skysight-inc/HackerNews huggingface dataset:
> Explain I'm naive: why would Apple's bug bounty program be so poorly run?

Hubris.

Apple's culture is still fundamentally the same from the day they ran ads saying "Macs don't get viruses" to today. They used a misleading ad copy to convince people they could just buy a Mac and be safe, not needing to do anything else... ignoring that Macs still got malware in the form of trojans, botnets and such... and encouraging a culture of ignorance that persists to this day. "It just works." etc.

So now their primary user base is majorly people who have zero safe online habits.

And that sort of mentality feeds back into the culture of the company... "Oh, we're not Windows, we don't get viruses. We don't get viruses because our security is good. Our security is good, obviously, because we don't get viruses." It, in effect, is a feedback loop of complacency and hubris. (A prime example of this is how Macs within the Cupertino campus were infected with the Flashback botnet.)

Since their culture was that of security by obscurity (unlike, say, Google's explicit design in keeping Chrome sandboxed and containered for sites), closed source and again, hubris... it's coming back to bite Apple in the ass despite their ongoing "We don't get viruses" style smugness. If it's not about Macs not getting viruses, it's about how Apple values your privacy (implying others explicitly don't) and like with everything else, it's repeated often enough to where the kool aid from within becomes the truth.

Apple's culture is that of smugness, ignorance and yep... hubris. Why should they have a serious, respectable bug bounty program if they've been busy telling themselves that they don't simply have these kinds of security problems that they've bragged about never having?
> EV passenger cars are feasible for the average person today.

Where? California? The world's bigger than the US and Europe and massive EV adoption in the developing world isn't a thing. EV are still a expensive luxury in most countries.
> Did you look hard enough?

I did see microej but I'm specifically interested in open-source - and from what I can tell this is some kind of paid service. I didn't look particularly close though [1]. The ESP32 device they do support appears to be a very specific development kit [2].

[1] https://github.com/MicroEJ

[2] https://github.com/MicroEJ/Platform-Espressif-ESP-WROVER-KIT...
> I haven’t explicitly thought of myself as pursuing “metamodeling” in the past (and I only just invented the term!).

No knock on the author and his rral accomplishments but it’s a well-established term [https://en.wikipedia.org/wiki/Metamodeling] for example. Much of my career has been metamodeling for certain kinds of analytical applications.
Yep also heard about it happening to other more modern non-electric cars. Electrical failure and the car just died. If you have an electric park brake there is also no way for a driver to bring it to a stop. He can only drift until the car stops. God help you if you are on a hill.
Apple makes ridiculous amount of money, and many Apple fanboys I know believe their devices are hack-proof.
Antinets (a.k.a. analog Zettelkästen) and the power of tree structures
I remember some of early Android phones that ran manufacturer maintained Kernel turning out immune to then-undisclosed RCEs years before disclosure.

I think it’s less about disclosure handling but more about being motivated to pay for or build a black magic code analysis tools.
I keep seeing this brought up on HN. Isn't it telling that you have to go back 70 years to find a good example? At that time, the Democratic Party was still in bed with the KKK. It's not relevant to today's politics.
Nice to see geopolymers mentioned. Geopolymers are becoming more common around the world. They can be formulated from local materials and in many cases have superior material properties to Portland cements. Joseph Davidovits of the Geoplymer Institute has been instrumental in the spread of his lifes work, geopolymers.

Davidovits also claims that many ancient megalitic constructions were made using geopolymers which fits with stories of technologies that soften rocks.

