skysight-inc/HackerNews huggingface dataset:
You forgot to read the sentence before that

> Prior to their release, the source code of both the new ProtonMail and Proton Calendar underwent an extensive security audit. We are happy to announce the final report was overwhelmingly positive, and the audit uncovered no major issues or security vulnerabilities.

This report was done before the release of the new software, and important issues fixed. What they said was accurate given there was only one medium severity finding, and no highs or critical. For example, the site now returns a CSP preventing inline JS so this wouldn't work anymore even if they didn't fix the underlying XSS.

The fact that exploiting this required the user to intentionally right click and show the image in a new tab (since it already renders it inline w/o xss) is why it was categorized that way since it's unlikely someone would do this by default.

Most companies never disclose anything like this, so them disclosing there was a vulnerability found in a report they paid for and then published isn't really a strike against them and I'm fine with this language. It's a little marketing speak but I don't agree it's inaccurate for them to say so
Agreed. I did not understand how terrible it is until I tried R's ggplot2.
I remember listening to a guy on Business Radio, who was operating in this space. His business model was basically making sure that drones can't be easily disabled, jammed and so on along with the other side of the coin where 'bad guy' ( I so hate that phrase ) drones are contained quickly.

That was two years ago. I assume this is part of the reason some drone regulations were implemented.
Ages? In my case takes less than 5 seconds. It is fairly easy as it is just a Linux host and they are dirty cheap. I don't really agree with you on that.
A house in Boulder costs a million dollars nowadays! Maybe cheaper than San Francisco, but Boulder is up to Seattle prices
The lack of documentation is concerning, it makes me wonder why Apple are rushing the rollout since they could have provided a lot more technical info in advance to prepare users.

Aside from that, with all these security features I'd be quite content if there was a way to setup an endpoint at *.myco.com instead of *.apple.com for the 'calling home'.

I just don't want my hardware being so tied to the network services of one vendor. Is it too much to ask?
As a Rust developer (that's up to their neck in Rust projects) I'm really looking forward to a functioning sqlite clone. To the best of my knowledge, Sqlrite (https://github.com/joaoh82/rust_sqlite) was supposed to be that but it ended up diverging from sqlite. It'll make cross platform Rust builds easier.
Aside: SQLite has native functionality to do what libeatmydata does (disable fsync):

pragma synchronous = off

https://www.sqlite.org/pragma.html#pragma_synchronous
Sure, but having a stateful VM is where the self-inflicted pain started imo. Though reading all parent posts, my point is not well placed.
I brought up copyright as just one example, these platforms have many reasons (not always given) for deleting stuff, ranging from political content or activism to copyright. Most ToS's are quite arbitrary. People have been talking about this for a long time as well -- "Chilling Effects" turns 20 this year! At the risk of being a bit unkind it seems like it's mostly just conservatives who were "living under a rock" until now, and now suddenly have loads of opinions on it.
That's pretty hilarious. Until recently I didn't think of the CPU fan as an auditory cue for how hard your system is working. But now I can remember times that excessive fan noise has prompted me to investigate the cause of excessive usage.
Can you elaborate on what you say then please? Just to be clear, I wasn't referring to you directly but to the general case of the narrative I described. My apologies if it felt like personal attack.
People seem to be assuming, since there are flaws in the meta analysis, that means there must be flaws in all of the underlying research, which doesn't appear to be the case when looking at the publications.
This again. In authoritarian regimes, it’s either you comply or you are gone. The regime can cut every one of your phones off their networks in seconds. Noncompliance is not an option. It’s not like the US where you can fight with the FBI in court.

The argument is whether you think their people should be able to use iPhones or not. If so, the rules are the rules. And the argument is that it would be better they had iPhones than domestic phones more likely to be compromised.
Such a vetting would be (1) extremely expensive and (2) in most cases the decision would "well... We don't know for sure"
https://github.com/EmbarkStudios/texture-synthesis this was on HN a couple of years ago, and seems to use a similar approach for photorealistic textures.
I've heard electric burners are more energy efficient than gas because you have a more direct energy transfer through physical contact, and induction are even more efficient because the cookware is the heating element. Of course to reduce greenhouse emissions that increase in efficiency needs to be greater than the generation and transmission transmission losses.

I'd be fascinated to see emissions figures related to restaurants and home cooking from gas. It'd be shocking if it were more than a rounding error.
I think the idea is just to better position household energy usage in order to take advantage of rapidly expanding renewable electrical generation.
Diffsitter: A tree-sitter based AST difftool to get meaningful semantic diffs
People's ethics are all over the spectrum regardless of career path. The root problem is that we need to worry about the ethics of our politicians. Overall, they seem like a pretty bad bunch!
Indeed. So the last mile is how to reconfigure after the fact. This has been a problem for a long time with builders.

