skysight-inc/HackerNews huggingface dataset:
You can read more of his iPhone-related writing here: https://blog.cryptographyengineering.com/category/apple/

I'm not sure how concerned he is that it's closed source, I think in this case he was just surprised that the implementation details and security considerations weren't documented anywhere: https://twitter.com/matthew_d_green/status/14433822078386217...

Note that he was relatively positive about this feature when it came out two years ago: https://blog.cryptographyengineering.com/2019/06/05/how-does.... It seems like the motivation for this tweet was "wow I do a lot of iPhone security research and I didn't know this worked when the phone is off, I'm surprised Apple doesn't document the details of this anywhere." Remember that it's hard to interpret tone through the internet, and as someone that doesn't get a ton of engagement on Twitter, he probably doesn't feel like he's writing for a mass audience.
People have been carrying around portable GPS devices in their pockets for over a decade now. This threat is not new, and if you fear it, don't carry around a GPS device or one that will connect to other devices to get its location reported to a central server.
Improving My Website Typography
> You will understand, if you read him. Those who misunderstand just don’t do that. They read a few paragraphs, or a title, or, better yet, someone else’s interpretation of Nietzsche’s work. And then they “know” what it’s about.

So... all those "someone else’s" whose interpretations everyone else reads got it wrong? And that's because, while Nietzsche was great at writing clearly, they're all just too stupid to get it? William of Ockham disagrees.

> Your definition of a good writer: Someone who gets his point across to a majority of his readers.

Thank you for teaching me what I think, but no: That's certainly not my whole definition of a good writer. But, are you saying it's not a pretty big part of it?

> Well. Isn’t that what we’re seeing today? Clickbait and all of that. It’s all designed to get the point across to the majority of people. If that is your goal, you have to compromise.

What on Earth are you talking about? As in, A) WTF does "clickbait and all of that" have to do with anything?; and B) No, there is no evidence that clickbait is "designed to get the point across to the majority" -- are you claiming clickbait even has a point to get across?

> Antibiotics, steam engines, cars, airplanes... none of those things would have been understood by the majority of people. The majority of people declared them absurd. In those cases, the ideas succeeded in pulling up the people. In the case of marketing and politics, it’s the majority that succeeds in pulling down the ideas.

I can only assume you were rather tired and quite emotional when you wrote this, because it makes no sense and has nothing to do with anything we were talking about.
Vue + Tailwindcss?
Not sure why you are getting downvoted, this was the first thing that sprang to mind for me.

"Oh, yes, another option." On top of terraform, pulumi, CloudFormation, the AWS SDKs, the CLI, and the CDK.

I mean, I appreciate them trying to push things forward and realize all options aren't all equivalent, but where's the deprecation to make things simpler?
When i saw the speed at which actors were being implemented, together with the complexity of the features, i immediately told my team NOT to use them until at least one or two years, minimum.
Other Bluetooth LE devices like an AirTag can last beyond one year on a CR2032 battery, so consuming about 2 milli-watt-hours (mWh) per day.

An iPhone has at least 10 000 mWh battery capacity (depends on model), so in 1 month something like this consumes around 0.6 percentage points of battery.
I don't know how long ago that was, but I kinda have to call bullshit on her claim (even if it was hyperbole for the sake of making a point). Companies exist to make bespoke solutions for this very purpose, and nowadays outsourcing that kind of work is just natural for Amazon. Hell, they made a deal with Rivian to get a fleet of electric delivery trucks, getting some Chinese manufacturer to slap a Cortex m53 into a shitty plastic enclosure with Ethernet ports can't be that difficult. I bet there are AmazonBasics products that have required more forethought than that.
Heck, I hate HN.
It's very easy to just distribute waste using these systems. I'm still not convinced by the single-vehicle on-demand for single-rider model.

