skysight-inc/HackerNews huggingface dataset:
Sure, that's what the article is claiming, but I don't see how Cellebrite is "government" or "police".
‘Covid Zero’ Havens Find Reopening Harder Than Taming Virus
From what I know there is no scientific proof of this practice because there has been no investigation to measure its effects. The closest to a test of dopamine fasting is to look at other practices that reduce dopamine, like meditation and mindfulness. These practices aim to escape the rat race of finding the next gratification.

Mediation and mindfulness are effective. They imply other techniques and learnings besides dopamine fasting. So we cannot know how much of their success comes from dopamine fasting, and how much from the other aspects. However their success is a potential indication that reducing dopamine significantly for a limited period of time can have significant benefits.

Besides this, it makes sense. Biologically if cellular structures can develop tolerance for something, the absences of that stimuli increases sensitivity.
And those things are outweighed by things JavaScript got so incredibly wrong... like === vs == and some of the weirdness when you GASP use == as any other language would do.

JS is like PHP... only a popular language because it's been around a long time and it's easy to get started. Otherwise, there are SOOO many better programming language out that the ONLY reason JS still has traction is it became the "default" web language.
It seems fairly unlikely to me at this point. Instead, you'll be told to do something like this

[...foo.filter(x => x % 2 === 0)]
rather than
[foo | where x % 2 === 0]
Sure, but their starting stance could still change from day to day or even pitch to pitch, couldn't it? Fixing the strike zone at the start of the season seems like a rule change to me.
I worked with a guy at a startup who wrote and designed a Mac hacking system that exploited Firewire because it can read memory directly. Firewire is basically a security nightmare like several other peripheral interfaces (Wikipedia says "PCI Express, PC Card, ExpressCard, FireWire [yeap], PCI, and PCI-X")

Thunderbolt 4 allegedly includes mitigations to prevent arbitrary DMA transactions and Thunderspy.

https://en.wikipedia.org/wiki/Thunderbolt_(interface)#Vulner...

Btw, partial list of USB attacks:

https://www.bleepingcomputer.com/news/security/heres-a-list-...

https://www.sciencedirect.com/science/article/pii/S016740481...
Reasonable doubt matters to a judge and/or a jury. It is quite unclear that such vulnerabilities will raise reasonable doubt. For this to happen, the defense would need to demonstrate that files were actually damaged or modified.

There is other forensic software used for desktops and servers that is very widely used in court cases. There are significant and substantial vulnerabilities there: https://www.cvedetails.com/vulnerability-list/vendor_id-3015...

This type of issue is not new with signal.
The article says that "it should be pretty straightforward for law enforcement to disprove an accusation about the Cellebrite machine", because they can perform the same extraction with another vendor's machine and compare the results.

But if some app actually decided to use this hack, then wouldn't it be likely that in addition to modifying the contents of the data dump it would also modify the on-device data? In that case it wouldn't matter if the other vendors have vulnerabilities, since the device itself was already compromised.
Is there a way to further damage its profitability and force it to release 0-day in a legal way?
The most interesting version of this exploit (to me) would be one that wiped the device being examined.

Edit: changed disruptive to interesting. There could be many many more disruptive versions...
That sounds pretty ideal. Where do you work? Has this scaled to a large size?
Even warrants based on bad information, as long as the people authorizing the warrant thought the information was true, it's not enough to make the warrant illegal. As long as they thought the warrant was legal at the time, the evidence gathered won't be excluded.

https://en.wikipedia.org/wiki/Good-faith_exception?wprov=sfl...
You are entitled to your opinion, sir. Have a nice day.
> Since 2000, mainstream FPGA programming has been right around the corner.

As an avid technologist I dabble in everything from electronics to assembler. But, every time I try dipping my toe into FPGA programming I quickly retreat!