Geopolymer Institute is an amazing resource on the subject. https://geopolymer.org

Pyramids of geopolymer, https://youtu.be/znQk_yBHre4
This can happen to any car if there is a transmission failure.
What would they have made FB into? Default social network? Google provides a value addition for most people which is better search results than its competitors and they keep paying Apple for the privilege of being the default search engine.
Facebook provides no such "value". There is no such thing as the best social media app. Twitter, Facebook, Whatsapp, Reddit, Hackernews etc provide different services to people.
Food, housing, health care, and many businesses offer discounts. It does create an apples to oranges comparison to the private sector.
EFF Flew a Plane over Apple's Headquarters
I think that in virtually all parts of the EU, you can use CEE 7/7 plugs.
You’re allowed to set as many cookies as you want without asking. You’re just not allowed to set cookies that enable you or a third party to collect personally identifiable data without the users consent. I know how much this sucks for both publishers and customers, but it helps a lot to be more precise.
Recently I had to talk a friend out of hastily buying a new car after having her boyfriend's Prius abruptly lose all power on her in the middle of heavy traffic on the 5 (CA).

Turns out this is a common thing with his generation of Prius, something about the motor controller inverter thingy overheating.
In Azure I put all my stuff in a new resource group and then when I'm done I just delete the entire resource group. This has worked well for me so far and I haven't had any surprise charges like I did on AWS and Digital Ocean.
Just need to use those well-regulated militias to finally do some good in the world.
In my country there's a saying: "a cornered cat makes weird jumps". Expect Facebook to start working on their own mobile phones soon..
This will eventually lead to online multiplayer games to only be playable of a game console of sorts for ranked matches, where you are not the root user is implicit from the start.
My '01 Honda Accord had its alternator die in the middle of the highway. Fortunately I had enough momentum (and a clear path) to roll to the side of the road. But otherwise I would've been in the same situation, though I could've at least shifted to neutral (hopefully, not sure if my gearbox was electric).
> The problem is that cybersecurity is ridiculous hard problem.

This is why I wonder why "minimize your data exposure" is such a controversial opinion.
Sure, I don't think my post disagrees with that. You're discussing regulation. I only referred to a very particular type of legal case: a contract dispute between two private parties wherein the contract is legally valid and the parties have agreed to abide by the determination of the program.

Not all law will be like this, it's too complicated, but some of it might be and that's interesting.
Yeah, it wouldn't be too hard to write an interpreter. It is a lot like compiler class.
> MR. GOOGLE: Oh yes you can—if you’re letting people make phone calls for free. They have no choice in the matter, do they? But that’s only the start. We will match the advertising to what customers are discussing on their calls. So if mom is complaining about her back pains, we pitch a healing ointment or some other medicinal product. If dad is calling about his car breaking down, we tell him about the latest Ford Model T.

> VP ENGINEERING: But that’s impossible. How do we even know what people are talking about on their phone calls?

> MR. GOOGLE: That’s a great question, and it makes clear how little you have done to exploit your platform. You need to monitor every call, and compile a file of information on every customer.

It kind of ruined it for me to have suggestions like this that were totally impractical with 1920s technology.

> MR GOOGLE: That’s just the start. There are a hundred more ways we can make money from phones. For example, people need to find out the telephone numbers of the people they want to call. That’s what we call a search function. Businesses will pay top dollar to be included in the search results.

> PRESIDENT: [So shocked he spits out his coffee]: Whoa—do I understand you correctly? When someone calls the operator and asks for the phone number of Judy’s Beauty Salon, we give out the number of another beauty salon instead—and take a kickback for lying?

IIRC, the automatic telephone switch was invented to prevent this very problem. An undertaker invented it because one of his competitor's wives was the telephone operator, and she would route calls for new business meant for him to her husband.

https://en.wikipedia.org/wiki/Strowger_switch
Instagram has been an absolute dumpster fire for the last two or three years - it's no longer a photography platform, it's a meme, "influencer", celeb, and viral video platform. Tear it down.

The only recent saving grace is that I'm seeing more photographic content, the problem is that's from other photographers who are promoting their work via paid ads - they're not going to grow their following that way and TBH a lot of it is pretty mediocre.
Why Europe's energy prices are soaring and could get much worse
Torqeedo present concept for all-electric ferries for public transport
I wouldn't mind it if it were high level and devs were given time to work. Let Jira be the master list of requirements. Annoying, but necessary.

