skysight-inc/HackerNews huggingface dataset:
One more reason why "closed systems" are not magically superior. Closed systems still have vulnerability, and the culture that creates and maintains the closed system shuns those that find flaws in it. So much so that security researcher becomes, in their minds and practices, synonymous with black hat actors. Why would you report vulns to a company that doesn't want it? Go sell it elsewhere and use that money to get a better device. Yet researchers persist, for the good of secure technology.
> If a pair of hiking boots lasts more than a decade (his comment seems to imply they’ve already lasted a decade) that’s a normal lifespan, not a problem.

If that's the expected lifespan of the shoes, then the warranty should reflect that.

> But clearly they were satisfied enough to use them for 10+ years.

Satisfaction is based on expectations, and when a product has a lifetime warranty it doesn't cap the expectation at any time period. GP might have expected them to last 15 years instead, and it would be hard to argue that 66% of the expected lifetime is 'satisfaction'.
Apple is going downhill. It's amazing how a trillion dollar company can't even get this right. Wouldn't be surprised if the IS&T group is running the bounty program. Probably offshored to hell at this point.
Has anyone on HN been able to run any of these 0-days to see if they work on their device?
The Missing ‘WHERE’ Clause in Vector Search
I maintain a similar (but less popular) open-source CLI that generates flow charts for dynamic languages (Python, JS, Ruby, PHP) - https://github.com/scottrogowski/code2flow/

The thought has crossed my mind to try to actually sell it as a SaaS. But by itself, call graph visualizers are the sort of thing that you would need only once or only every once in a while. That sort of software is very difficult to monetize - as 10,000 failed productivity app companies could tell you. I don't know the details of what happened with Sourcetrail but I assume it was similar - developers might have found it useful occasionally but it's not something most developers would use daily or even monthly - so it's hard to justify a subscription.
My desktop is overly low end. Scrolling is a bit laggy but the presentation was interesting: Change nothing.
The biggest enabler of vaccine misinformation spread
I agree with everything you said. Reflection, I think, is the one that is quite difficult to address.

The others - GC and unicode data - can be addressed through changes to WebAssembly in theory.

For Zig, I developed a custom compression algorithm[0] for the Unicode data files needed to implement the same string functions - reducing the data size down to just 58 KiB. The same could certainly be applied to Go.

[0] https://devlog.hexops.com/2021/unicode-data-file-compression
Serbia surveillance law urgently withdrawn
Where are the Safari extensions in the iOS App Store?
> If I have to choose between thorough testing and being able to finish the project at all, testing can wait.

The way I look at it, you can't test anything until you know what it's supposed to do. You won't know what it's supposed to do until it's at least close to being done. No sense in testing until you get there.

If you want to have a head start on testing, making sure to write your code so it's easy to test is probably fine, even if it's not what I'd choose.
The issue was deleted, Here is the archive - https://web.archive.org/web/20210924045611/https://github.co...
> People “want” the free content and services that this advertising has been paying for.

Eventually people pay for advertising.

First, we pay with our data, and then we pay for the ads too (in the form of more expensive products). We pay twice!

And people don't want these services as most are perfectly fine without them.
which humans are a net negative after they are born?
> Tesla didn’t send an emergency tow truck, but instead directed him to call 911

So about 3 years ago, there was a car which got a wheel stuck in the caltrain crossing near 4th st in SF (they turned right into the tracks without completely crossing over).

We were appalled to find out that the guy in the car was on hold with the rental company & we immediately called 911.

The cops responded within 2 minutes (they were probably parked in UCSF) and stopped the trains on 22nd.

People do panic and don't always think straight on what should be done in an emergency.
There needs to be a distinction between 0-days that make remote code execution possible and those that don't. This is still a pretty damning data leak.
Non-essential cookies are personal data as regulated by the GDPR. It is true the EPD started the cookie consent popup craze though.
I wonder how much these would be worth to intravenous drug users?
I'm convinced folks who complain about "unexpected recurring small bills on AWS" have never taken the five minutes it takes to learn to using the billing console.