The tools are too complex and the whole process has a learning curve that far out weigh using a stock CPU/SoC.
FsAutoComplete (F# LSP server) 0.46 Released
There's no such thing as a "permanent memory," each time you relive it it's liable to get warped by your thoughts at the moment. Decades of thinking "I must have done something to deserve this" are likely to make the memory of his role in events worse.
The chip shortage could lead to an era of hardware innovation
Much better, thanks!

If you want everything to work as the same monospaced font, you're gonna need to spend some time playing with bold, and more importantly, playing with white space.
In the U.S., warrants only require "probable cause"[1], not evidence "beyond a reasonable doubt". The fact that there's a tiny probability that some data could have been corrupted probably wouldn't affect the validity of a warrant.

Cops can get warrants based on much less reliable sources, such as a statement from a witness or an informant.

[1] https://en.wikipedia.org/wiki/Probable_cause
If anyone from MLB or BAM reads HN and is in this thread ...

Do Not Do This.

Here's why:

Right now, all of the criticism about the calls of balls and strikes - criticism that might seem unique for this season but isn't - is directed at individual umps. You do this, and build an automation tool to replace them, and you've just redirected the entire fan rage from an ump who makes a bad call or two at a critical point in the game and aimed it at the institution of baseball.

While you may feel like this season has seen a lot of criticism of balls and strike calls, it only seems that way because of, well, the internet. You may also think "if we just make this thing uniform, with math and automation, then it really will be fair", but it won't be. This is important to note because, again, if you take the human element out of this and replace it with a machine you are signing yourself up for constant criticism and risk. Moreover, you are introducing a new kind of risk into the game (an attack surface that hasn't existed before). Think of the Houston Trash Can Scandal, but instead of an analog signal based on an auditory input, it's some paid bad actor who manipulates the system making calls at critical points in the game. I hesitate to use the word "hack" but is it really that outside the realm of possibility? With a World Series on the line, Houston did what they did out in the open. You don't think someone would lose their scruples and try to do it on the backend if this existed?

Third, and this may be a bit "old man yells at cloud", but if you do this you are removing one of the best parts of the game. The human element, where a reasonable person can watch a ball go across the plate, and it's just outside that little box the broadcast booth puts on, the ump calls strike three, and you as a fan let it go because, ya know what, "ehh he coulda hit that I think".
https://github.com/enjoy-digital/litex
> If it were `export val="$( ... )"` you'd need the quotes again.

No. That's also recognized as an assignment by bash[1]:

> PARAMETERS... A variable may be assigned to by a statement of the form `name=[value]`... Word splitting is not performed... Assignment statements may also appear as arguments to the alias, declare, typeset, export, readonly, and local builtin commands (declaration commands).

[1] https://www.gnu.org/software/bash/manual/bash.html#Shell-Par...
"Higher taxes" is a very broad term and so the original article can be right that wealthy people support higher taxes and your "...opposed to higher taxes" observation can also be true.

The incentive for wealthy people is to avoid changes to the status quo. So billionaires tacitly benefit from stiff taxes on millionaires or new billionaires, because then they can't accumulate wealth so easily. Millionaires benefit from stiff taxes on the middle classes and new millionaires because then the competition can't climb out of the crab basket.

If the taxes were going to reshuffle the social order I suspect there'd be a lot less support from very wealthy people. It is a very rare soul who smiles when faced with an actual decline in their social standing.
No they wouldnt
Not OP but what I think they struggled with is fixing warnings.
JS projects are like a poorly built house, things are constantly deteriorating and need constant maintenance.
Ask HN: What are some great examples of well-written, clean, and minimal code?
Looking for some inspiration to improve my programming skills, figured looking at clever ways people approach problems might be a good start
> It hasn’t ever happened once in 70 years.

do you expect the government to publish photographs or something from some of the most important sites of national defense?
Yes, I agree LEO with authorization to seize and search someone’s property (with a warrant or similar due process) is authorized to utilize a forensics tool chain that adheres to application security best practices (without which taints chain of custody). None of my comments should be construed as supporting the evasion of a legal law enforcement act.

