skysight-inc/HackerNews huggingface dataset:
>Apple using that as an excuse to punish a competitor

Steve Jobs in 2010 being asked how Apple's view on privacy differs from Facebook's view (right after one of the early Facebook scandals)

>Privacy means people know what they’re signing up for, in plain English, and repeatedly. That’s what it means. I’m an optimist, I believe people are smart. And some people want to share more data than other people do. Ask them. Ask them every time. Make them tell you to stop asking them if they get tired of your asking them. Let them know precisely what you’re going to do with their data.

https://www.youtube.com/watch?v=39iKLwlUqBo
You should post it again.
denis [point] merigoux [at] inria [point] fr
Slow I can tell you that! Unless its an open problem that no one is sure on yet. And you get lots of optimizations for a certain class/subtype of that problem.

Alot ground work has already been laid down. Also most the times when an algorithm with a better time conplexity is found it only applies to really large n. Sometimes that n is so large its basically not even useful for actual computation aka look up the term galactic algorithm.
I understand what you feel completely. I actually wasn't even able to complete the tutorial since the commands given would trigger a permission error one way or another. I got charged $50 as well since I wasn't aware that there's still services running. Such a terrible thing to front as a "Getting Started" guide.
And he doesn't have to transport a 20,000lbs limousine and ~40 other vehicles behind a private jumbo jet wherever Zuckerberg travels.
£50 for a new sole seems expensive. unless you were looking for some special material or like sneakers they were difficult to fix.

either way, if £50 doubles the live of a £150 pair of shoes, i think it is still worth it. you need to consider the new pair you could get for £50 may not be what you want to wear, because otherwise why did you spend £150 to begin with?
i’d be interested. how’d you like me to reach out?
Disclaimer: I am not an Apple insider by any means, and this is all a hypothesis.

Their management of the bug bounty program seems like a reflection of their secretive (and perhaps sometimes siloed) internal culture. I'd argue that for any bug bounty program to be successful, there needs to be an inherent level of trust and very transparent lines of communication - seeing as though Apple lacks it internally (based on what I've read in reporting about the firm) it is not particularly surprising that their program happens to be run in the shadows as the OP describes.

I forget the exact term for it, but there is a "law" in management which postulates that the internal communication structures of teams are reflected in the final product that is shipped. The Apple bug bounty seems to be an example of just that.

Edit: Its called Conway's Law
Apple has a market cap of 2.4 trillion dollars. I don't think they're a football.
They also investigate monetary fraud I believe.
I use a quadlock case so I can mount the phone on my bike handlebars, it makes wireless charging very finicky as the coils are separated more than usual, so its easier to just plug in usb.
Won’t matter much if it burns your house down while you’re inside.

A complete compromise can also get access to your bank, mail accounts, message history, mic and camera. Which vulnerability would you prefer be used against you?
Not relevant for your "Hey" example but I often do submit successive thoughts as separate messages rather than one less disruptive message because it allows readers to add reactions/responses to the individual thoughts.
https://www.jetbrains.com/toolbox-app/ is the first Jetbrains app that's been ported to Compose. Note that Compose Desktop is still in alpha, pre-release stage.
It appears so: https://protonmail.com/support/knowledge-base/spam-filtering...

(I work on Gmail, but that shouldn't really be relevant here)
When developers inform users how big Apple's cut of IAPs is, and empower them to pay a different way, we see how much Apple actually cares about empowering and informing users. This is a business move plain and simple.
Long in Amazon years. I departed five or six years ago and Senior Was the end of the road. Similar to how leveling a research scientist was voodoo.
I’m not saying the above issues don’t matter, but they’re hardly the most critical things you could do to an iPhone.
I create and revoke tokens, that’s a big difference. With magic urls, I don’t know they exist so I can’t share or control them.
https://archive.is/FC490
> Cloud platforms generally don't let users cap the billing, because those overages are good income for them.

