skysight-inc/HackerNews huggingface dataset:
I agree that they don't care. Perhaps they should, though? It's just unnecessarily wasteful (assuming they replace the entire top case assembly, which they probably still do) and expensive. By the way, it is currently $200 [1], but it could change. I don't think it's too unrealistic to imagine that Apple does this intentionally in order to get you to buy the latest model. Why keep investing in an old, dying laptop rather than just get a new one? It makes sense to invest in the Framework Laptop because everything is replaceable, including the mobo/CPU. But it doesn't make sense to invest in an old MacBook that might have other unforeseen, unfixable issues (unless by Apple for a fortune) in the future, even after a battery replacement.

If MacBook users could either replace the battery themselves (or take it to any repair shop if they somehow don't have a few minutes to spare), they wouldn't have to face the "repair or upgrade" dilemma until much later in the laptop's life. For Framework users, it isn't a problem at all.

[1] https://support.apple.com/mac/repair/service
I think the behavior is very Russian.

Hacker: You have a vulnerability bounty program. Well here are three. Pay up.

Apple: [silence]

Hacker: [interprets this correctly as a fuck you.] Fuck me? Fuck you!

Me: Love it!
AI powered LEDs for veins finding
Will Crichton just open sourced flowistry for Rust:

https://github.com/willcrichton/flowistry

It's a vscode plugin that analyzes the data flow graph, and lets you do things like highlight statements that depend on the current one, etc.
Where? You mean in America? It's really not needed where I am. Also rather doubt I need to pass KYC to buy a burger and fries from a food delivery service in the US.
The problem is that cybersecurity is ridiculous hard problem. The junior to senior developers are just using existing frameworks with poor documentation. Any consumer technology will be beaten to submission.

It's the same never-ending war as anti-cheat vs cheat.
There's nothing stopping you from only buying first party Apple USB-C cables.
I do actually. What else are you supposed to do with your time? Life is short, best to use it.
We have a lot of ideas but I don't want to share too much as we haven't committed to any one thing yet. Definitely eyeing the IRL/mobile streaming market though, feels like there's a growing need for some innovation in that realm
Sewage sampling has been used to survey disease for a long time, but we are at a point now where it is technically feasible to automate the collection and analysis of DNA. If that isn't disconcerting enough, we'll be operating on fairly rough race/familial markers for some time - so just enough evidence to initiate life ruination, but not enough to exonerate. Sewage surveillance was allegedly offered as a viable tool in the hunt for OBL once they narrowed down the Pakistani village.

https://www.wired.com/2015/10/familial-dna-evidence-turns-in...
Props to the author. One small critique though:

> I've reported four 0-day vulnerabilities this year between March 10 and May 4, as of now three of them are still present in the latest iOS version (15.0) and one was fixed in 14.7

It would have been clearer if in each of the 4 vulnerabilities the timeline was given. The article only gives a timeline for the last vuln (the fixed one).
FWIW Turning the phone off is very different to removing the battery. Removing the battery is the most secure.

Mobile phones that are “off” are still powered and many/most essentially enter a form of sleep and aren’t fully off. There have been articles about phones being hacked that are able to be activated while “off”. Hence RF is still possible. And in reality even a non-compromised phone may still have chips in the radio somewhat active.
You are welcome to your opinion as to why Lisp is sidelined.

There could be many reasons, such as dislike for its syntax. But that is not ignorance, just de gustibus
If only there were a way to play the single player parts of shooters without the intrusive anti-cheat...

Singlehandedly killed my desire in multiple games.
Good! Unfortunately for them, the world moved on, negative reputations are hard to shake, and they missed the ball WRT keeping up with the status quo of open source community repos.