The problem is the daily standup/daily metronome.
An email address is PID?

My PoV is that an email address + first name in a mailing list should not be covered under GDPR.

William (billy69420@cbt.eu) does not identify anyone, does it?
> the zero click iMessages one floored me.

In case there is any confusion, there has been at least one of those a year for the past 3 years.
So funny. With all of the diversity, there is not one religious person to say the obvious: religious people dont change their belives because of money.
Dupe "New carnivorous plant discovered in Pacific Northwest": https://news.ycombinator.com/item?id=28121929
Ask HN: Do you know any ML object detection/classification as a service?
It's intended as a joke, because I've seen this happen (someone typing when I am, stopping when I stop) a lot.
Facebook might pivot towards other monetization strategies when their cross-platform web tracking ads don't work anymore.

For example, Facebook offers you to pay to "increase the reach" of your posts. This happens for example when you try to post a message to a Facebook group. If you want to make sure all members see the message, you have to pay.

This is a way that Facebook monetizes without tracking (targeting is based on people who opted in to join a group) and the users pay directly in the app (allowing Apple to get their 30% for the in-app payment).

With Apples changes, Facebook (and others) might focus more on strategies like that.
They should listen to Ten Crack Commandments by Biggie Smalls.
I'm a huge fan of Oracle's (yeah, I know right) free tier for especially this -- you can't accidentally use paid stuff without manually toggling an upgrade. It's such a relief to know that you can mess around with things and not be charged for it.
related / unrelated, plugging my project that is not a ssb replacement but takes the best bits of it and turns into fully anon distributed forum called moderator. @moderatorium on twitter in case interested, take a look.

live prototype at http://sd7ezzynq5jclyltgiwnvabtk4m6nccdrmzfth72raxisoiplrtnr...
Useful Tips for Your Technical Writing Journey
California's Proposition 13 actually shrank the size of local governments by cutting off funding. That was a blunt instrument which probably needs some reform, but without that limiting factor San Francisco's city government would be even larger and more wasteful than it is today.

As for garbage cans, they could just order existing inexpensive products from any of the many suppliers out there.
For housing, hempcrete [0] had shown a lot of promise with its insulating, anti-mold and moist repellent properties. Plus its CO2 binding and quite cheap.

[0] https://en.m.wikipedia.org/wiki/Hempcrete
Includes maintenance, security, and supplies. And the maintenance and security staff will need to be paid reasonably per city expectations. Knowing San Francisco that toilet will get trashed quickly and have drug needles and stuff that needs to be cleaned up.
Honestly think it's game consoles with keyboards and mice that are bound to proprietary crypto protocols, much like the anti-piracy that the current xbox has. Can't do video stream HID interception unless you make a robot, and you've just raised the barrier of entry so high to get rid of %99.9 of it. And in pro matches you can just watch them in person.
You don't think that its important that there aren't any irritating banners, that it opens with the content, and that any advertising copy sits below the article itself? I had to go back and check because the thing you are complaining about literally did not interrupt my flow in any way.
Around here, there seems to be at least one small business in every city that maintains and repairs super automatic espresso machines.

It's definetly possible to get white goods repaired, and as with many things it's probably surprisingly economical to do it -- how else would the repair shops survive -- but you'd have to look at statistics. Now I feel a little bad scrapping our broken washing machine.

Computers still get repaired, though with laptops it's less easy I guess. Printers, too. If you count software-only repairs (and why not), those are pretty frequent.

Furniture and upholstery gets restored, though from what I know this is expensive enough that you'd only do it to very high quality stuff, not an Ikea cupboard that didn't survive moving. Or maybe you would? Ikea stuff is cheap but it ain't free.