Perhaps one solution is to compartmentalize additional changes and configurations so they can be managed a bit easier while the foundation is updated.

It’s not an easy problem to solve, but I think we might be better off if the great minds worked on this problem instead of the low level code AI.
No, you cannot downgrade before creating a user account in setup.
>First of all, the internet’s “marketplace of ideas” is severely lopsided at the platform level

The marketplace of ideas itself has been show to be a bust in recent years, IMHO.

Better ideas, better models of truth and reality don't win out. People have not shown themselves interested in intellectual debate or argument. We do not see the 'best' ideas rise to the top. And before anyone asks who I am to judge the best ideas, I'll answer - nobody, but I can see that factually incorrect, scientifically illiterate, conspiratorial, harmful crank ideas gain legs in the online world we've created. Often at the root of these is a profit motive.

Is censorship the best way to deal with it? Probably not. But we do need to recognise this as a problem as well as getting het up about giant internet platforms deplatforming people.
It seems like there's a centralization mismatch - the revenue model of journalism has centralized, while regional corruption hasn't. So unless centralized journalism starts to demonstrate a real ability to quickly allocate resources to local school boards, city councils, etc, there's a real arbitrage opportunity for your garden-variety local corrupt official to get away with shenanigans without much of a check on their power.
Do you work with your screwdriver or on your screwdriver?
This quote is taken out of context - see https://www.npr.org/2015/03/02/390245038/ben-franklins-famou...
Was also surprised when it wouldn't let me use an external webcam while connected to an external monitor.

What do you mean? Using an external webcam while connected to an external monitor works fine.

(Source: I have been using such a setup in a course for the last few weeks.)
Since the data is encrypted at rest, then search within Proton is basically nerfed. It does work, but it's slow as I imagine it's having to download each email to search within it locally. Not sure if there's a good solution for that problem. I still use Proton because I value my privacy and can live with slow searches.
So do the throughput decrease when you add more nodes? Or am I reading it wrong? This is a general problem with scaling horizontally, that the overhead can kill the performance, and single core/node performance is sacrificed.
An early step in recycling is usually shredding. It's better to remove big things made of known metals first (like copper wires and aluminum cases), but if they keep it all together it can still be processed.
Here's the thing. There's perhaps a 0.0001% chance that iMessage or WhatsApp contains a backdoor that does not really encrypt a message.

There's a 100% chance that every cloud message, every Windows/Linux desktop message, and EVERY message by default, is sent to Telegram servers, where the vendor, and any intelligence agency, organized crime unit etc., can steal them from. Telegram is a for-profit company. It can also be sold, and that will include billions of messages stored on their server. The only thing stopping them from selling out is "they don't feel like it".

Telegram is not backdoored, but, it is proven to be frontdoored, and this is extremely dangerous because "it's nothing new, we knew this, it's obvious". Yes. It's blindfully obvious to your average crypto anarchist who's spent a year reading about cryptographic protocols. It's anything but obvious to your average user.

To give some idea, I did a survey at my university computer science department: the students have lots of Telegram users. These students study cryptography as part of their network course, number theory course, and there's even a grad-level cryptography course run by Valtteri Niemi. Here's what I found: less than 20% even knew what secret chats were, let alone used them. Everyone just winged it, assumed Telegram was safe by default. Now, if a computer science student body whose field this is don't know about it, what chance is there a hair stylist, a political major, a dissident/activist, or journalist, knows about it.

But I can't blame them: I've long since lost the count of how many times I've seen news media bundle apps together: "Signal, Telegram, Threema ... are secure replacements for WhatsApp". This kind publishing is incredibly irresponsible, and it's no wonder people get the wrong idea.

So yes, Telegram is open source with reproducible builds. But that confirms nothing but the existence of the front door to technical people, that the app doesn't end-to-end encrypt anything, by default.
> I wish I could do that with the Mac developer ecosystem. It's closed and Apple will say that gives them a premier experience but it's the little snags that cost me 90% of my time and are impossible to troubleshoot other than grunting through it.

Might be worth reading the entire post and commenting on it in its entirety, not cherry picking.
Lol. Sure dude, it's the programmers who are the bad guys, not the people funding the israel/palestine war or in this case the owners of the company who decide to make software that helps assasinate people.
I mentioned the open-source community in my comment. So a collective of knowledge of many talented developers from the public, and also the stewardship of a FAANG and their developer talent pool also.
It's a real enough problem - I hate cooking on electric stoves.

