skysight-inc/HackerNews huggingface dataset:
> Safari: Despite privacy being a main development focus for the Safari browser, it turned out to be the easiest browser of the four to exploit. Safari doesn’t have scheme flood protection which allows the exploit to easily enumerate all installed applications. The same-origin policy trick as used for the Firefox browser was used here as well.

On iOS (and MacOS too I believe), when developing apps and requesting URL scheme, the developer has to declare every URL scheme they want their app to query in the `LSApplicationQueriesSchemes` array in info.plist of the app. This was added in iOS 9 as part of a similar vulnerability where apps and advertisement SDKs would simply query a list of URL schemes and then identify based on that across multiple apps. Something similar can be done by browsers for websites. MacOS could simply show you a popup with a checkbox list of all URL schemes the site tries to query for with options for "Allow", "Deny" or "Randomize".
I don't have much to add here, but I've been going to Def Con and the other Las Vegas security conferences for a few years. Every year there is a section for infrastructure security (factories, refineries, etc). Its always the smallest section and the least populated. But its simultaneously the "most important" in terms of how much damage can be done from a single attack. Every year I went and was always terrified by all the stuff I saw because all the people hosting booths were like "yeah its dead simple to get in and break things." I feel like so many people could see this coming and there are just no consequences for the companies to incentivize them to do better.
I would still like others in the HN community opinions on this matter but just to add more context to this discussion:

I converted half my Monero to BTC today as I believe BTC has become too legitimate through ETFs and FourFiveHun companies that the Fed will decide it is legaly/beurocraticaly easier to seek out lesser targets such as Alt coins rather than the established safe store of wealth that is BTC....Should I bake a cake?,!?.

This may be the wrong move but truth be told if there were no lockdowns and travel bans, my entire crypto portfolio would amount to less than a vacation to Freemont Steet! Viva La Dogecoin?
Because I don't think a general purpose computing device is inherently family friendly. No more than I think any given day commuting around town is.
I don't get the point. Plywood isn't exactly light and the fuel used to launch it is not renewable.
14.1 on an M1 MBP.
Automated AI programming is the future. Eventually in Soviet Russia ransomware will encrypt you.
Rail was sold by the city as a way to promote growth there- aside from hooking up the airport, it was the only reason to run rail at all.
Your statement and the headline are grammatically equivalent (minus your comma). However, the sentence is strange because “by” implies a causation that is not supported between the supposed cause and the supposed effect. The Neanderthals were brought to the cave to be eaten; it’s almost but not quite backwards.

My guess is what the author means is, “By preying upon...” which would be correct because dragging them to the cave is part of their predation. “By eating them” implies they were eaten and then, because of the eating, wound up in the cave (say through defecation or inside the stomachs of dead hyenas).
That explains why this law was introduced, but not the general policy of requiring canadian content exists.
A Fossil Squid Eating a Crustacean Being Eaten by a Shark
I built an ecommerce website recently with a terminal of sorts. You can list and add products to your cart using commands. Alas the platform it's built on (Shopify) doesn't have an API for checking out/taking payments otherwise I'd probably have built an installable CLI as a bit of fun.
There's a chance that it's actually not that huge of a deal? We like to be dramatic here like the sky is falling.
The intensity of the light is reduced because the aperture is the same diameter (50/3.4 = 25/1.7), but the light has to cover four times the area. To get the same exposure with double the f number and the same shutter speed will require four times the ISO.

> what determines in the same scene how much light is received by the sensor depends on the size of the aperture in milimiters

That's true, but the amount of light is not the intensity of light.
How History’s Deadliest Bombing Campaign Created Today’s Crisis in Korea (2017)
The issue is that a tumbler doesn't make the dirty money go away, quite the opposite; it gives a bunch of other people little bits of dirty money. If I were a non-criminal, or even a smaller-time criminal, it wouldn't be in my best interests to use a tumbler that might give me this dirty money.
So when I do it I’m flood proofing my house, when the Cambodians do it they’re “buying dirt“?
> it won't pass the first amendment test.

