skysight-inc/HackerNews huggingface dataset:
A USB drive can operate fully within the USB spec, implementing a USB hub and USB keyboard, and enter malicious code.

The SD interface does not implement a similar spec, so this somewhat safer. The bad news most PC card readers are based on USB, so a targeted attack (which is probably in scope for Briar's customers) may still be possible - you could attack the firmware of the card reader, as described in [1] by Adam Caudill of BadUSB fame. Without breaking that firmware, however, you can't connect USB network->Card reader->USB hub, and you also probably can't connect SDIO/SPI network->SDIO-based-card-reader->USB hub.

There's also the possibility that the card itself can run untrusted code. Just like a USB drive, an SD card typically contains a small 8051 [2] or ARM [3] microcontroller. Running a compromised controller would give the attacker access to all the data that's ever sent to the SD card, but one would hope that Briar does not cache unencrypted data to the uSD card which the user is expected to write to an physically pass to a potential adversary.

Also, be aware of products like the Toshiba FlashAir Wifi SD card, which implement a wireless adapter in an SD card form factor. Replacing the label would be trivial, and it could broadcast or connect to a hidden wifi network without your knowledge. But again, one would hope that Briar does not cache unencrypted data to the SD card where it could, with one of these cards, be exfiltrated wirelessly. I think this capability is only available as an SD card or an obvious uSD-to-protruding-SD-card adapter form factor, not as a microSD card which would typically be used in a mobile device.

Of course, there's still the possibility that the host OS does something stupid, like autorun an executable on the external media...but that's more of a badly configured Windows PC problem, I expect that modern mobile devices do not do that.

[1] https://security.stackexchange.com/a/109595

[2] https://www.bunniestudios.com/blog/?p=3554

[3] https://www.bunniestudios.com/blog/?page_id=1022
Still, it's probably much easier for an USB drive to actually pack malicious hardware in addition to software, like sensors (e.g., microphones) or an USB killer:

https://en.wikipedia.org/wiki/USB_Killer
Dogs can't do endurance running in the heat like we can. Cooling is a limitation for most mammals.

https://en.wikipedia.org/wiki/Endurance_running_hypothesis

Humans vs horses:
https://slate.com/culture/2012/06/long-distance-running-and-...

Cheetahs, wolves : https://www.businessinsider.com/how-humans-evolved-to-be-bes...

We're really good at running.
The Reason We Buy Things We Don’t Need
The downvotes would be because that argument is a slippery slope fallacy.
This is a contrived and very unlikely scenario. Maybe we should prioritize for the far more common scenario of people killing and maiming others and themselves while DUI
As stated in the article [1]:

> To allow you to do the same, we’re open-sourcing a full-stack application today, showing you how to mint and manage an NFT from start to finish. The smart contract for the application is deployed and verified on Ethereum's Rinkeby network

The nice thing is that contracts can be copied, since their code is inspectable [2]. Since it's not easy to build a contract without flaws, it's nice to be able to reuse tried and tested ones!

[1] https://blog.cloudflare.com/get-started-web3/#what-we-built

[2] https://rinkeby.etherscan.io/address/0x290422EC6eADc2CC12aCd...

edit: for formatting
In professional (and hearing) football and baseball hand signals are used as well. Security through obscurity mostly works fine. The teams generally change the meaning of the signals from game to game or even play to play, and it mostly keeps the defense from knowing what the signals mean.

In this context if the other team did happen to have somebody who could interpret the signals quickly enough, it would be pretty easy for the players to just have a few codes which change the meaning of the signals. And of course you can just agree what codes mean what in the huddle or the sideline where the other team can’t see.
>Wax poetic about freedoms all you want, but public health is not the place for it.

If people are not free to make poor health decisions, when are we going to lockdown Mcdonalds?

>An overwhelming majority of people who have been hospitalized, needed a ventilator or died from Covid-19 have been overweight or obese, the CDC said

https://www.cnbc.com/amp/2021/03/08/covid-cdc-study-finds-ro...
Please avoid accusing opponents of bad faith, it's distasteful and childish.