I take issue with LEO overreach when it occurs and vendors shoveling garbage (paid for with tax dollars) to the justice system.
https://archive.is/einOX
Watch the Moon in 3D (Red/Blue glasses required)
The file doesn't have to damage anything owned by LE/private companies. It could protect files on the device from unauthorized tampering by wiping or encrypting files when it's executed.
Waymo has never claimed completely general AI. Indeed, no serious researcher or company claims such a thing. The term "AI" has gained currency in the last few years but it's just marketing or shorthand for machine learn usually based on deep neural networks.

Intelligent route planning to compensate for the deficits of our current perception tech stack is a good thing and allows greater reliability.

This is what Waymo is doing and has done from the start. But this approach itself has significant limitations as the video shows. You have to automate the route planning process also, remember.
Reminds me of this talk https://youtu.be/gfh-VCTwMw8
No but if I have to watch over the guy and investigate what he's supposed to be doing I might as well do it myself, then it's not worth the money.
Is lucid chart integrated in google documents? (as in anybody editing the document can edit the chart)
The issue is that the Celebrite device may have scanned someone else's device that contained a malicious file, meaning that any forensic evidence collected for your device is questionable.

But IMHO (IANAL) this won't actually have an impact -- the defense would need to have some evidence that the particular Celebrite machine was hacked and that this had an impact on the data taken from that particular device. "It could've been hacked" is purely speculative and isn't nearly enough to get evidence thrown out. I mean, courts routinely accept phone screenshots as evidence -- "it could be a fake screenshot" is much more likely thing to happen, and yet you'd still need to provide evidence that the screenshot might be fake.

Not to mention that the bar for warrants is even lower -- you only need "probable cause" in the US.
The Muller investigation was able to produce no evidence of a criminal conspiracy or collusion. Doesn't it strike you that the response was a bit overblown then, in that case, knowing now that the whole time it was all going on, nobody had any actual evidence?
this is my opinion but you pick a library that clings onto an outdated programming model (markup-centric, or string-based programming as I'd like to call it), to judge modern javascript.
However, in many jurisdictions, a trap is only a trap if it is hidden.

For example, you can have barbed or razor-wire fences, its obviously barbed, its your fault if you climb up it and get impaled.

They advertised this, it's not hidden, so even if trap laws governed it (which they don't because its not hurting a person), it's not a trap.
Free IPV Adult Netflix Sports All World Fast Servers of the Day 16-5-2021
"That’s like half of what the government spends per student in regular public schools"

I had never heard of Jiechu until just now, but you could achieve this 50% cost reduction simply by having class sizes closer to those of China's high schools (~48 per class) than those in the US (~24 per class).

This is before you consider other potential cost savings, e.g.

- contract teachers can be cheaper than unionized employees

- no costly central bureaucracy
Web hooks are nothing new in other languages, they're just built-in functions that do things that were previously cumbersome to code yourself. That's only revolutionary to React. PHP is a great example of built-in functions, yet I've heard React fanboys complain that PHP has too many built-in functions (which is a really odd thing to complain about).
> Cellebrite’s products are part of the industry of “mobile device forensics” tools. “The mobile forensics process aims to recover digital evidence or relevant data from a mobile device in a way that will preserve the evidence in a forensically sound condition,” using accepted methods, so that it can later be presented in court.

>“For example, by including a specially formatted but otherwise innocuous file in an app on a device that is then scanned by Cellebrite, it’s possible to execute code that modifies not just the Cellebrite report being created in that scan, but also all previous and future generated Cellebrite reports from all previously scanned devices and all future scanned devices in any arbitrary way (inserting or removing text, email, photos, contacts, files, or any other data), with no detectable timestamp changes or checksum failures. This could even be done at random, and would seriously call the data integrity of Cellebrite’s reports into question."

