skysight-inc/HackerNews huggingface dataset:
> Calyx has more focus on functionality and privacy rather than security.

That's not true. GrapheneOS is heavily focused on privacy and offers much better privacy than CalyxOS. See https://grapheneos.org/features for the privacy and security features offered beyond AOSP. Unlike CalyxOS, we aren't listing AOSP features as our own.

CalyxOS has a leaky firewall which apps can bypass and a leaky VPN tethering implementation. GrapheneOS has a Network toggle without those leaks and prefers the approach of fine-grained VPNs rather than using the same tunnel for everything. We want real per-profile VPNs rather than making more devices use the same VPN, especially in a leaky way.

> For example: Calyx provides MicroG. This means you can talk to Google Play services, though in a better, more privacy-conscious way. MicroG is an open implentation of Google Play Services.

GrapheneOS has https://grapheneos.org/usage#sandboxed-play-services which is able to provide much better app compatibility, far more functionality and without the privacy/security sacrifices of microG. microG lacks the same security checks and key pinning of Play. It doesn't avoid trusting Play because the apps using Play are using the Play client libraries. microG is an additional trusted party.

> This could technically be abused, though Calyx takes lots of precautions to prevent that.

They simply limit it to microG and the Play services signature, which was our suggestion. That isn't taking a lot of precautions. It is abused because apps are tricked into giving their data to an app without the same security model/checks and key pinning (microG) is

> GrapheneOS with their security-first approach don't deem this worth the risk.

No, we took a better approach instead.

https://grapheneos.org/usage#sandboxed-play-services

> So with apps requiring play services you don't get push messages and network-based location checks, among others.

Push works fine with many apps without Play. GrapheneOS has support for using Play in a sandbox.

> So, do you want an allround phone to use everyday (and use things like Uber, Facebook, etc) but more private and secure than AOSP, take Calyx.

Those apps work fine on GrapheneOS. CalyxOS isn't more private and more secure than AOSP. CalyxOS includes a lot more proprietary services (Google, WhatsApp, etc.) than AOSP. For the most part, they're making changes which quite easily hurt privacy and security.

> Do you want security over everything and are willing to compromise a bit on functionality and app compatibility (some apps will refuse to run without google play), pick Graphene.

This is a highly inaccurate portrayal of what GrapheneOS provides and the decision making process. GrapheneOS values privacy and usability very highly. It balances those with security.

What really defines GrapheneOS is that we aim to implement things in a proper way that cannot be bypassed by adversaries. A privacy feature that's simply worked around is not much of a privacy feature.
> Why Disney World doesn’t have mosquitos

TFA is actually about HOW Disney World purports to not have mosquitos.

WHY Disney World doesn’t want mosquitos is a different issue.

Disney World is some kind of fantasy expression of an ideal world. For the creators, this means an absence of irritants and an abundance of entertainment, sugar, salt, fat, and merch.

The difference between Disney World and the world is that one is an enclave and the other is a world.

The fact that mosquitos exist in both tells us something about the intelligence of species.
Not so well. There are no capped forks and, more importantly, no gerunds.
> Natural keys exist, make perfectly good unique identifiers, and have inherent meaning.

Most of the "natural" things you think are going to be good Primary Keys aren't. You quickly get into one of those "Falsehoods Programmers Believe About X" lists.

I remember some years ago running into the Experian team who were designing a system to uniquely identify people and they'd got it all figured out for the US market. See, Americans have Social Security Numbers, so you can just use those to key off. Alas, as hopefully anybody here who actually deals with Social Security Numbers knows, they aren't unique. Perhaps you could argue they should be unique, but that's not useful in practice, because in practice they aren't. They seemed really disappointed about that. I doubt they fixed it though.

It's far more likely that the "definitely unique" Natural key for your table isn't actually unique than that there will be an insurmountable problem caused by using artificial row IDs, UUIDs or something like that.
> Then I read the first comment on this HN thread, which is directly comparing this to Toronto.

Canada should provide its youth an opportunity to visit a third-world community. Every G7 nation should be giving their citizens that experience. It would make a big difference to how our future plays out.
Like family logs in with a password?
Yeah that sounds low: https://en.wikipedia.org/wiki/File:ParrotSkelLyd.jpg
The standard (https://shop.puri.sm/shop/librem-5/) is cheaper - i guess the USA one comes with a large uptick for locally sourcing?
Smith's specific example is somewhat dubious given the tendency of corporations to off shore work to cheap foreign locales or purchase from foreign suppliers. It actually winds up being governments and not individuals who acknowledge the necessities of protecting domestic industry from foreign competition. For market actors (individual consumers to big business) the short term price advantage winds up dominating the self interest calculus rather than consideration of potential long term ramifications of being dependent on foreign producers.