The last piece of software I occasionally visited sourceforge to get was WinScp, and actual SSH on windows means I no longer need to do that (I was only ever using because it was the easiest way to do it given no CLI option). 15-20 years ago quite a bit was on there though. It was the proto GitHub which wasn't in any position to respond when GitHub came to prominence.
Yes, loads of this exact thing
I agree, even though it feels a bit icky. I'm sure Apple have their eye on that advertising money in some way but anything that damages Facebook is highly likely to be a net positive.
Sorry I don't really understand what your saying. I simply found some interesting links that I thought people would find useful. The first two links are trying to show that the farmers are getting really cheap land (AKA government giving subsidies to them) as the current price is the minimum set in 1981.

The third link is just a counter argument to that says although the land looks cheap in reality its more expensive because of land maintenance.

However, I don't trust that article a lot as it was written by a rancher that is in a pro ranching organization so there is a big bias.
Solana bad, therefore Bitcoin good?
The Tau Manifesto by Michael Hartl: https://tauday.com/tau-manifesto
I don’t think instacart is as bad as it seems here. I’ve heard lots of people in these gif jobs get decent revenue and actually somewhat enjoy their work. I honestly think driving gig jobs aren’t nearly as hard or low-paying as retail.

Not saying that Instacart and co don’t need improvement, or that these jobs are easy. Stealing tips, inconsistent pay, dealing with rude customers and having them destroy your rating - these aren’t good jobs. I see firsthand these companies try to cut corners to bring a low price with the highest profit. But they’re better than retail.
I'm so so immensely relieved to learn I'm not the only one feeling this things.

Happened with all the self-help or self-improvement books I've touched.

The most excessive example of this being "getting things done" which was very trendy about ten years ago: the first third of the book were literally about the author bragging about results (but without any way to fact-check).
I’ve always been curious how many developers might drop this in their code but only activate against potentially valuable targets
I think you meant to say can't sign the bytes?
Ask HN: What systems have you devised for your life?
There are many a blog posts and quite a few books extolling the virtues of systems over goals. I believe in the idea, but it is difficult to understand where to start.

I am curious to know about real world experiences of setting up such systems.

Have you set up such systems in your life?

What goal did you transform into a system?

How did you go about designing the system ?

How successful was that? How are you improving on it? If you have to do it all over again, would you go about it the same way?
I see this general argument throughout this thread, that somehow bribery is only bribery if the money goes in the the official's pocket, but that's really not what the dictionaries I've looked at say on the matter.

Here's Merriam Webster for instance:

"to influence the judgment or conduct of (someone) with or as if with offers of money or favor : to induce or influence by or as if by bribery"

https://www.merriam-webster.com/dictionary/bribe

If, as the suit alleges, FB offered the government money with a condition not to press charges against their CEO, and the government took up this offer, that very much sounds like bribery, and I'd wager that the government official they negotiated with is indeed a real identifiable person who took a bribe.

It doesn't seem to make much difference to the general public what the motivations for taking such a bribe are, the big problem is that there are 2 sets of rules, one for those with the ability to bribe, and another for the rest of us.
Wait, they want common PORT on all phones yet the wall end isn't so common? Blasphemy ...
Circassian Beauty in the American Sideshow
I have a first-initial-lastname gmail address and receive more email for people with same-first-initial-lastname than I do actually for myself. One of them likes to go to expensive hotels somewhat often. I get the receipts. It's weird.
It doesn't even really mean that anymore. From the blog post here:

> I've reported four 0-day vulnerabilities this year

They're just using 0-day to mean "a new vulnerability finding disclosed to the vendor privately", which is becoming the new definition of the term.
And the results shine! New Zealand has the world's highest feed efficiency in poultry.

https://www.feedstrategy.com/poultry/new-zealands-tegel-poul...
On an interview I would, of course, go straight for recursion. In production, and where performance matters, I might try both.

