skysight-inc/HackerNews huggingface dataset:
It's safer as long as you don't hit it. (And, since the chance of you NOT hitting it is greater than zero, it can be called safer.)

Hit it when logging in to HN. It will populate both the set of fields you've highlighted (login) as well as the other set on the page (register). If there were a third, hidden, injected set of fields controlled by an attacker, those would be filled too.

The old security-convenience trade-off is an immutable law of the Universe.
I don't see how that's an argument for not supporting WebRTC...
Using inexpensive drones and photogrammetry to stitch lots of photos together is fairly straightforward these days:

https://www.mobiddiction.com.au/drone-mapping-in-4-steps/

Depends a lot on what you mean by "site survey" though.

The photogrammetry used there also created a depth map from the stereography where images overlap:

https://www.mobiddiction.com.au/wp-content/uploads/2019/11/T...

You can see in the bottom right corner of that the elevation changes for the roundabout and the ~120mm high curbs at the edges of the roads - and the gradual slope of the whole site towards the top right corner. (There's a lot more detail and calibration data than that image shows in the full data set there.)
The article talks about students getting extra time on exams by falsely claiming disability accomodations. This seems somewhat equivalent to asking for accomodations on a job interview to me.
I used to work in a pretty secure environment. The way to store passwords was to write them on a piece of paper and put that paper in your personal safe. This was inside a building with armed guards.

I guess it all depends on where your risk/convenience preference. I would say just like the best camera is the one you have with you, the best way of storing passwords is the one you are willing to use. Perhaps pen and paper in a safe is the best way, but if that means insecure easy passwords are used for many sites I guess password managers are better.
> This is the fault of web browser vendors who have yet to give a damn about book marks.

Firefox actually has a very powerful and capable bookmark system, see https://support.mozilla.org/en-US/kb/address-bar-autocomplet...
Any Mac(s) can serve as a caching server for Apple's software updates on the local network. It's built into the OS, you just need to turn it on.

https://support.apple.com/guide/mac-help/what-is-content-cac...
So about 2 inches. Is that enough to cause a collapse? I don't know enough to answer this question, but I would hope that buildings are engineered to handle at least a couple inches of sinking. My house in the hills has 2-3 inch variations after 70 years of existence, but admittedly it's not a high rise building.
Is there any realistic scenario that protects against a fully compromised phone/computer?
China Is Building a Second Nuclear Missile Silo Field
I'd put BBC or Al Jazeera as a example rather than RT or Xinhua.
No, Go is not memory safe for concurrent code.

Race detection is good but can't eliminate races altogether.
No it is more like talking about the Meiji era for events outside Japan.
Yes, I'm already aware of that, thank you. Could you please expand upon what the main use cases are for non-cryptographic hashes?
Mechanics do it often, as do people who work on their cars. It isn't the Hacker News segment that is doing it, but the people who work on cars for a living or for fun.
Intel is an Old baby who walks with crutches. Intel delivered the 10nm Processor just 2 months back after a decade of failure. Their 7nm is still broken and so is there 5 and 3nm in research. And they hope to catch up to the competition by 2025 is a funny joke. Intel isnt a reliable delivery partner which is why Apple moved away to its own processors.
How is that related to the APIs being talked about? What advanced browser APIs does phishing in full screen require?

The new iOS 15 safari is full screen (and you’ve always been able to add to home screen to make a website really fullscreen)…
Zotero, while a full-fledged citation software, can download whole web pages and provides full text search in this archive.

Provides a Firefox plugin, saving pages is just a click away

https://www.zotero.org/download/
You're being obtuse. You can draw it however you want if you don't mind depicting ones that look dead.
Funny that you ask: Linux kernel rather actively embraces experimental code written in Rust.

And yes, for a really critical system I might consider taking something much simpler and potentially slower but formally proven correct, like seL4.

Google is working on Fuchsia as a new phone / chromebook OS, and it's very much focused on bulletproof security.
Best Tips for Keto Extreme Fat Burner
Keto Extreme Fat Burner is a high level and agreeable choice for the individuals who are searching for some agreeable choice to bring down their body weight.

In the event that they at any point need to look thin, they should change to this arrangement. They will discover it excessively powerful before them and will likewise modify their entire component of the body by returning every one of the harms.

Official Website:- https://wintersupplement.com/keto-extreme-fat-burner-south-africa/

https://www.inkitt.com/ketoextremefatburner1

https://dribbble.com/ketoextremefatburner1

https://www.addwish.com/Keto-Extreme-Fat-Burner-South-Africa

https://www.stageit.com/ketoextremefat1

https://www.homify.in/ideabooks/8101498/keto-extreme-fat-burner-south-africa-weight-loss-price
They regularly reveal a complete failure to understand the topic, for both the author and anyone willing to sign them.
Couldnt find a bulk bill doctor?
Sure, but it seems like "poses as independent and is funded by a billionaire" describes a huge number of publications that are not going to get shut down. It feels like there must be some other criterion. In this case most likely that the publications intent goes against US foreign policy interests?
Oftentimes that Mac itself will have its own update to download, as macOS releases typically happen in lockstep with iOS and iPadOS.
Sorry for the snark, but inductive charging is never [1] going to happen.