There's got to be a way to make public transportation stop being the least attractive option in low to medium density urban settings.
They've been operating without safety drivers in Phoenix, but not in SF. AFAIK, every Waymo car in SF has had a safety driver in it. Cruise has been testing driverless rides the past few months in that timeframe/speed limit.
They probably estimated from behind a desk to justify some activity, not by research. Over 90% of the fatalities on the road in my country, that has the highest numbers in EU, come from excessive speed and ignoring road laws, something no current safety systems can change. Even airbags are completely useless in a front collision at 150km/h.
Or, how about we do none of these things and people who don't like social media just don't freaking use it.
It's better that the producer gets the correct price for their items. That way they can invest in their infrastructure or bid up source materials, getting closer to being able to meet demand. On the other hand profits going to the scalpers doesn't contribute towards fixing the problem.
Most of the tech results in absolutely critical safety features. Backup/blind spot cams, safer cruise control, breaking systems, etc etc. Nobody is begging for more dangerous cars.
Wow this looks great. Now I almost regret having the janky DE-10 Nano and SDRAM hanging off a power cable next to my TV.

I love the form factor and the cases! Thanks for sharing this.
Meh, weird prose
Love the domain name, excited to see what this turns into
This is, in reality, probably less 'green' than living in a city. Multi-family homes tend to require less energy to heat and cool, because you share walls. You can also walk to many things, bike, or take transit. My bet is that most of the people living in these rural places aren't so into the 'rural lifestyle' that they don't own a couple of cars that they use for ... pretty much everything in life.
Thanks. Genuinely gave me a laugh. I predict HN mods won't be so humorous about it though.
These universities seem to have been taking notes from Australia.
This kind of perspective where any intervention-free (often equated with 'free market') outcome is ipso facto a socially good outcome is so frustrating because it transcends policy discussions into morality/dogma. Are you opposed to efforts to curtail rent seeking more broadly?
How do we do Benchmarking? Conversations with the Community
If our job-field selection process has to include "field where most companies in it aren't toxic" as a major factor, that's... not a good sign. I don't think it'd be a good result if people had to leave their field and move to another one because the culture at most companies in their field is toxic.
Terraform has multi-cloud support but it is not cloud agnostic. You have to rewrite your terraform for the things that you want to move to another provider.

Moving to other providers is unfortunately rarely easy except for all but the most basic infrastructure.
Google tells EU court it’s the #1 search query on Bing
That sounds like a beautiful example of letting perfect be the enemy of good.

Just like your design choices have trade-offs, is it important to realize that there's a trade-off between finishing sooner and making a better solution. Diminishing returns are usually very much in play with analysis.

(I would also challenge the notion that every situation has a different "best practice". That's just creating a solution. "Best practices" are usually general advise that is applicable in most situations.)
a) This is a line of code from 2013 and was fixed weeks after.

b) Based on the JIRA [1] it was designed to only log 10% of subsequent failures where there is no connection to prevent log flooding. You would still get the initial failure message.

Pretty reasonable technique and hardly the worst code ever.

[1] https://jira.mongodb.org/browse/JAVA-836
No, HN will rate limit you if you post too quickly. I've been hit with it when I was involved in a back-and-forth in the past (part of the reason I added a 2-minute delay to my posts becoming visible, plus it gives me a chance to reconsider if they're worth posting or make edits).
The iPhone already runs a proprietary operating system.
I’ve used QXW very successfully.

The trick is to have a good word list… I’m working on one for German, but it’s a bit of an undertaking and I guess pretty subjective.
Hanlon’s Razor: Never attribute to malice that which is adequately explained by stupidity. I find mismanagement due to a few people in power to be a much easier explanation to swallow than a planned conspiracy.
How would you even discern fraud from the real thing? You could just get drunk and act drunker then stumble onto the road, you'd blow wet on the breathalyzer and the story is plausible enough that a public jury will side with you, the innocent guy on a night out or the guy down on his luck, over scary robot car company, then a precedent will be set.
I actually bounced off a car with modern safety maybe 10 years ago or so, trashed a good jacket but I wasn't even shaken enough to bother getting looked over at an Urgent Care, I continued walking to lunch. Not a high speed collision of course, it was a quiet inner city street and I looked the wrong way (one way street, I looked where cars should be if it was a two way street, oops), but I suspect a 1970s car would have been markedly worse for a pedestrian.

