skysight-inc/HackerNews huggingface dataset:
I think the general mindset is, if something can be used for exploitation, then for the sake of safety we should block it entirely.

Of course the mainstream stuffs are tolerated but anything outside of that would need a long list of approvals.
Overthrowing a vote which was manipulated is not a coup. What Trump did is he challenged the rightfulness of the vote for months in court. That's a far cry from what you're describing.

Now, you may disagree (as the courts) that it was manipulated. Being wrong does not make what he did a coup.
You know we could have. We could have sacrificed a whole lot of our values to capitulate to people who think Facebook posts counter decades of research, we could have capitulated to one of their several abhorrent values like xenophobia so that they might finally go along with something that’s good for themselves and the country.

Frankly I’m not interested in that sort of capitulation anymore. I’m not even interested in the phrasing of the argument. The unvaxxed masses need to figure out how to capitulate to us. They need to step back and model our minds to figure out how to frame their views in an acceptable manner.

Otherwise they can continue to lose their jobs, get kicked off internet platforms, and keep filling hospital beds gasping for the vaccine after it’s far too late to help them.

Fuck em
Well, a reply (from cudgy) to my comment says this:

> The vaccine does not prevent spread of Covid. Period. The smallest amount of research proves this to be the case.

So what is the truth?
Yes. Mobile wireless is intrinsically bad due to random round trip times and packet loss. But we shouldn't make the rest of the internet walk with crutches just because mobile clients need them.
Quotes about how nobody knows what they’re doing
https://sneak.berlin/20210425/signal-is-wrecking-your-images...

It's done clientside, and you can't remove it (on iOS) because only official Signal-published builds will receive push notifications of new messages from Signal servers (via APNS).

This doesn't apply to a sender of an exploit, but does apply to normal people who wish to send full res images or patch out the DRM in the Signal app.
The popularity of the Raspberry Pi and Arduino makes me wonder why there wasn't more exploitation of the I/O capabilities of the simple PCs of the early days. I suppose there must have been some I/O breakout devices, but they were very niche. I guess it was a combination of cost (too expensive to dedicate a pc to a single task), and lack of cheap but useful electronics to connect to (though relays and switches could do many useful things).
It'll stop investing on it the very moment they cease to perceive it as an existential threat. That's more or less what Google does.
Fabulous.. i had been toying with PoC-ing exactly this ("there is a pkgbuild for most of the random small projects i use, can't i just use that? I like my Debian/Ubuntu/Pop base system, but I hate checking for a new GitHub release all the time/using an appimage/flatpak/etc bundle/manually pulling and building master/etc")
rolling your own auth is underrated.
In 1995, Standard ML, Ada and Eiffel had generics and were hardly mainstream, C++ templates were still experimental, everything else did not used them.

A tad different from the computing world in 2009.
I had captable access at my last company. There was so much dilution (mainly due to a couple of nasty down rounds), after 5 years, even the founder's shares were barely worth anything. Investors owned 90% of the company, founder 8%, employee's maybe 2%.
OMG, did you just invent Agent Smart's Shoe Phone? https://en.wikipedia.org/wiki/Shoe_phone
The Wellcome Trust, HHMI, Allen Institutes (there are several aside from Allen AI), Gates Foundation, and CZI/Chan Zuckerberg Biohub are all important prior efforts in this space that each made significant innovations in funding and evaluation of scientific output. At minimum, Wellcome and HHMI have "made it" in the sense that they built large parts of the public/private organizational infrastructure that most scientists rely on; their legacy is integral to modern science. The promise of Fast Grants/Arc Institute is technology to speed up the funding cycle itself, as well as experimental iteration time, which is fantastic.

I think a big question is how to tap into geographical areas with less opportunity. Headquartering a new institute in Palo Alto makes sense to tap into existing world class researcher and funder networks, but talent needed to run research labs is overutilized in the Bay Area and will be hard to hire staff. Putting aside the logistics of operating outside the US, there are lots of places like Atlanta, New Jersey, Baltimore, Chicago etc. whose talent pools are relatively less utilized. I hope someone is thinking about placing satellite hubs in those areas.
You probably meant you were given a loan to buy a house.
Sounds like even worse deal for the customer since there is no refund
If you mean this:

> the wrong one and the right one.

The context comes right before it:

> if you were wrong (and you will be wrong), you can always undo the damage later by backtracking

Ie: do a (small) wrong, then do a (small) right to fix it. That's my reading of it anyway.
I haven't used FreeBSD for almost 10 years now but it was my first non-Linux OS back in early 2000s and the primary OS we used at my first IT job.

The FreeBSD handbook is something you actually had bookmarked, I checked the handbook before I searched the web.

There is no Linux distro today with a handbook like the FreeBSD handbook, in terms of how I used it at least.