If there's one constant in all of infrastructure history, it is that the utility of a new infrastructure is determined by beating the already existing one. Even taxpayer pockets can't fix that.

Imagine tearing up all roads, installing chargers underneath for hundreds of miles, from equipment that is very likely to break earlier than thought and is very expensive to repair (blocking the road, dangerous for repair-workers, tearing up road again), works in a very inefficient manner, as every single charging unit is going on and off very quickly (a lot of wear and tear) and is still likely to sit idle >60% of the day.

[1] not in our lifetimes
Security reports for Android

https://blog.zimperium.com/new-advanced-android-malware-posi...

-> "Upon installation (from a third party store, not Google Play Store), the device gets registered with the Firebase Command and Control (C&C) with details such as the presence or absence of WhatsApp, battery percentage, storage stats, the token received from the Firebase messaging service, and the type of internet connection. "

It isn't hard to find similar reports, there are enough of them.
>This is just false, or at best only half of the story to make a false equivalence. IE was cutting edge until Firefox.

After developing during the IE 5.5/6 years there's no way I'm giving you a pass in calling IE cutting edge.
He's still selling them. I bought one last year.
https://scottreinhardmaps.com/
If I became so disabled that I couldn't function in a social setting then please just end me. I don't want to be some vegetable that someone else needs to look after 24/7. I want to be productive, I want to be liked, I want to be free.

Whatever you are describing does not fill any of those fields. At that point I'd be complete burden and I wouldn't want that on anyone.
Seems like you didn't get what I was on about. Very sad.
Most of my friends don’t even know what a file system is, so I’d say having opinions about it puts them above average.
Feel free to not watch. Fortunately that's not illegal, yet.
No, but you could claim it if you'd worked as a volunteer EMT for a year.
You have an awfully rosy view of how regulation of programming languages would play out. What will happen (and this is already de facto the case in many "safety-critical" industries) is that Rust is banned and everyone is forced to write straightjacketed C89 and C++03. There's already a congressman on the record complaining about a "native Nigerian" committing code to Rust.
I don't mind that Australia has 6 weeks of PTO (4 weeks holiday, 2 weeks sick), but I wish it was a little easier to combine the two. Some companies are very strict with sick leave not going into negative, so may get anstsy if you use too much. It would be nice if we had 6 weeks pooled. I also don't like that emplyoers can mandate the 1 week shut down over christmas too, which eats into your own leave.
Cliff is the same thing going the other way. He spends nearly 100% of his energy downplaying the role of global warming in current events. He isn't some centrist scientist driving nuance into the conversation.
The thing is sites can already do this on chrome (desktop and android) and it hasn’t caused any widespread issues to my knowledge.

Why would adding it to Safari have a different effect? Plus iOS is improving on its notification suppression and its relatively trivial to suppress notifications that aren’t interacted with after some limit.
When people say that Safari is like IE they aren't talking about 20 years ago when IE was dominant in its prime, they are talking about the geriatric IE era when it was an also-ran that you had to support but didn't implement modern features such as flexbox properly etc.
Sure, but that could just be because there aren’t a substantial amount of violent left-wing extremist groups that organize in this way.
Where is your legislation supposed to draw the line? In Rust you need to have occasional unsafe code - you can't even have a double linked list or bidirectional graph without unsafe code. Would you also outlaw jni calls in java?
Green Hills with its decades of DoD contracts versus the left wing browser company. Gee I wonder who would win?
Feel free to not use those apps. But a lot of people do want to use them.
Agreed, definitely not newsworthy. This is like pointing out that if you got access to arbitrary code execution on the HTTP server that accepts the login POST request, you could also steal login credentials. Or if you were running a malicious browser extension. Or the browser itself is compromised.

If an attacker is able to run any code they want anywhere along the way it's effectively game over, autofill or not.
C and C++ are really versatile, why are there no safe libraries for them (or are there?). If you want to make buffer overflows impossible then add a library that does so and use it. If you want safer memory handling use a library. Or extend C and C++ with standard libraries that are safer to use. Java is implemented in C so anything Java can do, C can do. Many languages are actually implemented in C.

What is this fascination with creating a new language every time we want to add some features? Is it the fame of creating and naming your own computer language? From a security perspective creating a new language reduces security because it will never have been as thoroughly vetted as the old languages.
It looks like 1Password _offers_ autofill. That would seem okay?
I used a rented BMW i3 with range of 150km in Warsaw city center for a month or two. Charging was not an issue - there were multiple. harging public spaces within 5 min walking dostance from my apt, and also a communal charging spot in my apartament building. I just left the car there for one in a few nights.