A tool with such a vulnerability, one that can affect past, present, and future uses of it, absolutely calls into question the "forensically sound condition" of the data it produces. One wouldn't even need to argue that they or the person they are representing was the one who could have corrupted the data. It could have been any previous device that was scanned.
FPGA vendors “don't get it”
I am using a variety of FPGA devices, both old and new.

The hardest part of using the FPGA is getting and installing the vendor tools.

I have several FPGAs sitting around because the vendor tool is unavailable. For example, Lattice has a tool "ICEcube". When I navigate to the page and try to download it I am forced to set up an account. From the terms of service it appears that they want to make sure you don't work for the competition. Sigh.

When I tried to set up an account they said they sent me a "confirmation email". The email never arrived (and, yes, I checked that the email address was correct).

When I went back to the site and tried to download the tool I was told to reply to the confirmation email.

When I tried all the options, such as "forgot password", "create new account", etc. all paths lead back to "confirm email".

Thus I can't get the vendor tool.

It's not only Lattice. I have a DE10-nano from Intel (nee Altera). That requires a HUGE download called Quartus. Unfortunately the version of Quartus I downloaded (there are many) does NOT support the DE10-nano. How can you make a multi-gigabyte, hours long, HUGE download and not support your own products?

FPGA vendors are so busy fighting among themselves for market share they are making it very difficult to use their hardware. Somebody needs to fire their whole sales and marketing teams and use the money they save to "buy a clue". Sure, the software is "free" to download but the software is "expensive" in time, energy, and frustration.

Some of the Lattice parts have been reverse engineered with open source so I'm tending to use them for my tasks.
If you claimed JavaScript was fast 10 years ago people would also laugh in your face. Todays JS is 10 times or more faster, thanks to JIT.
Try reading your language's standard library.

You don't want to be clever when writing code. Clever is hard to read. You want to be readable.
If/when I am appointed Lord Emperor, I would absolutely enforce the Computer Fraud and Abuse Act against the officers of such companies. Unless an audit could prove that every single one of their customers was a legitimate law enforcement organization, I’d go with the default assumption that they’re black hat hackers who happen to have a couple of legal sales. Let them prove otherwise.

Note that this is one of many, many reasons it’s unlikely that I’ll ever be appointed Lord Emperor.
Anyone else most surprised by the inclusion of reduceRight?
Technically you're right, but the differences would be so small that I can't imagine they would materially change the zone. The mechanics of a batting stance and swing aren't something you really want to screw around with once you've got them figured out.

I haven't played organized baseball in 10 years, but having played for a long time before that my body still automatically does its thing when I pick up a bat.
If the primary evidence relied off of Cellebrite at all it should be doubted, period. The exploits involved weren't difficult to develop, and it is reasonable to assume are now rapidly spreading as independent implementations to nefarious groups, foreign intelligence etc. if they weren't already there.
> Cellebrite extractions are done under color of law

Until they find they're in the wrong house. Or that a warrant is invalid.
It is a pity that none of the replies to this comment has actually clarified your doubts...

Assuming the absence of `const_cast`, C++'s `const` ensures that a data of the particular type doesn't get modified. That's it. Rust on the other hand, tracks and restricts aliasing. This means you can't get both a constant and non-constant reference to an object or anything owned by it (more precisely anything transitively reachable from it). This is helpful in preventing issues with invalid pointers (like iterator invalidation). For instance, if you have already borrowed an iterator (which is essentially a reference) you can't issue mutable operations on the vector (issuing mutable operations entails a mutable borrow), and that could potentially reallocate the backing memory of the vector. This property is also useful for preventing multiple writes to the same location in a multi-threaded application, making programs adhere to the single-writer principle by-construction.