It's like asking why the knife you're using keeps cutting you when you put your finger on the sharp end. Learn to use your tools, and they won't surprise you. Learn to track your costs, and you won't have unexplainable recurring bills.
> Caveat: this is my first ever kernel module, so I may have committed more mistakes than I intended.

lol. Reminds me of the "hypocrite commits" fiasco where researchers at the University of Minnesota submitted kernel patches with what they thought were security vulnerabilities, but because of their inexperience, the first patch they sent was actually valid and had no vulnerabilities whatsoever[1].

[1] https://www-users.cse.umn.edu/~kjlu/papers/full-disclosure.p...
Probably means they make "good looking" products. But underneath the hood, it's spaghetti.
From the PoV of a security researcher - why even bother disclosing responsibly (moral obligations aside)?

Best case scenario: you don't get sued into oblivion, will be ghosted and gaslightened, receive pocket change arbitrary amount of time later.

Compared to that, i suppose the exploit brokers got their stuff together - after all, time is money - chances are someone else may stumble upon the same vulnerability...
What do you think law is? The Fourteenth Amendment is part of the US Constitution. The Supreme Court’s interpretation is that that law protects the right to abortion.

You might not understand how (or agree) that follows from the text, but that doesn’t matter. Only the Supreme Court’s interpretation is canonical; ergo, the Constitution guarantees the right to an abortion.
Wouldn't there be better options for that? python, lua, tcl, perl, ... ?
My thought is something like this: Building the project successfully confers full MIT license rights to the user who built the project.
I was a bit surprised by the solution in the article and then again when I saw a load of supporting comments. I have really debilitating pain in my hands and wrists and as far as I can tell, it started with the first MBP I had using chiclet keys. To this day, I can't type on a modern Apple keyboard without my pain flaring up (although the later 2019 model was a big improvement for me).

Add on the sharp edge of the laptop right where a wrist might sit and the thing was an ergonomic nightmare for me. For quite some time, I typed by using two pens to peck at the keys. I then spent years on a dictation-based solution to writing code (https://github.com/dictation-toolbox). I really thought I was going to have to pursue a new career. Fortunately, I tried a friend's Kinesis Advantage and found that helped alleviate the symptoms. It's hard to convey how much relief I felt. I was skeptical of the Kinesis since it seemed gimmicky and because I had no success with other ergonomic keyboards, but it works for me. It's not pain-free, but it's livable. As a secondary benefit, it can flip to sending Dvorak keypresses. I used to do that at the OS level, but it wouldn't work in some programs and it was really annoying for anyone I might pair program with.

The low key travel distance on modern laptops is a killer for me. I don't think I type particularly aggressively, but I did originally learn to type on an Apple IIs. I've found with most chiclet keys that pressing the key bottoms out before my fingers expect and I end up jamming them. I have a work-issued MBP now and it's mostly workable because I can type on an external keyboard at home, but I dread having to travel with this thing. For my personal laptop, I ended up with Lenovo just because it had the best travel distance I could find. It's still a chiclet keyboard though and not nearly as comfortable as older laptops.

I really miss the old AlBook MBP keyboard. That was the last laptop I could comfortably use. Apple's equipment is still incredibly popular, so I appreciate that their ergonomics are not problematic for many people. I just never would have thought that an Apple keyboard would have improved RSI symptoms. I'm happy the author found a solution and shared it. Typing in pain is not a pleasant experience and being able to address it for the cost of two keyboards is much cheaper than heading down the medical path.
That quiz is really bad.

Sure, let's compare Iowa and Michigan (spoiler, those are the two states in the first question) when they have different demographics, different population densities, just completely different situations.

You don't compare a death line from Iowa with a death line from Michigan, and conclude Iowa is "better" than Michigan just because it has a lower death rate at one point in time. You compare a single state to what it might have been had the restrictions been better or worse. You look at counterfactuals. And you can do that with science and data.

