skysight-inc/HackerNews huggingface dataset:
Yes, but they're loaner units primarily intended to contractually obligate security researchers to work for Apple. I trust a security researcher using an official Apple device about as well as a Trump-funded 2020 election audit.

Apple uses the technical protections on the phone to make it very difficult to actually even be in a position to do security research without also being NDA'd. There is no owner override like there is on, say, M1 Macs. Apple's position is that nobody but them loads OS code onto your iPhone. Not even you - and you can't practically do any research or auditing on things like the CSAM scanner without having the ability to poke around in the OS.

If Apple had an owner override on iOS-fused devices, then we could load our own kernels, call into the neuralhash framework, and so on to actually validate that the system does what it says. But that would also mean that Epic could sell Fortnite skins outside of the App Store, and we can't have that. So instead we need to gag and muzzle security researchers... which also makes them no longer independent auditors of the iOS security model.
Wow, it exists. I dreamed about having something like this in the US, with the possibility of changing your private key if you visit the DMV. It would make a significant difference in the fight against identity theft, versus our current system of having a number of which only 4 digits are "secret" (and I hear those are sequential too. Worse still, they are the same 4 digits everyone asks you for).
What purpose could locking down the dev tools possibly serve? Madness.
Ah, and I have Firefox as the only browser on desktop and mobile with uBlock Origin installed.
In the 90s you went to a travel agent who arranged your airfare, lodging, even cab fare in between. You wouldn't find like an airbnb setup so easily, but Croatia is absolutely full of hotels even to this day. Honestly even today its easier to just pay someone to do that for you than fuddle with half a dozen websites to do the same on your own time.
Sometimes I wonder if placing all this important infrastructure under ground was a big mistake. Seems like issues like this and the Flint water crisis would be alot easier to remediate if the pipes were easily accessible.
How far off would you estimate a company like Boston Dynamics is from production then? (Say with existing levels of industrialization in the form of non-humanoid robots already commonly used as a benchmark/baseline)
I disagree here. There are innovative solutions for private decentralized encryption. Other countries have also already implemented similar solutions. Almost anything is better than a 9 digit number. The government also has the resources to hire some of the top academics. Companies have proven time and time again to only care about money. While politics is messed up in a larger sense, there are some divisions that are majorly effective and good at what they do.
CSAM in the database is confidential.

The question is whether the visual derivatives are checked against derivatives from the database or just against abstract criteria. That seems to be an unknown.

> However, it’s not clear to me that you can pull off all three simultaneously

Agreed. People here seem to keep assuming that you can, but so far nobody has demonstrated that it is possible.
Show HN: Upload a meal photo and get recipes to make something like it
The poor security posture of a hospital is clearly a negative externality that poses risks to public health - I don't see any other way to discourage these outcomes other than enforcing heavy fines, and criminal prosecution in the case of provable negligence.
What's the alternative though? US citizens with non-American spouses would have to leave the US or live apart from their spouse. Assuming the spouse couldn't independently qualify for permanent residence or a work visa.
A quick google search suggests that a typical basic sewage treatment plant doesn't do a great job of removing pharmaceuticals. But we already do have some plants which are pretty good at it. So this isn't even really an engineering problem at this point, it's a political(funding) problem.
Divorce rates peaked in the 80s, and have been declining for decades. It is still not a good statistic, but we're getting better, and more than 50% of marriages last. Part of the reason they are lasting is that being in a non-married relationship is gaining more acceptance, so there is not such a drive towards marriage. I'd say that at this point, if you feel that you need protection from your spouse, you simply should not be getting married in the first place.
I'm really curious if it's possible to quickly produce small, safe nuclear reactor in high quantity, it might be a good solution to quickly remove coal as an energy source.

I'm pretty sure it's far better to mine a lot of Uranium that to use coal.
Valuation seems out of whack - that said money is cheap and trying to find a home right now. VCs need returns so why not?
It's purely rhetorical but - the specific 90% figure aside - it's fairly straightforward that not everyone can be the best. Everything else is just figuring out what sort of distribution you have.

In many fields the definition of "crap" depends, after all, on what the rest of the field's output looks like.
If cities had really good public transport, and I mean really good services, plus urban planning moved on from current zoning housing / commercial / work into more mixed zone approach the demand for self-driving kind of disappears.
Someone did put the blame on COVID! Not sure if it is Tmobile or Reuters

From a Reuters article on same news

https://www.reuters.com/technology/hackers-steal-some-person...

