in 2015, then inside Bayer, we built Xarvio digital farming system. So, this is very needed, I know what I talk about. It takes usually minimum few years to launch solid agtech product.

The biggest issue I see right now is where to get valid data. Model is nothing without a huge amount of validating datasets, which only have ag giants. They will not share the data so easy since all of them build their digital platforms and understand the value of data.
Because “it downloaded faster in China” apparently?
Much of that is agricultural pollution as well as geographic factors (mountains on 3 sides and minimal precipitation much of the year)
https://israelheadlinenews.com/for-2-million-years-humans-at...

Also the Maasai tribe in Africa: https://www.wired.com/2012/09/milk-meat-and-blood-how-diet-d...

The Sami in Scandinavia: https://en.wikipedia.org/wiki/S%C3%A1mi_people

So really all societies did this until the advent of agriculture ~10K years ago. And even then, the agricultural revolution was not evenly distributed and hunting or fishing as a primary source of nutrition was common even just 150 years ago.
Show HN: Matrix] Homeservers Setup and Maintenance
Hi Hacker News,

Preamble:

Matrix [0] is a protocol for real-time communication, most known as secure federated chat with client named "element". If you want to join Matrix you may use any public server, but any features, bridges, integrations, etc. configured by server admin, so if you want to add/change or remove something, you can't do that. In most cases, it's question about bridges - like slack, telegram, discord, facebook messenger, etc.

That's why I started https://etke.cc/

What is it?

Actually, it's html form ( https://etke.cc/#contact ) where you can select what you need from your matrix homeserver.
After that we contact you and start configuration - DNS records, server, admin user name, etc.
As result - you receive your own matrix homeserver on your server (anywhere), with all features that you want.

Why?

Because you should be matrix guru to setup it yourself with all perks (like coturn - try to configure it with synapse in separate docker containers), so etke.cc can help to (all items in the list below are existing clients):

* people who has no idea what that server voodoo means

* people who has idea about servers, but doesn't know matrix homeserver voodoo means

* people who has idea about servers and homeservers voodoo, but doesn't want to maintain it themself

* companies, who needs secure chat (alternative to slack)

* companies, who needs real-time API platform

* companies, who builds chatbots for multiple platforms

But At What Cost?

Pricing is simple:

* Initial setup: 5$ once - you get your matrix homeserver and do what you want

* (optional) subscription: 5$/month - we maintain and update your server & homeserver

* (optional) consultation - 20$/h - in most cases used by people who wants to understand how matrix homeserver works and/or how to work with protocol to integrate it in own apps/services

[0] https://matrix.org
It isn't a competition. Multiple smart angles on the same issue sharpens resolution for everyone.
> - Totally bogus relay chain data

- all kinds of other garbage in random fields

- sender IPs that were faked etc

Anyone interested in looking at all the possible permutations of spam, can view the spamassassin rule sets which are quite comprehensive by now. Spamassassin has been around for close to 20 years.
That it happened is not a valid data point, it should be compared to other stores and what % are malicious apps.

Now not disclosing it is on them but at the same time, it was the apps who were hacked and I can see it falling to them to disclose?
Some restaurants think they're too good for traditional menus. I few years ago I went to Diner, one of the hippest Brooklyn spots at the time (one evening, Bill Murray was hanging out there, pretending a slice of lime was his teeth). They refused to have a paper menu. Instead, the waiter would verbally tell you about all 15 or so items, while casually scribbling each item in shorthand on the paper tablecloth. After they'd gone, you'd have forgotten most of the things they had mentioned, so you'd try to decipher the scribbles that the waiter had left. It was pretty silly and frustrating (and the food was merely adequate).
isnt the point to be careful when implementing them? so the compiler detects the intention to byteswap?

when we ported little endian x86 Linux to the big endian mainframe we sprinkled hton/ntoh all over the place, happily so. they are the way to go and they should be implemented properly, not be replaced by a homegrown version.

all that said, I'm surprised 64bit htonll and ntohll are not standard yet. anybody knows why?
How do you pay for schools, police, firefighters in your tax-free world?
People very rarely actually leave countries over tax policies. Countries pretend ignorance because of who’s benefiting, but unless they renounce citizenship moving money off shore is effectively symbolic.

