skysight-inc/HackerNews huggingface dataset:
I heard on an interview somewhere a security advocate mention that android phones "phones home" basically everything you do every so often (GPS location, app data, even voices recordings). But I couldn't find that anywhere apart from a few "malfunctioning" google nest devices.

Is there any resource about what exactly is communicated to google while using android phones? Everything I read is either conspiracy theories or corporate speak.

[edit] The interview in which the claims were made was with Dr Robert Epstein if that makes any difference

https://open.spotify.com/episode/4q0cNkAHQQMBTu4NmeNW7E
In rock it's really tight timing and nailing transitions/fills. At least the way I've heard it used in my circles.
One person's benefit is another person's waste. If you think there's not room for vehement disagreement around how best to use space, go watch an episode of Hoarders.
It will be interesting when we get to the point where were are deploying "supply pods" to Mars:

Basically - flinging cargo-containers of supplies of X to Mars to orbit around the planet until we arrive to harvest them...

It would appear that a Starship can launch ~33 tons per flight into orbit...

Lets get a Space Port built out where we can store a bunch of cargo containers in space - but have a launching system from our orbit to fling containers of supplies from Earth to an orbit on Mars.

Best idea would be to fling a bunch of space-station-space-port modules at Mars for assembly once robots arrive to assemble the modules.

and we develop a method to fling a container between the ports, the ports catch the containers and put them in a grid/orbit/whatever... (ideally hex shaped containers designed to attach to one another...)
I'm always skeptical of these reports because they rely on tracking data collection that Firefox has been stricter and stricter about blocking. Inside Mozilla we had different numbers which didn't line up with the public marketshare figures. StatCounter in particular was infamous for under-reporting.
The link and the url are not the same.
Agreed - there's no fundamental reason interfacing with traditional brokerages should be as difficult as it is today. We're working to form relationships with all of the brokerages that we integrate with and are advocating for them to focus on exposing and maintaining public APIs so people can delegate access to (and interface with) their accounts more safely.

In the meantime, the technical debt is manageable, but probably only if you're doing this as a full-time job - in my experience, trying to build an investing app and the integrations that power it at the same time is a losing battle.
At the time the bombs were dropped in August 1945, there were also 900,000 veteran Japanese soldiers on the Home Islands. Even if the civilians didn't pick up sticks and stones, the Japanese death toll would almost certainly include that number.
The cQASM that you link to is one of the flavors of QASM. Another commonly used one is openqasm whose 2.0 and 3.0 specs are here: https://github.com/Qiskit/openqasm

Along with QIR like as is listed in the comment, these are two open assembly specs with collaborative governance. Another is Quil: https://github.com/quil-lang/quil

While quantum computing has a history of using circuit diagrams (which are still very useful) to represent programs. These languages have representations under the hood that look a lot more like assembly. For example: https://github.com/Qiskit/openqasm/blob/master/examples/adde...
Servo was the experimental renderer that may have become the future renderer for Firefox. Without an experimental/skunkworks team the development of Firefox will remain iterative and focused on maintenance and feature parity.

Firing the Servo team was Firefox tapping out. That's it. From here on out expect it to be nothing more than a vehicle to serve comarketing needs of the broader Mozilla organization.
I can’t help but find a sick satisfaction from this article after recently reading rape of Nanking and a recent pacific war book about Japanese rape and cannibalism of Captured US marines and a book about the OSS in Burma and the Japanese routinely cutting off penises of young boys and shoving them in their mouth as they lay bleeding to death while the Japanese raped and bayoneted young girls and the village burned.
Fingerprinting is "analog" by its nature and thus never 100% reliable.

Besides, here's another idea: not only make internet access a runtime permission like I suggest in another comment here, but also make it per-domain. If you don't trust an app, run it in a "paranoid mode" where you have to explicitly allow it to access every domain it tries to access. Advertisers always use their own infrastructure to prevent fraud among other reasons.