> T-Mobile’s data breach is the latest high-profile cyberattacks as digital thieves take advantage of security weakened by work-from-home policies due the COVID-19 pandemic
The Telegraph is sort of a propaganda rag masquerading as a “serious” newspaper. It serves the interests of the Tory party similar to how The Guardian is always left-wing in everything it does.

Don’t listen to me - Dominic Cummings is a part of the Tory Party hates the Telegraph and has been highly critical of their pretend journalism on Twitter. The telegraph is a part of a power structure, not a real newspaper.
You're right: I shouldn't have attacked you. It's a violation of HN rules.

I've deleted that part of my comment.
It can be, but what's ensuring that format when you read in a JSON file? JSON is one of the formats Pandas can read, but it has to be structured in a format the python library can read in as tabular data. Excel would have the same issue as would any program that is consuming tabular data. At least with CSVs, you know the data is tabular.
In many countries a 40k a year developer IS a 100k a year developer in US.
If you find Postman too bloated, a great alternative is Insomnia (https://insomnia.rest/) which is very similar when Postman just started; a simple, very useful tool without all the corporate bullshit and lots of unnecessary paid features packed in Electron.
If you look at their feature
matrix they seem to plan to expand from a deveolpment tool to a general purpose API tooling/monitoring platform: https://www.postman.com/pricing/
I grew up in Russia in 70th and 80th, and most people around me were wearing the same cloths all week long. On Saturday you would have a bath and done a fresh set of underwear at least, perhaps a shirt too.

Women typically would change a bit more often, and generally tried to have fresh panties every day (they would wash them separately from the main laundry). Men who considered themselves sophisticated would change _socks_ every day, but this was a minority. Nobody washed a shirt that they only wore once. Nobody washed pants until they had visible spots or smelled really bad.

And these were civilized XX century households, with access to hot and cold running water, gas, and electricity (but not always a bath or a shower, and rarely a washing machine).

Try wearing the same briefs and socks and shirt for a week, and you will show much you reduce your laundry load...
Yep, hence why they are pushing everyone to subscription based use, and some features now only work with an account.
The only reason companies get away with using it as proof of identity is because the government allows them to hit your credit report with a debt without having to prove you engaged in a transaction, and then make it your problem to prove you never did what someone else is claiming you did.

The solution is pretty simple, the government should require others to prove they engaged in a transition with you before being able to put an unpaid debt on your credit report, not the other way around.
There is this thing known as the resource curse, where countries rich in resources reap very little of it. I don't think the new rulers will be able to capitalize on this, and help from other countries will only make the wealth go to them.

https://en.wikipedia.org/wiki/Resource_curse
Then start with Khan Academy to go beyond barely passing 12th grade. Then move to AP courses on edX and coursera. From there the field is open for you to explore high-end courses.
Wish the checkboxes weren't disabled. You can give this a run in console to enable them all (If you trust random code):

document.querySelectorAll('input:disabled').forEach((el) => el.disabled = false)
OK, but let’s be clear: it’s not rational. It’s “thoughts and prayers” for the Star Slate Codex set.
Google allows you to take ownership of a knowledge panel

Oh how generous. Why didn't they ask the target of the knowledge panel for permission before creating it in the first place?

OP is choosing not to do one of many things that would stop it from happening.

Why should it be on the OP to have to do anything? This is a problem entirely created by Google, for Google's benefit, which happens to cause harm to third parties.
You are indeed correct, I totally missed that section.
Apple is now the bad guy.
Does that "17 million users" include people like me who use the app but have never given them any money?
One option would be to offer a national oauth-style ID verification system.
except that eIDAS is basically not in use in germany.
the problem with these estimates is that freemium products are lucky to get 1% conversion to paid tier
Not at all. If you watched the House meeting regarding the pipeline leak, all they did was say... poor pipeline company. This totally couldn't have been your fault. You had no choice but to pay the attackers. This is because we are not getting enough funding for terrorism. It was really sickening to watch honestly. I find it funny that ransomware attackers to them are considered more like terrorists than lets say robocallers who are attacking our communication infrastructure everyday to steal money and wreak havoc.
Is there not already a 100% open source solution? This is one of those cases where a good dev could likely build a clone in a month. And it hardly needs constant updates.
I wonder if this will end up on haveibeenpwned?

"The FBI leaked your name as a terrorist"
> This happened in 2001
As I said, I am not such a person. Most of the English-speaking world consists of the same.

