skysight-inc/HackerNews huggingface dataset:
One of the most important is that you can't iterate over all the UUIDs. How many data leaks have come from people incrementing an ID in a URL?

This is so common, I've experienced this myself as a student with a summer job: the company I was working for used an online service for their payroll, I accessed my pay slip one day and changed ?employee=123 to 124 in the URL out of curiosity and it loaded the data for a different person in a different company. They fixed it incredibly quickly once I told them about it :)
> I haven’t seen a similar ones from a reptile company

I know this is a typo, but it's also an excellent pun.
Hi! One of the authors here. We're using MongoDB to store caches A/B test results (among other things), which are deeply nested JSON objects. MongoDB let us develop features really quickly so its been a great choice so far for us. We're willing to add support for another data store if there's a lot of demand for it.
Just a question: if they turn these images into hashes, does that mean it only finds very specific images?

That is, if someone has some well-known image on their phone, then it can find it, but anything taken themselves is safe?

Doesn't that make this a bit pointless since I don't know anyone that saves images from the internet to their phone. That's weird, right?
Both would break old code for users. If you don't want to update your code don't update your dependency.
If I were to buy a laptop, it would be the Framework laptop that just started shipping. It doesn't have a Ryzen chip, though, so that's a deal breaker for me. Otherwise, that laptop ticks all of my boxes.

Phone-wise, there are many options to choose from. I like the idea behind the Teracube 2E[1], as they take some of the principles behind Framework and apply it to phones.

> On cloud: I've considered executing on a NAS forever, but I'm unsure where to start.

Depends on how much you want to tinker. You can't go wrong with a Raspberry Pi and some external harddrives, but there is also dedicated NAS equipment that requires less setup and maintenance, some of them are Linux based, as well.

[1] https://myteracube.com/pages/teracube-2e
An endlessly regenerating playground teaches AIs how to multitask
Thank you very much for your kind words! Feel free to reach me out when you have a use case, I would love to help :)
All: please don't turn a thread like this into a same-old flamewar about race. It's tedious, nasty, and never changes. HN is for curious conversation, and there's zero curiosity in that, obviously. If you want the sort of angry activation that comes from repeating the same thing over and over, please find some other place to do it.

These guys have identified a market opportunity and are going for it. There are a lot of interesting aspects to discuss. If you don't want to do that, there are other threads to read—you don't need to muck this one up.

As for "how is X for black people a thing" - come on you guys, BET was founded in 1980. https://en.wikipedia.org/wiki/BET

https://news.ycombinator.com/newsguidelines.html
> you can make encrypted phone calls directly, using the built-in integration for Signal and WhatsApp calls

Does this mean WhatsApp is automatically installed with Calyx, or just that there are extra features if you manually install it?
Ridiculous, specially considering OS X's display server is actually rooted on Display PostScript of all things.
Yeah, my biggest concern with this is that it just sounds like they spent funds on a toy and are trying to find justification for its use.
> "only Apple has the capability of rolling out this system"

I guess this is where I differ with you. No government was able to preassure apple to implement a complete client side verification till now but who knows how things will be now that they have a system in place that can be easily modified.

Anyways I hope your prediction turns out right. I live in a place where privacy laws don't really exist. The last thing I want is any system that can be easily exploited by authorities to crush dissent.
Do you not see a difference between Cambridge Analytica and AdObserver?
I think a certain geographical segment of America (coastal areas mainly covering NYC, LA, SF, Seattle, Miami, and a few others) is frequently portrayed in the media, but this segment of America is not actually representative, and over-represents itself.
Doesn't the Microsoft Android support require an Amazon account, though?
I don't believe that a prior thing which lacks a new advancement means the prior was a mistake or a failure. We're a creative species that strives for improvement. The first running shoe wasn't a mistake nor was it a failure. But the ones I use to run 40 years later sure have improvements.
That's part of downvote culture -- rather than verbally disagreeing, just press a button. It's easy. You don't have to present a counter-argument, you just begin to bury the opposing side. Everyone adds a shoveful of dirt and eventually that thing is just ... gone. Wished into the cornfield.

