skysight-inc/HackerNews huggingface dataset:
Again a "what if" scenario.

It is not trivial to identify a picture that is uniquely present in Assange's phone. Without having access to Assange's phone that is. And if you have access to Assange's phone, you probably have way more information than such a trick will give you.

But yes, it is a problem, and a reason why I dislike CSAM. But from "allowing the government to track highly sensitive individuals" to "you, the average citizen, will go to jail", there is a huge gap.

Also, I think one thing many people missed is that a hash is not enough. The only thing a hash does it that it allows a reviewer at Apple to decrypt a matching file. If the picture turns out to be nothing special, nothing will happen.

In fact, that feature is much weaker than people make it, it just puts Apple on par with what others like Google, Microsoft, etc... can do. I think the reason it got so much negative press is that Apple made privacy a big selling point. I think it serves them right, I don't like how Apple treats privacy as just a way to attack Google without really committing to it, but still, for the facts, it is a bit unfair.
It can* cause cancer.

Some estimate up to 99% of cervical cancer cases are caused by HPV, but having HPV causes has a lifetime cancer risk of 0.6%.
Leadership on a Submarine [video]
> > but in my opinion, every new developer should find some way to stand out.

> Now you're hiring and you receive 50 applications each with their own unique way of standing out, so you're supposedly considering which of 50 points in a 50-dimensional space you like the best.

Just because people should do something doesn't mean they will.

> It's more effective for you, and easier for everyone involved, if you just decide what you want and do an assessment based on that.

This is a great approach and can pair nicely with the effort based filter I outline.

I don't know about you, but when I hired a new developer a few years ago for a remote position, no experience required, for a company that isn't nationally known, I got ~100 resumes in not very long. I also wanted to pay people for their time (at least a nominal sum!) if they did an assessment for us. That meant I had to have some way to distinguish folks. Of course, I did the quick 'nope' pass, but still had a lot of folks to weed through.

All I'm saying is that as a candidate, putting in effort will help you land a job, precisely because effort is expensive and most folks won't do it.
I'm not sure I follow you but a few things are apparent to me at 45 yrs of age:

1. public health system will take care of you to its abilities (which to a large extent are defined by the taxation yes)

2. no private insurer is paying or covering anything COVID-related and they never did

3. been trying to get private insurance on top of the public one and I'm told time and again that a few systems of mine will be excluded (i.e. they won't insure me for anything bearing the remotest possibility of actually needing them for). Also that I am too old to start now...

if anything is clear from the COVID story in my mind is that we need a better and more capable public health system. Private healthcare is not about health or care.
Not sure a centralised entity is desirable vs a distributed network.

And platforms for distributed networks do exist (1), (2).

The issue is incentives for switching and reaching critical mass.

(1) https://blog.science-octopus.org/

(2) https://osf.io/
Scan for services with log4j-core usage using New Relic
Please read the AGPL very carefully before saying things like this. There is no reasonable interpretation where some cli program in part of a CI pipeline would infect the result of the pipeline (i.e. build artifacts) unless it actually put itself into the result. (E.g. gcc puts a small amount of code from libgcc into the executable, but that explicitly has a different license).

The "A" of the AGPL expands the distribution rules of the GPL to include network access but doesn't really expand the virality or combined-works parts. It "infects" your program just as much as any GPL program would.
>NFTs cannot have actual value unless people with the ability to enforce that scarcity cares about them.

You're confusing the hyperlink with the destination. The hyperlink has scarcity and is impossible to copy. You can make a new near identical hyperlink, but it's not the same as the original, the community says so and will ignore the imposter. The hyperlink are what people are buying and flipping. It has whatever market value other participants agree it has.
We really have to get away from having only a few mega-powerful providers for such services to having smaller providers that actually compete with each other. It's insane that Apple has full control of what goes onto devices that have such a significant market share. The app store(s) should be run by different that do the app reviews and allow apps by their own guidelines. So if you want a cannabis or porn app you can go to an app store that allows these apps and if you like a more family friendly store you go to another app store.

