skysight-inc/HackerNews huggingface dataset:
Far from the most qualified to answer this but it's probably a mixture of market demand, the targets, mindshare and QA.

Higher value targets tend to use iOS more often so their adversaries have more interest in attacking it, and the targets are people who are more likely to come forward if they suspect being attacked.
And given we've heard more of iOS attacks, people likely to be targeted are more on the look out for them, as a bit of a self fulfilling prophecy.

Android is considered a bit of a harder target for these types of exploits (playstore malware doesn't count here), though at this level it's not the most meaningful distinction. Fragmentation does make it harder to use these sorts of things in the android world, as it's a bit harder to do QA against all the possible target devices and probably requires knowing exact model numbers to confirm support before being able to launch an attack. The exploits do definitely exist however, at least for flagship phones.

Another thing to consider is that maybe people have better payloads on android, as you can't quite get away with running "Payload2" on the device from a temp directory when process viewers are available. I'm somewhat unsure that'd actually be a meaningful reason for lack of discovery though, especially when the discovery is mostly done by journalists forwarding suspicious links to citizenlab.
Why does that sound bad?
They claim to make 20-40% APY risk free. Just LMAO right now.
There is no such thing as 20-40% APY risk free, if you think you can get such returns risk free you must be a total fool.

I am unsure how they are doing it but I presume they are using a technique similar to the "Arbitrage in Dual Classes" for stocks. Basically you bet that the price of the class A and the class B of a stock will eventually merge to the same or a very similar price. In this case I think they do this with the BTC spot and future price.

This technique worked well for stocks until 2008 when they all got REKT in the Volkswagen Class A stock short squeeze and lost everything. One guy went from billionaire to broke within one day and jumped in front of a train...
I have the sad feeling this is going to happen again.

As a bonus, Celsius also claims to do Rehypothecation, the thing that caused the subprime crisis.

Have fun "unbanking" yourselves.
I've noticed on several occasions that text written by Mac users and published online would replace the Swedish letters ä and ö with a¨ and o¨. I think it's due to some combination of how they do Unicode normalization and how Firefox on Windows renders the text. I haven't seen it for at least a year, so I'm guessing it's resolved now.
But regardless, the wages still keep slipping against inflation.
Buzzfeed News is not Buzzfeed.
This. The W symbol for Write isn't actually shown, and I have a feeling (not sure) that sometimes symbol S appears instead of r, not sure what that is.
I always thought of Python as being a massive language. If it was simple, it should be easy to compile and optimize.

I mean, I would feel like an idiot when someone would point out a feature that makes Python code faster. Python classes are quite massive and complicated (with a bunch of tweaks one can do through attributes).
How to Compute the Betweenness Centrality Against Nebula Graph
Betweenness Centrality (BC for short) reflects the significance of vertices in the entire network. This article will introduce how to compute Betweenness Centrality against Nebula Graph.
Ditto for me except swap RoR for PHP monoliths. Gone are the days where my only cognitive overhead was deciding between Less or Sass and CodeIgniter or “the fancy new” Laravel. Likewise I got fed up of where dev was going in the workplace, and moved into a Solution Architecture / Product Manager role. I still get a lot of satisfaction creating side projects in the tools of old (which IMHO work much nicer than 95% of “modern” applications), but thinking about doing development in my day job would give me a headache from the outset.
I’d like to say no, but I’m not sure it’s an unreasonable request.

I’ve recently been contracting and the only private account I used was GitHub, and that was a conscious decision to maintain a single public developer identity.

Otherwise, I expected them to provide all hardware and software required to perform my role.

And likewise, for security purposes, that’s exactly what they wanted as well.

Tho I would note, they wanted to perform a background check prior to starting. And while i didn’t have a problem with the employer having those details (for the period of the contract) they performed this function through a 3rd party, who has stated they won’t delete my data (I will be following up post-contract). I was not happy for a 3rd party to have this data.