No. They don't have caps because it's really hard to implement and because the negative press of an app going down because the cloud didn't scale is far worse than any received by surprise bills. Scaling is a large chunk of what you're paying for, after all.

This is quite obvious when you look at how lenient AWS is with retracting surprise bills. And the money perspective doesn't make sense, either: AWS is living on customers that have bills in the 5 figure range and up. The occasional 10$ from someone playing around aren't even a drop in the bucket.
> Slashdot had turned to garbage before the first XKCD was ever published.

Sure, and it was probably always garbage. The point of the observation was that as garbage became sewage and filth, I thought whatever value there ever had been was naught. But I realized something was lost in that process. Clearly you disagree with that…

> "Obligatory XKCD" comments read like low-effort karma grabs to me and presumably others.

The link above and many of the others I’ve seen haven’t engaged that way. But even if so, so what? The actual linked content is both relevant and engaging for those curious. I still find myself amused going back to them when I don’t fully remember their contents, and I very seldom find them unthoughtful.

But who cares? It’s not like karma is scarce. Why shouldn’t people who enjoy it as side banter have that joy? The world is hard enough as it is without punishing completely harmless fun.
Process Street, maybe? (https://www.process.st)

“Process Street is a simple, free and powerful way to manage your team's recurring checklists and procedures.” No affiliation, just interested in the same problem.
From the study:

> We find enormous heterogeneity in algorithmic progress, with nearly half of algorithm families
experiencing virtually no progress, while 14% experienced improvements orders of magnitude larger than hardware improvement (including Moore’s law). Overall, we find that algorithmic progress for the median algorithm family increased substantially but by less than Moore’s law for moderate-sized problems and by more
than Moore’s law for big data problems.
Though I haven't gotten one yet, the Kyria also has some nice thumb clusters. You can print out the layout[1] to test how it lines up with your fingers.

[1] https://docs.splitkb.com/hc/en-us/articles/360010627159-Can-...
I used to believe that but after their latest privacy debacle with the CSAM stuff and their tone deaf responses, it’s clear to me that Apple used other act as a marketing shtick and nothing more.
> a First Lieutenant with 10yrs service

Are there First Lt's with 10 years of service? I thought it was up or out.
Same using Brave
Tennis HawkEye in Python
Open-Source tennis tracking project in Python.
It tracks the ball, detects the players, court lines, creates a mini-map of the whole game and predict the bounce points of the ball.
I would be an order of magnitude less concerned with camera/mic access, compared to perfect historical proof of my usage and communication patterns.

Exploits often feel like pathogens, probably why they share the term virus. If a virus has a high mortality rate, contagion is lower, because it frequently kills the host before it can spread.

Similarly, I think a 'complete device compromise' is much more likely to be identified, prioritized, and patched. The vulnerabilities mentioned here represent the highest severity without an immediately noticeable fallout. Props to the researcher.

P.S. I wonder if the researcher's Russian nationality (assumed from their other post) had any impact on their lack of payout.
Last I evaluated them, they had some bugs that wouldn’t work for my use case. For example, Quill has the annoying bug on mobile Safari of blocking the native behavior of capitalizing the first letter of a new line.

I don’t remember what I found in Slate, however, and it’s possible it may be much better now.
I think I agree with your broader point, but it would be a mistake to trust apple to keep your data private.
I don’t think that’s true. I don’t think the Welsh or Irish are on anyone’s list of indigenous peoples, for example. Maybe “colonized” has some specific academic meaning that I’m misapplying to the Welsh, Irish, etc.
This is a cynical stub of a thought if I've ever seen one. Say more?
Why must iOS use WiFi to run critical security updates? I assume it’s a kickback from telecoms to reduce network bandwidth from users with unlimited mobile data plans?
Ha. I do this. It's emotional energy. Lacking seriousness or im too preoccupied with how my reply will be understood or not.

