skysight-inc/HackerNews huggingface dataset:
Duplicate of https://news.ycombinator.com/item?id=28629876
Cybersecurity is a genuinely hard problem, but stuff like this is dropping the ball entirely. It's not hard to solve exploits like faulty permission-checking after they've been reported to you.

Sure, there are always going to be problems you miss. I can forgive them shipping with zero-days, it happens. Failing to respond to reports is just that: failing.
...Unless they own both the tracking and the end user browser and/or device. Like Google, and Apple.
Make sure you're running Netscape 3.0.

It won't play midi files natively for me in Chrome.
Rogan often has very left leaning guests including scientists, authors, and politiciana. They just get less coverage. For example, Rogan had Bernie Sanders as a guest and openly endorsed him.
The vast majority of the actual content of the internet is provided by people for free to the internet in general. Even your post right now that I disagree with, you likely didn't get paid to post.

That content on Facebook that keeps people coming back? It's not the ads or deals; What keeps people coming back is what their friends, families, and idols post. They're effectively generating content for Facebook which they are then profiting off of "for free".

The straw man argument here is that Facebook is providing the platform and that is how people are compensated for their content. It's kind of fair, but it's been wildly abused. There are competitors, but it's the lock in and invasion that has given Facebook it's value not choice.

There is no informed opt-in, discussion or debate about the value you provide to Facebook in exchange for the value they get out of you. That is the cash-cow Facebook has been milking and when given an informed choice people are now saying, "No, I'm worth more than this garbage."

I'm tearing into Facebook because that's the target of this post but that content is provided on every platform. The value is in what the users are providing not the platform. Reddit, Hacker News, TikTok, Facebook, Twitter, Instagram, Snapchat, Google Everything. The content is provided by the users for free to the platforms. The marketing content is noise that people complain about and do not want.
I would like a ThinkPad shaped keyboard with mousepad and trackpoint included (the mousepad below the spacebar and mouse button both above and below it)

almost every mouse/keyboard combo has the mousepad on the side which I dislike
I'd think also almost zero. A lot of sleazy data collection operates under at least some fig leaf pretense of user consent, in this case there's none. Once the vulnerability is discovered, Apple could find out if you've deployed such code more or less ever. Then you'd probably have problems bigger than just a contractual dispute with Apple.
I was using Sourcetrail in the past, and I thought it was only an interactive code field/method browser, and didn't have any way to trace causality... unless I missed some functionality.
The reason for your twitch and TTFN departure, red tape as you called it, are everywhere. It’s not red tape. It’s persuasion, collaboration, compromise, and leadership. You clearly have all of these skills. But still, It’s easy to get frustrated by these things when all you want to do is build.

Unless you work alone, you will always have these interactions. You will always need to persuade and collaborate and yes, compromise.

Honing these soft skills is the other part of advancing your career and becoming a great engineer. The next time it happens, see it as an opportunity to grow, learn patience, compromise, and to practice your persuasion techniques.

What would you have become if you stayed at twitch another 4 years? Maybe director of engineering. Or CTO. You’ll never know. And maybe those aren’t your goals right now since those roles don’t build. That’s ok.

Thanks for the post. Enjoyed reading it. Good luck with the new endeavor.
I've been holding out hope for at least 15 years that Apple would find a way to make micropayments work for news. I pay for a few subscriptions, but I'd happily pay a little bit for news items I read elsewhere.
Bafflingly there still isn't an Azure service to send email, like AWS SES.
It’s pretty trivial to encode a backdoor into your app that would let you remotely call native code of your choice.
The project appears dead though. It looks like the GitHub mirror has a couple PRs but no one is looking at them and it doesn't look like he's added any collaborators.
Here is what I suggest: take every week 1 hour to drink a coffee with your wife and discuss family matters. First coffee will have a lot of things to solve, but if you commit to do this weekly you both will not feel the need to solve everything in one meeting.

Also I would approach this with a mix of relaxation and focus on solutions and not make the meeting a bullet point list with todos. It might be that the first meetings will be more venting than actual solutions. Let is be for both of you! You have a life to live together so there is always time to discuss anything.
I find some of the this vague in this announcement. Non invasive BGM is the "holy grail" in this field. Tons of companies have failed after big investments. Some scammers are out there they claim since decades they solved the problem. I would be curious about peer reviewed publications of their technology.

A friend of mine is working on this too. Close to market. He is the only one that regularly published peer reviewed publications on this topic.