Part of me wonders how hard it'd be to come up with an electric stove that simulates a gas cooker.

Also in the UK (where I am) gas is still cheaper than electricity - hoping that will change soon though.
Isn't that obvious?

An exploit is to encryption as a sword is to a shield.

We don't regulate shields.
Well in the same note it would be best to assume Israel is not a liberal democracy then...
> It was certainly weird to see all the "they're private businesses, they can do what they want!" takes from the internet when Trump and Parler were banned, after the same people have been yelling for years that these same corporations have too much power over the public narrative.

Why?

Its not inconsistent to argue, as many on the left have, both before and after the right-wingers started whining because they lost their excessively favorable treatment from Twitter, Facebook, et al.:
(1) Free speech means that private actors should have the right to control the messages their resources are used to relay.
(2) A subset of the tech companies right-wingers complain about to justify trying to impose state-backed mandates to carry right-wing content on internet providers generally are overly dominant monopolies and have excessive power over public communication because of that, which is a problem that is should be dealt with by dealing with the monopolies, not curtailing the freedom of speech of private actors.
Politicians aren’t the ones writing spyware, though.
Not that context ever matters to extremist:

“It is a quotation that defends the authority of a legislature to govern in the interests of collective security. It means, in context, not quite the opposite of what it's almost always quoted as saying but much closer to the opposite than to the thing that people think it means.”

https://www.npr.org/2015/03/02/390245038/ben-franklins-famou...
“We're Shutting Down Our 3G Network”
"These are people that didn't buy FSD,"

Incorrect.
Unless Israel is selling this to Iran, Syria, China, Russia, Cuba or any other Official Enemy of the US, they absolutely aren't rocking the boat in anyway. The other "authoritarian" governments are the good kind, they're pro-US.
Yes. A lot. Especially ghost nets and other issues. Land animal production has issues with cruelty and pollution but it’s nowhere near as bad as seafood.
The goal is to decarbonize our economy. We need to convert pretty much everything that uses fossil fuels in house to use electricity. At the same time we are replacing in house fossil fuel usage (gas stoves, gas water heaters, etc) we also need to be increasing the energy share of renewables on the grid. Its not an "either/or" its a "both/and" situation. Decarbonizing the household can and should be done in tandem with decarbonizing the grid. Induction stoves, which are the modern alternative to gas, are much more efficient, get to temperature instantly, and are generally considered a very high quality.
You phrased that like a disagreement, but I think it actually goes to support by point. A pandemic that has shutdown much of the planet for going on a year and a half seems like a much more novel fear than someone's phone spying on them.

And you can't just blame this on the generic "media". They sell what the people want to buy. They report on novel fears because that is what attracts more attention from readers/viewers. The story about a murder is always going to get more attention than a dozen people dying of heart disease.

It isn't that the media doesn't care about these privacy issues. It is that people generally don't care about these privacy issues.
I'm all for legalization of marijuana but we can do better than the naïve and shallow argument of "it's a plant so it's good for me". Opium and Salvia? Poison berries and cocaine?
The collisions that ASICS search for are a few leading zeros, even with the whole Bitcoin network at your disposal I don’t expect it’s practical to find an exact 256bit collision.
This blog is well known for both deep original knowledge, and extreme hyperbole. There was a post about MacOS update size that compared the size of the updates to beating the backs of Mac users raw and ignoring their pleas.
This all sounds very nice, but there's a bit of sleight of hand here since the article goes out of its way to avoid details. That way everyone reads into exactly what they want, and it's totally non-obvious whether this is actually a workable proposal or not.

But what's the concrete proposal here? How would things actually work? Will the services be forced to accept whatever unmoderated feed of filth the linked to service sends their way? If not, how is this supposed to fix the moderation problem?

How are you supposed to link together applications with totally different data, interaction, and identity models? Obviously you couldn't link e.g. say Discord to Instagram and have the interactions between the systems make any sense. Are we just going to have a predefined ontology of possible social networkign apps, populated with the currently existing models, and define an API for all of then? When and how does that ontology get redefined? Or define a single lowest common denominator covering everything? What happens with features that don't fit into the models? They're entirely forbidden? They need to go through a multi-year public review bureacracy?