I would also not login to or install any apps, or certificates on my phone. Again, if that’s required, send me a phone.

The company I was working for had SOC2 / ISO2700 / what ever and I think this is exactly why they wanted all this. But it suited me to seperate things as well.
> The model had learned through historical hiring data that men were more likely to be hired, and therefore rated male resumes higher than female resumes.

A lot of machine learning sounds like the computers are just cargo-culting. But this concrete example is spectacularly so.
https://en.wikipedia.org/wiki/Approval_voting#Effect_on_elec...
Google faces fines that doubles every week with almost no limit in Russia
Ideally you'd have a competent team lead that can evaluate whether people are bored out or overloaded with tasks and if their output quality matches expectations.

JIRA, Trello or other tools are (usually) not used for the team's benefit, but as "actionable items" or whatever for clueless upper management.
Censored words are much more likely to be ambiguous. I wasn't referring to that specific example but now you mention it, p_n_s does take a fraction longer to understand than penis.

And no-one is talking about taking away people's freedom. You can write all your emails in all caps if you want, but we can discourage people from doing that.
Do these activate -funsafe-math on the underlying C compiler? Because if so that's not a fair comparison, since this breaks a lot of code.
If you'd read through to section 3.1 you'll see that they detail the iOS and Android bootstrap mechanisms. The title doesn't specifically identify which OS was infiltrated though in this case it was iOS.

I'm guessing the reason why iOS exploits receive more face-time is:
1. Apple has advertised their phones as being at the forefront of security, which holds some merit.
2. iPhones have become commonplace among government employess (possibly as a result of point 1). Political exploits are inevitably more in the public eye if it's the tool of most politicians.

It's the same concept as the early days of Microsoft being the powerhouse of consumer operating systems- everyone was using it making it the most lucrative to exploit.
Diskcache has the amazing benefit of transparent sharding, so you can use it in multithreading and multiprocessing programs.
You say this like it's all due to misinformation. There are many VAERS and other self-reports in other countries, many studies and countless doctors also coming out against this. Overall I think vaccines have higher pros/cons (I'm vaccinated) but it's by no means cut and dry.
One of the best sayings I've heard is that you don't charge for the time it takes you to do something, you charge for all the time it took you to learn how to do it.

University isn't free, time spent learning as a junior (probably at another company) isn't free, and programming isn't something anyone can do well. The only real measure should be the result.
No one said there wasn't a camera recording of a gun.
Remember hearing the sound of the physical disk spinning, whirring and clunking? It felt like an actual machine.
Are metaverse gonna replace lack of owning a house (and travel) soon? /s
If you're going into production with Nim code and execution speed is a top concern, you're probably going to remove all the safety belts after thoroughly testing, valgrind'ing, etc., i.e. you're probably going to opt for -d:danger instead of -d:release. But maybe not, depends on the project I guess.
One cause of the problems is that the servers are handling multiple ruby deamons amongst which some Rails apps.

I know things get simpler when you keep "one app/thread - one server". But price-wise that doesn't make sense, especially since many common Rails apps hardly run on a the cheapest VPS (a throttled dual-core 500MB server). If you run ten tiny services, ten servers add up quickly.

I also host some larger apps on their own server, some loadbalanced over multiple servers.

But throwing 10+ ruby services on a VPS is hard. Especially if you don't want to, or cannot constrain their ruby-versions, app-server, etc.

It is hard for the exact same reason why setting up a local env may be hard. I recently had to help a co-worker on an old MacOS machine who broke her entire mac-desktop because she installed RVM because somehow that was in the tutorial for getting the app locally.

Anything with a runtime is harder than anything without that runtime. This is too obvious, but does warrant some highlighting.
Ruby's runtime is one of the hardest of all runtimes because it comes with so many moving parts. Python is a close second, and on Ubuntu (my main driver) probably worse than Ruby, because fing up Node is fine, but fing up Python can render your machine unusable, unrecoverable so without good understanding of all python things.
The content is definitely from DragonBall.