And it feels good, too. You've done your part, helping to make that sort of thing vanish.

Now you've seen how it works. That's why real engagement is so very important, it allows us to communicate and specify. What would a real commitment to privacy look like? Now we know that it isn't just a press release and a bunch of shiny happy faces (carefully chosen) holding Apple products. Now we can start talking about what a real commitment to privacy looks like in the world.

I know you think laws and legislation are a good idea, but my guess is that this is a big no, or we will get them but with all kinds of loopholes for three-letter agencies, or no penalties specified for infraction.

We know we won't get any kind of legal punishment, that recent ebay case is a fantastic example of the golden parachute you get.

Perhaps commitment looks like a bond held in escrow. If my Apple TV is found to be exfiltrating the filenames of everything in a network share, the five million in that escrow account gets kicked over to the EFF. Stocks could be held out in reserve.

Essentially, commitment looks like the Sword of Damocles, held over the heads of these corporate actors, and scissors are to be held by people who do not like them much.
And a sub-question: doesn't that make this ideal for checking for copyright infringement instead?
> they cannot do this for stuff that has already been stored.

That's a very simple software update.

Every year iOS gets more images the automatic tagging supports (dogs, shoes, bridges, etc). And if you add a friend's face to known faces, it'll go and search every other photo for that face.

It sounds absolutely trivial to re-scan when the hash DB gets updated.
I literally hate Comcast.
Was that the one that described how to remove the battery it's not locked (which it is), in case someone is being "brutalized" by the two-foot-tall, 4MPH robot that has no way of hurting a human being? Unless they're dumb enough to, say, stick their fingers into its leg joints while trying to remove its locked battery pack.

That was so embarrassing.
I didn't say we had to live in the house while a fire burned around it...
Steps 2 and 3 are unrelated to the gallery. The gallery entry is basically a registered url that takes you to the app, to trigger a login (2) which triggers provisioning (3) in your tenant. So you can visit any app and add it to your tenant by signing into the app. Lots of folks want a gallery entry though, so that's what the docs focus on
FWIW, for some accounts I use a second profile via `thunderbird --new-instance`.
I don't think half-life means what you think it means. A substance with a half-life of five years will not be gone in ten years.
Nikola's Milton turns to lawyers who defended Tesla's Musk
yes theoretically.
The tweet literally says:

>The thing about semver major version numbers are that they don't mean new stuff, they're a permanent reminder of how many times you got the API wrong.
Glad to see initiatives like these receiving some attention again.

There has been a trend of narrowing focus exclusively fixated on vaccines - despite the evidence that combinations of existing medicines can greatly reduce the risk of hospitalization and death, especially when COVID-19 patients are treated early [1][2].

The key is that many previous studies evaluated the effectiveness of specific drugs in a standalone regime.

However a multidrug approach based on antibiotics, corticosteroids, and antithrombotics - and delivered early on in the symptomatic phase of illness - has tremendous potential to reduce poor health outcomes due to SARS-CoV-2 infection.

Although the OP does not specifically mention this exact approach, this is a step in the right direction.

[1] Pathophysiological Basis and Rationale for Early Outpatient Treatment of SARS-CoV-2 (COVID-19) Infection
https://www.amjmed.com/article/S0002-9343(20)30673-2/fulltex...

[2] Multifaceted highly targeted sequential multidrug treatment of early ambulatory high-risk SARS-CoV-2 infection (COVID-19)
https://scholarlycommons.henryford.com/cgi/viewcontent.cgi?a...
Red Firefox Cult - Repzilla!

Blue Oyster Cult - Godzilla.
5 points gold
3 points silver
1 point bronze

Those were the calculations for video games winter games/summer games in the 1980. Why not use that?
So, it's like creating a special data type for each "counter-style" identifier. For example suppose a StudentsId which is not an integer, it's a StudentsInteger, so it cannot be mixed up with UsersId. Admittedly that seems more clunky than just using uuids.
Solar.

