skysight-inc/HackerNews huggingface dataset:
> No, armies do not have their finger on nuclear trigger with a time horizon of 30-ish minutes.

> We are not in the 1960s when at times it was literally true.

You are claiming that not only China, but the US and Russia don't have the capability of launching strikes from 30 minutes? (i.e., well beyond the time to respond to ballistic missile launch detection)? Do you have a source for this?

This doesn't appear to agree with you:

https://www.mitpressjournals.org/doi/pdf/10.1162/ISEC_a_0021...

Launch-On-Warning
One source of ambiguity in the implementation of China's no-first-use policy is the ongoing debate in China regarding the pursuit of a launch-on-warning posture. Recent doctrinal publications and Chinese interlocutors indicated that the debate has yet to be resolved. On one side, some members of China’s strategic community argued that a launch-on-warning posture would ensure the survivability of its nuclear deterrent if its opponent has robust targeting intelligence. The Science of Military Strategy states that a launch-on-warning posture "is in accordance with China's long-standing no-first-use policy, and may effectively protect China's nuclear forces from sustaining even greater losses, improving the survivable nuclear counterstrike capability of China’s nuclear missile forces." China's first priority should be to prevent its adversary from precisely locating its missile launch positions. If China is able to reliably ascertain that an adversary has already launched nuclear missiles at China, however, China could quickly launch its nuclear missiles for a counterstrike "before the enemy has been able to actually inflict nuclear destruction." Launch-on-warning would therefore provide China with an option for nuclear retaliation if a nuclear adversary were able to overcome Chinese efforts at concealment, deception, and mobility to ensure that its forces survived a first strike.

This touches on what I was talking about too. The next few paragraphs interestingly provide a counter-point that disagrees China would take this posture, but not because they don't have the capability to retaliate quickly enough, but for other reasons.
One wonders if the USA didn't use the plans with those flaws and design defects themselves...
It’s normal but I think could be avoided simply by rotating upside down the iPad mini, according to the same problem in One Plus 5 https://www.ubergizmo.com/2017/06/upside-down-display-oneplu...

Yes, you still have a tilted iPad. I have no idea why Apple has placed the display refresh hardware on that side. Probably due to a internal components layout.
> All the science on Delta variant clearly spells out a longer 'covid life' outcome, anyone whom says we need more data is being ignorant. COVID will not resolve.

It will become a seasonal endemic virus, just like the flu. That's the trajectory we are on.

> We're not the only country dumping money into the streets, and with China doing well, they love buying American stocks.

Yeah, I don't think you have any clue what's really going on in China, but they are heading into their first big financial crisis ATM. Their property sector is already dead.
Loops or Recursion: what are the differences?
I thought the URL was displayed when you scanned an NFC before you opened it. If the URL is from apple.com or icloud.com, you know you can trust it. If the URL is someone else, you know not to trust it.

An XSS can do a lot more than just redirect you. It could construct a fake Apple login page inside the apple.com domain, so you would have no reason to suspect it was a phishing attack. You could probably construct something like the Myspace Samy worm (https://en.wikipedia.org/wiki/Samy_(computer_worm)) to spread through Airtag users and change everyone's AirTags to point to your malicious script.
> Meanwhile, the world's container ship capacity will have increased by some large factor (30%, 50%) to address the shortage.

Possible but I doubt it. Container ships take years to build, there are backorders, people ordering them make these forecasts, shipyards were hit by COVID as well, they require all those supplies in short supply right now to start building.

I think the silicon fabs popping up all over the world are not because of the demand spikes necessarily but estimated demand growth, political motives (very few countries are comfortable with current situation of most top end fab capacity being located in Taiwan).
Can an app show cost breakdown (30% for apple, 70% for app developer as pie chart/text/etc.) before users click Pay with apple pay? I assume this is impossible since it would be a PR nightmare for apple - all paying users would eventually get to know that they paying 25% extra charge when making inapp transactions, assuming normal transaction processing cost is max 5% outside of the app.
> In UK ownership can be derived though Companies House fillings

In theory yes.