And another one: a docker-style fully isolated container for you to run apps you don't trust. The container simply lies to apps with hardcoded or random values for anything that could possibly be used for fingerprinting.
>https://en.wikipedia.org/wiki/2000%E2%80%9301_California_ele...

1. your own article lists multiple non-eron related reasons for the crisis

2. AFAIK energy markets are the norm. state regulators might regulate the rates that retail customers pay, but the utilities are buying the electricity from the free market. Therefore the supply/demand dynamic when it comes to prices should already be factored in, which was why I was confused it was initially brought up.

>While you're speaking that SPOT crude remains relativistic constant/regular over time, may you please explain if this is true, what the cost increases at the pump are directly related to?

helpful page from eia.gov: https://www.eia.gov/petroleum/gasdiesel/

>When I began driving, the spot price tracking you mention was the same, but the pump price was $.99/gallon for gas...

obvious question: were you in the same state? taxes are baked into the gas price, so if you moved from texas to california, it wouldn't be surprising that your gas price went up for no reason.

>So, I admit I do not have an understanding of the reasons behind the price at the pump, but shouldn't that price match the same graph?

I went a step further and compared crude oil prices to retail gas prices (available from https://www.eia.gov/dnav/pet/pet_pri_gnd_dcus_nus_w.htm), and found that the ratio hovers at around 2, with that ratio being higher in the 80s/90s than today. While there's some fluctuation, it's nowhere close to the amounts implied by your anecdotes. Speaking of which, I find your anecdotes impossible to substantiate. Which state did you live in? When was "the war"?

>If true, then why isn't toilet paper $50/roll? Trees are not going to replenish themselves at the same rate as our consumption...

I'm not sure where you're getting that conclusion from, but pulpwood trees are effectively farmed. The growth cycles are longer than something like corn, but they're still planted/replenished at approximately the same rate they're cut. The deforestation stories you hear are largely from developing countries cutting down forest for development purposes.
> You seem to be trying desperately to make the Industrial Revolution be all about India.

No, I am just saying if Europeans were desperately looking for a trade route to India specifically. Specifically for the purpose of importing manufactured goods.

When Europeans like the French had "ministry for espionage", which must definitely be a thing in the other Europeans especially for their arch rivals.

If the bulk of the knowledge had already been transmitted by the arabs, there would not be a need for the Europeans to be in India.

If you are denying that a significant amount of knowledge and skills had not been transmitted given the above, I guess you are the one in denial.

Anyway my point is that pretending that India was a non-entity before British colonisation and it was somehow British benevolence that created/built "India" is utter BS, if anything it was the other way around.

> You seem to be trying to squeeze actual history into your view, but it does not fit all that well.

No, history has been written by the Europeans, wrt. their colonies. Given strong evidence to the contrary, I guess we need to reexamine the idea of Industrial revolution devoid of significant Indian contribution both direct and indirect.
I’ve yet to work at a company that didn’t have paternity leave.
Is that due to simple usury or due to cost of risk? In other words, if enough of the bailed pop. skips bail (complete loss for bondsman), that money has to come from somewhere --and that somewhere may be both honest and dishonest criminals as well as innocent suspects.
> How to Mitigate Push Notification Spamming

Don't use TOTP?

Edit: As you've noticed, this is not the right word here.
I relate to this a lot, having also started and then not finished a lot of games like the author.

Perhaps it seems obvious to say, but I have only recently fully internalized that making games is not the same activity as playing games, and that it will take many orders of magnitude more time to polish even one gameplay feature compared to how long it will take for that gameplay feature to become stale _to me_ as the dev playtesting that feature over and over again.

I wonder if a lot of gamedevs just get tired of playing their own game and thus don't care about it anymore as a result?

Seth Godin has a book called The Dip about the slog in the middle that many creative projects have (business starting as well). I wonder if gamedev has a particularly nasty dip and that is why so few finish.
I've tried 123456, password, and secret, and I'm all out of ideas.
Thank you for sharing! This is such a neat library.