Same goes for OpenBSD.
And with the proliferation of battery technology, eventually the solar owners (and increasing numbers of them) may just disconnect from the grid and then the numbers really won't work.

My off the cuff solution here is that energy providers/plants/etc. need to invest in storage capacity, or eventually the economic incentives will win out and people just won't buy energy from them in states where solar + battery works.

If you are a net producer of energy, the only calculus that makes sense (unless you want to pay for access to the grid as a form of insurance) is that you get money for providing energy back to the grid. Otherwise you just disconnect and figure it out afterward.

With renewals, decentralization of energy production, and battery proliferation we're going to see some interesting market dynamics play out here soon. We probably need a general energy market accessible to producers as small as a single person all the way up to a nuclear plant. Perhaps you should be able to log in to an energy market like you do your brokerage and buy or sell energy.
> I have a lot of friends who went into various fields, and it seems relative to the number of buttons we press daily, anyone who works on software makes great money.

I don't know about that. Software scales almost infinitely. Impossible to double the number of billable hours or patient load of a cardiologist outside of an herculean effort, but software folks can easily 10x the number of people they bring value to in a short amount of time.

> We didn't spend a ton of $ to go to medical school and 3 years of residency. We didn't go to law school and take the bar. Most of us went to 4 years, or less, of school, and here we are making great money by utilizing the greatest tool of all time: the computer.

Honestly, medical school isn't really the correct example to use because it's not efficient at all.

The big reason medical schooling is so hard is because they have to get a completely unrelated undergrad before even thinking about applying to med school. That means racking up serious debts before even knowing if you are going to get admitted. You can imagine how that fosters a culture of diversity and inclusion and help poor, often non-white, applicants reach medicine when the first step is to get into 6 figures debts with absolutely no guaranteed income.

Other countries with similar health outcomes for their population simply admit freshmen into med school right away.

Residency is something else. It's overworked since the total number of residents is capped by the AMA (also you have to fly-in to your residency interviews on your dime, so much for underrepresented applicants!) and honestly there's a lot of cargo culting. 48 hours shifts with no sleep because it's believed that it's impossible to correctly handover patients from one medical professional to the other (hint, this is a solved problem in a lot of high stress cognitive disciplines outside of healthcare). It's a culture of always working harder instead of working smarter, and the people take pride in that strangely enough.

All it really does is create a moat and allow AMA members to charge more because they made themselves scarce.

> Meanwhile, our friends who are teachers, firefighters, child-care workers, etc. are doing tough work daily for less pay, perhaps simply because they didn't use computers much or didn't like them. And yet, their jobs are ESSENTIAL and we need people to do them even though they're grueling and underpaid.

Firefighters tend to have nice pension funds in a lot of cities.

Teacher's pay is incredibly interesting. Engineers are paid on results (this is even more true at serious tech companies where a significant portion of ones earning will be stock comp) while teachers are paid a government approved rate no matter the results.

I know a lot of parents that would pay serious money to teachers based on results (if their kid can get into Stanford/MIT for instance) if said teachers could show a track record of having previously mentored alumni for instance. Instead, the premium is now captured by real-estate since parents that care will pay extra to get into a good school district.
Unfortunately what has worked best in practice for me is:

1) Curate your resume and experience for years so that people will take your opinion very seriously (whether you deserve it or not)

2) When you know something is going to fail, call it out in advance with stakeholders and do whatever you can to pump the breaks and/or change course. If you have a lot of respect, you can use this to force an uncomfortable decision that someone without much respect might not have been able to push through.

3) Be VERY insistent in pushing your proposed mitigations when you know something is going to fail and know what will fix it. If you're sure, stake your career on it.

4) When people don't listen, and things fail because they didn't listen, in yearly review / feedback type things say "if only I had pushed harder for X, then Y might have been prevented" which is a nice way of saying "should have listened to me". Eventually everyone will just listen to you in the first place.

5) If you see the writing on the wall and no one is listening to you, exit while conditions are still favorable (I never actually do this, but I probably should).

6) When you are wrong, take responsibility, but only for the parts that are actually your fault. In reality the surface area of any one person's portion of blame in most situations is quite small anyway. Most decisions in orgs can be traced back to at least 4 people.

7) Make accurate predictions of failure if we don't take X course. When these come to fruition, you called it, when they don't, you still come off as very prepared for anything.
{Insert HN comment guideline about avoiding simplistic dismissals here}.

> "Works for a prime-age healthy male of course. The data point is limited."