I do not think it applies.
I don't like it but it really is just the govt adapting to the new connected landscape.
Yes, but Tesla’s market cap already assumes all those things happened...it’s worth 1/4 of Apple already, but hasn’t actually done those Apple-type things!
Ironically, none of the links about substack drama link to substacks, they all go to twitter or to legacy publications. And of course the article itself is ironic in this sense. It's an article recounting drama for atlantic readers, so that atlantic readers can look down on substack readers for being interested in drama.
The point is that appraisals appear not to be based on information, but on gut instinct.

I've found no kind of federal regulation, no industry/trade/lobbying groups, only state-based certification bodies perfectly positioned for corruption and lack of checks on their work.

This would seem to have implications for every U.S. property owner.
What is free will anyway? Isn't it free will if the decisions you make is a result of the structure of your brain built up by what you've learned in life? Isn't that the free will you're looking for? If not, what else could it be?
It's never been possible to post anything onto almost any website. It's always been possible to post anything to any website that allows user uploaded content, and it's always been necessary for moderators to moderate that content.

"Web 2.0" changed nothing in that regard except making asynchronous requests possible with AJAX, allowing sites to become more complex and allow for realtime updating. But yeah, people have been posting gore, porn and CP everywhere since the dark ages.
The Local Group Policy setting in the link only affects Windows Store apps:

"This policy setting lets you control whether Windows Store apps can open URIs using the default desktop app for a URI scheme. Because desktop apps run at a higher integrity level than Windows Store apps, there is a risk that a URI scheme launched by a Windows Store app might compromise the system by launching a desktop app."

I haven't tried the registry setting, maybe that will also block normal desktop applications? Edit: it looks like the BlockProtocolElevation setting also only affects Windows Store apps.
A lot of people these days are using 'critical race theory' to mean 'any discussion of race and racism', and sometimes they don't even insist on the 'race and racism' part.
Pretty easy, even in hard mode, and not due to any knowledge of the subject matter. I'm 15 - 0 so far.

I kept seeing certain types of grammatical error, such as constructs like "... and foo, despite foo, so..." or "with foo, but not foo..." where foo is the exact same word or phase appearing twice in a sentence.

I also kept seeing sentences with two clauses that should have agreed in number or tense but did not.
Not necessarily. Depending on the country, stores can set their return policy when it comes to non-defective items. I know several major retailers that refuse returns on headphones if they have been opened due to hygiene issues. If the headphones are defective or unopened, then they will accept returns. OP returning a working toothbrush may fall under the same scenario.
>> There's little/no penalty to jobhopping frequently in this field

First point, there absolutely is. I review resumes, if someone has a history of moving on after a year, I assume they are going to move on after a year again, and since it typically takes that long for someone to be truly effective in the environments I have worked in, that's a hard no. Nothing personal, but no. With a job market as good as today's that might not be a huge penalty, but it's there.

Which leads us to the second point, people who are doing this are playing a game of musical chairs. If you have been in the software dev world for a few decades, you have been through some rough job markets and you know another one is coming, you don't know exactly when. You have seen people much smarter and more capable than you walked out the door, and not be able to get a job for years. You have seen half the company you work in get walked out the door suddenly one morning. And when that job market hits, the selection standards of employers suddenly gets much higher.

Just a friendly warning in case this is your first rodeo.
Or a dev testing the chaos monkey...
>> The state is rarely capable of enforcing the law on more than a small minority of lawbreakers because enforcing the law is expensive.

This makes no difference because nobody wants to play Russian roulette with regards to risking whether the state will come after them.