Regardless, this passage (if you expand it a bit) most concisely sums up one of the main themes of the book, which is why it's so often cited. The main takeaway here being that intentions don't always match outcomes. Governments often intend to improve society by intervention but make things worse. Free actors don't intend to improve society but often do so anyway (as an aside, despite this, Smith is actually LESS laissez faire than many expect).

Shortly after where your quote ends he makes this clear, "By pursuing his own interest he frequently promotes that of the society more effectually than when he really intends to promote it." This is reiterated in various ways as I recall and he's merely trying to apply it to this specific topic of importation here, though in hindsight what he considers the outcome of the self interest calculus is a bit wrong.

Still, market actors acting in their own self interest of foreign trade do indeed produce the unintended consequence of enriching those trading partners.
If the hash is doing its job, two similar inputs should already yield completely different hashes and therefore different visuals.

Each visual is a representation of a single hash. If it was designed to compare two hashes, it could simply show a true/false status because the only purpose is to see if they match.
People still talk like the y2k bug was nothing because of all the hard work done to prepare for it.
It's true that if you retweet someone else's message, then you are not the original author of the message. But Apple leadership vetted the letter and passed it around staff, hoping that their employees would find it as "incredibly motivating" as they did.
There are many aspects of law that pertain to business outside of a general business law course
Hmm.

I'm 17, so here is what I have to say on that. Keep in mind I live in a rural, farm town so it might be a bit different in more urban areas. I don't know. I'm just basing what I'm saying on what I hear online, and my own observations.

Computer related fields are DEFINITELY looked on as a "good career" and "the future", but I see a lot of my peers, even if they are vaguely interested, believe that they "aren't techy enough" to have a computer related job in the future. Which I always find strange, because you don't have to be "nerdy" or anything. You just... learn? Like any other job that requires some kind of skill. You don't have to be "plumber-y" enough to get a job as a plumber, and similarly you don't have to be "techy" to get a job in tech. Anyway...

Most people my age that I'm around don't know the difference between Google and the Internet, and it still tends to be the socially awkward, nerdy people who get into computers. So, to answer your question, maybe social awkwardness or being nerdy is less of a "requirement" now than before because being a "geeky computer user" isn't really a stigmatized thing anymore since everyone interacts with computers in some fashion nowadays and my generation as a whole seems a bit more open minded with a lot of things compared to previous ones, but it's still definitely a stereotype that's sticking around and probably will stay around for a while.
> If it looks ugly, it is most likely a terrible mistake.

I agree with this, looking back at my first year of professional coding I just realise how important code review is. Even if you are working for a small software agency / consultant, you have to force them to do code review before merging. Otherwise, you will spend a long time trying to make your code look better which mostly you won't be able too because lack of experience
Not in this case. I really don't know how anyone can deny the massive cuts in insect numbers.

Even if you missed the news about bees dying, even if you don't follow the science showing unprecedented and extremely alarming drops in biomass and species counts, even if you haven't noticed the loss of fireflies and mantises and crickets, even if you haven't noticed the extreme drop-off in bugs on windscreens - how the fuck do you ignore everyone else talking about these things?
Anyone else spot the difference in the hex immediately but have some difficulty with the textual image?
I’m rather fascinated by the false matches. Those two images are very different and yet beautifully similar.

I want to see a lot more pairs like this!
> In many cases, what you're working on doesn't have an answer on the internet. That usually means the problem is hard or important, or both.

For me, it’s usually meant I’m doing something so wrongheaded it’s never come up before.
GrapheneOS on Pixel? Dunno for sure. My strong temptation is to go dumb phone.

>So this new Apple stuff has made me decide not to buy an M1.

I hear you on that. I was kind of wanting one just for a break from the vintage Thinkpad Master Race but I'll wait for a non Apple OS port.
> like the dogs which conveniently bark at police's secret hand sign

This isn't necessary; the state of the art is for drug dogs to alert 100% of the time. They're graded on whether they ever miss drugs. It's easy to never miss.
Cynical me thinks this is some "deal" they made with DoJ to not have the FBI sue them any more for backdoors in such a public fashion. As long as they work with them in manners that give the FBI info they want while claiming to protect user privacy compared to just throwing open the doors, Apple thinks they are saving face.???
It's not PR. It's bloggers blogging for page views by rewriting timeless classics such as these.
I'm currently hiring 5 software developers for a startup that I'm consulting with. On some level, I'm aware that it would help team cohesion if we could all use one text editor. But for the most part, it's a decision that I leave to each developer, as it is a decision that can be left to individuals.

