skysight-inc/HackerNews huggingface dataset:
There is a type of map called "isokeraunic" which shows frequency of lightning strikes around the world.

Additionally, as soil conductivity changes what is known as the "step potential" being the voltage induced in the ground between your two feet.

I am not sure of the particular case for Banglafdesh but these are the key factors. People in Zimbabwe who sleep on the ground which has an unfortunate mid range conductivity are also subject to a high incidence of lightning related deaths.

I have seen in Indonesia Bangdung that on the mountain some houses are enclosed in virtual faraday cages of lightning conductors due to frequency of strikes.
Does the "bf" stand "brainfuck", that being another ridiculously hard language?
I assume you're using some uncommon WiFi chipset without binary blob firmware and controlled by well analyzed open source drivers. If you're connecting to networks over anything more recent 802.11n such chipsets are non-existent, AFAIK.

Or perhaps you're using a device where the WiFi component lacks DMA and similar mechanisms to access or twiddle, directly or indirectly, memory or other components; controlled by a well analyzed, open source driver, or maybe a sandboxed driver running under a microkernel. This is more likely, except it's almost certainly not open source and we're basically taking the vendor's word regarding the architecture and correctness of implementation.
PHM is excellent.

Dark Matter by Blake Crouch is also a good read. Fast paced and interesting ideas.
Tl;dr: Apparently Phoenix is an Erlang / Elixir thing, and something for those of us not on Erlang to pay no slight attention to.

It would have been better to put that in the first paragraph, or even the title, so we would not need to scroll past reams of breathless hype trying to discover any single thing that we might have some use for someday.

A million connections on one server is no great trick today. It's table stakes.
Isn't one of the merits of a policy, whether it is, or isn't tyrannical?
I would be very sceptical of everyone promoting books by Peter V Brett. They are - to say it politely - not particularly good.
Never heard of any of this, but $1000 credit lines and 4% merchant fees? Are regular credit card offerings in Australia that poor?

I guess the trick is the flat fee, to call it an interest-free instrument, but that advantage doesn't seem worth it.
> Wherever you have 2FA enabled (other than email magic link), you are generally SOL if you lose your phone.

I realize this is not exactly widespread (neither on the user nor the provider site), but as we are on HN: Luckily security keys exist and are cheap enough to have backups. I hate having to use my phone for 2FA (but also realize that I’m in a tiny minority there)
Delivery drones are constructed for fairly narrow usage scenarios, and will get more specialised with time. For short hops with light loads air drones are already better than traditional solutions if they are allowed to be used as intended.

Air drones span orders of magnitude in cargo capacity, speed, distance. Drone ships, drone cars, ...

Don't use a hammer to drive a screw.
It was a U.K. university building

They asked what ports we wanted (sigh), we said all, I suspect the ports were opened but MITM wasn’t disabled. Oddly it either passed through u mileages or it broke connections completely without inserting a fake cert.

Even more oddly GitHub was blocked but stackoverflow was allowed.

As we turned up in the vans on the Saturday morning and the recee team hadn’t clocked this (to be fair most https sites worked fine) we couldn’t get it changed - or the process for changing it was far too much given the other stuff we had to set up and the ease of the workarround.
> While the difference between innocent images and something explicit easy for a human to identify, I’m not sure I’d trust AI to understand that nuance.

In this case it’s not AI that’s understanding the nuance, it’s authorities that identify the exact pictures they want to track and then this tool lets them identify what phones/accounts have that photo (or presumably took it). If ‘AI’ is used here it is to detect if one photo contains all/part of another photo, rather than to determine if the photo is abusive or not.

Although there is a legitimate slippery slope argument to be had here.
Remember when the pushed those "criminals"-confession videos? So hyper-creepy. Like here western media are a thousand people confessing to crimes at gunpoint, that proofs that all we do is okay.

Not a single mention of that episode in all of western media.
A flag of truth, hammered into the no-mans land of the western culture wars.
Like seeds of a pomergrenade, we shall identify cringy propaganda by the slogans shoved into it ;)
If you don't believe you have an ideology, you just don't know what ideology means.
Your original comment is very ideological in itself.
> That said, our early customers are looking to deploy Keyri as an option parallel to password-based auth, which, while not ideal, is a smooth way to transition their users to a better UX that just happens to be more secure.

While you should certainly hope that this is just a "transition step", I am sure you are treating it as a business risk as well: companies will frequently have people who are downgrading their security and convenience by moving to Keyri (eg. people like me :), and they will always push back. After a while, those companies might decide that it's not worth it to keep both options available, Keyri will be the one to go (some will, of course, decide otherwise). I am sure you will be tracking this, but it's worth pointing out that this risk is there and not insignificant :)
I think I spent more time with Mario Paint when I was a kid than any other video game I've ever played.