Still not a long list, but it does get longer the more time you think about it.
What I mean is that there is/will be a permission fatigue
This happened to me (luckily not on the highway). Teslas, and probably other EVs, have a pyro fuse which physically severs the connection between the main battery and the rest of the electric system in the case of overcurrent or an accident. When that happens it completely bricks the car (to avoid nasty things like battery fires), and the fuse has to be completely replaced. The 12V system is separate, so things like lights, infotainment & door opening buttons continue to work. The pyro fuse quite literally blows up with an audible thud when this happens.
I would say this is an ad aimed at a professional audience. I read the science equivalent of these in Nature sometimes. Sure, they are biased and misleading. But it is usually clear enough who sponsored the piece and so you get a useful perspective of the sponsor on some topic.
Wait, what's the alternative? FB pays Apple 30% of what exactly? Its ad revenue? How is that in any shape or form feasible for Apple to demand from FB, logistically? If there is no clear way for Apple to force FB to pay it has no reason to find an excuse to hinder FB's tracking activities on iOS for monetary reasons.

The world is also not black and white. Just because Apple is not beholden to privacy advocates, but instead its shareholders, doesn't mean it gives 0-fucks about privacy concerns. Of course Apple cares about privacy if it helps it sell more iPhones without lowering its profit margin.
You are seriously misreading the story at hand.

https://www.fox46.com/news/investigations/government-seizes-...

The threatened "investigation" in was the civil asset forfeiture procedure. They were asking him to voluntarily surrender the money, or else they would initiate civil asset forfeiture. In other words, law enforcement officers offered the victim a choice between plans A and B.

Plan A was the extra-legal course: give us your money, and we'll forget we ever had this discussion. This was the officer's preferred outcome. Free money, minimum paperwork.

Plan B was what actually happened: the civil asset forfeiture process. The victim refused to sign the papers, so everything goes to court, and then the government has to come up with something, at least a notional reason, to take the money.

However you read the laws around civil asset forfeiture, I am pretty sure that "plan A" was not an intended part of the picture.
You hear about all of these horror stories about services from IaaS/PaaS/SaaS providers essentially being black holes for money with no way to actually set hard limits for billing, even after all of these years and can't help but to think about more reasonable alternatives.

Why not just use something like DigitalOcean (https://www.digitalocean.com/products/droplets/), Vultr (https://www.vultr.com/products/cloud-compute/), Hetzner (https://www.hetzner.com/cloud), Contabo (https://contabo.com/en/) or even smaller regional ones: personally i use Time4VPS in Lithuania because it's close to me (https://www.time4vps.com/?affid=5294, affiliate link to make my hosting cheaper if someone else registers)?

Providers that just give you VPSes that you can run whatever containers on (or just host things the old fashioned way) and basically use whatever open source software that your project needs. More importantly, providers that give you predictable billing at a flat figure per month (or less, if your VPS isn't active all of the month) and simply slow down your network connection if the set limits are exceeded.

If you're just doing something to practice and haven't sold out to SaaSS (https://www.gnu.org/philosophy/who-does-that-server-really-s...), you probably really don't need to worry about scaling just yet - you can migrate over to AWS, GCP, Azure, or any other of the large providers at any time, by just running your containers on their scalable infrastructure, if there's even any point in doing that, since the smaller providers also can scale similarly in most cases.

Lastly, it just feels dangerous to give AWS, GCP, Azure or any other entity that's known to give people insane bills your personal details and personal credit/debit card details - what if they decide to block you because you can't pay and your complaint doesn't become popular on Reddit or HackerNews? It almost feels like setting up a shell company and using limited virtual credit cards would be more reasonable, same as people always say that you should have a separate Google account for your personal needs and anything in any professional capacity, so nothing gets blanket banned.

Sadly, there aren't many tutorials that start with: "Here's how you set up a company that's detached from your personal details, and here's how to easily make one credit card per vendor." Honestly, even the internal workings of companies like https://privacy.com/ are unclear to me.
What I'm saying is that: the specific hypothesis that Lisp is brushed aside by some people because it has nothing to offer for repeated calculation other than the technique of recursion is necessarily a hypothesis about ignorant people. The hypothetical people hold an incorrect belief that is easy to dispel with readily available facts, which is a good working definition of ignorance. Other hypotheses may involve purely de gustibus matters; that one doesn't.