While solar will probably have some end of life issues, I don't they will be near as lethal and expensive as nuclear.

Plus the inevitable cost overruns on the front end.
Oh yes it can; toolkits, on the other hand...
My first thought was along the same lines. Especially for the major version, there's no need to imply there was a failure. Version 1.0 was the right thing at the time. Version 2.0 means something about the requirements or use cases changed in the intervening time, so it's necessary to track that change. Minor and Patch have the same implications, although in my mind a "patch" can also happen when there's just the sort of mistake the can creep in because of human imperfections.

In any case, it doesn't matter except to consumers of the API who need to know the level of backward compatibility.
There's spatialite.
I don't know the answer to your question, but consider this related question. "Do some companies feel financially incentivised to do exactly this?".
Are these "researchers" going to be charged the same as the martyr Swartz?
> Yes, policies can be based on fears and opinion, but some numbers and rationality usually help make better decisions.

Sure, but you aren’t the decision maker. This is a political decision, and so will be based on the balance of fears and forces at play, not a rational analysis.

It doesn’t matter how right or rational you are. It only matters how many people think you understand what they care about.

If the Hacker position is ‘people shouldn’t care about child pornography because the solutions are all to invasive’ so be it. I just don’t think that’s an effective position.
It all looks dyed, not recorded — and that's because it was.

This is wrong. Technicolor looked unrealistic because of insufficient technological development, not a weakness inherent to the method. The camera in your smartphone uses a very similar color-filtering technique to produce accurate colors.
He's selling his apartment(s) for over $2 million in profit, so yes he would end up in the millionaire tax bracket. What he pays himself annually doesn't matter, since that year his income would be in the millions. What's the issue?
> It reminds me of those 3D user interfaces in the movie Minority Report. Very cool-looking and futuristic. Who wouldn't want that? The answer is anyone whose arms would be tired after a couple minutes of flailing around like that.

"Gorilla arm"[1]

[1]: https://en.wikipedia.org/wiki/Touchscreen#%22Gorilla_arm%22
We're definitely interested in supporting some personalization use cases in the future using contextual bandits.
KNX just works. Wires.

Just a small issue: huge installation cost (because wires, but also software license)
The bill makes it illegal to write code or validate blocks without issuing a 1099 to users. That would be impossible, so it’s illegal to not do the impossible. The amendment makes the above not illegal. Their logic, not mine.
It also scans every photo that an iMessage user sends/receives.
Having worked around k3s quite a bit, one aspect I miss from minikube is docker image loading. This hurts for using k3s as a local dev cluster vs minikube & kind.
Using the uuid as a PK do to cursor based pagination for one.
Seeing a project on a pretty high major is a positive signal to me. It tells me that they understand semver and know how to use breaking changes. Of course if a project is just very stable and sticks to 1.x, that‘s great too. I don‘t consider that a negative signal. Purely anecdotally, 3 is the scariest version number to me.

React sets a pretty good example here: react 17 is the most boring release in the world. The react team are not bad API designers that made 17 major mistakes. They may be the most considerate and pleasant API designers in all of frontend, actually.

React Native is on 0.64.4 (?) not because it‘s unfit for production but because they know the level of guarantees they can make about version upgrades is zero.
> BTC would break the money printer

How? What would be the scenario here? The Fed stops issuing USD and starts managing the economy using BTC? Why would the US ever undermine their own sovereignty by doing that?

Even if I give you that BTC is a viable currency, it's another currency alongside all the others. What is the viable path to it becoming the primary currency of a country without that country's consent? The IRS is still going to want your taxes paid in USD.
I'm using GrapheneOS on a second device for various reasons. The biggest issue for me is that not all apps work / run. However, I have limited app requirements, so that is fine. If you want to run all social networks, Uber, Lyft, and so on, there might be the one or other that doesn't work (I didn't try them all). However, you can always use the mobile web offering I guess.