Not "of course"; it's typically said or implied that even prime-age healthy males would have to work like abused pack horses and still barely survive. A limited data point it is, but there is another - his same scheme includes elderly women building their own homes, and young schoolchildren building their own school. Turning mud into bricks and bricks into a single story one or two room building, working together with no deadlines, doesn't need the labours of Hercules. The datapoint is not just "it's possible to be a subsistence farmer" which we did know, but "we always talk of subsistence farming as gruelling long hard work which leads to things like Russian peasants eating cabbage soup then starving to death in winter; here is a real live example of a community subsistence farming and surviving with at least an order of magnitude less work than commonly assumed, maybe more".

> "That TED pundit could always simply take a plane back to civilization of the crop failed, if he got sick, if he got bored."

He couldn't, he doesn't have the money or any marketable skills, he never did become a wealthy employee who choose to give it up for a rural life; from that page I linked "I worked hard but had no savings, just enough to make me survive day by day. I was disappointed with my life in the city. I couldn’t compete with anyone. I felt I had failed".

> "If he'd hit his toe with a hoe while doing that bucolic farming, where would he go? Infection, blood poisoning, fever, amputation or death could result."

Interesting that you've gone from "he could fly back to the city any time he wanted" as a dismissal to "he'd have nowhere to go if he needed city resources" as a dismissal in such a short time. But yes, no doubt those things could happen, he does say "learned to do many kinds of self-healing" and no doubt that does not include making antibiotics, anaesthesia, surgeons, dental fillings or living to 95 on a cocktail of statins and beta blockers and blood pressure pills and anticoagulants and antidepressents and metformin and all the rest.

The big question is not "how romantic is it" but whether "I do not feel bad about myself anymore", "When I started to do more things by myself, I have more confidence and less fear", "now I enjoy spending my life with my family and friends and plants" are worth the price compared to having readily available opticians and doctors while feeling like an isolated unhappy failure endlessly losing a forever-competition in city jobs while building no community.
> has google ever had a breach?

They've been completely breached by Chinese agencies in the past, and IIRC the revelations in the Snowden leaks prompted them to redo their entire internal networking layout because of concerns about state-level spying.

On the Android front they keep tightening up access (removing more power from root, more use of SELinux and other controls) because of breaches in one form or another.
Professors at top universities waste the majority of their time writing grant proposals.
Looking forward to seeing the PDF that implements FizzBuzz in the NSO JBIG2 instruction set.
14. Most software “engineering” jobs are dominated by activities other than writing software, and the limited time spent actually writing software is dominated by routine coding tasks that can only be loosely termed “engineering”.
In light of this, how would you propose a developer or a would-be developer to really understand software security? I have the feeling that unless one is well versed in sys-prog concepts it's kinda just a checklist factory. I know I need to do A, B and C but I don't know in depth why.
If you are going down the embedded / IoT route. Get yourself an esp32 while you are at it and a bunch of different sensors.
> barely thicker than an inch and weighing in at less than five pounds

I haven’t bothered with a laptop that bulky in over 10 years.
I think this is the one you're talking about? https://search.marginalia.nu/
I don't know what their threat model is but it's interesting that they don't seem too bothered about reducing meta data collection potential on the server. I bet you could put together some pretty interesting graphs of who is talking to who, how much they talk and when.
"to fit a zero ohm resistor (0201 size 0.6mm x 0.3mm)"

I know what they mean here, but I had to re-read "zero ohm resistor" a few times.
> At this rate, Google search may be first to be disrupted before Facebook. Apple has its cracks but still far too minor.

After a few years of using DDG which is equally bad as Google but has less and less annoying ads I tried out Kagi last week.

The difference is so big I don't care to verify with neither DDG nor Google: I know based on long experience how bad their results are.

Kagi has so far been a breath of fresh air, a taste of how search used to work when Google actually found the things I asked for, not the thing an insanely annoying AI think I want.
Nah that’s what tools like IDAPro and Ghidra are for. You don’t need source although it does help.

That said, the particular component this targets is open source. It’s the JBIG2 decoder that is part of XPDF.
none of that is reasonable. use real hardware prices not the manufacturer prices.
I'm almost sure they picked it because that region has a lot institutional power around CRISPR. And when you look at the people they hired, you'll find nearly everyone has dabbled with it.

I expect a lot of the funding and research to be directed in those areas.
The NSO are as much Google's enemy as Apple's.
The issue in this case is the 'spyware' nature of the app, rather than any matter of taste.
> The way to think about it, do you have knowledge which isn't in the public domain which would give you an unfair trading advantage.

Matt Levine does a good job of explaining why that’s not the way to think about it: https://www.bloomberg.com/opinion/articles/2015-04-01/anothe...

As he’s stated many times, it’s about theft, not fairness. (Of course, there may be an argument that these examples are theft or a breach of trust or confidence.)
Just look at the first Android concepts.
Germans pay at most $750/month (incl. employer contributions), and that's practically for the upper middle class (4500+/mo).

The healthcare tax is capped at that, you can't pay any more.

Correct me if I'm wrong.