Granted, I dont think I ever stopped at 'hey-'
Our tax and housing policies are two reflections of the same moral system - appreciated assets are sacrosanct while valuable labor is obscene.
Certainly their outcome does change based on diet. You can compare corn fed, grass fed - corn finished, grass fed and finished, and wild game.

In all cases, there are nutrients and proteins that you cannot find in plant based alternatives. If you are vegetarian or stronger, you have to supplement with pills to get the things that are not in your diet. It is unclear whether lab-grown will lack nutrients found in natural meat, or if artificial supplementation is really equivalent.

Hence the desire to stay close to our evolutionary roots. Same idea as walking a lot and squatting to duce.
I guess you mean holding the gamepad with both hands and staring at the screen, in the usual gaming manner. But, you see, as a keyboard worker I (partly) go for walks precisely to give the shoulders and the neck some workout and stretching—and using a regular gamepad is the opposite of that, as I already discovered in practice. Otherwise I could just use the phone as normal—which is also pretty bad for the shoulders, though one at a time.

So I was thinking of using something in this vein:

https://ae01.alicdn.com/kf/HTB1q033QVXXXXb0XpXXq6xXFXXXW/4-I...

https://872c4715dbe9f10b83d1-0b39dab3ba460c18aad59cf32aacf5c...

Might come in handy in more occasions than just walking. E.g. home chores when I still have one hand free—currently such time is occupied with more passive podcasts and audiobooks.
How does that impact the lawsuit? There's no vote involved, it's a courtroom. Whatever their voting power, they lose the same amount of money.
>Examples of such groups?

Indians, Irish, many African countries, many SEA countries, etc
The World’s Greatest Freediver
Geofence Warrants Threaten Civil Liberties and Free Speech Rights in Kenosha
At a previous job I was tasked with writing our bug bounty policy. I was also in charge of running and reviewing all of the SAST and DAST scans. It was tempting to monetize that potential conflict of interest, especially after I left the company.
You can call it "not a good take" but if the argument is that the "constitution protects it" but it isn't enumerated—then you really can't argue that the constitution protects it.
Design Tokens Format Module: Draft Community Group Report
> it looks to me as if Republicans chose Trump in the first place because they have no trust in the system

First, I'm not sure Republicans "chose" Trump; it's more that they suddenly found that he had gamed their nomination system and was their candidate and they had no choice but to make the best of it.

Second, I'm not sure Republican politicians in general have no trust in the system. They are part of the system as much as Democratic politicians are.

> Democrats don’t trust Republicans now, not because Republicans chose Trump, but because (and to the extent that) Republicans continue to defend even Trump’s most egregious flaws.

Defending egregious flaws in whoever happens to be the current party front man is nothing new for either party. That may be at least partly because everyone who ends up being a party front man has egregious flaws. Trump's just happened to be more colorful than most.
I really hope lots of people see how great KDE is these days as well.
I got this too, and they did eventually terminating my account. I missed all the emails tho, but when I went to use AWS for some project I found out I was terminated and the only way for me to use AWS again was to create a new account (I emailed them, they can't un terminate me)
I'm much more concerned with apparent corruption at the FTC: They took money to look the other way? What Zukerberg allegedly did, is it illegal? Is that a fair characterization?
A New US/Japan Variant to Watch
In order to cut a medication like this, you need a sub-gram scale (crack scale, see Amazon for that term specifically). People using those stupid syringe marking are asking for trouble.
Play Diablo II Resurrected with Lutris on Linux
Ah, one of the bugs with Slate was with spell-checking. On mobile Safari, at least, its text nodes aren’t marked by spell check unless they’re interacted with by the user after they’ve been typed.

As I’d said, they all have bugs, including ProseMirror. I just found that PM solved most of the ones I cared about relatively well.
This is a part of our industry I do not follow beyond headlines. A lot of those headlines are about hackers trying to be responsible getting screwed out of supposed bounties that to my mind already appear quite small. Also responsible companies doing very little to quickly close them. Does anyone have any insight into how the market for vulnerabilities operates? Is there is a significant disparity in price between official/responsible disclosures and private sales?
"...the radiofrequency sensor technology was able to measure glucose levels with accuracy comparable to that of Abbott’s Freestyle Libre continuous glucose monitor..."