Indeed, the state’s power comes from this threat of force application.
Has anyone attempted to find this transaction on the blockchain?
Thanks, that clears it up.
Seems like a truism when better is evaluated as college graduation rates. Rich people can afford to send Van Wilder to school for 8 years no problem. If you are working poor and lose a scholarship or something happens to your family, may not be able to finish regardless of ability.
Thanks for this! I suddenly have a ton of free time, and I think I'll dive into this.
> I know "dataflow" is kind of a generic name

Well that's a bummer. And here I thought I was being very unique :-)
>Users are dumb thats why. We literally have to make 4-5 shortcuts with iexpore.exe website.net and another one with chrome.exe website2.net and rename them accordingly.

Edge in Enterprise Mode solves this as you provide edge with a list of sites that need IE, then Edge will automatically open those sites in IE Tab (or in previous versions of Edge, redirect the user automatically to IE)
>He thinks it's easier to make Mars habitable than it is to keep the Earth habitable.

It probably is easier to survive long term on Mars than Earth because Mars has a very thin atmosphere. Earth could pull a Venus. Earth life on Mars requires underground small sealed compartments with radiation shielding which is a more survivable architecture than one big shared ecosystem.
> Auth providers cant help you because the passwords are hashed... You need the same algo or you cant authenticate using the data they have.

Seeing as you have that it becomes a non-issue
> paying the ransom puts their shareholders at risk of serious sanctions and indictment from the US Dept. of the Treasury

This (almost certainly) isn't true. It may put management at risk of sanctions, but shareholders are shielded by the corporate veil.

I say "almost certainly" because in some cases prosecutors can go after shareholders, but this is limited to cases where a specific shareholder is involved in decision making.

https://en.wikipedia.org/wiki/Piercing_the_corporate_veil#Un...
> You also have none of the other tested applications; I presume most of them have Word.

What makes you assume I do not have Office installed? Instead of, say, considering the possibility that the fingerprinting may not be that good.
How the Microsoft Mixed Reality Studios explored immersive interactions
"The structure of the HIV capsid is analysed by cryo-electron microscopy and cryo-electron microscopy at cryo-electron-microscopy resolution."

It really does like to repeat itself.
> The difference in actual value between the two for me at least is much smaller than the difference in numerical value.

That was exactly one of the reasons why I showed that example.

While this may be different for a gang that has to split the money N ways, the "bird in the hand" might still be worth the two (or ten) in the bush, due to this or other factors.
Grossly irresponsible? Sure. Unbelievable? Not to anyone who's ever seen a Musk tweet.
Its refreshing to the BB actually continue the investigation and share data with the public regarding the incident.

I hope to see a blog post on HN sharing what they've done and concluded from their review of 3rd party JS. Hopefully the conclusion is that its best to just purge FB from the site entirely.
You can probably keep retractable claws sharper? Easier too sneack without hard claws touching ground?
A 16 or 17 inch version would be perfect...bigger battery and more space for modules.
Did Colonial pay a ransom, as Bloomberg claims? Or is it another tall tale?
Show+HN:+I+made+a+platform+to+publish+my+Google+Docs+files+as+blogs
It's a bit embarrassing to have this happen, but I can't throw stones about configuration causing issues like this.

Addressing it publicly like this (identifying exactly what was shared, who was impacted etc) builds a lot of trust. No denial or fobbing off, just clear communication.
Wow, it didn't work at all on my desktop. It thinks I have 23 apps from its list installed, on both Firefox and Chrome. Pretty funny seeing that on a Linux box running CentOS 7. Even better, it detects a different app on each as the only one missing: on Firefox it says I don't have Skype installed, while on Chrome it says I don't have Hotspot Shield installed.
> - Take credit for your work (use pronouns I and Me when talking about your work, not We) and do not allow others to take credit for your work

> - If it's a teamwork situation with other people on your level, don't do most of the work, because the credit will end up being split 50/50 in the eyes of the bosses even if you did most of it

These are truly awful pieces of advice, not just because they’re adversarial toward your team, but also because they undermine most or all of the good in the other points.