In practice, perhaps more grey.

UK Company Ownership:

(a) Does not have to be a human, a company can be owned by a corporate body (there is a requirement for one human on the board, but that can be a lawyer or whatever, so the actual owners can be behind a corporate body).
(b) Companies House does not carry out any data validation, they accept what you sign and send them and publish it verbatim.
(c) There is no jurisdictional requirement on human or corporate body directors (i.e. UK company can be operated by entities based in a, shall we say, more "privacy focused" jurisdiction).
WireGuard is more of a replacement of OpenVPN. And really, it's a protocol with no side-channel to negotiate config and auth. I think that eventually the side channel will be made, either as WireGuardv2 or as an extra service besides a WireGuard implementation.
> far less surprising to me

That's interesting since the study showed it did NOT help students over time.

So you are NOT surprised students who need glasses are NOT better off after a year??

Things that don't help students academically -

Computers, smaller class sizes, better access to feminine hygiene products, raising teachers pay, worming tablets in regions it matters.

Quick fixes for students academically are rare these days.
Why can’t we do both? 15% less energy use for our software, scaled up actually sounds like a pretty big win. Less charge cycles also means a battery lasts longer before needing to be replaced.

If programmers have the tools to easily profile and fix low-hanging fruit in this area it’s a positive to society.
Censoring things outside kicking people out of platform is not exactly simple problem. Specially images of objects. The data for sufficient ML to censor things would likely be bigger issue than leaks themselves.
It is well known that most reactors (at least here in France) suffer from bad engineering and are unsafe. Existing ones suffer a lot of downtime due to various levels of accidents, while ones being built are often delayed due to serious issues (see also: EPR scandals in France, Areva scandals elsewhere in the world).
The story has 2 main ideas

1 Apple is bad at security

2 Apple is bad at relation with security researchers.

So as a fanboy you forgot to defend the second part(and the zero days from last week caused by the 2nd point).
If you assume the Earth is a point mass, then this is relevant. Otherwise, not really.
YouTube deletes Russian Today German channels over Covid misinformation
Sure, but that complicates things. I have reverse-engineered the macros instead. They aren't terribly complicated, they simply rounding up some of the pointers by sizeof(void*).
I don’t know the Kardashians are very American. Successful recent immigrants who then leveraged fame into substantial wealth. It’s not a flattering look at the American dream, but it’s not a bad thing to aspire to either.
We won't have offices in the future
It's a myth with unmanaged code can run out of memory to the last byte.

The probability of hitting the limit is proportional to the allocation size, so the program is most likely to hit it early on something big and easy to back out of (a buffer for a whole file, or an image bitmap) rather than literally have 0 bytes left.

Additionally, allocators typically have per-size memory pools and free lists, so even when one small allocation fails, there's still a chance that other size classes will be available.

In something like C error manual handling and freeing is hard, so the error code paths in unexpected places are likely to be untested and buggy. But with something like Rust the compiler writes cleanup code for you, so it can clean up precisely every time (if only Rust's libstd wasn't committing a suicide on OOM :()
> You see houses that don’t exist

Of course. I had money to build a house for renting at the end of 2019 and started looking into it in Jan 2020. This house would have increased house supply, provide a home for people that can afford to rent but not to build/buy/... their own house, etc.

I decided to put that money in stonks in march 2020 instead because I evaluated the risks of both options, and the risk of stonks was lower than the risk of renters not paying rent.

So I saw that house literally not being built.

Putting that money in stonks in march 2020 was probably one of the best financial decisions I've ever made.
Aren't there provisions in the standards that allow for spectrum sharing with unlicensed bands?
The potential cost injuries from cycling are far less than the health benefits from it. Cars on the other hand are as dangerous as smoking for its user:

https://academic.oup.com/jpubhealth/article/33/2/160/1591440

In this sense an SUV is like smoking lots of cigarettes around others but without inhaling as much.
Don't forget to make scientists constantly mine for cryptocoins on their GPUs if they want to keep their crappy postdoc job, that way it's profit for everyone. :P
> If I were Chrome, I would proxy these requests securely through an innocent-looking API. I hope no one is getting any ideas.

