skysight-inc/HackerNews huggingface dataset:
You’re not wrong about the impossibility of perfect security.

But Apple is praising and promising to support independent security research in this press release. Meanwhile they have a reputation among independent security researchers for being standoffish, opaque, slow to respond, and even outright hostile in suing Corellium. They settled that suit but the reputation remains.

Apple is the most valuable company in the world. They do not appear to have the best security program in the world. Whatever Citizen Lab can do, Apple should be able to do better; they have a lot more resources and expertise.

I’m not doubting that Apple puts a lot of effort into securing their products. But it seems like they still have significant room for improvement.
Amazon is hemorrhaging talent right now so that might be kind of a special case. Or it might be FAANG? Admittedly I've only worked in companies nobody's ever heard of so maybe it's different at those smaller places that only hire 15-20 developers at an absolute max (and usually like 3-5).
This is fine but still overlooks sample bias.

I.e older and more susceptible to illness people like 70 year olds are more likely to be vaxxed than 25 year olds. Had the vaccination rate been constant across ages, the unvaccinated death rate would be far higher and the vaccinated death rate far lower. It’s bad stats to not account for the population differences like that one.
>This comment is at least 5 years late.

More like a few years early. Bookmark this. If you think JSX and screwing around with HTML-in-code is as good as it gets, you'll be laughing at your comment in a few years.

BTW, I've been saying this since encountering the then-loved awfulness that was Angular 2.

>JSX has been a thing for so long now and it works.

That's a pretty spectacular statement — sort of a rallying cry template for never innovating on anything again. Just substitute anything you prefer for JSX.

I think I dramatically understated the situation when I said there was a lack of imagination.
The sentence you're answering was about security. I don't think "fixing vulnerabilities faster" is something Flatpaks were created to solve. It was more of a solution to dependency hell, that makes vulnerabilities harder to fix and audit.

I see the same issue with Docker services I deploy: how am I supposed to check that the latest Nginx security update is included in all my docker-compose deployments? With shared libraries, it's as simple as "apt-get upgrade" then restarting the services. In Docker, I'd have to check that the latest versions of all images include the correct versions of all dependencies.
Good points about needing to launch on multiple platforms, that might indeed mean it'll be rewritten.

We'll see
What makes BigML Image Processing different
You can design singularly for LiveView and it handles everything. But if you want both request/response and LiveView (e.g. to mix the two or fallback to r/r when no js) you have to be more explicit in your design. It’s mostly trivial though. I have authentication pages that use the old controllers but pages that use only LiveView without any hassle.
>What are their current wages, and what are they offered, but have declined?

They want an average raise of $384/mo (about $4.8/hr).
There is an option in the settings to make it not actually call unless you press a further UI button on the iPhone.

In Settings go to Emergency SOS.
Uncheck Auto Call
>There's a huge difference. Each scenario has different lessons to learn, culpability, etc.

Perspective matters. Yes, learning to not have it happen again is an ideal thing. However, from Fauci's point of view at the time and his role, the how/why absolutely didn't matter as he stated.
Which hospitals?
> During two years of bargaining, The New York Times company has slow-walked contract negotiations with unfair labor practices and insignificant wage offers that severely underpay our staff. We, members of the Wirecutter Union, are fed up. The wage increases we’re seeking amount to only about $300,000, spread over our 65 person unit. Wirecutter has been wildly successful, especially over the time we’ve been bargaining this contract, and continues to bring in record revenue for the Times, which is sitting on over $1 billion in cash. Additionally, Times management has offered paltry guaranteed wage increases of only 1%, despite soaring inflation and cash flows.

https://www.gofundme.com/f/support-striking-wirecutter-union...