Loopholes for example aren’t some inherent element of tax codes their built and maintained for the express purpose of being used.
Genuine question: where can I find info on this? The more expensive tomoatos in my super market taste amazing compared to cheap ones. Is better taste more nutritious?
Would growing my own veg in a green house help?
> my gut is there is something missing here with respect to non local control flow (like exception handling, setjmp/longjmp, and fibers)

(Post author.)

Mechanically, what happens is essentially the same as what ms/arm/riscv do: the caller creates a reference and passes it to the callee. The only difference is that the callee is more restricted than it would otherwise have been in what it can do with the memory pointed to by that reference. So I don't think that there can possibly be any implications for non-local control flow.
Hacker News: "People Deserve Privacy"

Also Hacker News: "Look how outrageous it is that these other people want privacy!"
But the conversation is always towards higher taxes rather than fixing enforcement, design, etc.

Edit: I think I hit a nerve.
While you’re probably right on the zeitgeist aspect of this, I think you’re missing the practical aspects of what OP is talking about. We have major vulnerabilities to key infrastructure components. Publicly exposing these helps harden them. Yes 9-11 added a ton of security theater and fear, but it also resulted in armored doors on airplane cockpits. I’d like to see the armored door of the energy infrastructure implemented.
> I have noticed nothing "pejorative" in the language used in the document.

First page after the abstract

"It is this information asymmetry that gives
rise to a host of problems" as opposed to benefits?

This study is fairly balanced but chooses to only focus on illegal tax evasion by the wealthy and corrupt behavior of public officials. Instead of legal tax deferment or avoidance.
Yeah - Rust can, because it also ensures you can't exchange data unsafely between threads, but C++ can't. That's why `std::shared_ptr` has to be thread-safe.
I avoided Harry Potter for a time because in some ways of LeGuin and her critical article "From Elfland to Poughkeepsie", which helped solidify some perspectives I had regarding fantasy, whenever I would see excerpts from Harry Potter I found the language unenticing and mundane.

However I did not give enough weight to the strengths of J.K. Rowling, which are in character and plotting.

LeGuin in my estimation had the full package, but you can't discount Rowling's abilities either.
Token Transit (YC W17) is hiring to improve public transit payment
> What kind of benefits the person is gaining by buying $25MM worth of taxes?

Avoiding guillotines?
California has high electricity rates, but at least in the San Francisco area you don't use very much heating or air conditioning, so you just don't need that much electricity. Winter in Pittsburgh or summer in Arizona is going to cost you a lot more in electricity bills than spending that time in Northern California.

Also, the insanely high rent gives people something else to worry about more than the cost of electricity.
Educate them on what? How to be on top of a pyramid scheme?
> I, the middle class engineer get fucked by the taxes

Fwiw we feel like middle class but we’re really in the top 5% or higher. We’re the rich people these taxes and politicians talk about.

The ultra rich/wealthy are a red herring, there’s only a few 10k of them of them. Only 614 people are billionaires.

7 figure income (salary) puts you in top 0.35% ... that’s 1,120,000 Americans. Not a whole lot.

edit: top 10% starts at $125,000 salary
No, of course they didn't. They lived in the Ice Age. Edible veggies and nutrients were extremely sparse and hard to come by for 1M years. Also wild plants prior to cultivation were not these big beautiful tomatoes, apples, bananas, and cucumbers we see in the grocery stores today. Those plants were selectively bred for thousands of years to produce what you see today.

Grass-eating bison, aurochs, horses, goats, sheep, etc were our primary source of nutrition in the ice age, not to mention mammoths (as well as fish).

And this is evidenced by ancient cave paintings tens of thousands of years old depicting hunts as well as the bone remnants in the caves and homes of ancient humans.
What company had full control over whether the Facebook software is installed on my phone?
> Part of the function of time is to filter out the timeless from the merely timely

This is such a beautiful observation.