Lots of kudos on the work you put in too! Your app is fun and super slick. Top notch design and frontend skills.
> And I don't see how the Gigabyte sticker being there indicates it was not the board originally sent to GN. It's completely plausible that meets the requirements for "open box" at Newegg. And IIRC nowhere on the sticker does it say that the CPU socket is broken, rather that specific history was obtained by calling Gigabyte and asking.

First of all, it’s just my personal theory; the sticker being there does not prove anything. But the sticker does say¹:

DAMAGED BY USER CANNOT REPAIR

[x] CPU SOCKET DAMAGED

This makes me guess that it’s unlikely that this was the same motherboard which the returns people at NewEgg sometimes claimed “Thermal paste on motherboard” on, and sometimes claimed that GN caused the CPU socket damage.

1. https://www.youtube.com/watch?v=CL-eB_Bv5Ik#t=7m38s
That's indeed why authorization is a harder problem than authentication - because much of it is domain-specific.

Still, there are many things an authorization system can help with. For example, the service/organization affiliation of the user is easily expressed as a set of attributes / properties / roles on the user. If that's stored in a central directory, and the authorizer has a cached copy, you can use this context as part of your policy for making authorization decisions.

Lifting the authorization policy into a central repo allows you to consolidate authorization logic, and also enables separation of concerns. SecOps can evolve the authorization policy of the application without having to ask developers to revisit the logic in all the places it exists. In fact, we have customers that have their secops team deploy new versions of the authorization policy without having to redeploy the application.

Another example is having front-end code that can dynamically render component state (visible or enabled) based on the same authorization rules that the back-end / API uses. We have nice examples of this in our "peoplefinder" demo [0], which you can launch as a quickstart [1].

[0] https://github.com/aserto-demo/peoplefinder

[1] https://www.aserto.com/quickstarts
Small File Archives in MinIO
You do realize that this statement was in the context of justifying further fire-bombing of Japan's cities? Each one of which would be more violent then the nuclear bombs?
It's called recouperation.

https://en.wikipedia.org/wiki/Recuperation_(politics)
Since you said:

> Just pointing out it's difficult to call something a "crime" if there was limited legal basis for it (no international treaty) at the time.

I can't help but wonder if you'd find it equally difficult if someone calls certain actions of the Nazis a crime -- assuming there was limited legal basis for it (no international treaty) at the time, etc.

Or is it only difficult when we're talking about American crimes?
Final paragraph marks this as a well-turned shaggy dog story.
Incidentally the few games I have actually finished were all Ludum Dare games with a very short timescale of 2-3 days.
Poll: How do you browse Reddit without an excruciating experience?
+ Reddit Enhancement Suite
That's actually shown in the article as a mitigation strategy
Narwhal
This is quite nice.

I haven't had time to play with it much, so far, but, as it so happens, I have been working on color themes for my app, lately, using tools like this.
As a software developer, I think of bassoon fingerings as a classic example of "technical debt", and also the kind of design that if someone thought it up de novo, the only appropriate response would be "you're fired."
> web3

oh no.
Could you possibly post a pseudo-code example of how the above would work with ECS? How do you attach the components to the rock object if not inheritance? Would you just have them be functions that you call to include within the rock via a header file or something? Or a separate code module you import, if using Python?
coming back to this way late, I wasn't trying to imply he was wrong to criticize or anything like that. What i meant was I can see people in the US Government slow walking every single permit/form SpaceX needs for no other reason than spite from a tweet. Something like "oh Musk doesn't like Warren eh? Well let's send the environmental review back through a security check for another 30 days". I can totally see things like that taking place.
Amazon (as well as others) are desperate to fill roles - everyone is up leveling quickly, and they didn't have the comp to match. This is why they've roughly doubled their salary cap.
From the announcement:

> We’re also committed to working closely with regulators. We’ve offered public commitments for our Privacy Sandbox efforts on the web, including ensuring that we don’t give preferential treatment to Google's ads products or sites. We'll apply these principles to our Android work as well, and continue working with the U.K. Competition and Markets Authority, and others.
On the other hand if you make blueprints without really knowing the engine you'll quickly end up with a mess of cobbled together poor solutions which sort of work.
Maybe, I've noticed that most females prefer the hug greet over a handshake greet.
No, you've been hostile and non-cooperative this whole time, my allocation for time spent with people like that is more or less up.

