skysight-inc/HackerNews huggingface dataset:
>No, they aren't. The NSA can't just waltz into Apple and break into their HSM to steal their keys

The NSA could waltz into the plant manufacturing the HSM. Or they could waltz into Apple and make sure Apple uses the right HSM with keys already known to the NSA, e.g. by replacing the shipment of the HSMs Apple ordered. (This would require the NSA knowing in advance when Apple buys HSMs for what purpose and from what vendor, but again, intelligence gathering business).

>These systems are designed to be robust even against physical access attacks.

They are designed by humans trying to make those things "robust" against attacks. "Robust" is a "best effort" word.

Assuming that the thing that got shipped to you actually is the thing you think and not just some nice NSA chip with the name of a popular HSM vendor printed on top. You cannot really open up the chip and look inside as, if this is a properly designed HSM, this it is supposed to be destro if you tamper with the enclosure or any other vital parts of it.

I'd be surprised if the NSA does not spend resources on research into breaking HSMs, and if it do esnot spend resources on designing "fakes". The level of their success is unknown until the next Snowden shows up. But if they did break some HSMs, they wouldn't be alone [0].

So, there is a chance the NSA can waltz into Apple and break into their HSM and steal their keys.

This assumes Apple uses HSMs for this kind of stuff and uses them correctly.

Since authorized third-party repair shops can replace components and repair the hardware with some help from Apple, as I said before, it's not even necessary to compromise Apple or their HSMs, it's sufficient to compromise those repair shops, whether third party of have a few NSA Geniuses around.

But either swapping out HSMs pre-installation or breaking ones with design flaws is certainly in the realm of possibility too.

>The Snowden leaks gave us a very good idea about what the NSA does.

No, Snowden showed what they did in 2013 and before, because that's when he went public.

Snowden does not know what they did 2014, let alone what they are doing now in 2021. That's about 8 years of most recent NSA R&D that we do not know about.

>Backdoor products in transit.

HSM is a "product", last I heard ;)

>These are all practical, reasonable things that are a far cry from the magical abilities people like to ascribe to them.

Magical? Nothing magical in what I said I believe the NSA could reasonably achieve.

We're talking about abusing design flaws in HSMs and/or supply chain attacks not creating "a GUI interface using VisualBasic to track the killers IP address".

[0] https://cryptosense.com/blog/how-ledger-hacked-an-hsm
i just lost several minutes of my life due to 32bit integer overflow. well done!
.. and you expect anything sensible from politicians or journalists when even literal programmers spit out fake misleading and clickbait titles
Here in Belgium, companies have to declare beneficiaries to the state and keep that information up-to-date.
The US has the highest prison population per capita in the world.

Mostly because of an outdated view on justice and crime.
Offline first is interesting, but what's a good solution for syncing with the main database after the device goes back online?
Really? It’s not a prop from a movie nor the light of Venus reflecting off swamp gas?

More like let’s keep a bunch of Chinese analysts busy for a few days looking at low quality video. I’m pretty sure the US military can make sure ground troops don’t have camera phones at sensitive sites. Pat them down before they arrive on site, return their stuff after their shift ends. Done.
Wondering if it's reasonably possible to remove that last water step that is relying on open air evaporative cooling. Air cooled through big ass fans == no more water losses == profit?

Sounds like it would be multiples more expensive to get that to work though.
Because some people seem to think autism is a cool personality trait more than a disability.
Stalebot is awful. Issues don't stop being real if you neglect them!

Use a voting system or explicitly prioritize work instead.
> Second Life has real estate with strong property rights.

Property rights is the wrong framing. We know this from the social sciences. The actual solution is just ownership.

This is the problem with public spaces in big cities compared to close-knit smaller communities: if it "belongs to everyone" it doesn't belong to anyone, if it is owned by the city/state/government, it's not actually owned by the people.