Not that it matters, their healthcare is garbage.

Emergency services and surgery, sure, great. For that one time in your 80 years that you need it.

Anything non vital? Weeks and months of waiting time.

Mental healthcare? Non existent.

Want the latest medicine? Fuck off to the US.

Homeopathy? Paid for by insurance.

You're part of the "Untermensch"? Pay and shut up or fuck off back where you came from, you dirty monkey.
"Full mesh: Each call participant sends its media (audio and video) directly to each other call participant. This works for very small calls, but does not scale to many participants. Most people just don't have an Internet connection fast enough to send 40 copies of their video at the same time.

Server mixing: Each call participant sends its media to a server. The server "mixes" the media together and sends it to each participant. This works with many participants, but is not compatible with end-to-end encryption because it requires that the server be able to view and alter the media.

Selective Forwarding: Each participant sends its media to a server. The server "forwards" the media to other participants without viewing or altering it. This works with many participants, and is compatible with end-to-end-encryption."

Imagine an end user who is interested in "very small calls" with friends and family. She is not interested in communicating to an infinitely large audience ("broadcasting"). She never has group calls on Signal with 40 people, even ones with Grandmother and full extended family are well under 40 people. We have to use our imagination because this user does not actually exist.

The imaginary user reads this blog post and she thinks to herself "Full mesh sounds like the best design. There is less/no reliance on a third party, traffic does not need to be sent to an additional third party server." With full mesh, there is no need to mention the caveat "without viewing or altering it", or selectively choosing not to forward it to certain recipients. Full mesh seems to give the user the most control and require the least dependence on third party servers (not necessarily "no dependence", but the least dependance).

Then she reads this line: "Because Signal must have end-to-end encryption and scale to many participants, we use selective forwarding."
Looks like about 4-5 years.

Like most US community colleges, it was already extremely cheap, ~$2,500/year for a full time student, but this can still be a barrier for some people.

https://www.cnbc.com/2017/02/08/san-francisco-to-be-the-firs...
Nano v6
If you don't believe the news, and you don't believe the statistics, and you don't believe the anecdotes, then what would you believe? Do you have any first hand experience of the city at all? I'm not some shill. I have no agenda. I tried to live in SF, and left because things that don't occur in poor countries are an every day occurrence on the street there. Everyone I knew was affected and everyone had their own stories. But more than any other place, San Franciscans can deny reality and blame it all on Reagan, the weather, the red states, anything but themselves better than anyone.
To be clear, he was married to a KGB agent. So if you really think he had to be a state actor then the only state that makes sense is the Soviet Union.
It's unlikely. RAII comes with a surprising amount of complexity. In order to have a reasonably complete language that has RAII and value types, you must also have:

- constructors

- destructors

- overloadable copy assignment operators

- placement new

- move semantics and rvalue references

These features come together or not at all. If you lose any of them, the language becomes less complete. I think Rust and C++ are doing a fine job of exploring the design space of languages that have this feature set, but it's too much complexity for Zig.

Edit: As commenters have pointed out, this exact manifestation of these features is not required. A more correct set of requirements is:

- a notion of beginning and ending object lifetimes in existing memory

- a notion of move semantics to relocate an existing RAII object

- a notion of non-copyability for certain types, or an ability to override copy behavior
No its not a hypothetical. The measurements are there. Something unexpected is happening and nobody knows for certain what.

The problem is someone picked the misleading name "Dark Matter" and then pop science, and actual scientists talking to laymen did the massive disservice of wording the explanation in such a way as to make it sound like there is a real theory that proposes there is some matter that interacts with gravity yet is invisible and undetectable in literally every other way called dark matter.

I only learned the distinction in college when another student pointed out that dark matter as described was unscientific because it was an unfalsifiable, not to mention generally useless anyways. That led to patient explanation that it wasn't a hypothesis or theory and it was just what they called the observations. Would have been nice if anyone had bothered to start with that.

There are a lot of hypothesis about what it really is. Neutrinos, WIMPS, SIMPS (heh), MOND etc etc.

Personally I lean towards the got gravity wrong bit although not any specific explanation. I'm not a physicist but history and logic would suggest that while relativity is a pretty good explanation its far from complete. And I see no reason why forces necessarily have to work the same on the small scale and grand.
Now that insurance companies are aware of all those infamous exploitation stories that make headlines...

Well, maybe more checklists and consultants.
We (Netflix) begged them for years to create a Chaos Monkey that we could pay for. There were things we just couldn't do ourselves, like simulate a power pull or just drop all network packets on the bare metal. I guess not enough people asked.
I think you get credit for having a bank of actual zero days, self-discovered or not

Trying to trivialize the threat they pose only helps NSO

Plus, "willing to sell to nations with bad human rights records" should be on that list