If you have "enough" for retirement and then we have a depression where your retirement significantly drops.. that sort of seems like you may no longer have enough. That money needs to last you 20 some years.

Also your claim that most retirees have "an average net worth over a million" appears to be flatly untrue [1]. Please provide a citation.

Significant amounts of retirees are still paying on their mortgage [2] and are affected by changes in the housing market. This especially is important for reverse mortgages.

Social security income does adjust for inflation, but it does so infrequently and is not always a major part of many peoples retirement plans.

A depression or recession would be worse for the common person than any 1%er.

[1] - https://www.investopedia.com/articles/personal-finance/01061...

[2] - https://www.aarp.org/money/credit-loans-debt/info-2018/retir...
https://archive.md/1DPcR
> However it would be difficult to prove, because this configuration will rarely exist in reality.

This was super normal after war, when the world was full of orphans. And specifically in UK where the kid could be taken into system easily - sometimes simple because there was only dad or parent was single.

This was super normal when mothers died often. Or when single mothers had to leave their kids with cheap caregivers to work or be in those abusive houses.
Maybe they knew the number was wrong, but didn't have the correct numbers...?
Ugly bloated eye-sore. Pardon my language.

Just rip off JetBrains already.
When I got roped into using VB at work in the early 90s it didn't even occur to me to argue for Smalltalk (as far as I remember). If I'd had a free Smalltalk to satisfy my curiosity first, that could've been different, though there'd still be barriers like my manager's familiarity with Basic.
Why people still don't accept that systemd is bad?
I'm told fixed gear bicycles are very fun to ride as well
Intel Celebrates 50th Anniversary of 4004: The First Commercial Microprocessor
The Fallacy of Rationalism
Because it's good.

More than good, it's awesome.
What would you recommend that is fast enough (ie not Ruby or Python)?
Yeah... when you say it like that, it sounds like the apology really ought to be going in both directions...
It's a feel-good human-interest story; not meant to be accurate. It doesn't investigate any of the claims made as to why the team is successful.

> Mr. Adams, who coached the team for two seasons starting in 2005 and began his second stint four years ago, attributes the turnaround to rigorous conditioning and an especially talented cohort of players, some of whom have played together for years at lower levels.

Seems the most likely explanation, since sign language isn't a new innovation for deaf football players. The rest is just "since the team is good, it is a hook to talk positively about deafness.
>"In part because we have used regulations to require you to be rich."

I understand the sentiment, but I feel like this line of reasoning puts oneself into a catch-22. The first reaction would be to say "well, let's start slashing regulations". However, I suspect people who support the idea that there are regulations that "require you to be rich" would recoil at the idea of trimming things like ADA accessibility, needing GCFI outlets in homes, energy saving fixtures, mandating a certain level of green construction materials, et cetera.

In essence, the people who fear that our regulations require a certain level of wealth would not, in my mind, want to actually deregulate the market because they see the each regulation individually as being a positive thing.
>Reminding yourself of everything you could lose drives some appreciation for what you have, whatever it is.

Does that actually work for some people? Thinking about loss usually gives me a dragon like need to hoard, and guard the hoard.
I won't want to buy a car that makes sub optimal decisions for me. I want emergency breaks and blind spot warnings, I want cruise control and an awesome radio, but I won't buy a car I don't control, unless I can get one that is driverless and where I can still set it to aggressive mode, and select the route.
AI Writer Startup Gets $21M in Series A Funding
Their codec availability for non-Apple is not great. They really work best inside the Apple ecosystem.
For what it's worth, this post is about it leaving beta. :)
You're missing my point: it isn't that Michaelangelo himself is unsurpassable. It's that his style insofar as it's appreciated for its quality cannot be reproduced in a convincing way to people with an eye for that without some much higher minimum skill as opposed to the minimum level it takes to impress a connoisseur of abstract art with the painter's alleged talent. At least, this is my unshakable feeling.
> turn the program into a distributed system with maybe hundreds of instances running on CloudProvider (TM)