I'm not saying framing it as individual property rights doesn't work, I'm just saying it's too narrow an interpretation and a bad analogy, e.g. because property rights can allow for layers of indirection which erode this effect whereas ownership can be shared and still maintain the effect (although a cynic would then frame it as "peer pressure").
I bet they used the Orbis database from Bureau Van Dijk. That's where the real innovation is. Gather company information from all over the world and republish for good money.

Great business. Bought recently by Moody's.
A billionaire wants to build a utopia in the US desert
Or remove their foreskins :')
I'm skeptical--this market would be so incredibly huge that I cannot fathom everyone overlooking it.

Literally everyone would get this. It would make the world so much healthier--enable everyone to easily diet, let people subscribe to healthy meal plans, etc.

It would pay for itself even at astronomical prices, via health benefits, no need to go out for dinner, and reduced food prices via making things from scratch.

Buying in bulk would be more common and much easier. So much comes from grain, sugar, salt and yeast. Much less food would be wasted--no need to batch cook anything and ignore the leftovers. The robot would be baking your bread, making donuts and croissants, tortillas, tortilla chips, mayonnaise, yogurt, sauerkraut, pickles. Things we never consider making on our own, that are generally considered the base components to make other things. I think it could easily offset $300-$1k in monthly expenses for just about everyone.

My assumptions are that it can be tailored to follow a recipe, of which many widely-published recipes are created/curated by chefs and experts, and once that is done the robot rarely, if ever, fails to produce the very best version of the dish.

If the only hindrance is just sitting down and writing the code, someone ought to get busy, because this is about as impactful of a development for the planet as any could be.
There's a big difference between "the GIL is net neutral or positive in terms of performance" and "removing the GIL from Python after 30 years of having it baked in is pretty hard to do cleanly." What you're observing here appears to be the latter.

If lacking a GIL actually incurred a 40% performance penalty in general and not as a consequence of design decisions in Python's internals, we'd expect to see the fastest languages all sporting GILs, and that is really not the case.
> A single party state is not an inherently evil thing.

There’s different kinds of single party states: first, a transitory single party state that “single party” because the current political climate leaves only one party currently competitive but where other parties are not structurally prevented from competing, and thus factionalism within the dominant party will lead to the single party condition being short-lived (e.g., the U.S. during Democratic-Republican single-party rule in the 1810s-1820s.) This, while it can have problematic aspects, is not inherently evil or inconsistent with democratic governance.

On the other extreme are systems where the dominant party has a structural (possibly in-law) monopoly or at least privileged status. As systems of public governnance, these are inherently evil.
Whoever posted this (plus all their friends) are gonna be closely monitored, server-side, by the CCP.

Not just the buddy list, but also phone contacts, people who have send them TikTok videos using links (links to videos on TikTok include info about the sender), and people associated by IP address.
Hugin has gotten me great results in the past. My most popular panorama (https://flic.kr/p/2gw93QX), you can't even find the seams despite being quite wide at 5 × 3 shots. It handled 16-shot panoramas well too (https://flic.kr/p/GLsDNh), even though Flickr won't render those resolutions. I've even used it for focus stacking (https://flic.kr/p/27kMsrX) to keep a narrow depth-of-field on an object that needed 2 focus points to stay sharp.
Exactly, I know lots of people who work on radar for defense contractors. They are unreachable during the day because their cellphones and other electronics are taken away during work hours. Most likely this is not a highly classified project, or if it is someone might be looking at criminal charges.
A warning to everyone out there: nobody cares and you’re on your own.

Three years ago my mom died of breast cancer. 6 days later my girlfriend died of the same. I had a stable, unionised job at a public sector company which gave me three weeks off in combined bereavement and holiday leave. At the same time my father was dying of prostate cancer and I was his only caregiver. I requested 6 months work-from-home, which was granted. An extension to that was declined. I had to choose between my father and my job, so I resigned. My life has been left in ruins and it’s going to take me years to put it back together again.