The real issue - and the one that prevented me from buing an electric car so far - was that without my own charging spot I would have an issue leaving the city for a month or two, or just swotching to transit for a while. With ICE I can leave the car for 6 months unused and it’s not a big problem.
Ask HN: Was Discover Just Compromised?
It appears that https://www.discover.com/ and their Android app has been exploited somehow, or they pushed some test version to production.

I tried to log into the website but it sent me into a logout loop, even incognito / cleared cookies etc.

Here's where it got interesting. I tried logging into the Android app and it popped up an error message with a phone number to call. The phone number lead me to a spam line trying to sell me random products like insecticides, asking for my personal information, etc.

Wonder if we'll see this in the news?

EDIT: Their login page now leads to a new page stating technical difficulties. The app no longer shows the error from before. It just says that it's offline.
IE was the blunt and dangerous cutting edge because you haven't thought to buy a new knife yet
Upgrading a SSD from macOS 7.1 through 10.13 without reformatting
> What's wrong the coins I got issued from the federal reserve?

They are owned by someone who doesn't understand how one thing can be "good" without another thing in the same category being "bad".
Is it crappy 25fps progressive scan like most of those streaming apps?

I just can't bear to watch sports at 25fps, it's like watching a slideshow.
I've been on the fence, but this article and discussion convinced me that I will certainly buy the iphone 13 mini when it comes out. Thanks for that.
At the time IE 6 was released, it was the best browser available. The problem was Microsoft acted is they had “won” and stopped updating it for years, where it calcified and became the hot mess we all knew and disliked.
In North America there’ll be a bit of friction with having to use an adapter or whatever.

But in Europe, China, etc, Tesla are well positioned to offer a top-tier user experience.

For one thing, Tesla designs and manufactures all it’s own charging hardware. The other networks often consist of a mix of charging equipment from multiple different manufacturers, which contributes to bugs, unreliability, and higher servicing costs.
The design process is pretty rigorous. Anything to back up your idea?
On the other hand. Big tech companies forcing 2GB updates on people pushes demand for upgraded internet infrastructure.
I am seeing completely opposite. When comes to web application development I always prefer Chrome but recent M1 changes a lot. Now that safari feels like butter I prefer Safari over Chrome for development.
Any website you might access whilst on a train or in other situations with spotty connectivity
I think they just provide terrain maps without any human defined borderlines. You can draw whatever lines you want after you purchased them.
So, that sounds like a good reason to iterate over a bunch of random initializations and train them up to find those awesome resulting networks that are smaller but have the same accuracy (if I'm understanding that correctly and it's actually possible to isolate or take advantage of those subnetworks for a final smaller size).

Or... has anyone tries training a network for determining the initialization state of another network? And now I'm wondering if those good starting initialization values only work well for a specific task or if they seem to span all or a subset of tasks, and maybe there's some inherent quality in how the values relate that we can tease out...
I think the idea is not necessarily to make fully offline websites (though some people will), but to provide a more consistent interface akin to native apps.

Most apps you use require network access but you can still interact with them on very slow/broken connection. Meanwhile you try to load a website and it’s a much different experience.

But as for offline apps, I could imagine music/podcast players (where you can save offline media), offline maps, etc.
Exactly a week ago I asked my friend,

"Why is toyota not pushing the production of electric cars? Hyundai, Mercedes and Audi have launched theirs and they have been trying to catch up with Tesla".

Then this happened
At least Google and Linux are making plans and first moves to a safer language that helps avoid these major security flaws.
Because safety requires that the language prevent you from doing things and libraries don't have much ability to do that.

Example: C++ shared_ptr gives you reference counting which helps prevent use-after-free errors. However, shared_ptr can't stop you getting a raw pointer or reference to the underlying object, which can then be used to trigger a use-after-free bug.
For all pratical purposes they don't.

W3C nowadays only retifies standards that are in widespread use, and Firefox is no longer relevant in our browser matrix for deliveries, with a single digit usage.
> The real fix would be to improve on the conditions that parents need to have children

I hear this a lot, but have difficulty squaring that with observational evidence:

France for instance great employment security but is hovering at similar fertility with the US and UK (1.88 births/woman vs 1.73 US and 1.68 UK). The nordic countries are around the same (1.76 Sweden, 1.41 Finland). Singapore has gone through great lengths to try to raise fertility, having affordable housing and various social programs and government cheerleading, and it's at 1.14.

Maybe each of these cases have other factors, and maybe observational evidence is not right way to look at this. Is there other evidence of this path leading to more fertility?
now it claims that every single domain name is not available. But when I checked the main flow starting from the main page - there was no clear mention that "your" free domain is not actually yours
Why Does Windows Become Unresponsive? 8 Common Reasons
The author doesn't know what causation is. Heck not even correlation establishes causation so OF course a counterfactual can't establish causation.