If we were going to use a language such as Clojure, where the whole eco-system tends to use emacs and offers examples in emacs, then I might try to introduce emacs, but the opposite is also true: the feeling that developers should learn emacs is one of the things that makes me wary about recommending Clojure to clients, even though Clojure is the only language I use in my personal projects.

But for this current client I think we will mostly be working with Javascript, so I think most of the people we hire will be happier with their IDE of choice, or with Sublime.

I do wish something like emacs existed in slightly more modern form. I'd be thrilled if there was a modern text editor that allowed me to customize the app however I wanted by writing additional code in the language that the text editor is also written in (that is, repeating the relationship that emacs has with elisp).

But it seems unlikely that anything like that will ever exist, so I go on using emacs, but I don't recommend for any clients.
I was using hyperbole
Kids are a problem. Areas in the city with good walkability often have horrific school districts. You also get trapped renting.
If you sync with iCloud this already could happen, because photos are not end to end encrypted.
Right- and that was my experience with it as well, up until the last decade or so.

The benefits you list are also true for markets that would "naturally" be priced lower than section 8 limits.

The policies hud put in place to try and get nicer areas and more landlords to accept section 8, really just translated into being policies of willing to pay higher rent amounts.

There's some circular reasoning going on, in that higher priced rentals must be nicer or in nicer areas. And the bigger apartment company players know how to game it, especially with new construction in cheaper areas of high rent zip codes.
I just transferred from Android to iPhone today. I wouldn't bother to use these alternative Androids, because I don't trust 3rd party app stores. There are banking, authenticator, and other essential apps I will never download from a 3rd party app store.
> I haven't noticed anything at all in that regard.

... My jaw drops. Try not to be too offended, but, do you go outside? Do you have eyes and ears, to see the extreme drop-off in bees, moths, fireflies, crickets, mantises? Do you really have no experience with other people talking about this stuff? I can't think of anywhere on the planet where these issues could have passed you by.
There is more "room" for normal people, but the true devotees I think are still a bit out-there. I have been noticing recently that I fundamentally think differently to my peers, but am completely at home with people I have met through common technological ideology.

A "friend" recently told me off for being too nerdy, and I couldn't help but think (maybe it's too self-centered of me, but still) "Fuck you, people like me built the world as it is now so people like you can spend all day playing video games".
Throwing them in the trash due to entropy of security.
The number of possible different images doesn't matter, it's only the number of actually different images encountered in the world. This number cannot be anywhere near 2^256, that would be physically impossible.
Hosting email for close to free on AWS ses
> I'm sure there are some things that could be done to speed them up further (e.g. offloading them to a backend where they can run faster), but there could also be some trade-offs with that -- for one, it would violate the "everything stays client-side by default" principle

I guess it's just me who hasn't yet seen any serious mc simulation running on a client I guess :/

The way I see this done whenever it runs fast is using c/c++/java. Another important thing with statistics is the mathematical validity of your results, regardless of whether they look right. For validation, most literature I come across uses c/c++/r.
This could be aimed at pre-emptively de-fanging one argument against end-to-end encryption.
By Apple* no less.
Interesting how you came to this conclusion, can you elaborate? I can understand the argument for how increasing law/regulations is detrimental for society in the longrun(ex. europe) but to directly cause a crash is a bit dramatic
GrapheneOS has https://grapheneos.org/usage#sandboxed-play-services so our users have the option to use Play services too, in a way that will provide more functionality and avoids losing the security checks and key pinning that are missing in microG. We'll be making it easy for users to install via our app repository rather than bundling Google services in the OS.

Google's Play client libraries are still used on CalyxOS by the apps using Play services. The Ads SDK is a fat library and works without Play services. Only the Lite variant of that has a hard dependency on Play. GrapheneOS isn't giving any additional access to Play when it's installed compared to what the client libraries have available.

WhatsApp is clearly a proprietary service too, and CalyxOS is integrating that into the Dialer app. Signal's server source code is not fully public either and went a whole year without even the incomplete releases that are now available again. Both are centralized, third party services integrated in a special way not available to other apps. Isn't that the problem with Play services? It is from our perspective.
This

2021 swatting
The biggest question is who is providing the hashes? Since possession of images is illegal, it has to be the government. So we have to trust the government enough that they won’t abuse it and stick in other hashes. Same government that recommended an encryption method that they figure out how to break it.
>> We have an economy that can't provide enough jobs

That's so wrong. There are more job openings right now than there are unemployed workers. Explain it to me, how is that "an economy that can't provide enough jobs"?
Except for Stranger Things, the shows you listed were only turned down by a few networks before being picked up, which is actually pretty typical in Hollywood (hence the term "shopping around").