I’ve seen this happen to other people too, in different ways. All of us will eventually be hit with one or two catastrophic life changing circumstances like this which no employers anywhere have mechanisms to deal with.
The point is it never should have been that way.
https://warisboring.com/secret-military-aircraft-possibly-ex...
Article Best Experienced in the App
Get all entities whose updated_at is larger than the max updated_at in your local database.
I was never able to get docker to properly work with WSL2 without installing Docker Desktop and enabling the integration. WSL2 just seemed too buggy for my likes and I am a happy Arch Linux user.
what a shitty blog :)
Is it though? Children learn by example, it's better to shown them things we deem normal and/or desired. Things like compassion. Even when being part of a faceless organization. It's about knowing that people far away are still people that love their children too. It is how we prevent ourselves from repeating the darker pages of our collective history.
> It's not like COVID increased overall world demand relative to 2019.

Well, the article says that demand did increase a lot:

> Demand for many of these items soared during the pandemic as people built out home offices and related projects

But yeah, the coming overcapacity isn’t addressed.
Nature is open access? Like what recently? And I assume they ask for a metric ton in cash to do that?
Gregory MS
This presumes stealth tech is the goal, rather than a higher order tech that makes results of the research-triggering feint strategically immaterial.

For example, I suspect Apple feinted Amazon into chasing voice assistant tech and products, distracting Amazon from more serious matters like ARM-based SoC and AR.
Couldn't have rented a van/UHaul for a day or weekend?
> location choice

At least in terms of wildlife, you're not going to escape this. Stapleton was just too small and getting surrounded by city. If you're building a replacement and have access to land, it makes sense to have a lot of it. At 50+ square miles, you're going to have some wildlife interactions almost regardless of where it is.
Proposal to Merge YJIT into Ruby
LODA uses an interpreter at the moment. The problem with a compiler framework is: during mining, you need to generate LOTS of programs and evaluate them quickly. Compilation just takes too long for mining.

We don't want to parse descriptions or formulas from OEIS. The goal is to do mining just based on the numbers. It is easy to translate a formula into a program. But that's not the goal. The goal is to find NEW or BETTER formulas / algorithms.
POTUS Donald J. Trump is a tough competition, though.
It's also very field-specific. Like in computer science, almost everyone uploads to arXiv.
> Those claims pose a grave threat directly to global shipping and to regional fishing and mining rights, and indirectly to the largely peaceful maritime waters status quo globally.

European here, so this may be caused by selective reporting in different regions of the world, but here news is equally often about US military presence in the South China Sea. Looking at a globe and seeing the distance between US homeland and the South China Sea, I wonder who gave the US a mandate for military manoeuvers near the coast of another country? And how this makes China the aggressor?
What about doing it the UNIX way before pthreads became a thing?
> why not let them do whatever they like afterwards

It worked like that a few hundred thousand years ago and we seem to have mostly collectively decided as a species that this was not the way to go
On a rooted phone the local database copy could be fiddled with I guess, but the user needs to be authenticated to upload a database, the lambda that extracts the data is sandboxed to access only what it needs and nothing in sqlite is run, the extractor does a select on a few tables.

Unless there is some way to introduce a malicious side effect to a select statement in sqlite?
As scientists, we need to stop citing papers that are behind a paywall. That is the only way this will end without external intervention e.g. actual regulation outlawing certain aspects of the pay-walls.
You are technically correct but the quote you are replying to is taken out of context and does not represent what this article is about.
Ask HN: How much could fixing a MacBook loose contact possibly cost?
The Apple support informed me fixing a screen lose contact would be 700+ €. The panel still works, it doesn't need to be replaced.

A week ago another supporter said exchanging the entire panel for a new retina one would be 350 € or less.

This sounds totally off. Does anyone here have experience with MacBook repairs?
I have minimal (almost zero) experience with Google Cloud but if were to guess the reason to not consider Cloud Run is the pricing model. While solutions like Cloud Run (and Lambda or Fargate in AWS) give you a lot of flexibility they are significantly more expensive than orchestrating servers and services yourself. At a small scale the increase pricing is worth it for flexibility but there's definitely a point at which it switches and it's too expensive and not worth it anymore. From the blog post it seems they have a sustained average of 30,000 requests per second which probably puts them in the category where rolling it themselves is financially worth it.