In terms of classical smartphone features, I know what I don't get out of the box due to the lack of Google Services (Assistant, Picture Sync, etc). That wasn't an issue for me as it is a secondary device.
It might be, but whether it is depends on your threat model.

If you need to obscure both when in time and where in space, then UUIDv4 is a better option.
IIRC, the method of beamforming utilized by their satellites limits ground station density. This is not really an issue at the moment as they are not targeting dense areas.

Once they are 'out of beta', I expect either starlink themselves or a 3rd party to start offering 4g/5g service backed primarily by a ground uplink station. This would allow wireless sharing of one ground station in dense areas. I would imagine that there are many situations where being able to install a cell data station without the need for a physical internet connection would be cheap and effective.
Interested mobile users: Please rotate your screen to see "How the comparison is supposed to be displayed"

Interested HN mods: Yet another request for horizontally scrolling code blocks instead of line wrapping.
My projects stay at 0.x because they never quit failing...
That was... my point? My point is that "black person" is a problematic and overloaded descriptor. It can imply a cultural group ("american black culture") to which a light-skinned person can belong (can't they?) and which it should be tolerable to criticize.

It can also imply a simple physical descriptor of traits belonging to African-descended people. Is an ethnic Nigerian born and raised there black? Do they belong to "American black culture"? So are they black and not-black at the same time? Do you see the problem(s) here?
Google co-founder Larry Page is a New Zealand resident, government says
I thought about that. And I ask, how so? A lot of the examples I could think of are about current law being applied to technology that not only did not exist when the law was written but, in a lot of cases, the people writing the law could never have even imagined the tech/situations the law was being applied to now.

I'm certainly not saying bad laws haven't been written to address tech and the police but I don't think that means we can't keep trying.

As another poster said, I think the bigger question here isn't about whether or not a robot dog is doing this, it's why are the police handling health issues at a homeless shelter? Why aren't social/healthcare workers doing it?

The article doesn't say so maybe the police just loaned them the dog to do this but that's not the impression I get from the article.

Bottom line, I do get your pessimism, I generally share it these days. But I think it's also important to not just give in and hopefully we learn from past mistakes and can do better.
Ideally you'd want spot a change without comparing them side by side, I think.
> writing bash scripts that shell out to kubectl and yq

We did this for a while, from a container rendering out our stack in Go, when server-side apply was not a reality yet.

The main issue is that lifecycle management of resources beyond writing code for a single deployment is hard to do with the typed clients, and the dynamic client used to be even more of a mess than it is now. There's a lot of implicit magic happening, baked into kubectl in a non-reusable way you just couldn't replicate before 1.16.
I don't know if they have this, but a good feature a privacy centric android experience would be, to have a simple accessible log of what app accessed what using which permission.
Nice project! PostgreSQL has excellent JSON support these days, including the ability to query nested fields which may be beneficial to your project.
I'm not in the target market for this product, but the hostile reaction it's engendered would kind of seem to be its own advertisement for its utility.
Out of curiosity how come there are no down vote buttons on comments in this thread?
The best comments are about intent. I can read the code and tell you what it does, but I have no idea if that's what it's supposed to do without knowing the intent.
I tried pretty much all of them and settled with kind.

It takes 1 command and 1 minute to spin up a 3 node cluster from scratch, everything works the same as you would expect on a real managed Kubernetes cluster and it took a few lines of YAML to config the cluster so that the ingress works in such a way where you can write your manifests exactly how you would on a managed provider. It's also super easy to get your local Docker images into the cluster.

Did anyone else come to the same conclusion? Maybe I'm missing something but you can't really ask for much more than the above.
This is literally the only tweet I've ever seen posted to HN that was worth upvoting. It's not an entire book spread over 200 posts, it's just one nugget of useful info
Hmm not sure what you mean. The hashes are shipped with iOS, and then (if parental controls are enabled) compared with the hashes computed against the unencrypted data on-device, and displays a warning to the user and their parents.