... and give tens to hundreds of thousands a month to cloud providers when you could spend 1/100th if it were written in Go.
is there a way to write a quick script to do this instead?
You are talking about the old asp.net, not the Core one? Because I do not recognize any of this. I find asp.net core, especially 5 and 6, rather trivial to handle vs a lot of other products running in production.
I don't know if the article makes this clear, but it if they are just using ASL, the benefit there is that they've been communicating via ASL their whole lives and understand it "natively". It's also a language that was refined over time to communicate things quickly and concisely.

Other teams do develop their own language, with both verbal and hand signal components. However, I'm not sure high school football coaches are necessarily adept at making new languages, sure maybe it is good enough for what they're doing, but is it as robust as ASL or English? Of course not. Then, the players need to take time to learn it, if they ever even fully grasp it. Then, the players will come and go, so once a senior, who probably fully gets it leaves, the coach is left with a bunch of new players they have to teach - for this reason, the language is hard to refine. For all of these reasons, the team using their native language has an edge in communication.

This is probably better at the pro level since a player on each side has a direct line in their helmet from the coaches and the players stick around long enough to master the new language.

Overall, though, I think this line in the article is downplayed: The coach attributes the turnaround to rigorous conditioning and an especially talented cohort of players, some of whom have played together for years at lower levels. It's a great human interest story to talk about turning a perceived disadvantage into an advantage, but it sounds like, deaf or not, this particular group of players shows great teamwork and a great work ethic.
The Big Phone Problem
Privacy. WebRTC can leak your IP address.
There are regularly 24 hour races and I've done a few myself. 100 miles in 24 hours isn't that hard. The record was just recently set at 192.25 miles (309.4 km):

https://www.runnersworld.com/news/a37465691/sania-sorokin-24...

There are also 48 hr and 7 day races. Sleep is necessary somewhere between those two points, though two guys just went 85 hours with basically no sleep:

https://www.bigsbackyardultra.com/

That's a race where every hour on the hour you have to complete 4.166 miles. You get as much rest as the balance of your time after you complete a lap till the next hour begins. Most competitors complete a lap in around 48-52 minutes. The race continues until there is only one runner left to complete a lap.
You can't talk about taste the same way you can't talk about religion.
Obligating people to do things that they don't agree with never lasts.
Tobii Dynavox brings Eye Tracking interface to iPads
What is Cointipping and why is it popular?
It's not realistic, but if the definition of a terrible tax is one "which people avoid by altering their behavior in ways that are bad for society" seems like it's catching pretty much every tax in that.
A lot of the asp.net core configuration nonsense can be entirely sidestepped, but the way in which you would do this is not published as a headline article or otherwise made clear to the developer.

I suspect Microsoft wants most developers to throw their hands up and just follow the "hook your app up to our $$$ azure authentication products $$$" tutorial.

The happy path for AspNetCore could be achieved if Microsoft started the entire conversation with "Here's a request pipeline and here's how you add middleware to it". Everything else is some form of abstraction on top of that. You can learn about how to do all of this 1 afternoon if you know what to focus on.

Once you figure out how to get at HttpContext with your services available in that scope, you have the rabbit entirely cornered. Relying on Micrsoft's middleware to do everything for you is how you get trapped in their puzzle box for all eternity.
You don't have to be under an anti-microsoft rock. If you were a VB/WinForms type person - you've been wondering where Microsoft has been going with their desktop ecosystem for AGES now.

Ahh, finally we are told, this new release of .NET solves all the issues. Except when I try to do a simple forms based app with a drag and drop designer (something supported trivially decades ago) it's a constant list of errors, unsupported notices etc.

I'm serious. What's the quickest way to drag a button onto a form that when I click it will change a label text to "hello world" with the new .net desktop platform?
Deaf person here and attended that high school. I was surprised to see my high school in the news.