Not only are counterfactuals infinite in number but ALL hypothesis are infinite in number. You can literally say ANYTHING about why something didn't build. I can say someone didn't purge some files or I can say someone purged files or I can say aliens destroyed the server with a laser. There are an infinite number of statements that can be made here and whether it's a "counterfactual" is irrelevant.

What the author doesn't know is that NOTHING can establish causation except for a very specific type of experiment.

Basically there is nothing that can establish causality UNLESS you have control over the causal switch. You flick the switch randomly and if the randomness of the switch flicking correlates with the consequence you have then have established causation. BUT you have only established it to a certain correlative degree. It is fundamentally impossible in this reality to establish causation to be 100%. True causation can never be fully verified and at best the experiment I described is the best fuzzy verification. If you truly study how science works you will find that this flaw extends to all of science and therefore reality. In reality as we know it, nothing can be proven. Proof is fundamentally impossible. If you understand this concept then you will truly understand what science is.

Anyway, Going to the authors Kubernetes example, his "counterfactuals" are basically null hypothesis and can be helpful in establishing causation but by themselves are pointless.

It's simple... If you hypothesize that something didn't build because the admins did not "configure file purging" then to establish causation is SIMPLE. Configure the file purging and see if your system builds. Then remove the configuration and see if the system stops building. Do this enough times and you have established causation or zero causation to a certain degree.

That's it. This is science and probability and statistics. So crazy to see someone mention causality without even knowing what it really is.
Windows just does this out of the box which seems to work pretty good.
Asking questions about the only competitor is valid

If thats a whataboutism then whataboutisms were always valid and accurate forms of introspection
This isn’t an Apple vs Google thing. This is an Apple vs web standards thing.

It’s actually and Apple vs. APIs and technologies that allow fingerprinting on the web thing.

Nobody mentions that Mozilla has sided with Apple much of the time to not implement some of these same APIs and technologies.
It also flows back in terms of political contributions, lobbying, and political appointments. Right now a former ShotSpotter VP is being nominated to lead the ATF.
This is suprisingly interesting. They use a 3D model to geographically identify each sub-unit of the original building in the rubbles. Then they gather intelligence on clues in each unit to confirm their data and adjust their model accordingly. Doing this they are able to improve precision and identify smaller units in the rubbles (ex. identify each room within a house).

It's really an intelligence unit with the added capacity of excavating and moving rubble. I can see the usefulness of this for an army. Buildings, especially buildings targeted during conflicts, contain precious and strategical objects and information. Being able to recover them is crucial.
The criticism was that "no one uses WebRTC", not that WebRTC was inefficient. Clearly millions of people do use it, so you aren't refuting the point in any way.

Perhaps if Apple had supported WebRTC earlier their engineers could have influenced the way it works to make it better. That's the main problem with ignoring standards in an org the size of Apple - you don't get to contribute to them. I don't mind that Safari runs behind the other browsers because progressive enhancement enables me to deal with that. I do mind that Apple are failing to be a meaningful part of moving the web forwards, and are basically letting Google do whatever they like.
So the accomodation they list are:

> extended interview time, providing questions in advance, or conducting the interview in writing in a Google Doc rather than verbally on a call

Like, i dont think having these things would give an advantage to most people, so why not let them have it?

Ext time - if you're doing a test in an interview that heavily depends on time you are doing it wrong imo. Lots of people get nervous and flustered during timed tests, and its totally contrived. Yes there are deadlines at work, but they're of the form you have to get this done by next week, not you have to read this document really fast and type this thing up really fast because you only have 20 min.

Doing over google doc - i think there are a lot of people who are good at social cues who would be significantly disadvantaged by this. You just cut off a major source of info on what the interviewer is looking for, as well as preventing you from making a good impression via social means (being well spoken and funny is a major advantage in most interviews).

Knowing the questions ahead of time - yeah, that might give an advantage. Sure interviewers should never ask questions that are googleable, but having time to think about it prior to the high stakes interview would probably help a lot of people. That said,why not just do this for everyone? It probably would make the interview less contrived and more like the real job.
Is it possible that there's some kind of neural transfer from the mother's brain during pregnancy? I've been wondering if there is or if it's all genetic. Evolutionary it would be very interesting if consciousness wasn't genetic, but transferred during pregnancy.
Within a few years you will have dedicated parking spots with chargers on every other street corner, so it won’t really be an issue.

In Warsaw city center there is a such a public parking spot every 300-500 meters or so, where you can park for free as well if you have an electric. Those will get even more common as electrics get more popular.

The only issue is if you tend to leave your car unused for extended periods of time.
Skimming the post this feels very horoscop-y, like this could fit most people who read it.