skysight-inc/HackerNews huggingface dataset:
I wonder if this is sad because people took advantage of an obvious power dynamic, which would make her the victim... Or if she's in control of her destiny and a brilliant marketer. I mean this is clearly getting lots of attention and no matter if the story is correct or not, the myth of her sleeping with Meta employees might significantly raise her attractiveness for similar people, i.e. nerds with a high salary, i.e. her perfect customers.

I wouldn't be surprised if this led to an increase in paid business by Meta employees. In that case, she would have converted a business issue into an opportunity.
10 bucks says it's python
I just tested using Spotify on my iPad and my iMac, listening on an Echo Dot, Echo Show, Denon AVR-1913, and Google Home Mini.

The Echos use Spotify Connect, the Home Mini uses Google Cast, and the Denon uses Spotify Connect from the iMac.

From the iPad the Denon was not showing up in the Spotify devices list so I used the option to connect to an Airplay or Bluetooth device to connect via Airplay. Later, I noticed Spotify was asking for permission to scan my network for devices, I gave permission, and the Denon then started showing up directly in the devices list. I don't know if connecting to the Denon from the device list uses Spotify Connect or Airplay, because mobile Spotify unlike desktop Sotify doesn't say on the device list how it connects.

The test was to tell connect to the test target, start playing a one song playlist, then when it starts playing use the position slider to skip to near the end, switch to the view that shows what is playing and the queue and up next lists, and see what happens when the song ended.

Then I'd stop it (if it was playing), disconnect from the target, toggle the autoplay on remote devices setting, and do the above test again.

I'd again stop it (if necessary), disconnect, and toggle the autoplay on remote devices setting back to its normal setting (which for me is off).

For the Echo Show, Echo Dot, and Google Home Mini it obeyed the autoplay setting. When off it stopped after the playlist ended. When on it started playing a list of things it felt were related to the playlist song.

For the Denon it always stopped when the playlist finished, both when I was definitely connected with Airplay and when possibly connected with Spotify Connect.

Make sure you have an up to date version of Spotify. They added the ability to control autoplay on remote devices 2 or 3 months ago.
A syntax error in any scripting language will have the exact same problem.
This trick isn't just about geographic distribution - it's most commonly used for classic horizontal scaling, where you use multiple read-replicas to handle more traffic.
He may not be intentionally “uploading” contact info, but the HTTP server could be configured to keep log of all the contacts email addresses.
The whole album is still awesome
Thats fine, customers can pay for the long-term costs of the products they use. It will help create a market for biodegradable or fully recyclable alternatives.
Microsoft Is Censoring Searches in U.S. for Politically Sensitive Chinese Names
I wonder if this is a fireable offense at Meta?
> this is the sending of information off each user's contact list (the email address domains) to those remote servers. As such, it requires a disclosure to the user.

That's really interesting.. Honestly, I wouldn't have even picked up on that reading the code, as it's only the domain of the email itself. Not any identifiable information.

Feels a little but harsh but fair enough.

I wonder is there an identifiable marker which could say `"User X has a contact list containing gmail, yahoo and protonmail accounts."`

You don't know who the user is at all but you know "A" user has that contact list.

Very harsh.
> To put it another way, if you're socking cash in a savings account paying 0.6%, while inflation is 9%, you're losing money.

Right, but you're losing 8.4% instead of 9%.

(And hopefully you're investing the cash more wisely than a savings account!)
Is it harder or just a bit longer-winded? E.g. i'm thinking this is the same behaviour

document.getElementsByClassName('sth')[0]?.closest('ul');
Where’s the Beef? New Lawsuit Asks McDonald’s and Wendy’s That Question
Indeed. We cannot have nice things.
This is not the case anymore but I remember when Angular was including a version of jQuery, and having methods like "doSthAsInJquery" (paraphrasing) in Angular, and I could still hear everyday that Angular didn't have the overhead of including jQuery.

I wish we could have standardized in the Linq-like API of jQuery.
My observation is that basic syntax errors (indentation, missing colons, etc) take up a ton of time for students and that this takes away from the real learning goals. I agree that there have been a ton of attempts to solve this problem so the onus is on me to demonstrate that there are better outcomes starting with Pickcode vs Python.

Pickcode roughly falls under the category of "frame based editor" and there has been some research that suggests it's a potentially useful approach.

Time will tell if it works! I think there's still quite a bit of work on the app before I can start conducting that research in a formal way.
Some of them did go big on solar. BP Solar was a major solar manufacturer and subsidiary of British Petroleum (now just "BP"):

https://en.wikipedia.org/wiki/BP_Solar

ARCO Solar was another significant solar player in the 1980s:

https://en.wikipedia.org/wiki/ARCO#ARCO_Solar

The first American solar company to target terrestrial applications, Solarex, was acquired by Amoco in 1983:

https://cleantechnica.com/2014/10/24/sun-horizon-history-sol...

France's major oil company Total acquired a majority share of SunPower in 2011:

https://store.globaldata.com/report/total-to-acquire-60-stak...