It really had no reason to be anything like as good as it was, or as full-featured.

The music was incredible (even the sample sheet music!), the tools were incredible, and still hidden features and Easter eggs permeated the whole thing.

In retrospect I'm sure it was a bigger project Nintendo was working on to make the SNES a more general-purpose tool in people's homes at a time when most families couldn't afford a computer.

Whatever. So many good memories brought back by this!

Especially this. It's just joy in music form:

https://www.youtube.com/watch?v=_dkSZPP49bI
> It's possible to implement anything correctly with dynamic types but the point is static typing makes it easier to do so

This is where the argument became circular and we can basically stop.

The parent claim (by chriswarbo) was that, for example, SQL injection attacks were, in fact, incontrovertible proof that SQL injection attacks "are classic type errors". That simply isn't true, at least not in the sense of static type checking (and only made true, as I mentioned above, by conflating "static type", "type" and "model" into one incoherent gooey mush).

chriswarbo's incorrect claim was in response to my referenced article, The Safyness of Static Typing [1], where I (as a prelude to my actual point) look at the evidence for the claim that "static types make it easier to implement something correctly".

There isn't any.

Or to be precise, there isn't any that passes any statistical or other standards. What little evidence there is goes both ways and has, at best, tiny effect sizes.

And yes, that article is somewhat old, but the evidentiary situation has not changed, despite further attempts to make the claim that static typing is provably better. Claims that were resoundingly debunked.

So that's the background. With this background we have the idea that SQL injection attacks are somehow evidence for the problems with dynamic typing, which they are not. I can have a statically checked string type and have exactly the same SQL injection attacks, and in principle, checking code needs to run at runtime against the dynamic input it is represented with. Which I think we agree on:

> It's possible to implement anything correctly with dynamic types

but apparently chriswarbo does not. So that brings us to the circularity of the argument:

> but the point is static typing makes it easier to do so

This hasn't been shown. It was claimed. And it was claimed that SQL injection somehow proves this. Which it doesn't, because we agree that what prevents the attack is the code that runs, the model that executes. It may be that such code is easier to write with static types, but that hasn't been shown, it is just claimed and the claim repeated in support of the claim. Circle.

[1] https://blog.metaobject.com/2014/06/the-safyness-of-static-t...
In case you still want in on the action and don't mind another game, Mindustry is also fantastic. Combined with a tower defense gameplay, its factory mechanics are easier and it's broken into levels which are much shorter than a typical Factorio playthrough.

https://mindustrygame.github.io/
So we just need to fix Israel-Palestine conflict first and then zero covid can be achieved? Not.
Kudos to the team and injecting some sobriety into this space
Yeah I remember I had a colleague, a Chinese student, very nice person, we were going along nicely, until one day I mentioned the Dalai Lama, and he exploded. It seems like the brainwashing was very successful - he believed that the DL was a monster, killer, some demonic being aiming at the destruction of China and so on. I couldn't believe my ears. This person seemed otherwise completely normal.
"Yellow Peril" is trendy.
Facebook didn't publish them under their own name. Corporations did it, paid or not paid, who cares. The point is the users must be intelligent enough not to use facebook as their news and learning platform. If they want to believe whatever and decide the fate of the planet, so be it. Natural selection wins, we die as stupid species and the planet wins.

If it wasn't facebook, they'd find it elsewhere. Majority of the people is already opinionated and irreversibly ignorant.
The glass heart citizens have no choice. They participate or grandpa and grandma still living in the mainland get it.
No, I am not saying that you cannot make any compile-time guarantees. I am saying that these have little to nothing to do with the actual securing against SQL injection attacks, and that the idea that static types help there is simply an unsupported assumption (and a circular argument, see parallel post).
People have become obsessed with disease and risk. Wonder what caused that ;)
> the solution is getting people educated so they can form their own opinion. That more or less already worked

Are you sure? The spread of batshit crazy and easily debunkable conspiracy theories such as Q, flat earth, Pizzagate, Covid is fake, etc. and empty populist political movements and people ( UKIP, Brexit, AfD, Trump, FN, etc.) would imply otherwise.

Too many people are thoroughly incapable of forming their own opinion based on reality and actual provable facts.
I've been in security in various roles for a while now and what I've found is, in companies where IT is treated as a cost centre and Security say no to stuff, Shadow IT will always be rampant.

If you put someone in business into the position of choosing between getting their job done/making money and adhering to a set of IT/Security rules, I can tell you which one they'll take :)

How do you avoid this? Well it's not easy and it's not cheap. The most important part is ensuring that IT isn't treated like an expense, but an enabler. then you work with your business teams to make sure they have the services they need to get the job done, as safely as possible.

Security teams shouldn't be blockers, but advisors. for this to work, it needs to be acknowledged that the business leaders own the risks ofc.