The censorship abilities these companies have is just too much. I don't like Trump but it really bothered me that Facebook and Twitter blocked him. If the block the US president how many smaller guys are being censored and you never will know?
Note that this sentence was about browser-based integration tests. Browser automation has come a long way, but even on very frontend-fluent teams I've been on we had a few flakey tests, and browser-based integration tests are sometimes flakey in ways that are difficult and tedious to debug! Not understanding why doesn't necessarily indicate any lack of understanding of DNS.

But maybe it increases the odds of a "Let's understand Playwright!" post in the future!
> adults are discovering the metaverse

wait, who has been in the metaverse already? Can they tell the rest of us what it is?
I think OCaml can do it with flamba, at least that's what this library readme says: https://github.com/c-cube/iter

> with flambda under sufficiently strong optimization flags, such compositions of operators should be compiled to an actual loop with no overhead!
I've been hesitant to do so. Look at the top several results from https://www.google.com/search?q=porn+accountability+app for apps that don't even try to advertise as parental focused apps.

If you want direct links, send me an email (you can find it in my profile).
It is not bad that you thought that.

But it is bad that you then decided to add a post to that effect.
Basically anything that exceeds the regular category is risky and difficult to secure. See weird machines / langsec. This is a prime example.
It seems to me that Google only iterates on things that are immediately successful. That doesn't work for something like consumer AR that hasn't really been done before; multiple iterations will be required to get it past the toy/demo/beta phase.
NSF/NIH are great funding sources but: overhead! Straight up less paperwork is a serious improvement.
Aaah. Okay, that could explain it :p

Thanks!
Even as a graduate student, it was difficult to contact professors on my committee via email. They just get so much email and are so busy that they can not respond to all of it. I used to figure out where they were teaching, and then wait outside the class to catch them on the way out when I really needed to talk to them. So this is what she is up against. I'm not sure calling would be much better. It will vary depending on the person - newer profs might be actively looking for students.

Here's some advice from a prof I know, which could be generalized:
(From https://web.ece.ucsb.edu/~hespanha/ucsb/ToStudents.htm)

1. Please look at my web page (http://www.ece.ucsb.edu/~hespanha). There you will find a brief description of the research areas I am interested in. It may be especially useful to look my publications page (http://www.ece.ucsb.edu/~hespanha/published.html), which I keep updated with all my recent publications.

2.If you find something that interests you and you have past experience (projects, papers, etc.) on that subject and you are applying for a PhD program, please send me an email. In this email, describe briefly what your interests are and what you have done in the area. If you have papers published, please include an URL from where I can download the papers. Please do not send me large files. You should also include your GRE scores, Grade Point Average, and class ranking.

3. If one of my research topics interests you, but you do not have past experience on the area or you are not applying for a PhD program I encourage you to apply to UCSB, but please do not contact me directly. To make sure that I will see your file, please include my name in your Statement of Purpose and also your particular area of interest.

I receive many emails from prospective students and I do not have time to reply to all of them. I apologize for that.

Other useful links:

https://matt.might.net/articles/how-to-email/

https://matt.might.net/articles/how-to-apply-and-get-in-to-g...
I'm afraid I don't know off the top of my head. I don't usually use PPA's, most things I want are in the repos, I compile myself, or a direct download.

I would there is, but I don't know how.
Exactly. There is no way to "hard work" your way from junior employee to Founder or CEO. When the CEO leaves, their replacement always comes from the executive class. The junior can work their way up to senior or even low-level manager. But at some point high up on the ladder, employees come from a totally different aristocracy, and you can't work or even buy your way into that clique. Every company I've ever worked for, when they went looking for a VP-Of-Something, they'd never promote from the proletariat--they'd always go externally and look for someone from the nobility.
> Not trying to be cheeky: How many millions of citizens here in the U.S. will abstain from a potential cancer vaccine if based off this research? Would the same religious/tribal objections be held, for example, if the disease to be prevented was cancer vs a virus of unknown origin? Would it still be viewed by so many as a political/big-pharma conspiracy ("But where did the cancer come from?" etc.)?