Don't they vet all urls you click on for malware? :) There's one of your innocent looking APIs.
Are cars the new tobacco? (2011)
> There are downsides to donating food. One of them is that it damages local farming

It's not impossible to donate foodstuffs that the donor buys from local farmers, is it?
Whether others who wrote the app you need to use did?
It looks like you have some interesting concepts. But I'm unable to follow any of it. If you try to make each sentence into a paragraph on its own, and then copyedit to get rid of the extra words, as well as to dumb down the phrases which (probably) sound sophisticated to you by two levels or more, I promise I will give it a lot of time and full attention. Pinky swear.

Is the android an effeminate space hero? Or someone else? What does the acclaim have to do with any of it? Stumbling on the very first sentence.
Trevor Bedford:Two Awards for Virologist Who Raised Early Covid Alarms
Slightly less cultured, I cannot see the name Tartessos without thinking of tartar sauce.
MR reporting software is a CRM/SFA Solution for the pharmaceutical industry. It is a territory-wise pyramid based real-time system that works 24x7.

To know more: https://www.infobrez.com/attendance-tracking-software
https://www.infobrez.com/360-degree-feedback-software
So... this year? :-)

If you agree the building is going to explode, you don’t start talking confidently about how you probably have another hour but instead leave the building.
Internet? We don't need that newfangled bullshit, we build the best cars in the world /s
This isn't an Airtag bug as such. This is a bug in displaying user information on Apple's website, it just happens to be in the part that was made for Airtags to link to. It's a simple XSS vulnerability.

The fact that Apple let such a stupid bug into their web site is worrying enough. The fact that they don't acknowledge and fix it within hours, when reported to them via their bounty program means that it's not just "don't scan Airtags" you should be thinking, it's "don't visit apple.com / icloud.com / other Apple websites"
Remote Collaboration with Loom
Because the US Tech industry wants to shore up its protectionism.

Remember when Zuckerberg wanted the Trump admin to ban TikTok completely?

It's crazy that the EU follows suit for so much of this stuff (against Huawei, etc.) and then end up with no industry at all with all the high-paying jobs in the US.
It's interesting to me the amount of energy people spend on convincing themselves that a technology (POW) that didn't even exist 12 years ago and ran on home PCs up until 7 years ago is somehow responsible for wildfires in California or deforestation in Brazil. DID has little to do with Bitcoin. I don't even know if it's the best option, but clearly the lack of decentralized identity on the web has been significant in propagating corporatist monopoly ownership and influence over the web. Nitting about an integration with one particular blockchain (DID works with multiple) is not productive and it's a distraction from the core point of the proposal.

At any rate, I've become fairly convinced at this point that something like ENS (https://ens.domains/) is better suited for a decentralized identity. Optionally registering a simple domain name via a smart contract and signing in to services with a public-private key pair (such as an Ethereum address) is a far superior experience to anything I've seen as far as simplicity goes. I don't need to give up personal contact info. I have ownership of my address. I can create new addresses if I need. I can augment my ENS-linked domain with social media info or website info and that is all stored on-chain. However, one-click sign in doesn't require hitting the chain, just requires signing a message. It's pretty elegant. I just think it needs more standardization.
Resolution is the killer. The distance I'm currently typing this on my 32" monitor is much larger then the virtual draw distance I can "see" in VR at current resolutions.