The team can learn sign language if they prefers or they can use pidgin. Pidgin is a simplified form of the communication to convey it. Pidgin itself is not a language, it is more of jargon in a sense. Pidgin is very common uses outside of Deaf communities.

Baseball use call signs, and that is pidgin. Crane operators have their hand signs, that is pidgin too! Same for military, they use pidgin. Pidgin is easier to learn than sign language as it can be simple handshape or call sign, similarly to emoji in a way. Sign language requires efforts and you will be surprised to find thousand muscles you never thought you used before.
When I worked for the navy the adage about navel engineering was "designed by Geniuses to be used by idiots (i.e., Navy cadets) "

When I worked for the space program, whenever we came to complicated procedures or rules to follow the adage was "our users are rocket scientists or astronauts -their smart enough to handle this 20 page procedure"

Which adage works best for dealing with how your audience uses your software or your processes? should you consider them to be geniuses or idiots?

In general We tend to ignore the cognitive load that our work can impose on a busy person, as engineers our processes and tools usually require extra cognitive effort to learn that is usually an added burden on the user. It never hurts to make things simpler but it does take a lot of design effort to do so -but the value gained (in efficiency, time savings, and lack of human errors getting introduced into the system) is usually additive, even if that user is an astronaut or a lowly cadet...

- I think the article is basically reframing Hanlon's razor: "never ascribe to malice that which is adequately explained by incompetence.."
I just talked to a bunch of Python engineers who feel that way. They didn't have a single solid argument - what's yours? .NET is a bit verbose, but there is a clarity that comes with it.

The Microsoft documentation is garbage, the worst I have seen. But the language and framework are good.
There was massive inflation in the 70ies and it appears that what you describe hasn't happened. In fact, at least in theory inflation decimates the savers and helps the borrowers (well, if you borrow before it really picks up I guess).

Also, housing-to-income ratio in the USA is (used to be?) one of the lowest in the developed world. Housing is relatively cheap, including in many non-depressing places with jobs (e.g. Chicago, SLC or San Antonio, of the ones I know thru someone who lives/moved there)
BMW will not accept it's bitcoin
being locked for 90 days

The way I see the future, BMW will not only lock their Bitcoin for 90 days but much longer. And not only the Bitcoin they owe to one supplier. But a large portion of their Bitcoin. Aka their virtual bank account. They can still use their account however they like. But if one of their suppliers feels that the balance goes dangerously low, the supplier can block further spending or settle everything.
Maybe rehearsing leet code and funding studies that result in a "no shit we caused even bigger problems" outcome can make certain people think they can solve it.
As a joke, I'd love to see someone create a landing page of a "new" language with some eye-catching name similar to Kotlin, except it's all C#. I could easily see that hitting the top page of HN.
Was going to say, this but tiny correction, its the LZ variant that does this, as will most of them. Deflate is just two pass compression of LZSS followed by Huffman. The LZ variant will pick out repeat patterns, while the second will compress the byte representation of the resulting stream if a particular set of values is over represented. AKA its all variations of X, Y, Z in different orders those might get assigned 2 bit values rather than the 8 they normally might take up.

(so this a bit of a rant I have about people calling deflate a compression algorithm, its an algorithm composed of two other fundamental ones).
Visual Studio for Mac is a completely unrelated product that happens to share a name; when people say Visual Studio without any qualifiers they _probably_ don't mean the Mac version.

Microsoft overall has a terrible naming sense, with occasional good accidents.
As someone who has to make impactful "tech stack" decisions on a daily basis, I try to challenge my personal preferences as often as I can.

When someone has a strong negative take on something I thought was great, that's a perfect opportunity to learn deeply about trade-offs or concerns I might not be fully aware of.