So this misses the full Covid-19 vaccine critique and provides a disturbing slant instead of the proposed hazards. The specific critique is that the protein chosen in C19 vaccines is in fact dangerous in its own right.

mRNA as a mechanism of delivering a protein to the body is anything but an empirical debate -- the tech works, and works decently well for risk profiles who have no other option. The philosophical / duty of care debate is whether or not the risks associated with mRNA therapies / vaccines are worth the inherent risks.

Equating Covid 19 for the common person as the same as cancer for the common person doesn't appear to balance. If C19 had cancer mortality rates, this pandemic would look drastically different -- with far few people in the room.
U.S. lawmakers call for sanctions against Israel's NSO, spyware firms
No way a cleaning person can do that in a datacenter.
That’s called being an independent contractor. Twice the pay, move projects at the end of a contract etc. this is often done by more experienced candidates.
From the article, they said they would substantially change their research goals and projects if they didn't have the restrictions of the current funding process.
Charlie Wurzel on Trump Media and Technology Group's Investor Presentation
Seriously why are they calling this headless
Is proving P = NP equivalent to knowing how any intractable problem can be solved? Is it possible for P=NP and yet a class of intractable problems to remain unsolved?
The researcher that leaves the military takes with them general skills in reverse engineering and exploit development, but they cannot use specific 0days they know about from their military service. The specifics of everything done in the military is classified. People told me they couldn't mention in job interviews some of the skills they have because it's a secret. Like, if someone developed this Turing complete architecture on top of jbig2 decompression while they were in the military, it would be considered a secret that cannot be revealed.
> You can't just keep doing this without suffering a loss in significant figures.

I'm not sure I understand this. Are you talking about something like the number of significant figures in the naive arithmetic mean being that of the individual measurement with the fewest significant figures (which is more or less expected)? Or are you talking about some loss of significant figures beyond that?

Papers describing models generally go into some amount of detail describing the precise averaging/interpolation/etc. methods and associated statistical analysis (e.g., [0, 1] for Berkeley Earth's model). If there are errors regarding the uncertainty analysis, that's where you're likely to find them.

> You would literally have to have accuracy and precision information on each sensor and for each measurement to then be able to propagate all of this carefully. Furthermore, you really need to know the standard deviation in order to understand the uncertainty in the measurements.

Is having that information that unbelievable, especially for scientific instruments? The field of metrology exists for a reason, and it's not like the need to understand the accuracy and precision of instruments is a recent concern.

In addition, as I linked above and also in [2], uncertainty analyses for models do exist, and measurement uncertainties are absolutely taken into account.

> What would the graph presented in the article look like with error bands? Don't know.

A plot of the global annual land temperature anomaly over time [3] is present in the GISTEMP uncertainty analysis paper I linked. I'd expect that similar graphs could be found in relevant papers for other models.

> so I'll stick to not being happy with the way things have been presented so far and hope to find something better in the future.

For better or worse, presentation is a tradeoff. Simpler graphs are easier to digest for the average person, but lack the nuances someone like you might be looking for. More detailed graphs are (sometimes?) present in papers, but the average person isn't likely to come across those.

Communication is hard.

[0]: https://berkeleyearth.org/static/papers/Methods-GIGS-1-103.p...

[1]: https://berkeleyearth.org/static/pdf/methods-paper-supplemen...

[2]: https://www.st-andrews.ac.uk/~rjsw/papers/Brohan-etal-2006.p...