A more meaningful interview question would be to present a recursive topo sort and ask for the iterative rendition.
I turn off typing indications and also don't send my status to the server for the same reason. I've never liked them, and actually have always felt that they were a bit invasive. Why should the other party know that I typed up something and then decided not to send it?
Wealth and income are very different concepts, however. The first result on Google says that he earned $25M (total comp.) last year from Facebook. While the original comment states that FB provides the security detail, so it is not a personal liability of his, an amount equal to half of your purported income from said business is still quite significant and not something you would ignore if a tax benefit is present. Especially when you have that kind of money to hire the best tax professionals around to take care of it for you.
I'd marry mic access, F#$% camera access, and kill bank access. Maybe that's just a personal opinion, though.
You know, I'd love to think that the problem is cyber security is hard -- which it IS -- but I'm starting to get the feeling that the actual problem is that Apple doesn't care about this kind of stuff. So many incredible vulnerabilities going back generations of iPhones and iOS...the zero click iMessages one floored me.
Or. You could just find out.

Sweden did much worse than the other nordics. Who are very similar. The only difference being mandates. Therefore: mandates saved lives.

https://www.businessinsider.com/sweden-covid-no-lockdown-str...

Middle of the pack? 145th out of 185. Worse than Russia, better than USA.

https://coronavirus.jhu.edu/data/mortality
Log Analytics uses a columnar compression format on-disk, so ingested data is likely compressed by anywhere between 10:1 and 100:1, maybe even higher.

However, the wire format is super verbose JSON.

They bill per GB of the latter, not the former.

To put things in perspective: How many $ of CPU time do you imagine it takes to column-compress 1 TB of data? I would estimate that a single modern CPU core could do this in a minute or so. Factor in various inefficiencies and make it a super generous 1 hour. At spot pricing, that's about $0.01! One cent!!!

The larger cost would be bandwidth. Azure charges a huge markup for traffic (just like AWS), so for example zone-to-zone data costs $10 per terabyte at retail pricing (not internal costing).

They store that data for 30 days "for free" (lol). Assume a worst-case compression ratio of 10:1 and then that means that they have to retain 100 GB for 30 days. That's $9.43 for a Premium SSD at retail pricing.

So their hosting costs for Log Analytics is something like $20 per TB ingested, but they charge well over $2000 for it.

That 100:1 markup is pretty sweet if your KPIs are based on recurring revenue.

There is no way in hell they will ever "optimise" this. Any accidental improvement will be rolled back or "adjusted" to ensure the revenue stream doesn't fall off a cliff.

Have you not wondered why it's taken them so long -- over ten years -- to enable any feature to filter logs at the source?
One of the first things you do when learning AWS via A Cloud Guru is setup a billing alarm.

I have one that goes off monthly at about how much I expect to spend in a month.
In India there are MOBILE plans that allow you 2GB everyday for $2 per month! My broadband is unlimited data at 30 mbps for our $10 per month. Do quit this bullshit argument.
By sheer coincidence, I've been working on a couple of videos that explain analytic signals using 3D animations from my own animation engine, and why they're useful. I hope to upload the first one in the next week.

A link to my channel is in my HN profile, if you're interested in the earlier videos in the series.
I think all the actually-Converse shoes I've owned were the Target version (One Star? Something like that) that were "Converse" but were mostly likely much worse than the standard kind. A case of you-get-what-you-pay-for, most likely.
That sounds like a great way to get lots of non-cheating players to give up online gaming once it becomes mandatory for the majority of online play (which it would if it took off).
Interestingly, this API is one of the tools Youtube uses to stop you from playing videos in the background on mobile.
I believe the poster was referring to the practice of testing if an app was installed by calling [UIApplication canOpenURL:] —- as I recall Twitter was found to check for hundreds of different apps, to feed into their ads and analytics business, and Apple later changed it to only be callable 50 times.
> I always wonder if going all-in on cloud services actually saves most people time...

Agreed. The apps and services I manage aren't very big compared to a lot of posters here, and my company is certainly not going to ever pay the big bucks for real talent.

So instead, I have to design everything knowing that my ops team is going to be mostly $100K / year "devops" guys with a few "cloud" certs but no real CS, dev, or even Linux knowledge (yes it's that hard to hire good people now (at the low rates my employer wants...)).