https://twitter.com/wirecutterunion/status/14631750942184161...
The whole thing actually looked eerie to me for a few episodes. It really looks like a moving painting in a way that I’ve not seen before. Worth a watch simply for the animation.
10 companies are founding members, this Laravel blog lists 9, only omitting Symfony?
I mean when someone's motivation comes from what they themselves are interested in and their wanting to pass along their knowledge to help others, as opposed to say the external incentive of being financially compensated. I know this seems completely foreign in this age of played out incentives, but such publishing used to be quite common before independent sites were drowned out by webspam. You'd do a search, dig through a few pages of results, and hit upon an information-dense (likely plain text) site of someone thoroughly geeking out about your topic.
unless you understand how tech, business, governments and security services work, then not so much
Everything that has the eyes of the leaders of an oppressive regime has to look good and well polished.
In Europe we also have 1 Euro shops that now sell for 1.10€
It's not live on PACER yet sadly so I can't get a case number.
Was it not google pixel buds? 4 years ago: https://support.google.com/googlepixelbuds/answer/7573100?hl...
Half the ads say "Find it at your nearest headshop" or something to that effect. These were in stoner magazines and these adverts and products never really went away from that space to be fair.
>If you’re reading their content why wouldn’t you click their affiliate links?

Because they blackmail companies into affiliate revenue with the threat of "unrecommending" their products. See: https://www.xdesk.com/wirecutter-standing-desk-review-pay-to...
Man, OSO write such good blog posts
……or this is why you let people own the hardware they purchase and give up on this ridiculous “secure” boot idea?
Photos (the second one has a person for scale) https://www.google.com/maps/uv?pb=!1s0x47a8503d23a64435%3A0x...
These days you can't rely even on scientists to interpret results correctly. I see interpretation problems almost every other paper I read that has any non trivial research that involves statistics.

Vast majority of people are functional illiterates when it comes to statistics. How you present statistics is more important than what the data actually says.
we don't ask the mob as the mob. we get the mob to go into a room one at a time and then ask
You still have shares but they may dilute you to nothing.
I have their recommended coffee machine (OXO Barista Brain), and have loved it for over 3 years. I recommend it to everyone I know that likes drip coffee as much as I do.

If you were so happy with a $30 Mr. Coffee, what even compelled you to spend $200??
There's nothing legally requiring me to give any seats for investment though right?

Reading through this and my gutt feeling is that if I had a company doing really well I would do my absolute best to not give up any control over it - but idk how many investors would be willing to invest in that case (if we were doing really well though, I assume at least some would?)
An engineer's observations on Web3 and its possibilities
Well for starters, the reason a lot of this research was pushed to China was congress had grown tired of finding ways to punish the CDC for lab leaks and mistakes here in the US. It was only recently that the CDC had been allowed to restart a lot of its more dangerous research. So how about the US stop funding dangerous research regardless of where it is at?

Either the lab leak was true and this was a self-inflicted wound, or it was highly suspicious and uselessly dangerous research, as it didn't help us stop the pandemic.
Isn't their data also showing that Moderna is the most effective vaccine at preventing deaths?
> 99.9% of over 65-year olds have had one jab;

Wow, that's amazing. As someone who has followed the covid stuff pretty closely, that's very surprising to me. I would have guessed it would be around 95%.
> unless their employer is signaling to them that they value their contributions 6.2% less than last year

Not getting a raise doesn't mean your employer necessarily values you less - it could just mean others value you less so your employer has less competition for you.

Supply and demand. If nobody's buying hammers and the price of hammers goes down, that doesn't mean the value my hammer brings me has gone down, but if I need to buy a new hammer I pay less.
what is your use case of offline ? I've never seen the point. For example what the purpose of a social offline app ? I can't refresh feed, I can't upload post or react to any thing in my feed.

The only use case I know is for map where you can download map so when you don't have 4G you will not be lost but that's the only use case I know.
Sorry but this is not pedantic at all. You're saying performance speedup is irrelevant because most time is spent waiting for external services... But that is simply not true if you're beyond just a few servers. Output of external services needs to be processed and having faster software means less resource is spent per request, thus more requests can be served for the same resources. That is very important.
> Younger people getting it as schools open up

Wouldn't that cause an increase in the death rate among the unvaccinated?