One key trick other than the pop-up headlamps going away, was a gap between the bodywork and harder internal surfaces. As I understand it that goes something like this:

Think about a large steel panel such as a car bonnet (hood?), obviously it's no comfort blanket, smacking into that isn't a good idea, but it will bend and absorb lots of energy during impact. Now, think about an engine block, that's not going to bend at all. In a desire to give a more stream-lined look, older cars would mount that large panel almost touching the engine block and other large stiff elements, because why not. Well, dead pedestrians is why not. If you add a gap that gap absorbs lots of energy that otherwise is going to cause injuries to a pedestrian. I can't prove it, but I credit that for the difference between walking away with a damaged jacket and spending the rest of my working day in A&E being told I'm not dying so can't cut to the front of the queue, but I'm also not OK and so mustn't leave yet.
Please don't do this here. If you think a comment is out of line or isn't substantive, just downvote and/or flag it and move on.

(I recognize that I am toeing the line here as to whether or not I should even comment here.)
Very cool! Nice work.

One thing I noticed on mobile is that I try to tap on the up and down arrows quickly to search between comments, which is often misinterpreted as a double tap in the browser and it zooms in.
interestingly, I go the opposite direction. I try to buy cars without AC (environmental reasons), without electronics (expensive to fix when they fail 'cos the constructor takes a huge premium on these), with the least possible automation ('cos I think these are overpriced)...

Basically, the more sophisticated a car is, the higher the risk of failure and thus price to fix the failures. Now, I buy inexpensive cars. Maybe if I go for expensive brands, the risk is less.
When Politicians Panicked
Isn’t the magic just that humans sometimes believe what is said rather than what is done? You need to watch what people do, and whether they actually do what they say.
no but I can't do that with Tesla software either .... I can with comma.ai though....
That is, truly, "amazing" as the parent comment puts it.
"Fear of reprisal" is one of the primary measures of a toxic culture. But I get what you're saying about it almost being an unfalsifiable claim.
If it really is then why are bogus arguments like the OP used to make it seem so?
Big discussion a few days ago: https://news.ycombinator.com/item?id=28660284
The retrocomputing sweet spot for me would be reproduction keyboards with nice mechanical switches and DB9 joystick ports. For both the Atari 800 (4-joystick) and the Commodore 64/VIC-20, please. Something I could use with an emulator or eventually something like the MiSTer.
With that I mean the navigation through the submissions and comments via the arrow keys not the actual hotkeys or key combinations. The alt+h was a bad choice and will be switched to '?' in the next update.
That will not happen unless new legislation is passed:

https://www.bloomberg.com/news/articles/2015-02-19/bigger-pi...
> Generators are less commonly used, but are a relatively simple language feature

Generators are basically unused, full stop. I would go so far as to argue that no major JS library uses generators as a first class concept. I would go even further to argue that proposing a very unpopular control flow technique as a method of state management sounds like the #1 way to cause a library to have a steep learning curve and result in unexpected interactions, especially when being contrasted to algebraic effects.

Hooks and algebraic effects lean into the core concept of React as a "pure" functional view layer on top of application state. This is one of React's strengths, and it furthers it by ensuring your components / functions have graceful mechanisms to handle events both of the state change variety AND, as before, user / DOM change type via hooks. It also allows for terse invocation and easy reuse. Enough about this transferable business, writing a reusable pure function is as transferable as it gets.

I really don't know what mental burden hooks are putting on developers either. It's pretty simple: you call the same hooks in the same order every time you render your function. There's not that many of them to use, and you don't need all of them by any stretch. All the gotchas that exist already seem like gotchas related to first-class React concepts like state and props and were existing in class components but in a different syntactic sugar.