Who exactly will be forced to interoperate, and who gets a free pass?
It makes me a bit sad that for ten years I took it for granted that Moore’s law is dead and notebooks are constantly overheating incapable computers just to learn that the whole issue was Intel messing up their process nodes.
Winners usually frame their fights as ones for freedom and liberty, and emphasize their enemy's use of censorship and re-education camps.
Scientific unrealistic is different than socially unrealistic. It's not easy to express, but the knowledge I have of human nature, I feel like I understand better, than the knowledge I have of quantum mechanics.
Decompile and read the resulting source code, then snuff the network traffic to make sure it’s matching what’s expected. Trusting the Hardware and OS is a larger issue.
I’m not a denier. I believe AI will vastly alter the way we write code. But, to be honest, it’s very depressing to me. I think I am someone who selfishly enjoys writing code, not necessarily getting software built. If my job became designing something at a very fine grained level, feeding it to an AI, having the AI write it and then code reviewing the AI, I’d just switch careers. Unfortunately for me, I’m super early in my career so I hope I can make enough money in the next 20 or so years such that I can retire young.
Android user here. I've not used the iOS version so cannot say what the differences are, but it works really well and is highly rated within the Play store. I imagine however that iOS users have higher standards, because let's be honest the majority of apps on the play store are garbage.
L'esprit de L'escalier
I had MK-61 one (like MK52, but without the ROM bank) as a kid and used it to learn programming.

You can do amazing things with just 105 bytes of RAM, like playing real-time games using DEG-GRAD-RAD switch as a joystick, for example.
See https://www.theverge.com/2021/7/14/22577594/whatsapp-multi-d...
Well Canonical provide commercial support for Blender on Ubuntu.

Not sure there's any reason other commercial software companies can't support their own software or partner up with Canonical to offer similar support.
Aye, they are moving to their own in house machines starting with the thelio.

You won’t win the developer market selling repackaged Clevos.
Just flag the post or email hn@ycombinator.com
I agree in general, but just wanted to add that the pythonic approach would be to avoid the explicit index entirely, with something like:

alternate_word_mapping = dict(zip(words, words_in_english))
Throwback – You and Your Research [pdf]
People are not moving from natural gas to the old style resistance coil electric stoves that everyone is accustomed to, they are moving to induction stoves that get to temp nearly instantly, have a high power output ceiling.
Did you try cooking with an induction stove? It’s now getting quite popular and combines the benefits of both worlds. Though it’s obviously not replacing an open flame which is usefull for cooking with a wok for example.
Essentialists are map-makers eternally searching for a map that exactly matches the territory, and will forever be disappointed.

Some of the metaphysical problems with logic that the article tries to approach do exist, but in my opinion they are the domain of decision theory, not philosophy.
Using drones wasn't going to dramatically increase the damage someone like the Boston Marathon bomber did or decrease his chances of getting caught. Would be domestic terrorists are deterred by the fact that they are domestic and will eventually be arrested given the dragnet of internet and CCTV surveillance we all live under, not because they can't somehow fly a bomb into a stadium instead of leaving a pressure cooker backpack. Drone availability is way down on the list of things a normal person would consider before deciding to pick up domestic terrorism. Top of that list is probably whether they can win a shootout with the police force when a dozen swat vans inevitably show up at their address.
https://github.com/erikgrinaker/toydb/blob/master/docs/refer...

This is exactly what I was hoping to find. This is great!
"I'm only surprised we're not seeing more of this from domestic terrorist groups. Anyone with minimal technical skill could probably order a hobbyist drone, attach something nasty, and figure out how to remotely detonate it with a phone."

Me too, it is not high tech at all, basic in doing a remote circuit and they now even have "farming" drones which you can replace the main chemical with whatever you'd want...

https://www.youtube.com/watch?v=Dn7Q4oIrP3I
Pretty sure this is a response to a joke on Twitter in the Apple dev community.
Are we’re supposed to act like it’s a new thing? It’s rather similar to the client list of Hacking Team https://en.m.wikipedia.org/wiki/Hacking_Team

This market has been developing for the past 2 decades there are a lot more players than NSO and most of them aren’t in Israel.
No. Only the right gets censored, so the left reinforces this whenever they can
It's part of my workflow
This is funny, but I prefer my computers silent.

Semi-related: I can hear the inductors on my NVIDIA GPU, which is somewhat useful. When I am training deep learning models, the coil whine follows very regular patterns. Also, the pattern changes between training and validation. So, I can literally hear when an epoch is done.

(Of course, TensorBoard for the real monitoring.)
Where is parent saying that these other people are not also bad guys?
And Microsoft Edge right after that for a few years.