AFAIK this data isn't "covid deaths/people who got covid", it's "covid deaths/the entire population".
Oh shit. I used to consider them to be one of the most reputable sources.
If you read the links I've posted, you'll note at least two things about them:

1) They include observation from figures who started open to the idea that the lab leak hypothesis was plausible enough to explore, but have concluded that it's unlikely (and explain why)

2) They are more recent
> Unclear what you are trying to say

It's like removing a jerk from your life who happens to make amazing tacos. I'm going to miss those tacos but life is too short. The 2nd best taco truck is a block away in this scenario.

> but honestly it's a pain I have to do this everywhere.

Right???
Is it great? The lawsuit is Apple trying to enforce the iCloud EULA to stop reverse engineering. While NSO Group created hacking tools, and then did some questionable things with them, do we really want those inane licenses no one reads, and everyone scrolls down to hit [agree]; do we really want them to legally binding? Put another way, if it was someone HN liked, would we still say this is actually good? Because compared to the corporation known as Apple, NSO Group and its parent corporation are still "a little guy", and this move really doesn't seem like a good thing. Not for hackers in the HN definition for hackers, ie highly motivated tinkerers.

This community features not just fans of reverse engineering, but number of practitioners, eg the popular Nvidia TSEC key extraction that was featured recently[0]. The defendant's actions make them an easy target, but, like the ACLU protecting the civil rights of murderers, because we still live in a nation of laws, I don't see this as great. This is a continuation of Apple's continued use of lawsuits to silence any challenges to their marketing of being the secure computer choice (eg Apple suing Corellium[1]) rather than their products actually being secure.

[0] https://news.ycombinator.com/item?id=29315378

[1] https://news.ycombinator.com/item?id=28219278
Correct! Inlining obviously costs CPU, code cache space, and makes the receiver method bigger so that it's less likely it will be inlined itself. If there ever is a decompilation occuring, the inlining efforts were pretty much wasted.
> It seems you may have forgotten the old saying: if you're not paying for it, you're the product.

Nope, I didn't forget—I don't entirely mind being their product, but it seems like Facebook forgot the fact that, if I'm their product, then they need to make it worth my time to go to it.

> Perhaps these practices create an ideal (or, at least better than what "display everything chronologically would) environment for displaying ads to receptive people.

Maybe it does, but it doesn't seem like they're firing on all cylinders. Instead, it seems like they're trying to get more and more out of fewer and fewer "products".
I believe that's been the growing consensus for a while now.
I've always had trouble getting `for` loops to work predictably, so my common loop pattern is this:

grep -l -r pattern /path/to/files | while read x; do echo $x; done

or the like.

This uses bash read to split the input line into words, then each word can be accessed in the loop with variable `$x`. Pipe friendly and doesn't use a subshell so no unexpected scoping issues. It also doesn't require futzing around with arrays or the like.

One place I do use bash for loops is when iterating over args, e.g. if you create a bash function:

function my_func() {
for arg; do
echo $arg
done
}

This'll take a list of arguments and echo each on a separate line. Useful if you need a function that does some operation against a list of files, for example.

Also, bash expansions (https://www.gnu.org/software/bash/manual/html_node/Shell-Par...) can save you a ton of time for various common operations on variables.
The numbers are small and the risk concentrated in the elderly ailing population such that an outbreak in nursing homes can skew the overall numbers one way or another, depending on lack of PCR tests or over-sensitive PCR tests. These numbers are mostly useful for detecting general trends, e.g. are the cases going up or down, what is the O(death risk)?. Strictly comparing different locales is not going to be very informative
We built a FREE memes contest creator - would love feedback
Cocaine never really went away.
RIP my I5 CPU. This is perhaps the worst website I have ever visited and I am a developer that has seen many terrible sites. Is there a bitcoin mining script or something? Good lord, Firefox with uBlock origin couldn't even load it properly. This is the browser edition of covid
It's simply a completely different implementation. Some of the optimiization passes are the same, obviously, but overall it simply performs ... differently.
Don't you have to scale your api too ?
Waymo’s New Imaging Radar Takes Them Through San Francisco Fog
That's not true at all about the mortgage.