If you're actually curious, you can figure it out for yourself.
> Game engines are a lot like programming languages in the sense that once you learn truly learn how one works, picking up a new one isn't that difficult.

As someone who has worked as a AAA game dev for almost 13 years, can confirm this analogy holds true. Off the top of my head, I can recall 8 different game engines I've worked on (all proprietary). You start to pick up on the common patterns and ideas between them, and learning a new one boils down to figuring out familiar interfaces. Just like when learning a programming language, you look for the fundamentals (loops, conditions, data types, etc).

At the end of the day, "game engine" is a fancy way of describing an amalgamation of systems that gather input, maintain a complex state machine/simulation, and draw it on a screen. And from my experience, the way different engines accomplish this doesn't truly vary that much.
You would trade off 200k Japanese civilians for, say, 1000 allied lives? What ratio is morally justified?

If you are arguing that a 200:1 ratio is acceptable, I believe this is a morally bankrupt perspective, given that the consequence of this is a genocide of a people who are otherwise perfectly normal without the broken software that was running in their minds and their society at the time, and given that it is a collectivistic perspective that assigns moral guilt to an entire civilian population (including children) instead of the specific individual bad actors that caused the situation.

Regarding the latter point - on this premise that every single Japanese person shared moral culpability for what Japan was doing - it can't be squared with an understanding of what actually happened. I mean, the existence of children is a QED against it. But even just talking adults - At that stage the country was a fascist dictatorship, with multiple democratically elected leaders assassinated by the military (which was taken over by a fanatical fascist contingent in the 1930s) and a tremendous propaganda effort by the military to control all information and brainwash the general public into thinking they were doing good and just work overseas. Combine this with a poor, ignorant farmer population, and I don't think the simple moral prism that you're applying works.
How much do construction costs matter to the price of housing?
You repeat this same line many times in this thread, every time without evidence.

Nobody has to convince you of anything. But if you want to be taken seriously in this forum, you have to convince us. You don't appear to be trying.
This is a cool game, but after playing 2 rounds, I've found that if I can't guess the country by the outline, the direction hints rarely help me out unless I'm on the wrong continent. Like, I vaguely know the countries in North Africa, but couldn't tell you whether Libya was to the east or west of Algeria without looking at a map.
I ended up crossposting it to the few security rooms I'm in for quick laughs

But for what it's worth, this also serves as a great initial CTF-type introduction to how debuggers work in web browsers.
This is indeed one of the benefits of the policy-as-code approach.

And Rego syntax is much easier to grok than other "-as-code" approaches (read: wall-of-yaml)
The old solutions are best IMO. Challenge/response where there’s a knowledge element.

TOTP is too easy to share or steal, especially for targeted or familiar person attacks. I’ve encountered fraud scenarios where soon to be ex-spouses accessed an account via a iPad with authy to get at someone.

Fundamentally, it’s too easy to think you have MFA, but you’re actually secured with a shared, no-factor-auth iPad. (People share work credentials in 1Password for convenience) Mitigation of password spray is cool, but not secure.
Windows runs as guest OS on top of Hyper-V as well, it is a type 1 hypervisor.

Basically when you activate Hyper-V, you will be getting one VM running where the host is only a guest with special privileges known as root partition.
> The most obvious example is drinking too much on a night out

I've found interesting (russian meds) and creative (supplements like NAC) solutions to that problem on reddit.