So yes, you can take a region like, say, NYC, which had horrible lines in the beginning of the pandemic, and still conclude that it would have been far worse if not for the mitigation efforts it put in place. And you can look at other regions with lower population density, or populations that weren't well-tracked, regions with better death numbers than someplace like NY, and still conclude that they completely mismanaged the situation compared to what the numbers could have been.

To just take two death lines from two different areas with completely different on-the-ground realities is just cherry-picking - at best motivated reasoning and at worst dishonest intent.

Besides all that, even examining the numbers in the way the quiz wants to - but with current numbers, numbers that extend past the arbitrary cutoff point in those graphs - they show that Iowa currently has a worse Rt than Michigan, worse test positivity, disease prevalence that is almost twice as bad as Michigan, and checking today's data, Iowa's deaths per million are actually worse than Michigan's. (https://www.beckershospitalreview.com/public-health/us-coron...) In a state with less than 1/3 the population density.

Throughout this thread you're also using absolutist language and exaggeration in ways that are literally untrue. You're demanding proof and then rejecting proof when it's presented. Really straining the boundaries of the "assume good faith" rule we follow on this site.
That could be inferred as unauthorized computer systems access under various laws, so I don't personally, but it's definitely something you can try to do in varying degrees.
Feel free to block updates and enjoy security vulnerabilities. Or better yet just build your own version if chromium
If Apple can't handle properly disclosed vulnerabilities on their main revenue generating platform what does this say about other companies? Nothing good I'm afraid.

Meanwhile the contact list on my dumbphone is perfectly safe. Time and again that's been proven to be the right decision, convenience seems to trump security in the eyes of many but I just don't want to give this up until there is a 'cloud free' smartphone.
96% of people want something for free, sure; but these are iPhone users, so they’ve already paid extra money for a premium product.
The early days of PyMol (software for molecular structure visualization) were like that.

The software source was available to download and compile under a free software license. Pre-package binaries were available, but not under the same license. (Plus I think it included some non-free extensions). The developer made money selling site licenses for the pre-compiled binaries.

It wasn't much money. He had to deal with a lot of licensing paperwork. This was ~20 years ago, when credit card purchases were often over the telephone.

But this was also 20 years ago, before package managers became popular. I've had source-only free software distributions of mine turned into packaged distributions, without me even knowing about it. (Someone added one package to PyPI, and someone else another two to Debian.)

If your non-programmer users are used to installed from PyPI, or conda, or some other package management server, then they'll want to download your package from there too.

If your free software source is available, and it isn't packaged, then I think someone else is going to do it.

One of the downsides of package managers is how they worsen the connection between developer and user, and make it harder for users to 'dip toes' in the development environment.
It is weird that if anything goes wrong in a Tesla it suddenly becomes international news regardless of how frequently that same thing might happen in any other make of vehicle.
Are you telling me that all those tough screening , bar raiser hiring and jazz can not produce a descent employee to solve this problem at google? I thought best of best of this universe works for FAANG. Amused.
Rather, turning into a different kind of boom bust cycle. If history is to be rythmed, the answer might need another hundred years to manifest. The usual cycle of Chinese history is about 200-500 years in the unified state. Given the acceleration because of economics and technology, the lower end might be more likely this time.
It took me 16 hours of targeted practice on monkeytype and keybr.io to reach ~50 wpm on my first split keyboard, including a new keyboard layout. The second time I changed layout it was even faster.

There is some effort here, but in the context of an entire programming career it barely even registers.
Lightning transfers cost 1 sat, about 0.05 cents. So on a 50 cent transaction that's 0.1% fee.
I think it could meet the OSD definition... if it's identical to MIT except you have to build the project to become licensed, I don't see how that violates any of the OSD requirements.
Apple doesn't want a 30% cut. They want a 100% cut.