As I said - I agree that China's government is worse. In fact my previous employer had a policy that company devices just didn't cross that border, even when traveling for work. But it's still not a factor in which devices I purchase myself.
> If you’re a current T-Mobile customer, by all means change your account PIN as instructed. But regardless of which mobile provider you patronize, consider removing your phone number from as many online accounts as you can. Many online services require you to provide a phone number upon registering an account, but in many cases that number can be removed from your profile afterwards.

> Why do I suggest this? Many online services allow users to reset their passwords just by clicking a link sent via SMS, and this unfortunately widespread practice has turned mobile phone numbers into de facto identity documents. Which means losing control over your phone number thanks to an unauthorized SIM swap or mobile number port-out, divorce, job termination or financial crisis can be devastating.

Hmmm, I get why he says this, but what is the practical scenario here? We remove phone numbers from accounts after we make them? But doesn't that just mean we disable 2FA, making our accounts less secure and therefore more likely to be compromised by other means?
Perhaps it’s unrealistic that they’ll be able to monetize 100% of those users?
Everything these days has a billion or more in valuation.
No, the US has far more religious fundamentalists than the EU. They believe that such a system is tantamount to taking the Mark of the Beast, quoting Revelation 13:16-17:

> And he causes all, the small and the great, and the rich and the poor, and the free men and the slaves, to be given a mark on their right hand or on their forehead, and he provides that no one will be able to buy or to sell, except the one who has the mark, either the name of the beast or the number of his name.

Additionally, politicians who pay lip service to these beliefs have an extremely strong and malleable voting bloc. It's a little crazy that a modern society is held hostage by such superstitions, but that's the way it's been. Fortunately, we just this year crossed beneath the 50% church membership threshold and the numbers continue to drop.
USPS x-rays many packages - I’d venture almost all of them shipped from a major population center.
(in 2001).

There was a 99 Percent Invisible episode about this as well: https://99percentinvisible.org/episode/guerrilla-public-serv...
Landlords have the right to enter their property at any time given a "reasonable" notice which is typically 24 hours and almost all states have provisions for "inspecting the premises". I don't have to imagine, this happens almost daily.
Does anyone have any knowledge or experiences with sugar alcohols (particularly erythritol, marketed as “monkfruit sweetener”)? So far, I haven’t felt any negative effects from it while in ketosis, and a minuscule amount of research suggests 95% is passed through undigested. Curious if anyone here is more knowledgeable, and if there are any reasons I should be avoiding it (beyond a general bias/heuristic for whole foods).
This is a nerd way of saying what I already do, which is

"hire people with a high ceiling"
So this is like synthetic stocks, but only for (illiquid) startups, and gamified?

It’s hard for me to tell what value my “investment” in any of these fantasy startups creates. I would much rather invest directly in the startup, where my money can be visibly put to use by the startup to help realize their goal.
The problem is that even the fastest CSV readers are 10-100x slower than readers of better defined binary formats (like Arrow)
Not all of the objections are due to Christian evangelism, but general public opinion against mandatory identification systems is a big reason.
I'd rather a pastor get harassed than the rape victim. The pastor had the emotional distance and support network to push back.
Start your own design system with a single click
There’s no reason why the id system can’t be federated like the EU solution. Also all those hypothetical “mark of the beast” people you mention already have SSNs.
Super cool! Any plans for webhooks? We trigger a lot of stuff off of GitHub webhooks (like when a commit occurs) so it would be interesting to hear how Sturdy will tackle this.
Well, it's worth noting that it's not intending to be specifically for publications, it's not like Google Scholar or ORCID for example.

The reason it's interesting / useful for things like 'knowledge panel' is perhaps clearer if you look at a more complete entry, such as for 'apple': https://www.wikidata.org/wiki/Q89 and something on using the SPARQL API, such as https://www.wikidata.org/wiki/Wikidata:SPARQL_tutorial or https://www.markhneedham.com/blog/2020/01/29/newbie-guide-qu....

As I say, I haven't actually got around to using it at all myself, but that's why I hold it in higher regard than 'not great'. :)
At this point, it's either mass hysteria, a weapon of some kind or something common within this group. Are these officials forced to carry some kind of equipment that can cause this? Were they required to get some shots/drugs, implants or training that causes mental/auditory/etc issues? It's also remotely possible it's just another ploy to foster more fear in population.