In fact, I remember I have written an SBIR grant proposal on the technology that was evaluated by an idiot who googled one of the components, realized a single unit (as compared to 10000 units) would cost 50 grant and rejected it based on the claim that the technology would be too expensive in practice. I had written in the proposal that, produced in quantities, the cost of this item is in the mid 3 dollar digits per unit. An idiot and google are a very dangerous combination, even at the NIH.
Mainstream news is just naked propaganda, so I'd also like an option to pay them nothing, in the unlikely event such a subscription is actually available. They aren't doing it for money anyway, and whoever is paying for what they do will just continue paying, because they need manufactured consent.
Last year I heard someone call out the value in your mind being exposed to a topic for a length of time. I've found this to be true. I recently reread The Art of Motorcycle Maintenance and forming my own mental model and brushing it against what three book had to say gave me more value than just absorbing the book's content.
Well if we are mentioning different projects, there is also Espruino which has alot of support and drivers. One of rhe neat things about it, is that it gives you a "browser" like console to interact with your javascript and has commands similar to Node.js. https://espruino.com
I wonder how many of them spend all day with AR glasses on clicking on things that aren't threats, to train the AI that'll put them out of a job?

(I wonder if you could sign up for that job, and poison the training set so Zuck can never get near, say, a fire hydrant or a puppy - without the robots all going to defcon 5?)
Yes, but most of the time you’re not using that in your Objective-C code.
"A few times every year, there's a ton of hype about some new noninvasive device, and the newbies get a bit worried, but the old timers just shrug it off"

This.

But a buddy of mine may surprise you soon. And I worked in the field too.
There’s no evidence (in the article) that any shareholders were harmed.

Businesses pay money to settle legal issues all the time.

The larger payment settled the issue (with the Federal Government). The smaller alternative would not have (according to the article).

In the end some shareholders disagree with other shareholders.

And anyone can sue anyone.
Tiny? It made it so you’d never have to deal with an overrelease ever again…
Facebook makes $9.5B in profits per quarter.

I think it's safe to say their ads are doing A LOT more than just paying for the service.
Whitewater kayaking is the only extreme sport I've seriously tried so far that I outright quit. I learned how to sweep roll (when you are upside-down in a kayak and flip upright), I learned how to hand-roll, ran several class III rapids, surfed kayaks in the Atlantic hurricane swell, and I was working on a special recovery roll that I can't remember the name of when I decided to quit and never do it again. I've rappelled down into huge caves on single ropes, towed my hang glider thousands of feet into terrifyingly active Texas air, and swam in icy underground water, but whitewater kayaking is the only one that inspires real fear.

I think it's something about the pace at which you die. When you fall down a hole in a cave, you go splat at the bottom and die in seconds, and when you fall from the sky in a hang glider (which I've done), you have about thirty seconds to think about what's happening and then you actually have a reasonably good change of not dying when your glider hits the ground. When you get hypothermia, which I've caught a mild case of, it can take between thirty minutes to five hours to really die. But when you get smacked by a loud, cold, angry river, eject from your kayak, and end up trapped in tree branches and held under to drown like an animal, the river assaults you in a way that I do not have the eloquence to describe. The current is terrifying, the water hurts, the strength is drained out of your limbs in seconds, and often you're only a foot or two from breathing perfectly well. It doesn't feel like you should be dying--your body isn't broken, you haven't had a prolonged struggle with nature, you just go from alive and happy to dead and nothing in about a minute.

WW kayakers also die for no reason at all. Hang glider pilots fly on days they should have known not to launch, or they try things they're not ready for. Cavers forget to inspect their equipment or get rained in. But whitewater kayakers from beginner to expert go out on a sunny day with great conditions, make a miniscule mistake they never could have trained for, and are mercilessly executed by the river. You can see it and hear it in the videos of WW kayakers "swimming" rapids, when they've had to jump out of their boat--they're terrified, because they know that if they fall into a hole or get sucked under the pourover there is very little anyone can do for them.

It goes without saying that it's by far the most fun of all the others, but it's just not worth it.
> Bravecto

My exact experience, both for dog (the pill) and cats (the messy stuff smeared onto the skin at the back of the neck). Problem solved, period. No ticks, no fleas, and no noticeable side-effects save for about a day of apparent nausea for my dog now that he is very old.