[3]: https://agupubs.onlinelibrary.wiley.com/cms/asset/a68bb281-c...
Pelosi rejects stock-trading ban for members of Congress
The suggestion is to throw out HTTP entirely and build a nice tight protocol on top of QUIC.
" so if anyone wants to implement a similar system that screws with customer keep in mind that the ones you screw over will not stay silent and will spread the word and you lose more then 1 potential customer."

I am pretty sure they have run the numbers and decided it's more profitable to f..k over some innocent guys versus spending money on customer service.
The LLC is just to say youve been working at that LLC as prior experience and are looking to work as an employee for the target company

Its not about employee vs contractor, but the target can be looking for either or
> a government contractor

because it's expected from a government contractor to blow budgets and extend deadlines
I read through this and my jaw dropped. Pretty amazing detective work and a really amazing exploit. Presumably you could run Doom on it :-).

Sometimes I feel like it's hopeless but my brain cannot help but work on creating solutions to this sort of problem.
Sounds like an invasion of privacy that will be forced on people who can't provide meaningful consent.
This is the same thing I try to do. I'm very bad at flagging/downvoting as much as I should. Most days I'll read 3,000 comments and not downvote a single one. I want to religiously downvote and flag every comment which breaks HN guidelines. Especially jokes which don't add context/perspective.

examples of actual comments in the past 24 hours that I wish I had downvoted:

> 2022 will finally be the year of Linux on the desktop! /s

> So... fuzzy logic. Everything old is new again! Again!

> piety contests have consequences

> Top level commend: "in the fullness of time JAX might prove to be more important than either. don't give people fish, teach them how to catch fish and all that..."

> wtf I love crypto now

I'm looking for a more specific example but nearly every day I see an interesting article where there's one long comment chain which is just "textual memes", sort of a Markov-chain of pop culture references for internet nerds. There's no extractable commentary or perspective, but rather the purpose of the comments were for the commenters to have "participated" in their group activity. (Often it's a type of "Hello there, general Kenobi" call-and-response chain)

Some pithy-one liners hold great insight. That's fairly rare but it does happen. Its certainly possible to creatively utilize a one-word reference to a larger topic to contextualize the discussion in a surprising way. But rehashing a cluster of xkcd comics as a form of commentary, for the 10-millionth time, seems to more often just lead to a "circle jerk" of comments. Its easy to ignore, but I fear that by not aggressively downvoting zero-value comments, we abdicate our responsibility as HN's "immune system"[0]. That attracts and grows more culture of low-value comments on HN.

I would love if HN's collective moderation grew to be much stricter than it is now. To be clear - I don't want this to be applied to unpopular views that are constructively written. I just want us to remove low-effort drivel and reflexive (non)-responses.

Also many of my own comments fail my own standards when I review them 24 hours later. I would greatly appreciate it if HN could give me quicker feedback when I post low-value comments, so that I may better raise my quality floor.

0: https://news.ycombinator.com/item?id=7590569
The rpi4 has some power management via the mailbox interface to the videocore, but it's just hacked on to the side and is more of an example of how not do things IMO. Particularly how it's exposed to user space is real gross (basically raw mailbox calls). It's closer to the primitives that psci or acpi would be papering over.
"you’ll get a “world.hey.com/you” page (with the “/you” part being the same as the beginning of your @hey.com email address)"

That's just another walled garden with user accounts and other bs.
Honestly that number is not a super reliable one, because it varied to a surprising extent by specific equipment. On early carriers the filtering technology was poor which meant that they had to provide a lot more room than the actual passband. On later carriers they started using companding and other techniques to get it way down to a couple kHz.