I've gotten to the point where I absolutely mandate that they don't try to use Terraform or CloudFormation scripts, because in the end, there are so many edge cases or glitches that it's easier to just write an install guide that shows them which buttons to click in the AWS or Azure console. <sigh>

And when I look at the costs we spend per month - including all the unanticipated charges like NAT Gateways and $20 / day "managed" Postgres instances, I assume we'd be better off dumping the cloud and reverting to our 2008 setup: Spending $10K on some Dell servers in a managed data center and hiring an old-school Linux admin to manually install and manage it all.
It is always an error to assume you know which of any architectural alternatives will be faster. You have to measure, if it matters.
This is a great point, and precisely why we're using two sensors and a simple voting algorithm in our first in man trial (3+ sensors and associated algorithms were deemed too risky by FDA for initial studies).
Surely the 30 people in that calculation at the locations Zuck is not currently at would be on-call, and not on full hourly rates though?

I'd be a pretty sweet security gig, hanging out at Zuck's 2nd or 3rd house doing nothing much for weeks on end... (You'd probably have enough on-the-clock free time to get paid to learn to code and crank out a few startup ideas...)
That billing model makes it very easy to find out what the operational cost of a particular product/service/team is costing the business and I think it's one of the advantages that GCP has, personally.
I can relate and I think that's because with the projects that I'm most passionate about, I can't wait to set up the infrastructure and do it right. I want to do it now! But generally, if there's a project that I'm struggling to find motivation with, I'll start the long process of setting up the infrastructure, hoping that I'll get motivation in the meantime and it sometimes helps a little but often it just ends up with me constantly pushing it back.
Inspired by Hitchhiker's Guide to the Galaxy - breeding animals that want to be eaten is more ethical than killing animals that don't want to be eaten.

https://hitchhikers.fandom.com/wiki/Ameglian_Major_Cow
In fact I always do.
> But isn't this much, much easier if you just piggyback on the Apple hardware ?

Would that be even legal? I mean selling a commercial OS that would be marketed to install as a replacement OS on the most locked, most proprietary hardware on the market?
Totes his own nines...

(Part of his bad boy puffer jacket fashion makeover...)
While conquest and control have been the hallmark of powerful human civilizations everywhere on the planet, it seems that the European versions post (roughly) 1600 have taken a different approach than their American, African and Indo-Asian equivalents. While the latter have all engaged in something roughly approximating colonialism, it seems the it is mostly the European powers that have repeatedly engaged in attempts at complete extermination of those they manage to subjugate.

I don't see this as a European trait so much as an extension of the religious and political doctrine of the period. The combination of Abrahamic ("personal relationship with god") religion powering a divine right of kings and technological war superiority seems to be a particularly vicious combination. Other cultures and civilizations have engaged in some brutal oppression too, but for the most part they seem to have understood that other humans were (1) humans (2) potential assets and subsequently engaged in a more complex aspirational relationship with the conquered than most European cultures have tended to do.
Yep, for the past couple months, I get a few a week that slip in. They all have garbage formatting and are wildly obvious.
Ok. Let's try again.

> You assume those restrictions work. This has not been proven at all.

What evidence do you require to prove that mask mandates are effective?

You are the judge here, neither plaintiff nor defendant. I do not ask you to prove anything.
This doesn't solve the issue of stolen accounts, or fraud.

Game companies won't accept a system that has a non-recoverable state like a deleted private key.

If you can assign a new key to your account, then the private keys don't improve trust, and remove the point in having them instead of just OAuth.

In games like Dota 2, there's already an industry for account selling.

It's pretty simple really,

Find some Boomer's ID, who barely does anything but browsers facebook (or better yet, buy an ID of one of the billion in the 3rd world).

Sign up to this service using their id, hire some poor kids in the 3rd world to level up the account without cheats to build rep, then sell the account to a hacker.

Private keys don't solve any of this.
Depends on where the phone is at the time. Do it while they’re on a call and it’s going to really suck.
I'm not mourning the loss of greyhound racing in any way shape or form.

But I will say Greyhounds and retired racing Greyhounds seem pretty different. Most of the behavior that defines mine is a result of racing, for better or for worse.