I'm not sure how the image is displayed on the parents' device - it could be sent from the child's device, or the image used to compute the hash that the child's image matched could be displayed.
AdObserver does not "harvest your data", unless "you" are an advertiser on Facebook.

Some people are allowed to send you a bill for water and power. Some people are allowed to deliver your mail. Some people are allowed to write you traffic tickets. Others are not.
I do everything you've said, essentially 'by accident'. I don't have a car, don't fly, and don't live in a remote area. It's basically a function of how good the infrastructure is. If you live in a dense city, with good cycle lanes, and decent train connections, you don't really need a car. Not flying is also enabled by this.

Everybody could definitely live like this. I would actually prefer it - cars degrade my cycling experience. I think it's just a function of shit urban planning that makes this impossible in some places.

It would be a major social change, but no more major than everybody moving out of cities and into suburbs in the first place.
American police carry guns.
Not that this discussion is pivotal to my point but the court wrote that:

>“[T]he Commission’s treatment of Phillips’ case violated the State’s duty under the First Amendment not to base laws or regulations on hostility to a religion or religious viewpoint.”[0]

Not only is that utterly unclear, it doesn't even make a distinction between "they said something that offended Phillips' religion" and "you can't make/apply laws that are hostile to Phillips' religious viewpoint". I don't think there's a queer person in America that would perceive "vastly different outcomes" from a ruling like that.

[0]https://www.americanbar.org/groups/crsj/publications/human_r...
I interpreted his comment as saying he did not ask permission. Probably he'll be fine as long as nothing he did was explicitly against any rules, even if it is clearly against the spirit of the rules. More likely still, no one will ever find out.
That's on our roadmap. We originally built the tool as a multi-tenant hosted platform so storing configs in a database made the most sense initially. For self hosting, we want to support defining db connections and metrics using yml.
The Analytical Application Stack
MARKETING.PM.ENG is closer to my experience
Apple Discusses “Screeching Voices of the Minority” in Internal Memos
Yeah the startup is defunct since a long time.
Is this better?

+-----[first]-----+
| .=o. . |
| . *+*. o |
| =.*..o |
| o + .. |
| S o. |
| o . |
| . . . |
| o .|
| E.|
+-----------------+
+-----[second]----+
| ..=o . |
| o 0+.. o |
| X.o. o |
| . * . . |
| S o . |
| o . |
| . ..|
| .o|
| Eo|
+-----------------+
The 50€ for a Sailfish OS license also pays for a (proprietary) Android emulation layer (called Alien Dalvik, originally by the Miriad Group) that works really well. More here:

https://jolla.zendesk.com/hc/en-us/articles/201440787-What-A...

You can even install microg or full blown Google apps if you really want & are fine with the implications (still less problematic having Google stuff in the emulator than on a native device IMHO).

There have been actually also some attempts to get Anbox running on Sailfish OS as the community ports dont get the Android emulation layer, only officially supported devices.

As for major version kernel update issues - they did not, but I am not really sure it's that problematic in the end.

So basically they base their port on the best kernel version + blob bundle from the Sony open device program at the time, then stick with it. Apparently the way updates of these low level things work on devices originally shipping with Android are too stupid and fragile to make supportable over the air updates possible for Sailfish OS.

They could port the adaptation to newer bundle from the open device program and either mandate re-flashing or support two versions based on different kernels on a single device. Both not very good options imho.

Still, not updating the major kernel version does not mean the Don support the devices or newer rebuild the kernel. All the Xperia devices in the program are still getting OS updates, including security fixes for the kernel. They actually only recently dropped support for their Jolla 1 handset released in 2013.

It's just when you really need the latest kernel features or the most advanced Android emulation layer you might need to get the most recently supported device.
Ok I think I get it. Maybe more “African American” than “Black”