Technically speaking, though, the meme could have emerged in any community with a knowledge of anime, since DragonBall knowledge is basically assumed in those circles. So it might be that Naruto fans brought DB into a discussion about bad translations.

The reality is that, in most cases, nobody can really know for sure where a meme generated from - we can only witness the first usage in communities we observe.
Backwards compatibility is pure gold and is worth more than any new trend...
> Trim is not supposed to help with ZFS compression, it occurs at a layer below what the FS sees

The problem that was described was reclaiming space from a VM. I took the comment about compression ratios to be a measurement of the entire VM disk image, because otherwise if you just want a big meaningless ratio then dump a petabyte of zeroes into a new file.

A VM that isn't set up to TRIM will leave junk data all over its disk image, bloating it by a lot. If the guest OS understands how to TRIM, and the VM software properly interprets those TRIM commands, then it can automatically truncate or zero sections of the disk image. If either of those doesn't understand TRIM, then you need to fill the virtual disk with zeroes to get the same benefit. (And possibly run an extra compaction command after.)

This is at a completely different layer from what you elaborated on, because it's a virtual drive. It's good to have virtual drive TRIM even if you're storing the disk image on an HDD! It's a different but analogous use case to real physical drive TRIM.
For example, it lets you live in a less expensive city and work remotely wherever you want.

Also it allows you to learn and raise your earning potential.

Finally modern transportation options less expensive than cars like e-bikes and e-scooters allow you to commute easier.
Lol, I remember reading a story about how you quit everything to run macrumors. Why were you on uptodate way back then? (I'm also a daily reader of macrumors!).
> why should I care about Nim?

it depends a lot on where you are coming from. If you are a Python developer/user (without any other information it is possibly the most likely case nowadays), you might find it solves a lot of current Python pain points (speed, portability, lack of typing, package system) and it has some added bonuses (great macro system, compiles to JS, works great for embedded).

If you are not a Python developer/user but you are somehow interested in new languages like Rust, Julia or Zig (you might be both), you might want to hear a different take on how Nim is also able to solve some of the problems they solve (a better C++, a better Python/R/Matlab for scientific computing, a better C - not that those languages reduce to those aspects...).

I think that what is happening now with Rust, Julia and Zig is great and I am happy that many people are looking at those languages and growing their ecosystem and their communities. Part of the drive of people there is to be able to make a significant improvement in the evolution of those languages (harder to do that in C, C++, Java, Python, C#, Swift, ...). I just happen to particularly like Nim and love being involved in it so far.

A recent article that explains the philosophy of Nim is the Zen of Nim by Araq (Nim's BDFL) [0]. Nim has some universal vision in the sense that it can be really used for everything (from kernel programming to web development, from scientific computing to game development, from embedded to devoping compilers and interpreters, from short throwaway scripts to critical infrastructure). Not necessarily it is for _everyone_. Taste of people varies a lot and that is a good thing.

[0]: https://nim-lang.org/blog/2021/11/15/zen-of-nim.html
I do understand that. And it is one of the reason I do not support them. I am an individual, I support individualism not Majoritarianism

Direct democracy normally end badly because simple Majoritarianism is bad

This is way in most democratic nations the will of the majority is balanced by other means or controls.
Norway includes housing. Says so right on the page from Statistics Norway that says how CPI is calculated.
You read the openers for sophisticated small talk and more or less funny banter at the club?
I remember the first time Norton Disk Doctor "repaired" a bad disk. Looked like magic to me.
I can never do tedious work quickly. As soon as I notice work that should be automated, I start cursing at the developer of the tool I am using for not offering an easy interface for me to plug into and just automate it, instead of having to rewrite the whole thing from scratch if I want to have it automated (and that's usually too time consuming, so I don't do it). So I'd be constantly unhappy doing it, which is a recipe for avoiding it, ergo being slow at it.