(Your wording strongly suggests that you not only believe the hypothesis but that you don't find those people ignorant.)
“Someone did a bad thing on the internet!”

yawn

“Someone did a bad thing on Facebook!”

Call the Washington Post!
Same story with Cosmos. On an IoT pipeline I set up with event hub, Cosmos needed $15k/month to keep up with the flow without generating 429s (i.e., causing the ingestion function to drop events). The RUs shouldn't have needed to be that high, but due to upstream providers there was a regular spike every five minutes that would exceed the average RU need. RUs are a hard per second cap; there's no average or windowing. I had to set my RU consumption cost at a level that guaranteed 40% unused capacity.

So I tried setting up the same ingestion database with Kafka Connect and Mongo on a $200/month VM. It worked flawlessly, and Azure helpfully suggested I downsize that VM because it was underutilized based on CPU statistics.

What incentive do the Cosmos engineers have make it more efficient, or to make the RU pricing model more reflective of actual usage? Zero. It's a money hose. Why would you turn that off?
I get everyone here is on the Google hate-train, but this is just bad. Not an interesting perspective in the least.
The advantages to self driving cars being used this way are even better:

- people driving don't have to take time to find parking lots

- the cars themselves don't need to be parked in the city, freeing up space

- depending on how many people are traveling together and what they are transporting different sized vehicles can be used

That being said: the most efficient form of transportation any human can do right now is the bicycle. It is fast too. During rush hour I am faster than car, bus or subway on my commute (German city) and as I am sitting on the computer for long periods anyways, having a little movement is great. And for weather there is appropriate clothings.
Someone need to introduce eBPF based systemd and call it systemdebpf
Where is the abuse of power? The problem (I don't own an iphone! I could be wrong) as I understand it is that Apple is giving its customers the option to opt-in to tracking and that people are choosing not to do that. Yeah, it offers a business advantage I'm sure, but its also hard to see what is wrong with that action you know?
There's definition and there's reality.

These are all the plugs USB has come up with over the years: https://en.wikipedia.org/wiki/USB_hardware

I still have a bunch of USB cables and devices at home, and I every time I have to use them I struggle to find the right combination.

Standardization is good. But in this case USB is objectively not a better standard than Apple's proprietary one.
Interesting factual analysis. I think the original piece was written as parody of Google, though, rather than as a criticism of At&t per se
Because rollups exist on Ethereum that are cheap and are far more suited to end user self-custody then lightning ever can be. At the moment zk-rollups are roughly 100x cheaper then mainnet, don't require the user to run a node to self custody, and the user can force a withdrawal to mainnet even if the roll-up operator completely dies.
The biggest one, which you missed, is the fact that the car could not be put in neutral making it impossible to push outside the lane. If my car dies on a 6 lane HW I make sure to get it to the safe lane first; I'm not staying there like dead meat waiting for some truck to hit me at 130km/h

Every car, no matter of it's running state, unless it is damaged at the mechanical components, should be able to place in neutral and pushed in situations like this.

This is my beef with these electric cars and non electric cars (but with electric parking system/shift)
Could someone send me a lobste.rs invite by any chance? I’ve been a lurker for some time but would love to contribute a bit.
it definitely is someone
A phone book is literally an alphabetically sorted key-value table. Several tables usually, the secondary one is just on businesses and those might be sorted by a third column of 'type' first.

Indexes for phone books also existed, I forget if they used to be notched in the side like better dictionaries.
Maybe a bay-area startup like Bird or Lime could disrupt the streets of SF by covertly dumping^H^H^H^H^H^H installing trash cans all over town. Or even better, put the trash cans on the back of their scooters and offer discounted rides to destinations in need of cleanup. They could even pay their customers to ride out to a recycling facility which converts the collected waste material into green energy.