I think we can probably conclude here, because obviously as a fan of React Hooks who thinks they solved a ton of issues in React (to the point I rewrote & improved my entire component library with them), I don't see how using unrelated solutions that require learning entirely new concepts not popular in the domain already will improve the situation.
Ask HN: Should I change companies (Series A Startup to IPO Tech)?
For context: I have been working as a Sales Ops Associate for the past 2 years at a Startup which has gone from pre-series A to applying for Series B in the beginning of next year.

Up until now I have thoroughly enjoyed the creativity and freedom my job allows, however out of the blue I get a job offer from Snap to go work the same title for more money (with the work being slightly more repetitive). I go through the interviews and get offered the job without much fuss.

I then go back to my company expecting them to not be able to match this new offer but low and behold they get very close to it (within $5-10k), even additionally offering both 4,000 more shares (brining my total up to 9,000) and a better title (Senior Business Intelligence Analyst) to boot.

This really put me in a dilemma, as I thoroughly enjoy the work that I do but I am concerned that turning down the offer to be at Snap (if only for a year or two) would effect my career prospects due to reduced brand power. But on the flip side the job title being offered allows for more scope in future roles than being locked into Sales Operations long term.

My main questions would be:
1. Has anyone here worked at Snapchat before and can they give any feedback as to the work-life balance/career progression?

2. Does title really matter? Would other companies care if I was called Sales Operations or BI Analyst?

3. What is the likelihood of a company at Series B going public? And how long would you expect it to take to go public?

4. Does Snapchat have a good public image for hirees? Or is it not comparable to FAANG?

I really appreciate any help anyone can offer on this.
> profligate agility can work against intelligence

thank you for putting into words something i've been inuiting for a while now... i couldn't put a finger on what was going at some workplaces i've been in, but this really resonates with me

it seems in our chase for "agility" above all else, we are sacrificing our intelligence along the way...
The flip side of that is the thing is beautiful without them. I almost get it just from an aesthetic point of view, but they didn't hit the mark with their touch navigation to justify it.
Is the floppy drive fast? That would be cool.
Less Government, More Employment [pdf]
If you know about it.
Ever since decisive battles stopped being a thing with industrialization, I know one European country that started and lost two world wars due deficits in strategy, operations and supply. Tactically it wasn't too bad so.
Matthew Green is a well known Cryptography professional and has a ton of write ups on his also well known blog.

https://blog.cryptographyengineering.com/

You seem a little judgemental and obviously unaware.
I was just at a wedding and a woman at my table works w/ the longshoremen / port workers in some HR role. She said the issue they’re having is each person interacts w/ 10s of other crew people a day. If just one of them tests positive or has a contact who tests positive they all have to go out & quarantine. They simply don’t have enough skilled people to balance the large numbers that keep having to tap out.
I was part of a team that operated a large Mongo cluster for most of the last decade. I would not have advised anyone to use Mongo as their durable source of truth database then, and I still don't think it's advisable to do so now. On numerous occasions, Mongo demonstrated the consequences of poor engineering judgment and an addled approach to logic in critical components responsible for data integrity. In addition, Mongo internalized many poor patterns with respect to performance and change management. Mongo did not, and does not provide the data integrity or performance guarantees that other databases internalize by design (the WiredTiger transition helped, but did not cure many of the issues).

PostgreSQL introduced JSONB GIN index support sometime around 2015, making Postgres a better fit for most JSON-based applications than Mongo.
These sorts of low-power coprocessors are quite common. You can buy Cortex-A/Cortex-M combos from multiple manufacturers on digikey.

It's not just big application processors that have them, either; some microcontrollers like the ESP32 have them as well.
Baby died due to ransomware attack on hospital, suit says
The USG DNSSEC requirements, which seem to be a part of what happened, are fragmented and incoherent. OMB withdrew DNSSEC requirements in 2018, and CLOUD.GOV doesn't support it. But some older requirements documents still have them, and need to be updated.