Comparing Cloud Run pricing with VMs and Preemptible VMs you can see why. I'm going to ignore networking bandwidth costs as I assume (maybe incorrectly) that they're the same across Google Cloud services. That leaves us with CPU, Memory and Requests pricing.

CPU Pricing:

Cloud Run: $0.00002400 per vCPU-second [1]

On-demand VM: $0.00000605861 per vCPU-second ($0.021811 / vCPU hour) (~75% cheaper vs. Cloud Run) [2]

Preemptible VM: $0.0000018175 per vCPU-second($0.006543 / vCPU hour) (~92% cheaper vs. Cloud Run) [2]

Memory Pricing:

Cloud Run: $0.00000250 per GiB-Second [1]

On-demand VM: $0.00000081194 per GiB-second ($0.002923 / GB hour) (~67% cheaper vs. Cloud Run) [2]

Preemptible VM: $0.0000002436 per GiB-second($0.000877 / GB hour) (~90% cheaper vs. Cloud Run) [2]

Requests Pricing:

This is complicated since Cloud Run charges per request ($0.40 per million requests[1]) which would put them at roughly $378,000 per year (at a 30k request per second average). Load balancers charge per hour and per bandwidth (regardless of traffic of which they have it sustained) at $0.025 per hour per proxy instance and $0.008 per GB of data transfer[3]. I'm not sure how it compares but I'm sure it's much on an averaged our per request basis.

Looking at the CPU and Memory alone you can see the price differential and why it might not be worth it when you're paying hundred of thousands of dollars per month in infrastructure per year (they might spending much more but at this scale it is when its starts to matter). Assuming a middle ground somewhere in the 80% savings using on-demand and preemptibles vs. cloud run at low costs you're talking about $60/mo vs $300/mo respectively but once you're in the $50,000/mo range you're talking about the difference between $50,000/mo using on-demand/preemptibles vs $250,000/mo on Cloud Run.

[1] https://cloud.google.com/run#section-14
[2] https://cloud.google.com/compute/vm-instance-pricing#general...
[3] https://cloud.google.com/vpc/network-pricing#lb
While threads are nice, for server software, when security is concern, and everyone is doing microservices and serveless, it is really not an issue.

What I consider a bigger issue is the way JITs are still not embraced by CPython, but that is a talk for another day.
When I sketch, I learned to take more risks, and break more rules. I exaggerate shapes, use new perspectives, and keep going after I make mistakes.

I try to create things in isolation, for my own pleasure. I don't compete with others, and I don't try to show off. I accept that I'm not good at it, but still enjoy the activity. This takes a lot of the pressure off. It's how I started sketching again as an adult.

Another important thing is to get bored. I won't take my sketchbook out until I put my phone down. I won't notice the world around me if I'm looking at a screen. I won't come up with ideas and refine them unless my brain is idle for a while. Creativity requires downtime.
An increasing desire and capability to export their illiberal practices abroad. For example, using their weight to prevent the Dalai Lama from speaking at foreign universities. It’s naive to think that an even more powerful China wouldn’t continue to suppress free speech abroad as much as it does at home.
This probably explains the well-known confrontational postion of the US vis-à-vis Saudia Arabia and Bahrain and so on.
Yeah the video is available on Twitter where it’s still up. It’s just an additional opportunity to blame TikTok.
No inline links encourages a more legible writing style. What if Wikipedia had external links all over?

> External links normally should not be placed in the body of an article.
https://en.wikipedia.org/wiki/Wikipedia:External_links
The Democratic party doesn't have a single party line and includes political left and right ideologies. Socialists and progressives are a minority, and much of the party still supports right-wing neoliberalism.