As a kid, I wasn't into "old" fantasy and scifi, but recently have started reading them. And I must say, there are a lot of authors with some beautiful foresight, especially Le Guinn: the entire Earthsea Cycle talks about some deep psychological introspection, about how power dynamics can affect different sects of society differently, about the notion of "inherent evil". This stuff is as timeless as human society.
you could instead simply use hton/ntoh and trust the library properly does The Right Thing tm
occasionally some people like to know what they are doing, while the academics and regulators play catch up. instruction manuals are better than studies and leaks decades after the fact.
Opposite effects of anxiety and depressive symptoms on executive function (2013)
Doesn't this hurt forward compatibility to new architectures where there are more registers and it would be more efficient doing it through registers? Seems like automatic choice by the compiler should be default and if explicit control is needed some kind of attribute or something could be used to override the compiler's choice.
> The nutritional composition of today's vegetables in the average supermarket bare little resplendence to the variety of food consumed decades ago in the Mediterranean.

I hate being that guy, but citation needed? Have you measured this (or can you share a study with us that has)? This is a bold claim and definite worth having reinforced.

> Anyone who's compared tomato imported from the Netherlands (the worlds second largest exporter of tomato) to a tomato bought in a farmers market in Italy knows what I mean.

I can attest to the difference in flavor between a fresh Mediterranean product and the basic supermarket version, but i can also attest to the flavor difference between a room temperature quality beer and an ice cold bottle of the cheapest crap imaginable on a beach.
To add $25MM to anti-corruption budgets? Sure, governments are to varying degrees, quite corrupt, but isn't that in part due to the people with leverage and power (aka money)?

Example: Rich people > Shit newspapers > Misinformed populace > Shit political choices > Shit government > Corruption > Rich people now have more money.
The PHP SDK is so bad, https://github.com/async-aws/ exists and one of the stated goals is "One should be able to read the code and follow the logic". https://bref.sh/ which allows using PHP to write AWS Lambda functions easily uses async-aws, for example.
This is an honest question and I would prefer not to start a flame war, but would you replace all the food you eat with nutritional supplements? Or, if not all, then as many as possible? If this is not possible today, is it something that you would want to do in the future?
Links:

https://etke.cc - the website

https://matrix.to/#/#announcements:etke.cc - announcements about upcoming servers updates for subscribers (room is open for joining)

https://matrix.to/#/#discuss:etke.cc - just a chat
The companies that wish to use these would go to KPMG, Deloitte and PwC if it is in the budget, yes. They have offices in every jurisdiction for an unparalleled and holistic view of an ever changing landscape.
I agree. The bullies bully those who are can be portrayed as different. Can be redheads, size, a cleft lip, or even - as in my school - the girl who's parents had plastic flowers in the back yard.

I don't think bullies usually care about race or power, they just want to be respected by their peers - using a distorted definition of respect.
Of course there's also a group that are just psychopaths, but I don't think they care about race either. For them it's just a means to an end.

And finally, yes, racists do exist, I personally think that's passed down from adults.
> I'm as big a booster of good old SQL as anyone, but there's a lot to be said for more targeted time series solutions when it comes to sensors.

https://www.timescale.com/

Sensors aren't really different from any other timeseries data.

> The productivity of such a stack is high, when it comes to getting beautifully rendered, interactive graphs of e.g stacked water levels. And with influxdb flux language, you can write joins that join data from the time series database and the rdbms (for more reference data, like the names and calibration data of individual tanks).

Your productivity being high with a given tech stack does not disqualify an alternative tech stack from having equally high (or much higher) productivity for equally trained users.

> Yes you can do anything with SQL but there's a reason for the presence of dedicated time series databases.

The reason you're describing is "marketing"
1. agreed. Hard to reply in ways that don't partake in and invite further polarizing discussion.

2. Agreed. Expressing it in HSL colorspace makes it pretty clear how close to yellow, and far from the large space of expressible greens. In RGB, yellow is the region near R% = G%, so #b9ca49 is, at a glace, still close to yellow. https://www.w3schools.com/colors/colors_picker.asp?colorhex=....

(4) Accessibility was mentioned and deuteranopia, red-green color blindness, is most common. Perhaps this shade is distinguishable. Accessible defaults are worthwhile.
I love how it just blithely takes on another dependency too. This is all too common in JS dev unfortunately… never implement something yourself if you can take on another useless dependency instead.
For reference, I assume the renewed interest here is driven by the recent speculation about fungus-like organisms on Mars https://twitter.com/i/web/status/1390423317245530124
>also a significant chunk of it goes to the author.