Of course it's only a question of time before some blood-gorged tick somewhere will show up alive and healthy and thriving on Bravecto.
Yeah, I have been using Firefox and uBlock Origin on mobile and I am amazed how other put up with the web without ad blockers
It's funny this is coming up now. Just yesterday in GCP I was trying to figure out our billing and looking at what was costing such a huge amount. I couldn't figure out any way to map the actual service being used to the price on the normal reporting or even on the billing cost table export. The only way I could figure out how to do it was to enable log export. They used to have an option to download that as a file. They disabled that a while ago and now it's only available as a bigquery export. Which is exported every day. I was like "Why would that they do that ?" Oh cause now I have to set up big query and pay for all that. So I have to pay extra JUST TO SEE my detailed billing information. Pretty ridiculous.
non-invasive. Any investors here? I could offer non-invasive blood pressure monitoring (no, not based on pulse wave velocity).
Would any court let a company deliberately provide something for free and then later let them sue you for using it?
This advice works excellent for natural procrastinators! But sadly, does little for other personality types.
Gargantuan.
You know you can have a reliable custom domain hosted by companies like fastmail right?
This post is just an ad. It's a brand new Substack with literally only one article that's more than 50% ad text. All of the comments here are addressing overall HN sentiment or the title, not the article and the giant ad text which I would think would stick out to more people if they had actually read it??
I've watching this video multiple times now to keep me in check.

https://www.youtube.com/watch?v=L1j93RnIxEo
Why are we considering these regular people when this is becoming the new regular?
Unfortunate that they'll take Instagram down with them.
I'm nitpicking on unimportant details here but this seems like more of a general UI/UX problem than a free tier problem.

AWS and Azure both have pretty straightforward free tiers, but people end up accidentally racking up large bills anyway. A UI to see a list of running services, sorted by cost either doesn't exist or is not prominent enough.
> the Secret Service has an annual budget of almost $2.5 billion (though they do have some responsibilities aside from protecting POTUS)

In much the same way that the USMC has some functions besides providing West Wing sentries.
It really helps add some color to the motivations behind notorization. It seems ridiculous to me that I have to jump through so many hoops to run an executable that I trust. Especially when Apple can’t be bothered to follow up on real vulnerabilities that have already been reported.
Or better, we could stop making excuses for trillion-dollar companies with terrible security practices.
Crypto is (was? ugh.) cryptography, for starters.
It is the cost of their attempt of centralized monopolist platforms. From the P2P Foundation:

> Centralization is required to capture profit. Disintermediating platforms were ultimately reintermediated by way of capitalist investors dictating that communications systems be designed to capture profit. [..] But servers require upkeep. Operators need to finance hosting and administration. As the Internet grew beyond its relatively small early base, Internet service came to be provided by capitalist corporations, rather than public institutions, small businesses, or universities. Open, decentralized services came to be replaced by private, centralized platforms. The profit interests of the platform financiers drove anti-disintermediation.

https://wiki.p2pfoundation.net/Counter-Anti-Disintermediatio...
Weight is important for some people like me. I'm not anything special or have disabilities, but I really prefer lightweight smartphones. Heavier smartphones (say > 200g) significantly increases tiring on single hand use. Weight balance is also important. I'm Japanese and I can confirm some similar people exists but seems to not majority. Maybe who use smartphone in both hand never care about weight.
I think the parent poster is pointing out an apparent hypocrisy: Apple has rules which prohibit app developers from disclosing the apple cut in their apps, or even offering discounted off-platform purchase options within the app. Apple I think wants to keep their experience very high quality, but this could be interpreted as not "empowering" or "informing" them.
I had the same issue and same realization. That's why I always use keyboards without the numpad; that extra 4 inches of space for the mouse relieved most of my computer posture pains.
Please let’s not forget what a morass Flash was in terms of security. Holy crap.
Say huh? Bill Maher is pretty far from “cancelled” at least in the 2021 understanding of the term. Politically Incorrect ran for 9 years until 2002, Real Time w/Bill Maher has been running since 2003 nonstop!

“Cancelled” in 2021 implies that you have been sent out to pasture permanently for whatever it is that offended the cancelling powers that be… Bill Maher is a man who has been providing political commentary with the exception of a brief hiatus for 27 years. His “new rule” segments are all over social media and YouTube nowadays. Almost every single week those segments get massive social media reach and often gets mainstream news organization coverage.

He is an equal opportunity offender though. Right hates him for his opinions on religion, left hates him for his opinion on a “certain” religion. Right hates him for making fun of Sarah Palin’s sone with Down syndrome, left hates him for his recent tirades against wokism and the Biden administration.