Watch as Apple rolls out "privacy compliant" ads api that will route all ads through apple.com and block out other advertisers. Apple wants to be the only Ad company on iOS.

Notice the hypocrisy of providing privacy for your internet shopping behavior while dumping your imessages to CCP without a thought as well as your albums to any government entity.
I spun up an AWS service a year ago (while taking an AWS course I never finished) and haven't been able to find it or turn it off since.

That's $9/month until I disable that credit card, which I might do one of these days.

I thought they'd notice and disable my account after I successfully disputed the charge one time, but the bills just keep rolling in each month.

This might be a bit overreactive, but... I'm building an MVP for a SaaS app and I sure as heck am not going to host it on AWS.
As an iOS user, I would like to say that I'm enjoying not feeling targeted by ads that makes me want to spend. The latest focus function is even better.
Except imessages get uploaded in its entirety to the Chinese government, FB messages don't.
Litecoin Price Prediction
You have to see how that's both totally different and a terrible idea for a business, right? If anything the existence of hard limited student accounts combined with the fact that support always* refunds giant surprise bills underscores the point that caps for business accounts don't exist because of the damage they could do.
RBoy: A Gameboy Emulator in Rust
Have this actually been done since the opening up?
As much as I hate Facebook, I think that one company abusing its power against other companies is not a good thing.
One of the competitive dynamics of phone books was that businesses were essentially extorted to buy advertising in any phone book whose publisher had the scale to give everyone in your town a copy.

If you didn't buy advertising in every one of N phone books, you lost roughly 1/N sales for each book you failed to advertise in.

More than one empire was built by introducing new phonebook after phonebook to town after town. Despite none of the towns needing another phonebook.

So it may be a bittersweet situation that Google's lock on search at least saves businesses from having to advertise in 20 search engines. Although given Google advertising is an auction, maybe there are no savings.
Different ad services provide different levels of targeting, based on the data that different platforms collect about consumers and what those platforms are willing to let you use for targeting.
Thanks for the reply! I appreciate you taking the time to respond to comments like mine. I tried brave several years ago but it seems the ecosystem has developed quite a bit since then so I’ll give it another go.
> The vast majority of the actual content of the internet is provided by people for free to the internet in general.

That maybe provided for free. However the hosting infrastructure is paid typically by advertising.
iAds. The 2.5T behemoth is looking for new revenue streams.
What ad service? App Store ads? Those are based only on the actual search term.
Delete any apps you don't want others know you downloaded or be linked to you immediately. If your wifi name for some reason is something sensitive rename it. The address book/sms one is tricky, maybe make a backup of your iPhone and if you're truly paranoid delete all your contacts and sms messages and restore them when Apple releases a patch?

This is truly a massive fail on the part of Apple and I hope there is as big of a backlash from their users.
I sat in a market focus group for IT managers. We were universal in our rankings AWS > AZure > Google for cloud services. We also agreed the Google was #1 or #2 technologically, but no one trusted them to be there day after day for the boring stuff
First, it's very strange that an antiparasitic like ivermectin has become known among mainstream laypersons.

Not that strange among laymen dog owners when the package of HeartGard heartworm medicine says "Ivermectin" prominently on the label. People that heard about it as a COVID cure know Ivermectin as horse dewormer, many dog owners know it as a monthly heartworm preventative.

https://entirelypetspharmacy.com/heartgard-for-dogs-51-100lb...
could you try litle bit harder to provide any example why it is "harder than it looks". you repeated multiple times that its hard, but what exactly(aproximately) makes it hard?
Even if children are at less risk, their teachers aren't.
My major problem is that the rewrite in 2019 broke nearly all the addons and ones I use haven't been fixed.
Is it opt in or opt out?
Zuckerberg is Facebook - he has controlling interest.