Mine didn't even know how to bark until he went to a dog park for a few months, and to this day it's exceptionally rare to hear him bark or roo

The way they're brought up around other dogs for most of their lives is also somewhat unique and contributes to their demeanor

-

I don't think it's any sort of loss compared to what Greyhound racing was doing to dogs though. To this day I get people complaining to me about my dog being skinny... he's 15 lbs over the weight I got him at (75 lbs from 60 lbs).

Pictures of him from when his was racing are depressing, despite constantly being happy and inquisitive today not a single one shows him as anything but scared and/or disinterested.
IntelliJ has some tools for this for Java.
But CS professors love graph problems. So, it's not so easy to say.
The problem is not that cyber-security is hard, but that a trillion dollar company is incapable to handle security disclosures.
I think it's meant to be used from the web UI where you just click the box rather than replacing the space between the square brackets with an x.
Some people get paid to investigate financial and computer crimes, other people get paid better to commit them...

"Hey Sheryl, where are we gonna hide our offensive computer security team's budget?" "Let's put them dozen as 'personal security' for Mark."
I came across this: https://columns.app/ some time ago. Neat attractive design, and a bunch of interesting features.
https://tsf.telegram.org/manuals/e2ee-simple#2-why-are-there...

It literally is "Why are there no Secret Chats on desktop apps?".

They seem to provide a couple of reasons, so it seems like it is not going to be a thing?
The problem is twofold:

1. I want to look around and find what is useful for me. I'm not willing to spend very much money per unit of information, because I'm sifting through a bunch of crap.

2. For stuff that is valuable, I'm willing to pay, but I can't tell if something is valuable until I look at it in its totality.
Depending on your definition of spam, the recruiters might actually be sending spam. I once had a recruiter try to hire me for the company I was already working at and had clearly indicated on my Linkedin...
So what? Everyone has been affected. Apple doesn't somehow get a pass at not doing their basic duties.

Sitting at home looking at a monitor and typing is largely the same doing the same thing in an office. They're not service sector workers, doctors, nurses, or truck drivers who actually have had to deal with the impact of this head on.
That's what I already do, but the fact that publishers get zero from this is not lost on me.
I see no reason COVID has anything to do with Apple’s poor response to external reporters, which has been something that has been a problem for decades.
That's not correct. There were Principal and higher engineers 13 years ago when I joined. 5 years ago, just EC2 had a fairly large number.
It’s an interesting thought I haven’t thought about. Does an unvaccinated and vaccinated person spread the same viral load? The evidence suggests so. But is the amount of people “getting” Covid lower in vaccinated lower overall period? Yes as well. It’s a very Bayesian thing with the prior favoring the vaccinated but humans are terrible in terms of Bayesian thinking usually because of cognitive dissonance (not bias).
We can't know what the Web would look like without spying, data-moated giants wandering the landscape, making everything "free". The thing about a "free" spying service is that it competes with paid services and with actually-free ones. There's a reason open protocols have stagnated over the last couple decades—it's less rewarding to work on and promote a free, open social network based Email + a hypercharged, dynamic, living and evolving RSS (or whatever, maybe Mastadon, who knows) when the competition is Facebook and Twitter, and they're both "free" and the teams you're competing with are funded at eight, nine, or even ten figures.
And programmers who have to keep track of when events happened in the past grow a few more grey hairs.
Nit: for 50 different schemes, not 50 times.
"in some way" makes it all sound a bit abstract.

The impact of disease on the Americas was arguably numerically larger than actual colonization, and the initial wave (say, 1492-1520) probably wasn't very intentional. So yeah, that particular experience doesn't give anyone "more authority or importance today".

But colonization, first by the Spanish and later by northern Europeans, was literally a war whose goal was frequently the complete annihilation of the population already in the Americas. It was a brutal, vicious war (that in a number of senses continues to the present day), and suffering through that does, under most western-ish moral philosophies, give you some status that you otherwise would not have.