Many (most?) books through publishers don't earn out their advance which is probably low 4 figures in most cases. In practice, writing books is either a hobby or it's a reputational side-gig for you day job whether self-employed or employed by some organization.
That means the punishments aren't heavy enough.
This doesn't seem to make much sense: You're against a policy because someone lied and didn't implement it when they said they would? You can be for taxing the rich and against people who do otherwise simultaneously.
The compiler would be forced to create copies in that case. In general (using my proposed ABI), taking the address of an object will cause this, because it is possible to mutate an object through its address.

It's still a win because 1) you can avoid making copies in many places, and 2) code size decreases because the copy happens one time in the callee rather than many times for every caller.
It looks like if you create it through the Gmail app that is a workaround to not needing a phone number
This book argues actually its western countries like UK, US, and FR that benefit as rulers buy London, Paris or NYC flats in the names of offshore companies.

https://www.amazon.com/Dictators-Without-Borders-Power-Centr...

Personally I think the correct response is to tax things rich people like in those countries. Specifically housing, high end cars etc.

Putting beneficial owners on real estate makes total sense.
Thanks I didn't notice that!
Silly question, but...is your megastick just a large-capacity USB stick?
I woundn't be surprised if it also cures depression. Curse this here land of potato and wheat.
I understood parent's point to be that we obviously can't trust them to do better than this. In any case it seems clear that this is exactly why high tax rates hurt the middle class more than the rich. And everyone know it, and yet it persists.
Unless you are making more than $400,000, the new tax proposals would not affect you.

What is your definition of "middle class"? Someone making $400k is most certainly in the top 1%.

What tax changes have occurred so far in the past few decades that are significantly affecting you? I would genuinely like to know
Although that seems to presume they would put the most honest information on what we could call 'trade secrets' in tax minimization through offshoring in a public document published for the whole world to read.
this! use hton/ntoh and be happy.

nitpick: the 64bit versions are not fully available yet, htonll, ntohll
Epic wants their own walled garden. They aren't anti-walled garden.

Let's not pretend that one greedy billionaire is the good one here.
But similar things can already happen where copy elision is optional. It's one the niches the C++ standard carves out regarding the as-if rule, and adding one for this new purpose is conceivable.
Because poor people don't have time to learn, they have to struggle staying alive. And very often the billionaires business's model is based on poor people making bad financial decisions, like pay day loans or buying products they don't need but are told that they do by the billionaires ad agency.

Also, if the billionaires give a tiny amount of their money to fund schools, people will get educated, earn more money and be able to spend more.
The Mind of Jeff Bezos (2004)
Check the liner notes of your monthly OS updates for sandbox escape and RCE fixes and you’ll understand the prevalence of the problem I’m trying to describe. Couple that with the fact that mobile OS software configurations are relatively highly standardized and very sensitive and valuable personal information is usually stored on mobile devices.
Make tax rate 5% to keep ALL capital in local economy.
And that better than losing 90% of capital away for good.

Significantly reduce or offset personal and capital gain taxes for people who are investing into public projects.

There are many more better ways that tax abusive policies that never work.
Middle class engineers make 7 figure salaries?
I can't recall what I watched, but it was Michael Polan saying that organic food is better for you and also tastes better.

Googling "Michael Poland organic food tastes better" might get you into the right direction.
Capacity is a fixed cost. Society expects five nines, so we build the grid to meet the peak hour of the peak year out of ten years. But the cost to meet that peak is amortized over all of the electricity. And because the per capita use in California is lower than most other states, the fixed cost is amortized across fewer hours. Rooftop solar decreases total retail usage. Afternoon air conditioning increases the peak. Both contribute to increasing retail rates. Importantly, wholesale rates (where the market is deregulated) have not seen the same increase that retail rates have seen.
So a little bit less than they pay right now in the US? The latest CBO data has the average Federal tax rate at around 31% for both the top 1% and top 0.01% cohorts [1].

[1] https://www.cbo.gov/system/files/2020-10/56575-Household-Inc...