Then this means it won't eliminate fingersticks 100%. I've never used the Libre, but I use Medtronic's Guardian sensor, which requires calibration twice a day via fingersticks.
Some data modes on ham radio work like this. You can even see them fix typos over the air.

Lots of fun.
> it turns their mic on,

Well that's horrifying. I'm glad I don't use Windows, and I'm glad my computer physically does not have a microphone for malware to enable.
How have the gig companies avoided the labour shortage that retail and restaurants have? It seems that they should have been one of the first to feel the pain here.

Instacart getting away with this flies against what is going on in other sectors.
The only reliable low maintenance solution is to get your own domain with a catch all mail service.

Then for every email interaction with a 3rd party you make a unique address like amazondotcom3823@yourdomain.com.

You can then just add rules for each incoming mail domain to send them to a junk folder, especially if it was was a one time transaction and subsequent emails are just going to be marketing junk.

It also lets you know who has had their mailing lists compromised as there is virtually zero chance someone would guess the email address like the example above.
We stopped going to the dog park, because that’s where you take your dog if you want to learn bad behavior. The cleanliness of our local wasn’t really an issue. But I’m glad we stopped going. Asking for trouble sometimes.
Even worse is people who type "hey", and then don't type anything else until you "hey" back.

Even worse is "Hey, I want to talk about something. I'll call you in 30 minutes."
IIRC Aztecs constantly replaced people in adjacent territories (and vice versa), does that mean some are more indigenous than others?
It's been about 10 years, but Azure lost one of my volumes with important data on it out of nowhere, and refused to offer me any support until I made a huge stink in the support forum.

When I finally got my data back, I moved to DigitalOcean and haven't looked back.
Well you can't really tip with a payment system, realistically, right? If I want to toss someone 50 cents Visa or whoever takes a fixed amount plus a percentage, so there are usually minimums.
Amazing! Congrats!
>com.apple.gamed

I like the poetic nature of exploiting that one.
What is "facebook wrongthink"?
that doesn't mean class B shareholders can do anything they want that hurts class A shareholders.
why is this any different from any other web api security concerns?
DOS + USB.. I'd rather stick with serial
Caps are not hard to implement. That’s a bullshit excuse. If they can bill it they can stop it.
Flying Microchip the Size of a Sand Grain for Population Surveillance
One other aspect is that it's often not even fiscally reasonable to attempt to get the cash back. The costs of an attorney to take the case often outweigh the value of the cash seized. This means many times the only options are to give up on the cash, or try to do it yourself. Doing it yourself means even more time investment, and a lower expected return.

There is no way this isn't a significant factor in how many people leave the seizure uncontested. I wouldn't be so quick to assume anything uncontested is drug money.
Live Crypto Scam on YouTube
with no one to regulate, facebook would never have to answer to anyone, ever.
Except... this isn't law. This is legal precedent. The court can only rule on laws—it cannot create them.

This is why we are now "decriminalizing" things: In a plurality of states, you have fetal homicide laws where the life of the unborn is equated to another human life. Courts and prosecutors have simply chosen to ignore the law and the left has pretty consistently used the courts to bypass actually changing or doing anything with the law (probably because the support just isn't there).
Yes - and they had limits with EBS, too. It’s not perfect but it’s really handy for cutting out maintenance for a substantial fraction of my tasks which don’t hit the edges.
Everybody's body responds differently, so you have to experiment to see what works for you. The CGM has been a great tool for that. I also use a Keto-Mojo for blood glucose and ketone testing now and then.