My dome home was financed FHA, regular down, 2.25% interest rate not even a year ago. The only hang up was that I paid about $200 more than usual for the property evaluation as they had to locate someone who could accurately evaluate a geodesic.
Working on stuff, not communicating. e.g. Google docs, Photopea.
Bash 5.0 also has $EPOCHREALTIME
> deeply unsettling

Care to elaborate? What about the logo makes you feel this way?
Concrete in the South East of England
This was posted yesterday. "Can mRNA Vaccines Defeat Herpes?" https://www.precisionvaccinations.com/can-mrna-vaccines-defe... HN discussion https://news.ycombinator.com/item?id=29301727 (165 points | 1 day ago | 188 comments)
Other than being illegal, there is not a whole lot wrong with it, relatively speaking. Let's disregard cigarettes and alcohol, those are too easy. Look at food, the majority of my country is eating themselves to their early deaths, and experience all manner of outcomes worse - diabetes, cancers, immobility, sudden heart attacks.

I'm not saying it doesn't have some risks, but I am saying with all other things considered, these are the same risks associated with running, sex, and spirited debates.

Consider this: It's normal for people to do this thing where they feign not being able to function without coffee in the AM but it is somehow not socially acceptable to have a bit of cocaine on some weekends. Let us consider that it's a dual standard for what is essentially the same thing, enhanced attentiveness, a brief euphoria, better focus, and an urge to poop.

If all addictions are equal, isn't the person who can't function without coffee or cigarette the same as people who can't go without a line? So you might ask "I've never seen someone steal to buy coffee, but I've seen people steal to buy coke, why is that?"

My estimate is that it is because one is normalized and one isn't, you simply have a subset of people who are self admittedly okay with breaking 'the law' by doing coke, so naturally they might normalize theft as well since it is a hobby that is so highly penalized only those with the shakiest hold on reality/morality is likely to do it. That distorts the image of it, and we then begin to develop this social stigma.

Ergo, legalize it, you won't have more of this any more than you have coffee-heads who happen to also be thieves.
The implication being that lockwise is discontinued because its use case has been subsumed by Firefox?

If so, that's a thankful addendum to this announcement.

Edit: yep, in settings, logins and passwords, there are two toggles, one to allow Firefox to fill in passwords for web pages, and one to allow Firefox to fill in passwords for other sites, which takes you to the Android password manager selection section.
New York Times’ Wirecutter Writers Plan Strike Around Black Friday
Well, TAing? and making very little money… :)
Could you share the repository link? You may receive useful feedback from people looking at it.
The charts offer an age breakdown. Click the "Change age group" button.
Tangentially related, I always find these stores amusing:

https://www.google.com/maps/@51.5521128,0.0516247,3a,75y,157...

For those who don't want to click on the link: There is a store called "99p Plus Extra", and 3 doors down is another one called "98p Plus Extra".

It would be interesting to know whether they both started as pound stores.
Current MSFT employee... I can say that PMs often wield a lot of power over decision making than most people in the org, esp the customer-facing decisions. And while it may not have been the PM in the lowest-rung of the chain, the parent comment perfectly applies to program managers in general, often in the middle management or higher up, both of which are often disconnected with real world, in spite of their claims to otherwise.
PMs at Microsoft have enormous veto power, they cite data (or lack thereof! ;-)), direct customer interaction, conducted user studies, etc. which the dev team is usually lacking in. Of course this is only an anecdotal observation over the last 2 decades or so.
Increase in $$$s in revenues is one of the best ways to get promoted, recognized and rewarded at Msft (and not only at MSFT, I suspect that's the case at most publicly traded companies, who only care to drive up the the bottom-line, no matter the means to achieve it, as long as it is (mostly) legal).
Could use a high-speed hydrofoil too. Helicopters aren't the safest mode of transportation, and are horrible in bad weather that a boat would brush off with ease. Plus if we're sending 100 people on a flight, that's quite a few large helicopters plus landing facilities.
Maximum death rate for all age groups with Moderna, which at least according to these plots provides the lowest death rate, is at 0.8/100_000 in August 2021 for all age groups.
Maximum death rate for the unvaccinated of age 12-17 is at 0.17/100_000, for age 18-29 it is 0.76/100_000, also in August 2021.