Doing good work includes supporting the people you work with, in fact sometimes that’s the most important part. And just from a basic psychology perspective, no one will want to speak well of you behind your back if you strategically refuse to speak well of them in their presence.
>To me it feels deeply wrong to use Mars as some sort of testing ground when it is currently pristine.

Huh? It's essentially dead and not from the 'big bad human'. I don't consider a lifeless sand planet pristine and apparently neither do you since you've concluded Earth would be ruined if it got to the point of needing terraforming.

Things will continue dying and suffering regardless of whether we involve ourselves in them. Your misanthropic argument just seems strange to me and you falsely appear to believe that everything will be fine/better without us.

I would conclude the opposite and prefer improvement over just giving up.
I learned Python on a whim after seeing a Udacity course on Python posted here in 2012. In retrospect, it was a very good life decision. Godspeed.
Why Podcasting Is Still an Untapped Market Opportunity
I don't see what's dubious about it. There doesn't seem to be any evidence the quote was fabricated, and the effects of US drug policy are apparent to anyone who lifts their head out of the sand.

You don't think Nixon could have disliked blacks, hippies, and drugs, and just found a convenient way to tie them all together while at the same time being able to say "think of the children?" Nixon was many things, but dumb and politically naive are not among them.
The king of them all, of course, is the Radio Shack TRS-80 PC-2 pocket computer. Much cooler than the Sharp ones because Radio Shack.
unless this theoretical IOS EGS is working on a universal Windows to IOS transpiler to deploy their games on, I feel the burden is on Apple to prove that itch.IO has an interest of hosting adult content on IOS, not Epic.

As for the answer to that; Itch developers for IOS tend to just link to the IOS store for their app, so the interest isn't there (and Apple's control is).
Lots of comments about whether or not the demo works consistently between browsers, but regardless, it's a cool attack vector, major props to the authors. Honestly surprised the Tor browser didn't just disable protocol handlers outright beforehand, seems like a vulnerability waiting to happen when you're that paranoid.

I'm a bit confused about why so many applications have bothered to create custom protocol handlers. I can see the benefit for something like Spotify, you click a link in your browser and it takes you to the song you want in the Spotify application. But is the NordVPN application really so complex that they can't just say, "hey, open Nord and click this"? Just seems like an unnecessary UX decision. Unless there's something I'm not seeing?
It is a 40 mile total run, making a number of stops along the way. The more people it has to serve, the less convenient it becomes.

The other line (running from downtown to the airport) was also a total of 1 hour 30ish minutes including bus from my house to the terminal, then rail down to the airport. It otherwise was a 30ish minute drive, tops, and driving is what almost everyone chose to do if they had the car to do so.
If my base salary is competitive, and I get vesting grants on top of that, then I don't see it as a bad thing.

If the vesting grants are an excuse to underpay me, then that is a bad thing.

An employer's perspective is different to mine, and some companies cannot compete by offering grants. This is probably what this article is really about.
I don’t think this particular genie can be kept in the out as easily as gas
Why was the TE removed from the syn1.0 genome?
Canadian here. While I support these initiatives in general, 40% is way excessive. Given that Canada is 10x smaller than US, 20% would be a nice handicap. Execution, as others pointed out, is a bit sloppy too. I would prefer to listen to lesser known and varied Canadian artists, like Faouzia or Coeur de Pirate, but no! - let’s roll out the same Drake, Bieber, and Weeknd over and over again.
They couldn't kill each other easier?
Including percentages for startup stock grants is tricky. You have things like common/preferred stock, liquidation preferences, subsequent rounds causing dilution, etc. that the average employee doesn't usually understand. At best it's very confusing and at worst you have actual legal liability issues.

And I would never want my employees to value their stock based on our 409a price, we (like all startups) do all we can to keep that number as low as possible!
> for example, the motion of a limb to the activity of the brain does not stay consistent

That makes sense tho, because the motion of your limbs are controlled in part by neurons (and other things) that are not in your brain. Muscle memory, for example, isn't just a metaphor, you literally have neurons in your foot that have memory which allows you to react faster than it takes for signals to reach your brain, eg if you step on a bed of hot coals.