What's worked for me is a diet of eggs, cheese, bacon, chicken, ground beef, ground pork, roast beef, turkey, pepperoni, kale, cabbage, Brussels sprouts, coffee, seltzer, bone broth, half & half, heavy cream, rebel ice cream (but not other keto ice cream brands), almond flour, ground pork rinds (as a bread crumb substitute), and probably some more I'm forgetting.

Typical advice is to stay under 20g net carbs, but I've found that I do better if I count total carbs instead for any non-veggie foods. Keto-friendly substitutes for flour and sugar mess me up most of the time, but I've found a few things that are ok. I also do intermittent fasting, only eating one or two meals during a 6-8 hour window, but I do much better if I fast for 36-48 hours. Dr Eckberg has some good videos on why fasting that long makes a difference.
The Mafia Finds a New Frontier for Crime: The Internet
Not sure why you're being downvoted - the current number one story on HN [1] is a list of IOS 0-days, one of which shows that the analytics data is collecting and reporting health metrics like heart rate, menstrual cycle length (?), and other somewhat less unusual information.

1: https://news.ycombinator.com/item?id=28637276
This thread is a symptom of a deeper issue in society: the belief in "choice"
https://trendguardian.medium.com/free-will-a-rich-fairy-tale...
Apple has always been infamously bad at doing anything with external bug reports. Radar is a black hole that is indistinguishable from submitting bug reports to /dev/null unless you have a backchannel contact who can ensure that the right person sees the report.

Bug bounty programs are significantly more difficult to run than a normal bug reporting service, so the fact that they're so bad at handling the easy case makes it no surprise that they're terrible at handling security bugs too.
They should send a cache-control header in the response or 304 Not-modified when queried with not-modified-since. The calling service should always be the one responsible for caching to save the network round-trip. And if you're going to duplicate data like usernames, get a message channel setup to propagate the changes into the system cloning data.
I preordered! Looking forward to reading it. :)
I poked around earlier and found this file: https://github.com/oxfeeefeee/goscript/blob/master/vm/src/gc...

Perhaps someone can shed more light on how exactly it works
Summer 2021 - 6.7

Winter 2020 - 6.2

Summer 2020 - 5.7

Winter 2020 - 6.6

Fall 2019 - 6.0

My numbers tend to range in the high 5s to low 6s. That being said, the past two years have been rough because of a thyroid issue, plus 2 different drugs that impact blood sugar a lot (my blood sugar was hovering around 180 all day today, having not eaten since last night, and taking 80 units of short acting insulin over 4 shots... its been pretty crazy)
Why Apple didn’t then restrict the use of the clipboard and make no fuss about it after TikTok was found to be sniffing the user clipboard, astounds me.
as a skate/music nerd, this was cool to read. i'll be fresh out of uni soon, and hoping i can stumble upwards as well. good luck to OP, round looks rad!

edit: looks like OP wasn't the author, oops! good luck theo!
Bazel uses Starlark as its language, not Python. Obviously there are similarities, but Starlark is a tiny subset.
A muscle imbalance in the shoulders from years of mouse use will almost certainly cause some form of neck pain, as will anterior pelvic tilt from an undeveloped posterior from years of sitting in a chair. Typing related injuries in the elbow occur because the tendons - and the muscles surrounding the tendons - are too weak to support something as simple as typing. So long as you're smart and your hands aren't stretching across the keyboard you're not going to develop something sinister-to-treat like the emacs pinky.

Take care of yourself. There's certainly more of us on here:
https://news.ycombinator.com/item?id=17132938
EAC with wine/proton support for Linux
> That wasn't the original claim

The original claim was that the US needed a higher minimum wage.

> $13.50/hr

Where is this number from? The US federal minimum wage is $7.25/hr, unchanged since 2009. The only states with numbers like you've quoted are the ones you're also telling people to look beyond.

> arguing that the US is a terrible place

Neither I, you, nor nacho2sweet are saying that so I'm not sure why you're bringing that into this.
Theranos trial: Elizabeth Holmes took former US general's blood