It is odd that it apparently affects a particular specialized group of people and that they would make this public without figuring things out first.
Copy of the tweet for preservation:

Damien Miller
@damienmiller
Looks like T-Mobile hasn't updated the OpenSSH installation (and thus probably neither OS) since 2014. SHA256 has been the default hostkey fingerprint since the openssh 6.8 release in 2015

Retweeted:
https://twitter.com/Jeremy_Kirk/status/1427144723731402756
Jeremy Kirk
@Jeremy_Kirk
The person who claims to have compromised T-Mobile says the company misconfigured a gateway GPRS support node that was apparently used for testing. It was exposed to the internet. That allowed the person to eventually pivot to the LAN. Proof screenshot supplied.
There are already quite a few, a JavaFX for those with Electron allergy and there are VSCode plugins for the Electron lovers.

For the rest of us there is curl and Powershell Web-Request.
I have never seen any non-complicated code in business. There are droves of people working overtime to complicate nearly every corner of software and systems to unmaintainable levels. The developers, the good ones, simply try to fulfill requirements and mitigate the mess the best they can in the time allowed while learning enough new material each day to scare anyone.

A developers' core skill is not getting overwhelmed after being blindsided by new shit from every angle on a constant basis.

We have 30% of out team just dealing with auto-reported vulnerabilities in our code base. No choice. Getting an "exception" takes an architect about a week for a vuln that has no material impact and which can't be mitigated with a simple library update. Tip of the ice berg.

This is at an excellent tech focused company (relatively great place to work).
> where a good dev could likely build a clone in a month. And it hardly needs constant updates.

I wish I had $5 / user / yr for every person who says this about products!

Kidding aside, I think this dramatically underestimates what it takes to build a product that solves the problems that Postman solves.

"Curl has no gui" isn't the problem they're solving.
But the behaviour isn't unexpected at all, e.g. the user wanted to store a number in column 3 and that's exactly what's the tool did. The behaviour is both expected and reproducible, the issue is that it's not communicated by the format.

The problem arises from the fact that CSV doesn't contain any metadata so while the same tool reads and writes the same data, the results will be different because the format doesn't specify what a number look like.

The formats proposed in the article don't have this problem because they specify both the type and the formatting of the file content so there's no confusion.

That's the difference. JSON in particular simply cannot have this problem (though it's not a suggested solution): a number has a well-defined format and that's that. So do strings. This is not the case with CSV:

Number,Also a number,A String
1.0,1e15,"Hello there!"
"1,0",1e15,"Bienvenue á la maison!"

The first row is what you'd expect from a customer in Ireland and the second row might be sent from someone in Switzerland.

Both parties agreed to use comma-separated files for data exchange and quoted strings, yet importing the first row using a French locale would fail to parse the first number and same goes for the second row and an English locale.

Neither row contains unexpected or malformed data from the respective user's POV. And that's the problem with CSV.
I can't help but think all these crazy raises and valuations that keep jumping from round to round are just a scheme to legally print money.
In regards to that, it hasn't been 12 months since the first round of shots. Does this mean that vaccinated people will have to get boosters every 4 - 6 months due to dropping efficacy?
1) CSV can often be human readable at a glance (more so than most other formats, depending on that data), and that makes it appear deceptively simple and compact. Possibly due to that, I'd bet most of us have been bit by a writer/reader that doesn't respect the RFC rules.

2) I ask for TSV, whenever convenient. It's been more reliable, and I don't have a comprehensive why, but I think it's slightly more resilient to writer/reader inconsistencies, for me. It may be that there's just less need for escaping and quoting, so you might dodge a smart quotes debacle when asking for a one-off from an Excel user, for example.

3) Despite the issues raised, the notion we'd retire it makes me hug it tight, because for the majority of my requirements, it hits a sweet spot. I still reserve the right to raise my fist in frustration when someone does: ",".join(mylist).
Ha. Not gonna happen; for the same reason Python took off over more "flexible" languages, for the same reason people move from JSON to YAML for configs, etc.

Languages and formats are not fundamentally about computers or efficiency, they're about people. Carry on.
in this post pandemic world, now that companies have set themselves up for remote work.... why would they hire someone in the US when they could hire someone cheaper in another country?
"and is staffed with below-average IQ people."

What makes you suspect this? Even if the hiring process is full of BS, that BS usually requires a higher IQ to learn and deal with like LeetCode, right?
When Social Security was introduced, the government encouraged people to get a tattoo of their SSN so they wouldn't forget it [1].

[1]: https://blog.nyhistory.org/tattoo-as-memory-prompt/