So even unvaccinated younger people (age < 30) are better off than the average vaccinated Joe. The thing is, so far I have pretty much never heard of this in my countries media, at least to me it sounds like "vaccinate absolutely everyone or we are all doomed", which according to this data is not the case.
The problem is that this approach requires that Apple expend enough resources for their security to be perfect all the time. Outfits like NSO Group need only be lucky once (well, with some consistency, as Apple finds and fixes the vulnerabilities they use).

It's a cat-and-mouse game where Apple has a distinct disadvantage, one that's likely impossible to fully overcome.

They certainly should (continue to) spend a bunch of money to make their OS and hardware as secure as possible. But at a point returns start to diminish, and perfection just isn't an attainable goal.
Dear HN, should I, a man under 40 get a booster shot? How many months after my second dose should I get it?

What are the best resources to answer this question? This information is scary hard to get for someone who wants science, not politics.
I really like that Rocket Investments group that just copies existing products and launches them in into LATAM/Emerging markets. I think this is a German group - does anyone have any info on them?
~12,000 patients in the ICU is "the brink of collapse"?

https://ourworldindata.org/grapher/current-covid-patients-ic...
You can dig down and view stats by age group as well.
I ask because a lot of the early DOS games generated sound via a sound card, and most of those used FM synthesis at the time. And so if really want to recreate the original sound then FM synthesis should be used.
The Delta variant is so contagious that there will be no significant herd immunity effect to protect those who lack immunity.

https://www.businessinsider.com/delta-variant-made-herd-immu...

There has never been enough hospital overrun to significantly impact death rates. In other words, the number of people who died who would have survived if more hospital care was available is extremely small relative to the total death toll.
> Either way, lots of stuff to move.

Have you heard about SpinLaunch? SpinLaunch really came out of left field for me as a serious contender.

Really curious how they plan to re-balance a multi-ton spinning mass when half the mass gets ejected at 10,000 RPM.

That sounds nuts but the scale test went OK, so I guess they have a handle on that?

https://en.wikipedia.org/wiki/SpinLaunch
Because it's completely untestable and short of someone "admitting" it we will never know for sure.

So whether you believe it or not depends entirely on you're prejudices. I'm prejudiced not to but others may feed differently.

And it makes absolutely no difference at all. You still need a vaccine, you still need lockdowns and quarantines and to manage your healthcare. And we should all be taking action on China whether it's incompetence (around food hygiene) or incompetence (around bio hazard management).

This is why I hate the whole Lab Leak thing. It's people "straining out a knat and swallowing a camel". It's a distraction and it unnecessarily complicates messaging and discussion that can be pretty vital.
>"It has nothing to do with taking an anti China stance, as this has happened elsewhere."

This is a classic collective action problem, not some nationalistic thing (though some will believe or pretend it is). Each specific lab wants relatively lax rules and no consequences for failures, but everyone else needs higher standards.
Uh, that could be a possible bias on your side ;)

It's not about antivaxers (honestly - personally, I haven't even thought about those folks first), it's about vaccine efficiency. Something I am - as someone who was eagerly vaccinated - is curious about. Surely it's always good to know what are my risks those days.
> I'm not surprised about the story given who's in that round.

Care to elaborate?
Business institutions are hiring kids who majored in business and don't look like hippies.
Another factor is that if the vaccination rate is very high, this also results in fewer deaths in the unvaccinated group, since it reduces the R factor.