The fact that he is so successful at pissing off EVERYONE and still has a weekly show on a major network that has run for the last 18 years is pretty much testament to the fact that not only is he not cancelled, but is pretty much apparently un-cancelable.
I think it’s a fair comparison to look at the idiomatic way to do something in a language and use that as the reference. Doing things on arrays in Swift often means people will call filter and reduce and map a bunch, while an Objective-C programmer might write a loop. It just so happens that LLVM can sometimes optimize the latter better. I mean, I could make the exact same argument you’re making about Objective-C being “as fast as C”: it literally is C. But when people use it they write methods and create objects, which are not things they can do in C. So I think it’s fair to call it “slower” if it needs to go through dynamic dispatch to enable the code that a normal developer would write.
San Francisco: where the local government can’t even decide on a trash can without flushing hundreds of thousands of tax dollars down the drain
And let's not forget that every time some promising alternative appears Facebook either fast follows (i.e. plagiarizes) it, or buys it and buries it in a hole somewhere.
Off-topic: I know one of you smart folks here at HN have figured out how to do something similar to go playground in the terminal that makes it easy to write a script, and on safe it go fmt's + imports, and then runs it. Something with vim + tmux or whatever. If this is you, I'd love it if you could share it!
Agree with most of your comment, but Uber’s thing was probably just as likely to be a team unable to say “no” to new code rather than one that “needed” people to anneal compiler passes
a lot to unpack here
Here's an old thread about this: https://news.ycombinator.com/item?id=21244440

It's obvious when you the Page Visibility API original editors/authors: https://www.w3.org/TR/page-visibility-2/
> Granted that he is sometimes susceptible to conspiratorial thinking, however that's not a personality trait exclusive to conservatives.

Pretty prevalent personality trait in humans though.
In which case—if it’s a legitimate deficiency—that doesn’t bode well at all for any other commercial enterprise. This arms race is always tilted in favor of the attacker.
It's sad to see yet another way in which the SF city government wastes taxpayer money. I'm astonished that there hasn't been political motivation to form some kind of broad audit for the city's spending. But since I don't live in SF, I guess I can happily ignore these issues and be content with my own city's relatively modest decisions.
I'd like to make an accessory recommendation: get one of those grip-strength things and use it all the time.

This did two things for me:

1. Extra strength in hands and forearms makes you more resistant to injury of all kinds there

2. More importantly I think, having extra muscles in your hands and forearms gives you more proprioception feedback to help know when you're putting your hands and wrists in an uncomfortable position.

I've read a lot of accounts over time of people who get to full RSI injury stage without realizing their hands were in an awkward position at their desk, but I've never had that problem because my forearms are meaty enough that any odd position pulls a bit on the muscles. I can literally feel when my hands are out of position, so every time I sit at a different desk setup, or change my chair position, I push my keyboard and mouse around until they're all kinds of angled and spaced away from each other and I feel no strain. I also regularly mix up hand/elbow position throughout the day because I can feel strain happening earlier in the muscles before it becomes a problem for my tendons.

IANAD, YMMV, etc - but I've been typing/gaming many hours most days for almost two decades and I've yet to experience RSI (knock on wood).
> This particular vulnerability requires the install of a malicious app, a much higher bar than a 'drive by' exploitation.

It's a much higher bar when it's a targeted attack but not necessarily if it's a dragnet like when a malicious party buys a browser extension from the creator to harvest user data. The only real difference between the two scenarios is iOS's significantly stricter review process and sandbox - if this exploit can bypass both [1], it doesn't matter whether the malicious developer can be traced because it'll just be some indie dev who just sold his username/password and signing keys for $X0-Y00k to some shell corp in the Bahamas.

[1] Are these exploits detectable through static analysis or some other automation? (I have no idea)
Ask HN: "Free if you know how to compile it" open source license?
Has anyone tried setting up an open source license oriented around the idea of "it's free if you are savvy enough to compile a binary, otherwise here you can pay for a pre-compiled binary"? I feel like this could be a very interesting option for solo developers who want to monetize their open source work but want to keep things free for other developers and/or people willing to spend 5 minutes reading documentation on how to build the project.

This would also encourage non-developers to dip their toes in a development environment which would be an undeniably positive thing for the community.

Anyway was just wondering if at any point someone tried to set something up like this. I've been toying with adopting a model like this for one of my popular open source projects that has a _lot_ of non-programmer users and would benefit from increased participation from users in the open source process.
I think this is an important point. Even if debt can be used to avoid tax, you only want to put that debt towards something that builds equity. The commercial real estate market can only be in denial for so long before the fire sales begin and rents collapse. The fundamentals for inner city office space have gone out the window.. and the situation will only get worse.
The smaller a Pull Request I submit, the prouder I am of it.
Serious question, what is the raison d'etre of this API?
A tangent from your local product development engineer: never pay attention to the cost of prototypes. It's just not related to final product costs. It's a little like software: the first one's very expensive and the following ones are very cheap. In this case, it's because the prototypes are built by hand, often using the time of skilled engineers at hundreds of dollars an hour, with no factory tooling or anything. So of course they're going to be expensive.

That says nothing about the rest of this article, though.
As an aside, hey San Franciscans, consider supporting Mission Local. The work they are doing covering this kind of bureaucratic stuff is invaluable - this years reporting on the Dept. Building Inspection has been particularly good