Even funnier: they seem to actually work! No headache the next day!
This was news to me too
You might consider a move to the blockchain industry if it interests you at all. More than half the jobs are remote and there are plenty of wealthy people to talk with. Let me know if you want any advice there, my email is my username at Gmail.
NASA gets its power from its budget and purchasing power. Starship drastically driving down the cost of lift diminishes NASA’s power and relevance (along with that of their subcontractors).

Would you rather work for the checkbook bureaucrats (Webb and similar science aside)? Or the eccentric billionaire getting on stage, with Starship on the pad, saying “We are going to Mars.” SpaceX is becoming NASA faster than NASA can become SpaceX (to steal the Netflix/HBO analogy). Same goes for lift customers.

TLDR Innovator’s Dilemma: https://en.wikipedia.org/wiki/The_Innovator%27s_Dilemma
That may be your ideal but it is most definitely not mine.

I don’t understand how people can compare the austerity debacle and resulting outcomes in Greece with what the US was able to do (and turn a profit on) post financial crisis and decide that somehow the Greek way was better, countries shouldn’t be able to use monetary countermeasures, and these constraints will magically produce better politicians who will get it all right, because otherwise it would go wrong.

We’ll still get the incompetence, it will still go wrong, and the results are just worse all around.

Crypto fans obsessed with the handling of the financial crisis should brush up on the concept of Panglossian optimism.

https://en.wikipedia.org/wiki/Greek_government-debt_crisis
Such graph collections are super helpful when trying to figure out if some theorem holds for a certain graph class, although only up to a certain size.

I think a lot of these graphs where generated with the genc.c program included in nauty (official website: https://pallini.di.uniroma1.it/ -- unofficial Github repository: https://github.com/lonnen/nauty). With the computing power that we have nowadays it might be easier to just to just run that program.
How many times are we going to go over this?

> There was a difference in the antibody levels from samples taken within 2 months and at 6 months post second dose where the 6 months antibody levels were sharply lower

> In contrast, convalescent sera did not exhibit a correlative between time and antibody levels

> Hence, the data suggests that the antibody levels of convalescent sera did not decline significantly for 8 months post infections, whereas the ultrahigh RBD antibody levels achieved with mRNA vaccines could be subject to a more rapid decline.

> there was no trend of decreasing RBD antibodies in those with natural immunity for up to 9 months in our dataset.

> In comparison, while mRNA vaccines resulted in much higher RBD antibody levels than natural infections, this hyper-elevated level appeared to be less stable with samples at 6 months past the second dose. While our work is still very preliminary, there is a recent study observing similar rapid decline in RBD antibody within 6 months of BNT162b2 vaccine

Just legalize natural immunity already, this is ridiculous.
I’m in the camp of starting many many games, for many many years… from C64, Amiga and PC.

Having the commitment to finish (and know when it’s finished) is hard.
An organization, "mitre" maintains a list of publicly disclosed vulnerabilities and assigns each vulnerability a unique ID, which is the "CVE" number.
The PoC is a "proof of concept" that explains how it could be exploited practically.

So this is mapping both those things.
Well ok, from a psychological standpoint it could make sense: Google can shape the available choices in such a way that requesting has immediate negative effects on your user experience with the device - and then Google can claim that users actually don't want any privacy.
Microkernels are a much more viable way of solving security problems in an operating system. Windows and Linux could both be rewritten as microkernels within a couple of months or years.
> Use ECS (Entity-Component-System)

If your goal is to make a game in a reasonable amount of time, I kind of disagree with this advice. Implementing an ECS system before anything else is a good way to find yourself spending time yak-shaving instead of actually building your game, and for most 2d games, YAGNI (at least not right away).

My personal advice would be program some of the major game systems and objects you want for your game first, they'll probably take you longer than expected but at least you'll have something that actually resembles game play and not just a framework for building a game. If you get to the point where you need ECS for performance or organizational reasons you'll probably have a good idea of how you want it to work by then instead of guessing at how you'll use it.