If your point is that professional truth-seekers (what scientists and academics are supposed to be) avoid the Republican party in its current state, I'd say it should be pretty obvious why that is.
Like the 710 freeway? https://www.latimes.com/california/story/2021-05-22/710-free...
But how fast? I see other companies advertising 1.5 second response times for GPT-J, but a now assume that’s average per token, as for, say, a 200 word prompt response times can be well over a minute during heavy use periods like weekends when everyone is hitting their side projects.
It's generally not Python's fault that people use it for everything no matter if it's designed for that workload.
I would think it should be possible to replicate the UI pretty well on a website, to make it just as quick. Data transferring behind the scenes making it just as snappy.

Still lazy development, I guess.
I just think that path is lack of imagination
Hey Microsoft can you please fix incorrect information about FreeBSD on Azure?
for systems that use modeling that was built using measurement hardware, and then are able to make predictions without the hardware for android, also see:

A. Pathak, et, al, “Fine-
grained power modeling for smartphones using system call tracing,”
http://doi.acm.org/10.1145/1966445.1966460

L. Zhang, et, al. “Accurate online power estimation and automatic
battery behavior based power model generation for smartphones”

i think that some android platform dev boards also have specialized hardware and that qualcomm has a whole system for measuring baseband energy usage.
Nevermind it's just Nature communications which is open access, I think the others require a fee
And they still manage to lump erb with HTML.
No need to justify at all, and thanks for such a thoughtful reply! Your point about descriptive statements vs ontological facts is exactly what to me feels like the core issue. The intersection of overloaded terminology, the broader social aspects of language dynamics, and efforts to better ourselves as a society through various progressive efforts…

I don’t like being stuck with inadequate terminology and like unnecessary imprecision even more. As a society we have reached a point where the simplistic “male”/“man” and “female”/“woman” are now clearly inadequate on several fronts. Up till now it seemed as though each field of human endeavour using these terms was making up their own meanings as was appropriate for that field, and each field was being pushed back on (rightfully so) by progressive people trying to make things better. But what scares me is this recent shift to considering such words inappropriate in of themselves.

My fear and opposition here specifically stems from the actions people appear to be taking that are preventing the education of a group of trained professionals from containing information about a fundamental aspect of the biological functioning of a human being. I’m no more attached to the current paradigm of medicine using “male”/“man” and “female”/“woman” than I am to calling the t-shirt I’m wearing “navy blue” or “dark blue”.

Your point about empathy is very important, in my mind we need to have more empathy when dealing with fields like medicine where it’s going to be hardest to separate their work from biological foundations. I also think that if the terms in use currently are inadequate then just as we have seen the growth of the term “cis-gender” we may just need new terms of a similar nature for medical professionals to talk about these important biological details. If this is necessary then let’s get it done and end the distraction over a field that has much bigger problems to focus on.

If we educate a generation of doctors with an inadequate understanding of human biology, I fear for the future. It’s a hard enough profession without being taught less (not wrong, just less) because of medical educators being concerned about offending their students. The terms used to teach a medical student will have infinitely less impact on them than what lies in the actual practice of medicine. the feel of a patients ribs breaking while performing CPR, patients that die from bleeding out, children in palliative care slowly dying of cancer. I have had the pleasure of knowing a few good doctors and I know I could never do their job, I struggle to imagine the sorts of people that might raise these complaints as students having the kind of charitable and empathetic personality that makes a good doctor.
And in fact, if it wasn't for modern Web pages, ray tracing like graphics or modern network protocols, most of the Amiga and Atari generation computers could be easily used for most of the school and office work going on in 2021.
I get the argument about the touchscreen generally, but think you’re wrong about the location of the dashboard being a problem in a Tesla M3/Y.

Here’s the thing: any dashboard (that’s not projected into the windscreen) requires you to look away from the road, whether it’s front/below or side/below. The only data you’d likely be checking on a regular basis in an EV whilst on the move is speed; speed is top-left of the screen (i.e. closest to the driver’s regular gaze position) and retraining to deflect your gaze there takes very little practise. Once you’re accustomed, flicking your eyes there for a fraction of a second is no different to flicking your eyes to a traditional dashboard for a fraction of a second.