That's massively easier to write than do, but from what I've seen of various companies, it's pretty much the only way to have a chance of doing things without huge amounts of shadow IT.
Devices with radio capabilities (i.e., all mobile devices) must be designed to prevent executing "unauthorized" software.
I agree with you. I remember Snopes being really useful. I don't think I ever foresaw it being corrupted... your idea that politics corrupted it seems plausible. On the other hand, more generally, it seems like whenever any entity becomes so useful that many eyes are on it, it becomes like a magnet for corruption. In other words, it becomes a tasty target. Maybe Snopes is a victim of its own success.
Of course, I completely agree. I don't see how what I wrote contradicts that.
Fixings used to make Renown CBD Gummies?
Since we suggested premium and quality, it is basic to back up that affirmation. At Renown CBD Gummies, they are utilizing forefront social gatherings and enhancements to pass on an ensured and useful redesign. Really, cannabis crops are first rate for their picture and the concentrate is 99% isolated as an unadulterated pearl. This suggests that they go through wide testing and changes to guarantee that they are just giving the best cannabinoid thing to their purchasers. Your thing is liberated from liberal metals, pesticides, solvents, and some other new substance.

https://scamlegit.com/renown-cbd-gummies/
no one assumed that? The point is everyone can say whatever that person wants, including ANY journalists. Being afraid of some "government policy" is a paranoia coming from countries where the first point does not apply, projecting their own fears to others
So, how much of this data is speculative hoarding, and how much energy is being wasted here?
And of course before a breach, every company thinks "that won't happen to me".

I'm sure that breach was expensive to Equifax internally, but as you say 0 external consequences mean, what company will change their ways...?
Make Every feature Binary: A sparse neural network for improved search
If you have not already, please check out the wonderful alternatives to iOS/Android that do not trample over your privacy, see https://grapheneos.org or Debian for mobile (which is still very much a WIP).

It is simply unacceptable for a company or government to scan your property that you not allow.
I disagree. The guardian article reports that according to some US senators, facebook permits ads that contain 'demonstrably false claims'. However, most of the article is about misinformation that is actually more subtle than having false claims.

It seems you mistake misinformation for false claims. They are not the same. Misinformation is a truth claim that has the intention to deceive in order to further an agenda. It's doesn't even have to be false!

For example, Shell used to push really hard that it 'planted 5 million trees' and invests in renewables in the Netherlands. The intention was clearly prop up a reputation as a green company. But actually, that investment is not even a blip on the radar compared to their continued investments in fossil fuels, including exploring new sources in the arctic, which is completely incompatible with the Paris agreement. This is pure greenwashing and rightly called misinformation, even which there isn't a single false truth claim.

Your post, on the other hand, has a couple of false claims, but it clearly isn't misinformation. Unless it's really good and you have me fooled.

By the way, the 404 isn't really the guardians fault, InfluenceMap seems to have (re)moved the report.
I think you use "low level" in a different sense than is common. Low level (and high level) typically refer to abstraction level. SQL certainly have a very high abstraction level. But given it is a domain specific language it doesn't have much support for functionality outside of its intended domain (except through non-standard extensions). But a kitchen-sink language is not automatically higher level than a highly focused DSL - typically it is the other way around.
Because I'd like to advocate for a world I want to live in without pretending I already live in that world.

I don't want to hide behind anonymity, but that's how society is currently structured, and if I don't, there are still levers assholes can (and have) pull (ed) to make my life harder. If everyone were accountable, and not just me, that better world would be possible.
The problem with that approach is that social networks are where people are getting educated. For large numbers of people, social media is their gateway to other sources of information, including news, opinion & their interests.

> That more or less already worked and everyone tries to reduce dependence on fossil fuel, so this isn't even a problem.

Given that there is still large scale climate change denial and opposition to renewable power, I don't think you can be confident in that statement. Until recently, one of the largest polluters & economic powers in the world had a government that actively promoted fossil fuels over renewables and denied the fundamentals of anthropomorphic climate change. Environmental awareness & harm reduction is far from a given.
I found another source (https://www.macobserver.com/analysis/apple-scans-uploaded-co...) saying apple was already running these scans on iCloud using homomorphic encryption… in 2019. It doesn’t really make sense for them to run it on device. Apple has the keys to unlock iCloud backups on their server and a sizable portion of users have those enabled, so why bother to run these on device?

I’m not sure if it’s a rumor or not but there was a thread on HN the other day about Facebook exploring homomorphic encryption for running ads on WhatsApp and I wonder if wires got crossed?
Time to hit the liquor store. ;-)
There's SpaceX

https://www.cnbc.com/2021/06/04/us-military-rocket-cargo-pro...
Are Tech Giants Your Best Bet? David vs. Goliath?
The Internet wasn't always a place where Giants like Google and YouTube run the whole show and everyone is subjected to their restrictive rules and notorious disregard for privacy. Alternatives still exist
Yes, and this is something to worry about, not some small network.