The important top-line thing to know here is that virtually all tech companies eschew DNSSEC (you can verify that for yourself with `host -t ds stripe.com`; substitute any other company for Stripe.

DNSSEC-quarantine TLDs are a good idea.
Set a mark, people will aim for it.
> Busses rarely run at a profit

Semantics. Profit, net zero, sustainable with tax dollars, etc.

Doesn't matter. You get the idea dude. It's about routes not being worthwhile because the damn transport option is too costly for just a few people. Autonomous car is gonna be more effective for these scenarios.
Sounds like social media platforms might end up like cigarette companies, where they finally acknowledge the harm of their product and add a disclaimer to avoid liability: "This product is designed to manipulate you. It will probably make your life worse." Or, like the drug companies: "If you have depression, suicidal thoughts or find yourself screaming at some rando on the internet, stop taking Facebook and consult a therapist."

Maybe that's already in the EULA??? :shrug:
Yes, Debian 9 security updates contains the new ca-certificates package.
Happy to concede that it's more vague gesturing at "Look, a similar thing was happening 3,000 years ago and is happening today" than the same thing but it's not like it's unrecognisable.
reviewed how fft works because of this, and made this demo for image fft (picture cropped from original passage): https://gist.github.com/mikelty/4553938523f0d1b0f4ee575a6241...

turns out skimage can do this, not just the 'special piece of software' mentioned in the article.
Support for iOS push notifications coming soon
What is strange to me why did the Facebook person try to explain the term to the Senator? I’m no lawyer, and this is just my first reaction about what she answered based on what little I know.

These Senate hearings are not jovial chats among friends. They are in the same ballpark as depositions, or interviews with law enforcement officiers. You are not there to make the opposition’s work easier. (Assuming you with counsels decided that the best option for you/your company is to appear.) You have to be curteous, and truthfull. But you absolutelly should not go into “guessing what the question might be”.

When he asks “Will you commit ending finsta?”

I would answer “At facebook we have no feature or setting named finsta. We cannot commit to end what we don’t offer.”
And let him explain what he thinks finsta means to him.

In casual conversations we often try to answer the question we think we should have been asked. This is not such an occasion.
don't forget :

> "I want to be clear: This research is not a bombshell."

It's not, because you knew about it.
..ran around explaining how everything could be understood as transaction costs at work, in much the same way neoclassicals thought their marginal price dynamics explained everything.

oops
Improving My Website's Typography
It could very well be.

But how many of those routers could they make, and how quickly? And for how much? And could they really handle the kind of load that Amazon needed to handle? And how quickly could these bespoke solutions be installed, tested at scale, verified to work? Would the manufacturer provide support if they don't work as expected?

The solution that was done was to split the network into sub-networks with just the few proxy gateways between them that were needed. And it worked- I think it's still working that way. That's not free to do (every service owner had to do some networking work), but it's also perhaps less expensive than switching out all the hardware, overall.

And rest assured, Amazon always chooses the option that maximizes profit in the long run. Other than that stupid phone.
LuLaRich Reveals a Hole in the American Economy
Statistical arguments have already been around though. Everyone is pretty sure it never ends, that's already been agreed upon.
The question isn't "Does it look like it always go to 1?"
My pet peeve are troops holding positions and ranks (who would fight rank and file on a modern battle field?), only to break formation and charge (at running speed as if sprinting increases damage by 1D10 in real life) the enemy, screaming heroically. Hotzendorff and Codorna would be proud.
This is no surprise to me knowing Apple's history. Honestly I think I was just annoyed by his twitter personality, but I guess I shouldn't find "twitter personas found to be annoying" surprising either.
I had a Fairphone 2 and was quite happy with it, though unfortunately I'm not using it any more. The modular approach is quite nice, but a missed opportunity with the FP2 was that you couldn't customise your phone by choosing between different modules.