If nothing else, it gives me an opportunity to evaluate potential issue, put guards in place to reduce the impact, and arms me to defend my choices should the need arise.
Ironically, the California team is described as not needing to huddle — which makes sense since their opponents presumably don’t know ASL

> Many teams try to use hand signals to call in plays, but they are no match for the Cubs, who communicate with a flurry of hand movements between each play. No time is wasted by players running to the sidelines to get an earful from the coaching staff. No huddle is needed.
https://github.com/zhanghai/MaterialFiles

Open source Android file manager with built-in ftp server.

Windows file manager also has built-in ftp.

Linux has built-in ftp.

Transfer files fast and easy over WiFi.
3x+1 (Collatz conjecture) as “The game of Investigator and the Mastermind”
Collatz conjecture reimagined as "The game of Investigator and The Mastermind"!
Don't try to be a large company.

Large companies suck. They obsess over processes and demand formality.

The best thing about working at a startup is that it's a startup!

At a startup, you can be informal. You can do work that wasn't assigned to you. You can communicate with everyone on the team directly. You can change your planned design and get right to working on those changes.

People think that companies are big because of the convoluted processes they use. It's the other way around.

If you have 100 people to do 95 things, then it makes sense to give every person a specific structured role. Else, why have 100 people at all?

When you only have 30 people to do those 95 things, then your structure not only has to be, but can be much more organic and fluid.
I worked in a finance institute, when I was responsible for the mainframe and mainframe security. I was 24, and I was surrounded by senior engineers, already over their 50s. I had to go back home, back to my father, to ask for help. He is still today teaching COBOL in the university. Was a pleasure to learn this language that to me was a kind of "Cucumber" from the 60s. However, looking into the details of the whole workflow from COBOL applications, I wasn't that happy looking from the security point of view. The code and solutions predates any security best practices that we have today.
I use c:\programs too, but for different reasons. C:\Programs is for portable applications that don't get installed, can be directly overwritten, and consist of at most two files with relevant names. As a bonus, I can run such programs directly from the run menu. C:\Programs\procexp for Process Explorer, for example.
Don't interview like FAANG unless you're offering the same compensation - otherwise you're going to get a lot of people dropping out of your funnel because the BS isn't worth it for what you're offering.
> If there's no such thing as good taste, then there's no such thing as good art.

No problem.

> So if you want to discard the concept of good taste, you also have to discard the concept of good art. And that means you have to discard the possibility of people being good at making it.

This skips a step. It assumes without argument that production skill corresponds to subjective preferences. There are many people who are extremely skilled who produce things people hate and there are many productions which take virtually no effort which people love. Again, good blahblah is just consensus of subjective preferences. The whole article is just a disguised appeal to popularity fallacy that depends on confounding skill and value through equivocation on "good."
Show HN: Run VS Code on iOS with Safari Extension
I agree with the stuff you say, but feel the last sentence is a bit of a personal attack.
Dithering is a way of mitigating the effects of quantization. Quantization is in fact an effective form of compression, as it reduces bits per pixel. Modern compression techniques for photographic images, however, rely on the coherence of the image (similarity between adjacent pixels) and dithering tends to work against that.

In a purely mathematical sense, though, quantization is very much a form of compression. It's a way of reducing the amount of information in the image.
https://twitter.com/gabrielpeyre/status/1326776195107713026?...
I'd also recommend follow indie long-time legends such as Jeff Vogel. Jeff Vogel is the kind of indie developers most should follow. He never released anything that reaches millions of computers, but his consistency beats most of the game development studios out there, including professional ones. I believe his business model and development strategy should be copied by anyone in the Indie business.

Basically he targets a niche market and does so well that he can always rinse older products into remakes and re-remakes. His player base is not huge but is very loyal.
Container Lifting Trailer for logistics, it's only for you check when you free.

https://www.dreamtruegroup.com/container-lifting-trailer/
I'm almost positive most kids would pick a Lisa Frank piece over the Mona Lisa. Are you trying to make the point that bright colors, rainbows, and unicorns are the highest form of art?
I am like, how often are you in contact with kids?

Also, the kid who has unlimited screen time and uses majority of it for reading and educational videos is something I never met.