Recently China said they would nuke Japan time after time if they decide to protect Taiwan against Chinese invasion. I'm afraid many ordinary Chinese citizens would be in favor of this decision because they simply believe their government.
For what it's worth, I would and do say that professionally (I haven't been interviewed in many years), so there's generally no need to make it seem like I wouldn't want some people to know that!
Decentralized Cloud Storage
I found about Internxt Drive, an encrypted and decentralized cloud storage. They have an offer right now where you can get 2TB for free using the code FREEUPGRADE
Thank me later :)
This but unironically for KDE. (UI wise)
This is what I would refer to as an "expansive" list - it also has Salvatore on it. Some people just plain like a lot of F&SF; far be it for me to "yuck their yums".

Honestly, if I pick up a glossy new F/SF book the odds are very good that it will be poorly written tripe, or at best, kind of a tolerable way to pass a little time.

If your taste runs more towards better written material, a absolutely necessary step is to open the book at a random page or two and read some of the text. If the text looks like a blogpost or the offerings of a barely literate teenager, you dodge a bullet, put it back (unless you like that sort of thing, in which case, rock on).

This test has spared me a number of terrible reads - quite a number of books with perfectly nice looking covers, good blurbs and an intriguing "back of the book" premise are written by people whose writing is rudimentary (which is not to say that I need an exotic prose style; I like the 'plain' form too).
I don't think Cambridge analytica is relevant here. The researchers there were shady and not transparent from the get go. They hid their true intentions by masquerading their research tool as a game. They never invited third parties to scrutinize their work, all in all they acted just the opposite from how the Ad Observer team acted.

Trust is difficult, but it's mandatory for a functioning society. We have tools to appreciate trustworthiness, transparency is one of these tools. Not being for profit is another good indicator.
I recall the online version of our student newspaper once wrote an article with some fairly generic criticisms of China's government having a very interesting comments section that week
(the guy who wrote the article went on to be a journalist for the FT)

Then I recall reading forums full of British supposedly mature adults reacting with similarly preposterous rage to a non-story about an Oxford college taking down a picture of the Queen, and I'm absolutely certain the Royal Family weren't paying them...

Pretty sure that China's actual paid propagandists are doing the difficult job of changing the focus of the attack when evidence of government shortcomings surfaces on Chinese message boards, not hanging around on niche English language forums which categorise politics as "off topic" in case California-based computer programmers' views of China aren't universally positive (or for that matter bombarding student publications of with the sort of outraged anonymous comments that look... actually pretty similar in tone to the letters to the editor by named undergraduates)
Im looking to do the same - this pandemic has made me feel quite claustrophobic about the encroachment of tech, and work into my personal life. Im planning on getting a dumb-ish nokia phone and leaving my smartphone at home to try and wean myself off it. What are your plans?
Not offended. This is a good reminder that this industry is far and wide enough that different people will see different subsets of it, and just because I observe something doesn't make it universal :).
As someone who used to work in a reputation management firm, this is considered industry practice regarding public engagement.

Chances are keywords of interest are monitored on common social media, after applying sentiment analysis, an analyst specialising in Public engagement is assigned to engage with the public in order to shape the narrative.
You're breaking the site guidelines badly. On HN, you don't get to sling accusations of astroturfing and brigading with zero evidence. Someone else disagreeing with you isn't evidence of those things. It's just evidence that someone disagrees with you.

Please read https://news.ycombinator.com/newsguidelines.html and don't post anything more like this. If you're worried about abuse, email hn@ycombinator.com, as the guidelines ask, and we'll look into it.

There's years' worth of past explanation at https://hn.algolia.com/?sort=byDate&dateRange=all&type=comme... if anyone wants more.
> Much better than 2,000-4,000kg driving machines being operated at street level by the people willing to do the work for the lowest pay.

No, it's not much better. Cars may be heavier, but they're constrained in their movements. They (mostly) follow the road network. It's easier to keep track of them, as you only have to scan the 360° plane around you. A drone could hit you anywhere, from any angle, so you have to pay attention to the whole half-sphere around you.

Additionally, cars are already here, and delivery services are only a small fraction of car traffic. Drone delivery will not displace any significant amount of cars from the streets, so drones will have to operate alongside car traffic. And I can't think of a better way for a civilian drone to cause large amounts of damage than crashing into traffic.

And, of course, car transportation is already in a regulatory straitjacket - one that was built gradually over the past century, rule by rule, one fatality at a time. It would be wise to not go through the same process with drones.
Presumably Apple is waiting for this project to invest a huge amount of time and resources and be almost ready to release before suing the hell out of them, in order to discourage similar efforts?