Regarding comfort: I have been curious whether you could take the weight off the head by suspending the headset off the back of a chair so it "floats" at face level via a tether or something.
Ask HN: Favorite Interview Question
No, they'll all be working remotely in their own matrix-style cocoons. The nutritional paste will be delivered by Doordash.
If he wrote so un-clearly that pretty much everyone ever since has interpreted his writings as supporting the Nazis (or rather, I suppose, authoritarian political ideologies in general), he only has himself to blame, hasn't he? I mean, he made his living from writing stuff; he can be expected to be good enough at it to at least get his frigging point across to a majority (or even a plurality) of his readers.
And Fortran code (many parts of numpy). C doesn't have a complete monopoly on high-performance code.
Not every unbalanced tree is necessarily a degenerate situation. Syntax trees aren't necessarily balanced naturally, for example. (They typically are somewhat balanced, of course, but if you do have one that's unbalanced, there's no way of balancing it.) Search trees for NP-hard problems may be an even better example.
I agree with the general point of course, but:

> It was a cash grab by a corrupt government, something that would never happen today.

I'm afraid corrupt governments doing cash grabs are unfortunately still a thing nowadays.
I was looking for this comment - it looks fake to me as well.

It kind of looks sharper then the truck.
> Aren't there provisions in the standards that allow for spectrum sharing with unlicensed bands?

There are, yes. But there is typically a bit more to it than just writing out a cheque to the regulator.

There's an application process involved, no guarantees of approval, and ongoing compliance requirements (with the ultimate possibility of revocation of license, of course).

For example, if you're within a few KM of certain military sites (typically listening stations) you'll get an automatic rejection.

e.g. From in UK:

https://www.ofcom.org.uk/manage-your-licence/radiocommunicat...

(expand the drop downs at the bottom to see "Shared access guidance", "Frequency Assignment Criteria" and "Interface Requirements")
So what did you learn out of this, and what would you do differently?

What do you think people should do differently when reporting these issues?
I've read in a few places that the US is way behind China and others in hypersonic missiles. Would like to hear what HN has to say on that.
Facebook users beware: Innocent personal details you share are hacker’s gold
Gah, I'm so sorry that happened to you. I'm glad the error message worked so at least the room owner was aware that you weren't able to move into the new room.

Synapse 1.42 and 1.43 both support Room Version 9, and should be available pretty much everywhere. Do you know what distro your homeserver admin is running? Looks like FreeBSD and Ubuntu might be lagging, but Arch, Debian, Docker, Fedora, openSUSE, etc. all look fine. If you're on Ubuntu, we maintain our own repository with debs for the currently supported Debian and Ubuntu releases: https://matrix-org.github.io/synapse/v1.43/setup/installatio...
That surely is a lot of protocols.
Missing from these graphs:

- the human cost of (neo)colonial policies required for the flow of nuclear fuel (at least for France)

- the environmental cost of nuclear waste disposal, which is a problem that is unsolved [0] (construction, maintenance) and unaccounted for from what i could see in the data sources ; it is accounted for for fossil fuel in the forms of CO2 emissions

[0] Actually it is solved. Some nuclear technologies have been explored that produce less harmful (non-harmful?) byproducts, but they were from what i understood always discarded by Nation States due to having no military applications.
Some time in early 2000s I was following FXP boards and playing with scanning open ports on IP ranges.

Remote-Anything was quite a common way to gain access to someone's computer and turn it into a pubstro.

A lot of people back then were running Windows XP without any password, which meant RA could be used by anyone to connect to their computer and do anything there (for example playing solitaire or displaying "Hello, I am your computer and I just gain conciousness" alert).

I believe a lot of people didn't even know they had RA installed on their computers and running there. It was a nightmare from security standpoint.
It's not the United States of Baltimore. While there no doubt are parents spread across the country who neglect their children's health needs, to extrapolate the neglectful parents in Baltimore to the entire country makes as much sense as to do the same for Pripyat's radiation levels to all areas of the former Soviet Union.
The main benefit for me is protecting password services like HTTP basic auth, ftp, mailserver, etc. It’s pretty pointless for SSH when keys are involved
Did Kardashians kill more people than hitler? Because church did.
>it's much better for people to believe in Jesus than the Kardashians

I think if we weigh up the overall good vs bad of these two propositions, you might find that it's not as clear cut as you think.
So what happens if the client and server have a conflict? E.g. their versions of the data diverged..