> no one has found where the will expresses itself in the brain

Why does there have to be one place? Your "will" is the combination of interactions between not only all parts of your brain, but all parts of your body.

> nowhere where the various senses are assimilated and correlated into a cohesive perception.

This is the part that gets me. I have a cohesive cognitive experience where I can sense and think many things simultaneously. I don't understand any reductionist explanation for the existence of my experience. It seems like an impossible thing for a collections of atoms in the brain to create. That hard problem of consciousness is really and truely hard.

However, "free will" to me seems easy by comparison. Your brain (and body) acts based on its structure. You are the structure, and the structure determines what you decide to do. You have some starting conditions, you use those starting conditions to decide to do things (go to school, find a job, cross the street) and at the end of it, you've changed the structure of your brain such that you'll make different decisions now. I think that's as free as free will gets really, despite the fact that we may live in a deterministic universe.
The person you're replying to is the author of the article
Relative to like 99% of writing by phycists.
'Biggest data grab' in NHS history
Yes, it's a very different experience running Android with Amazon's setup on a Fire Device than on with Google Play Services, even if it's binary compatible.
> I'm not sure what you'd expect? They disagree or are sceptical, do you expect them to talk up global warming? That would be strange.

I expect them to deny or express skepticism about it. Not deflect to a different topic.

The logical response to e.g. "do you care about global warming? What should we do about it?" if you are genuinely skeptical would be something like "I'm not convinced it's a problem we need to address", not "of course I care about the environment! I love clean air and water!" as if the question had been about air pollution or water delivery...
The Norflex-project (English sub)
I’m not sure why that attitude would encourage cheating… could you say more?

There’s even another piece to it, and that’s the moral and ethical side of it. When one takes a class or attends university, they agree to that class’ or university’s ethics code and rules. They agree to play in that sandbox by signing up and paying tuition. Cheating is saying that the rules don’t apply to them / putting their own value system ahead of the organization’s for some reason (it’s easier, they are lazy, they think the rules are stupid, doesn’t really matter). What matters is that they agreed to do one thing and we’re disingenuous.

When people become doctors, lawyers, (licensed) investment professionals, or engineers, there are rules that apply in all of those fields. I don’t want to work with someone who agrees to work in those fields but just flaunts the rules when they feel there is a personal benefit in doing so, even at the detriment of others. And one can argue “well I’d follow those rules”, but really? Would they? When push came to shove before and they didn’t see personal benefit, they clearly didn’t follow the rules that they previously agreed to.
I don't think you understand how dirt works. Especially when it gets rained on.
Love your work Oliver! Keep on crushing it
Musk has gained more from this market than any other human alive. From the over valuations to the cult of personality, he will be the poster for the 2010/2020s financial markets. It would be dumb for him not to get involved and influence in everything that is ‘now’. He has been on SNL, made songs with his musician girlfriend, has been in movies, got involved in celebrity dating drama, created companies for meme material, got in legal trouble for running his mouth, influences cryptos with tweets, moved to Austin, runs companies in the green energy space, heavy into AI.

I am surprised he hasn’t done anything with - well what is left?
Seems essentially inevitable to me. Just like AI can play better chess than humans it’ll also fly combat planes better. Dramatically so. It’s only a matter of time till A) they do get much better And B) someone can’t resist the allure
> and then sold at a huge profit

Are you sure he has sold?
Stop being pedantic: https://en.wikipedia.org/wiki/Section_2_of_the_Canadian_Char...

Edit because I'm apparently only allowed like 5 comments a day: Refusing to spend 30 seconds to find out that "yes, there is a roughly equivalent right to free speech in Canada" is just lazy, if you didn't know that, or pedantic if you did. Which would you rather be?