And while I agree that it is possible for a low budget web series to become a bigger show on cable/streaming...Broad City succeeded because it was available for free on the biggest video streaming platform in the world (aka Youtube) and had the benefit of the recommendation algorithms and all the visibility that Youtube leads to. A niche website with a monthly fee will not give the world the next Broad City.

For comparison: Quibi also had a monthly fee, higher production values, dozens of Emmy nominations...and those shows still went nowhere until they were picked up and made available for free on Roku this year. Contrast to Dust, a similarly niche (sci-fi) distribution house that has seen multiple projects get picked up for feature-length development, and numerous talent get offered studio gigs, because it made all of its content available for free (even before it started using Youtube to host its videos).
That is a freak accident, the more common problem with condos is the management jacking up the fees and trapping people in the building because nobody wants to buy a unit in a building with outrageous fees.
I guess this would be an easy question to answer. Just collect data on how long each house stays vacant, you can get e.g. the average time a house in Baltimore will stay vacant, which type of house and which neighborhood is more likely to stay vacant longer, etc.

I did a quick google search for some summary on this statistic, but found nothing (unsurprisingly since I have never done this kind of research before). Since this is HN I’m sure if there is will somebody can provide us with a summary—or at least an answer—of whether this is the case.
That no production server on the planet runs Apple Silicon, so I'm building on, and supporting, a platform I won't ever run my software on. After quite literally fixing an architectural issue in OTP/BEAM caused by Apple Silicon, it dawned on me, it's literally nothing but increasing costs all the way down. If ARM gets widely adopted on Desktops I'll change my tune, but for now, it's pretty garbage in the real world. I spend time fixing bugs and dealing with bullshit on platform I'll make zero money from. This is compounded by the fact, I've quite successfully and happily moved to Linux for my workstation. Like there's nothing in MacOS I miss, not a fucking thing... because Linux in 2021 is all the good things of an x86-64 Mac with the ability to play nearly (any) game.

In MacOS, I've never been able to to play games (relax) and be productive on the same machine. Now, I am on the daily, and it's literally fucking free.

If I hadn't spent a few weeks slogging out a fix for an arch issues on Apple Silicon, followed by a successful move to Linux there's no way I'd have this perspective... but some-fucking-how... I did and so I do.
Honestly, I wouldn't have been able to tell you this two weeks ago. I know all this now because completions in a language I don't normally use felt off somehow, and figuring out the solution involved going deep on how Emacs handles completions. That ended up not being relevant to the root cause, which was a change in Doom causing snippets to be overvalued in LSP completion, but at least I know a lot more about vanilla completion methods now!
I like living out in the country on a large private wooded lot. I have lived in dense cities where I could get groceries and other necessities within a short walk, and with pervasive public transportation. Hated it. I like space and seclusion. I like being able to drive anywhere to get what I need, when I need it, and not having to wait for a bus or a train.
> "The National Film Board of Mars presents: WHAT ON EARTH!"

This is great, what fun!
Sure, the top few percent of the intelligence scale get systems just fine. The average college educated person finds complex systems thinking, well, complex. Huge swathes of the electorate find it so confusing that they are easily fooled by BS arguments, disinformation and lies, and vote emphatically directly against their own self interest.

Id say that once it gets down to a level of intelligence where the person can tolerate the existence of the distraction diet (well-said!), they are below the level of systems thinking.

As Einstein said: "Thinking is the hardest work there is, which is why so few people do it.".
Photos in iCloud photos are "encrypted". They are not end-to-end encrypted. Apple retains the keys. Apple can and does decrypt the photos for various purposes including for law enforcement. The encryption poses no obstacle to scanning the photos in the cloud.
You must live in an entirely different world if you think this will only be used to detect child porn.
We gotta stop with the China bogeyman every time a privacy issue comes up. This is a feature designed by an American company for American government surveillance purposes. China is perfectly capable of doing the same surveillance or worse on its own citizens, with or without Apple. China has nothing to do with why American tech is progressively implementing more authoritarian features in a supposedly democratic country.
https://www.makeuseof.com/best-android-rom-for-privacy/
- so, how did you get there?

- well... they needed a woman to meet the quota
I remember growing up I’d see the mosquitoes. Tons of them and you could tell when they bit you or landed in your arm.

Nowadays though, I feel like I don’t them. They seem invisible or not even there anymore, until I get home and am trying to figure out how they got to my ankles.