The downsides are that you might sometimes need to contort your code or your program architecture or perform mental/type gymnastics to write some trivially safe code or even use unsafe (or else lose performance) to satisfy the borrow checker.
Older men are also more likely to quit dating pool completely. At some point drive is gone, and there are better things to do, like fishing.
HTML then CSS then JavaScript. I've taught all three and people struggle more in a different order. HTML is the skeletal architecture, CSS is just styling, then JavaScript is behavior. Those three things in that order are like orders of "need". You need HTML first to have a webpage structure, then styling to make it easy to understand its elements, then the behavior is more complex than both. I don't know why I see people put JS learning before CSS... JS is much more complex than CSS, and a much different change in paradigm from HTML than CSS is.
You're not supposed to sympathize with Cellebrite, according to the article.

> If you work at Cellebrite, on the other hand: get down off your high horse, stop it with the “we’re the good guys” shtick, quit selling to authoritarian governments, and for god’s sake, fix your shit.

> Giving defense attorneys more ammo to push back harder against the use of Cellebrite devices against their clients is Good and Right and Just. The general point that Moxie made — Cellebrite’s tools are buggy A.F. and can be exploited in ways that undermine the reliability of their reports and extractions as evidence, which is the entire point of their existence — is actually more important than the specifics of this exploit

You're kind of missing the point of the article. The article agrees with you that Signal's hack was a net positive and Cellebrite is not a good company.
Yikes, is this really the expected way to do things in Java? That sounds frustratingly verbose. But I guess that is expected with Java.
There is a recall effort for SF school board https://www.recallsfschoolboard.org/
> I think subject tests (like AP exams, or SAT II subject tests ) are much better indicators of college preparedness and success. It tests mastery in a particular subject (Spanish, chemistry, biology, calculus, ...). It shows that students can learn relevant material, and the content is useful to study anyway.

But subject tests are not actually required right? (I honestly don't know. I just looked it up and it appeared they were not.) Should they be required going forward?

> The SATs try to broadly test psychometric abilities. You have to do silly tasks like pick the best analogy. So you spend time practicing tasks that measure no particular mastery of anything. Solving crossword puzzles might be a better psychometric measure (it would also test vocabulary and it's more fun, but it would make the exam look stupid).

Do you know that the tests don't really correlate to future success or are you speculating here? I don't take issue with your claim that e.g. analogies are silly, but you seem to be saying that they don't really pick up any useful signal. Do you know that to be true?

> The math portion only tests up to Algebra 2. Many students have taken math beyond Algebra 2, so it doesn't even show colleges what their actual math ability is.

This is more of an argument for the SAT's math section to be made more difficult.

> I think grades are more relevant because they show how students performed across multiple subjects over a longer period of time. Grades are more subjective and possibly gameable. But I don't think ability to answer psychometric questions is a better metric than grades.

I see grades and the SATs as simply being _different_. Neither is strictly better than the other because they aren't really showing the same thing. In that case I see no reason they can't coexist.
Looks like no.

Here is the one reference to `toolkit.tabbox.switchByScrolling`: https://searchfox.org/mozilla-central/source/toolkit/content... You can see here that the second param to advanceSelectedTab is false

This param controls wrapping according to the definition: https://searchfox.org/mozilla-central/source/toolkit/content...

To confirm, we can see that the shift+tab/shift+ctrl+tab (which wraps) definition passes that param as true: https://searchfox.org/mozilla-central/source/toolkit/content...

Maybe you can file a bug to add another bool pref instead of hardcoding false?
Seems like this article was written by an AI… and not a very good one at that.
Like In France you have diversity of wine and cheese, diversity of beer in Germany, not to mention Poland being so kiełbasa-diverse? Yep, diversity, diversity, diversity...
As someone who first learned to code with AS2/3, I agree it was quite disorienting when I first tried to make a few games with HTML5/JS.

I do think you're not giving TypeScript enough credit -- I felt right at home the first time I used TS, and the type system is much more sophisticated than anything ActionScript ever had. As long as you're of the "favor composition over inheritance" mindset, which I'd argue is better, even for games, TypeScript is a fantastic spiritual successor to ActionScript!

Unfortunately there's no TypeScript-based game engine that makes it so easy to combine code with animations / sound. Nothing has really filled the void that Flash left behind.