That's why I am a huge fan of free software (and I've spent years on it too).
It might be argued that this was the preferred outcome as a healthcare collapse would be worse. Of course they are connected but I'm afraid that it's impossible to debate it without getting political and the priests are eager to call heresy when you go against their dogma.
What did the first cell phone cost? The first laptop? Every new piece of technology goes through a cycle where things are wildly inefficient and barely operable, but over time they're refined in a loop of iteration and improvement.

Vacuum tubes gave way to the silicon transistor, which immediately moved the idea of "personal computing" from a complete impossibility to something that was a pipedream that was technically possible to do. From there things like the Apple II made paths to make personal computing actually usable and affordable. The iteration cycle continues, drives demand for new things to do, which drives demand for the internet. Eventually we arrive at the iPhone where I can now have a low-latency, high definition, video call for (basically) free with anyone in the world. Try explaining that vision to someone in the 90's who has a pager, pays for long distance, and buys stamps and they'll tell you it's impossible or a pipedream.

The crypto/web3 industry is just finding its feet with some new tools in the proverbial toolbox (distributed consensus and smart contracts). There's a lot of people building on it and iterating every day, but in the same way that the IETF were unsung heros of bringing everyone Youtube, there are a lot of folks hard at work at making things usable and practical for mass adoption. Mass adoption just comes last.
Walking also increases blood flow to the brain and is amazing for problem solving (in case you don’t have access to a shower while at work).
AWS Batch, preferably on Fargate.
Me too.

Now, what were we talking about?
Good Habits for Kids
HN is also becoming memefied:

Electron is bad

Nuclear energy is good

Pharma makers of opioids are bad and should be fined out of existence

Drugs are good and should be legalized and available in pharma-grade purity and consistency
Yeah, the Internet, computer and smartphone, so you can get addicted and drown in fear and anxiety. Safer cars because you smash yours on the regular. Gas was cheaper. Bigger houses (using worse materials) to store more useless shit. Also they all cost more because of size.
I work frim home ... pandemic and all that. What else am I supposed to do?
> We will fail as we have failed so many times in the past but still we must try.

This is a thing the unions would have exterminated in the past. Problem is, most developers are not in a union.

There is still the choice to "just say no".
This is a great response throwing light on the actual new protocol which does seem to make sense.
I'm not trying to say it's binary. That you're either NASA or your quality doesn't matter. NASA is only the furthest on one end of the scale that I could think of.
There is a scale and you have to know where you are. There is always a trade off between the amount of work you can get done and the amount of QA process you have in place. With infinite resources it wouldn't matter but us programmers are expensive.
I had a similar issues this year - a client's admin wanted me to hand over my device for him to setup vpn access.

My response was that I'm contractually forbidden to allow that since on my device there's data GDPR-relevant and otherwise of other customers.

You can also make up a company-policy (even if you're a single person) and communicate it that way. "There's a strict company policy preventing me/us from installing this kind of software."

Apart from that, this violates the no-asshole-rule.
the only thing amazon sells is garbage. literally everything that amazon is selling is going to end up in a landfill in a fewdays/weeks/months maybe a couple years at most. stop making garbage. stop buying garbage
> If you want a raise the best thing you can do is find a new job.

It is true, but i am not sure it is a good long term strategy, i suspect that too much job hopping doesn't look good on the resume.

Also changing jobs becomes harder with age, i am fifty one years old, and last time around, when forced to look for a new job, I found that it was quite a bit of a challenge (being said that, i need to feed my family, so that i really need a raise :-( )
The manager then can look at data and think, "Hm, these bugs are costly. What we can use to reduce number of bugs to reduce costs?"

Bugs are a waste. Number of bugs can be reduced with better practices: peer review, various tests; better software: linter, automatic verifier, compile time checkers (-Wall + -Werror, rust), code generators, libraries; or additional business process: quality assurance.