One of the issues which complicates this and that I didn't really mention at all is that AT&T identified different grades of circuits - toll grade circuits had a wide passband and the best possible noise properties and so could be used for any purpose including demanding ones such as radio network audio feeds (where the narrow passband of normal telephone lines would be completely unacceptable). On the other hand, it was common to have "pole pair" low-grade analog circuits that were mostly used for backconnection of voice calls from a tandem switch to a smaller local exchange office elsewhere on the line (basically add-drop on these toll leads was very hardware intensive so they would often centralize it in larger cities and then "double back" to towns further back on the lead, sort of like getting off the freeway in a rural area and having to take a frontage road back the other way for a while). These had far more relaxed quality requirements. Open-wire circuits tended to be almost entirely toll grade, but later carriers including cables typically had multiple grades with fewer channels of the high grades.

The scheme L-3 introduced of having either two voice mastergroups or a television channel presaged the later approach the telephone network would take, with hierarchical TDMA structures that allowed traffic planners to "pick and choose" how large of a slice they wanted to pull off. This continues basically to the modern day, but is clearest in the example of ISDN's DS0, DS1, DS2, etc that used to be commonly used for IP. Each successive DS is just a combination of more banks of DS0 (64kbps). The point is that they were sort of doing the same thing with the analog carriers but by choosing wire gauge, amplifier quality, etc. to fit the need.

There was a surprising range of different grades because of the surprising range of major uses of Long Lines at the time - radio and television relay were the most demanding, carrier telegraph and digital data had strict parameters to work reliably, voice and non-carrier telegraph could accept a pretty narrow bandwidth with relatively high noise.
It's unclear- do these attacks require you to have the hostile site(s) open simultaneously in both private and non-private tabs?

Seems like it would, for the resources to stay allocated. If that's the case, it's kind of a "hm, neat, fix the partitioning" to me rather than something that needs its own name and hoopla.
their passion is devaluing (6% and growing per year)
Why is Chromium so huge?
This seems excessively reductive. A new life sciences funding and translational model should be at the top of HN. Especially with these institutions onboard.
> So when we create 11% more dollars, the dollar loses 11% of its value.

No, it we have 11% more dollars, distributed and chasing goods and services the same way, sure, but that's...more than just creating them.
So you'd simply let a pandemic rage for five years?
How about an EE from the nineties? It never worked like that :) Logic one and zero are represented by voltage ranges. There are safety margins everywhere.

https://learn.sparkfun.com/tutorials/logic-levels/all#ttl-lo...

https://www.allaboutcircuits.com/textbook/digital/chpt-3/log...

ECL is a fun one with minus ~5V supply, and minus 1.3V switching threshold.
Click farms are going to be soooo creepy. Bunch of disembodied heads on a shelf with the eyes flicking back and forth
don't blame yourself for it

they are probably not a good place to work at anyways, given you're given tasks beyond the scope they were hiring for
Off topic, I knew marriages could be toxic but this is peak. If you don't trust your partner 100%+ the marriage is already dead IMHO.
Does apple use psci too, hence that smc redirects to el2 extension they have?
And here I was thinking it would be about the language! Still interesting, of course...
That feeling when you spend almost a decade on an idea that's worth $20.

Hey, at least that's like $2/year or something.
I was thinking it had to do with the Habbo Hotel pool raids, personally.
My understanding is their proprietary juice packs were able to be rolled and squeezed by hand so the question of why do I want this 300 dollar juicer for special packs I have to buy when I can squeeze the packs by hand popped up and it fell a part from there.
But if traveling back in time forks that timeline you don't have to worry about the self-consistency or bootstrap paradox at all, right?
I'm only interested in why you believe what you believe. How smart are you? What do you value most? How truth-oriented is your epistemology?

I'm glad you don't discriminate (nothing "reverse" about it) against men, but many do, and since [your views are wrong](https://www.amazon.com/Essential-Difference-Female-Brains-Au...) it's tantamount to sex-based theft and redistribution.
Eh, I find it far more plausible (in an Occam sense) that “literally molten steel” was a flawed observation than the alternative of invoking the enormous conspiracy machinery that controlled demolition implies.

The jet fuel would have burned for ten minutes and then been exhausted. The consequent fire it started is what burned for hours.