These "merge conflicts" seems like something that must be handled in a custom way for many apps.
Great great link. Thank you
Well, yes, but there is a reason why pthreads became a thing.
> it's much better for people to believe in Jesus than the Kardashians

I doubt that. So far, nobody who believed in the Kardashians went on a crusade. What you said there sounds to me like pseudo moralistic posturing.
I have played around with it, and the resolution just isn't there. The desktop space in VR is ironically less than on a laptop, because every window has to be massive to be usable at all. In a future with 2x4K res or something in that ballpark, this might be interesting.
Their RHEL hardening guide was pretty solid advice and well written.
Internet pipe version 6 is clearly superior with its larger throughput.
I don't understand anything in company ownership but can Company A own Company B which in turn owns Company A?

Or to make it several degrees of separation, A owns B which owns C which owns D which owns A?
Please don't try to kill mullvad.
You should take a look at my project, Replicache: replicache.dev.

While it is true that you have to duplicate the mutations in the basic setup, you do not have to share the querying/reading code as it lives primarily on the client.

Also, if your backend happens to be javascript/typescript, then you can share the majority of the mutation code between client and server and the result is quite sweet.
Hi! I'm the author of this article. Thanks for posting it.

The GIL is an old topic, but I was surprised to learn recently that it's much more nuanced than I thought. So, here is my little research.

This article is a part of my series that dives deep into various aspects of the Python language and the CPython interpreter. The topics include: the VM; the compiler; the implementation of built-in types; the import system; async/await. Check out the series if you liked this post: https://tenthousandmeters.com/tag/python-behind-the-scenes

I welcome your feedback and questions, thanks!
Race to the bottom: The disastrous, blindfolded rush to mine the deep sea
While Commodores are rare, there are many stores in Poland that still run DOS era software for store management.
This attack is far more serious than that example reveals. Instead of directing user's elsewhere, you could replace the contents of the page to look like an iCloud login form while remaining inside the apple.com domain.

Depending on how the rest of Apple.com's site is configured, you could steal cookies and allow yourself to login without even needing a fake login page. You might be able to directly manipulate and make changes to the user's account.
Apple, Intel suppliers in China stop production over power shutdown order
Is putting scripts in a phone number field (or any input field) a well known way to hijack requests? I mean when someone is trying to compromise a site, is this one of the first things they try?

Surely (obviously not) at this point in time there has to be some out-of-the-box browser-engine (webkit/blink/gecko) input sanitation for widgets like "input", "textarea", etc?

I can only imagine this to be the case, so did an apple employee go out of their way to disable this feature? Or is this simply a case of the rookie developer using variable substitutions in a SQL string instead of a prepared statement and bindings? (SQL injection analogy)

----

As @rjmunro mentions nextdoor, if this vulnerability exists in this airtag application, might it actually be wide-spread across the entire iOS and mac OS code-base? Perhaps that's why Rauch heard little back from apple?
It does not, it builds upon it.
> whether eyeglasses gave some self-confidence, or if vision impairment somehow made affected kids more studious, or some shit like this

Being studious causes vision impairment. We noticed that a long, long time ago.
May be, but I don't understand the obsession regarding hypersonic missiles.

There are dozens of other surprise attack weapons to knockout a superpower level enemy to select from. Hypersonic weapons are just few of them.

It's more of a psychological weapon as ICBMs are. As in most cases, a new wunderwaffe will lose out to oldschool war tricks.
The issue is that a lot of things written in python very quickly becomes performance critical as it is so slow compared to anything around it.

edit: I have ranted more than usual about python slowness in the last few weeks. The fact is that python is an otherwise great language, powerful, expressive but with a gentle learning curve and a great ecosystem, but the slowness of its primary implementation really drags it down (and because of the ecosystem it is hard to switch to a different implementation).