To improve something, your manager need to measure it first. You can propose everyday reporting of spent time instead of spying tool, e.g. "2h working on #1234, 6h fixing bug #23456", which is much more valuable to your manager than raw data.

In my previous company, we reduced the number of bugs and time to fix by an order of magnitude, because we were able to see the effect of changes in tooling and development process.
Airbus produced 251 A380s from 2005--2021, or 16 years.

Boeing produced 1,560 747s from 1969--2023, or 53 years.

That's a hell of a lot of R&D for a short life on the A380. Note that a number of airports underwent expensive terminal upgrades to accommodate the aircraft as well.

Also an argument that certain technology does reach its practical limits.
Ask HN: What do you lack in AWS tooling?
In regard but not related to recent outages of the AWS infra, many people tell how awful their experience with AWS-specific tooling is.
E.g., a lot of comments say that CloudFormation is a nightmare to work with, and when it comes to CFN templates - it's just a no go ("use terraform instead"). Maybe share your experience and suggest mitigations, if such exist?

What troubles you most?
I wonder how many legs has a micropede.
Not many industries and not all strikes have to be legal
It's because doctors know that they're so well respected, they have to keep the appearances up too. At least a big book looks more official. Wondering where I can find one of these big books so it doesn't look like I'm using google :P
It also might prefer to tell you the patient has scurvy instead of cancer if you’ve been searching for and buying pirate toys for your niece recently.
can something like clamav detect pegasus?
UpToDate looks great.

How are we, as patients, can choose a doctor which has UpToDate and uses it ?

And how a patient, which can read the medical literature ,and use Google/Pubmed/Medical books, benefit from a subscription to your system to help validating a doctor's work(because they're human too, they sometimes make mistakes) ?
PREP Act is an American thing. Pharma requires liability waivers globally and changing laws to eliminate legal liability is a requirement of the contracts they sign with governments.

Sometimes even that isn't enough. In some cases they demand collateral. They also demand immunity from criminal prosecution, even in cases where it's proven that people were injured through "negligence, fraud or malice":

https://www.pharmaceutical-technology.com/news/company-news/...

"Government officials from Argentina and another Latin American country, which has signed a confidentiality agreement with Pfizer and so cannot be named, told the Bureau that Pfizer demanded additional indemnity against civil lawsuits citizens might file in relation to Pfizer’s Covid-19 vaccine.

Pfizer reportedly asked governments in Argentina and Brazil to put up sovereign assets, including military bases and federal bank reserves, as collateral for potential future legal costs.

According to government officials in Argentina and the unnamed country, Pfizer asked for liability protection not only against civil claims from citizens who suffer serious adverse events after being vaccinated, but also for cases brought due to Pfizer’s own negligence, fraud or malice. Documents from Brazil’s Ministry of Health suggest that Pfizer made similar demands of the Brazilian government."
“Solution Architect” is normally the role that lies between Product Owners and the Dev team. It’s somewhat technical, especially if you don’t have a Technical Architect counterpart.
Things with massive government involvement and heavily regulated like are incredibly more expensive: health care, housing and education.

Meanwhile, things provided by the free market have become incredibly less expensive and more powerful: technology, communication, entertainment.

Nothing to do with your rich vs poor class wars.
I deal with critical infrastructure consulting all the time and if the client wants some specific agent run, they send me the laptop to do it on.

Not only is your personal equipment yours, it likely contains information about other businesses that you probably have legal obligations to, like NDAs, and if the client doesn't understand that you can't ethically violate that for them, then they're not a client you need to be dealing with.

It doesn't help that the 3-5 "IT agents" they run are rarely doing anything useful expect fulfilling 3-5 different directors idea of spying.
They are also capable of causing 10x as much damage. Their job is to make correct decisions because they supposed to have the permission and responsibility to make larger decisions.
And Aliexpress also just refund you money if target delivery time of NN days run out. And then you get your afforable chinese crap for free with no requirement to ship it back to Aliexpress.
In The Netherlands, you can use these codes instead of regular stamps