Keep in mind he lives in a house in Palo Alto, CA where he bought all the houses around him to gain more privacy. He clearly values it.
Here's how I'd pitch it

> Oil for the lamps of China, but for adverts
I said that a very large majority of at least West European and Kiwi cows' feed is grass so we're in vigourous agreement on the economic viability of grass fed cattle agriculture. If other people think that can't work you provided a good existence disproof.
Understanding Metal Enhancements in the A15 Bionic GPU
I honestly cannot fathom this opinion. I literally cannot think of a single instance where I've ever seen an ad and thought "Yes, I'm glad that I'm seeing this instead of the content I came here for." If that's true, why bother even going on Instagram at all?

I'll admit that I don't use Pinterest, but from what I understand, it's main feature is being a place for user-curated image collections, yes? That's very different than algorithmically distributed, paid-for ads.
This makes me think of pgModeller:

"pgModeler is open-source software, and you can get its source code anytime if you want to compile it by yourself. As a convenience, we provide compiled binary packages at a really fair price. Also, if you're interested in evaluating a binary package, you can get a demo copy before proceeding with the purchase."
(quoted from from [1])

It's open source (GPL 3).

They give build instructions, but it's quite strenuous to build[2].

[1]:https://pgmodeler.io/download

[2]:https://pgmodeler.io/support/installation
All the Azure tutorials are structured this way, and they frequently end by having you clean up your rg.
It also reads like someone in a state of panic. You don’t think clearly. I’ve had worse experiences in older cars. Wind screen wiper getting taken off by a branch in a storm, bonnet flying straight up and slamming into my windscreen, brakes completely failing while going down a hill heading towards an intersection, etc. Panic solves nothing, just makes you stop thinking clearly. At least this guy’s car told him there’s a problem. My dumb mechanical cars had no idea.
Friend was training to be a rafting guide.

One weekend she was doing training. The second day things went wrong. People fell out of the raft and had to be recovered. The raft flipped over twice. They were running late. At dusk they found their takeout under water. Half mile down the river in the dark on a sharp bend in the river a guy managed to grab a tree branch. A woman climbed over him and got a rope on it. They pulled themself to shore and tied off. Found a flat spot 40 feet up a steep embankment and spent the night. Daylight revealed a waterfall and cascade just around the bend.

She said she found out later about a dozen people died that weekend up and down the west coast. And she was done with rafting.

Another friend does canyoneering. Couple of years ago on a trip he missed, a friend was fording a river carrying a rope. Rope tangled him up on a submerged tree. He drowned with his friends watching from the rivers edge.
I think they mean the NIH grant reviewer dismissed the grant request on the basis that the technology was too expensive - ignoring that the research was intended to catalyze mass production which would have made the technology economical. Thus missing the point of the grant proposal.
There’s plenty of room between the current vig (0%) and profits.

Which is how I’ve come around to blockchains for social. Not just for equity, but trust: you can see the governance contracts / how equitable / how easy to change the deal is.
If you're piloting a ship or aircraft, there are multiple levels of distress call available to you; not everything needs to be called in as a mayday. But for drivers on the road, 911 has to serve as a one size fits all resource, which leads to doubt in situations like these where it is not yet necessary to send an ambulance or firefighters.

The most severe emergencies are the ones people most readily associate with calling 911, and it takes education and outreach to reassure people that it's okay to call 911 for less severe situations—before things go from bad to worse.
Wild times? It sounds like if your company had better security controls in the first place you wouldn't have been exposed to ransomware.
> This is a disingenuous analogy because the costs to the developer are already reflected in the total price offered to the consumer. This is how stores work. No market that I know of makes a point of showing wholesale prices to retail customers.

I've often bought something off Amazon (or even in a physical shop) and had it come with a flyer for the manufacturer's own site, or a catalogue for ordering accessories from them directly. Plenty of hotels make a point of saying "this is what it costs if you book with us directly".

> So it's not like the consumer could be offered a lower cost payment option anyway.

Then why are Apple so scared of letting customers know the facts?