There are a few reasons I can see why the oil companies never became "energy companies" with an equal emphasis on renewables:

- The required competencies for success in manufacturing renewable energy equipment are very different from those required for discovering/extracting/refining oil. The production side of renewables is high volume manufacturing. The oil companies aren't going to do any better than existing big manufacturers like Siemens, Panasonic, or General Electric (to say nothing of more specialized manufacturers focusing only on renewable energy components).

- The competition is fierce. Most of the world's top solar manufacturers from 15 years ago are now shut down, acquired, or have a tiny market share compared to the past. It would have taken a very lucky guess or the fortitude to endure years of losses for an oil company to keep an acquired solar company running consistently.

- Renewable energy costs are falling every decade, and fierce competition (see previous point) means that prices have to fall also. This is very different from oil where global prices go up as often as they go down. Going all-in on renewable energy means betting on a future of high volumes and lower margins. That may look lucrative for a company starting from nothing, but for an oil company it's a very Kodak film-versus-digital kind of institutional shift.
Dagnabit. Here we go again - this is a fantastic, pragmatic amendment to those notes ->

https://dalton.substack.com/p/letter-to-myself-in-late-2008?...

For a taste:

"Doing multiple small layoffs is a form of cascading failure. Do one layoff, but much much deeper than seems correct. Do it decisively. Do it so that you get profitable. In your case that is something like a 70% cut, not a 5-10% cut. Yes you read that right: a 70% cut. Cutting once and cutting hard allows you to reassure the people that are still here that you are truly profitable and won’t need to do it again. Doing a layoff and remaining unprofitable and counting on fundraising to save you is a stupid plan."
ctemplar is shutting down.

https://ctemplar.com/ctemplar-is-shutting-down/
I love Rust and use it everyday but the syntax bloat is something I will never get over. I don't believe there's nothing that could be done about it. There are all sorts of creative grammar paths one could take in designing a language. An infinite amount, in fact. I would really like to see transpiler that could introduce term rewriting techniques that can make some of that syntax go away.
>The policy for the first time directs that good-faith security research should not be charged. Good faith security research means accessing a computer solely for purposes of good-faith testing, investigation, and/or correction of a security flaw or vulnerability, where such activity is carried out in a manner designed to avoid any harm to individuals or the public, and where the information derived from the activity is used primarily to promote the security or safety of the class of devices, machines, or online services to which the accessed computer belongs, or those who use such devices, machines, or online services.

Seems pretty reasonable. There will be arguments over what exactly qualifies but it provides a clear guideline / reasons where someone at the DOJ can not charge someone with good reason.

It hopefully side steps some of the "what even is hacking / a security breach / dude just opened browser dev tools ..." type questions where they can look and say "He notified them of the issue, I don't think this was in bad faith." Now you're all out of those other weeds.

If anything hopefully this provides a good example to trickle down to other law enforcement agencies.
Sound like a reasonable take down. You are using someone else's logo.
Show HN: How efficient dev environments can increase development velocity?
And glass is actually recyclable.
https://letsencrypt.org/2020/12/21/extending-android-compati...
According to that bug report, K-9 plans to add this support in the next version!

(it was added to the milestone 17 days ago, but also updated today after the Fairemail news)
I'm curious to know whether OP has experienced full on addiction to substances, gambling or sex. Because what he's describing does not seem to be any of those things, more about complaints that Youtube's recommendation algorithm is causing him to stay on that platform for hours. I don't know what other "pleasures' he is alluding to but I could infer here and say OP is male and he is probably referring to internet pornography.

All of these things could very well be what you end up doing but its really up to the individual to make the choices and change. You can't really do this reading an article like this nor can you find any solace by identifying others with your problem because it quickly becomes Wounded Club.

Instead of growing wiser, you stay wounded, thinking there is something wrong with you and you just end up like OP, watching youtube for hours on end, reading hackernews/reddit comments. If this is something you like to change then you need to take action. Without action all the advice in the world will do you squat.

Unfortunately, as of late, its become fashionable and quite profitable to humblebrag about non-issues. Do you really think that if OP's behavior is possible if their life depended on it? I think not.

One is too lazy to make a change then who's at fault? You can throw whatever 4 letter medical term and write entire books on it. It won't matter. If it is to be then its up to me.
> I personally have tried to drop jQuery, but truthfully, its syntax is just much easier to use.

It's not just the syntax, it's also the expression-heavy and chained API which makes it much more flexible. As well as the set-oriented approach, which can lead to performance issues if you're not careful but is generally extremely enjoyable.

The DOM is an extremely procedural, plodding API, you need to name everything because you always need to set attributes and call non-chainable side-effecting APIs, not to mention the fecking NodeList which has to be converted to an array to do basically anything useful (in part because Javascript never really embraced iterators, and instead uses arrays for everything still).

I guess you could mitigate that with an "API adapter", but...
Yes, we all exist on treadmills and race the Red Queen nowadays.
This shouldn't be flagged... This was a totally valid comment which generated tons of fine discussion.
there are BTC futures on CME, but the margin requirements are high because CME knows BTC is garbage.
This did not exist the last time I looked. TIL. Thank you!
I know of the famous people that work there, and I don't have anything personal against them. My comment was more directed towards the company. I can't support the way Google and other data mining companies operate. Its such a waste of talent.
Yes, there are ways to extract signal from almost anything.

Eavesdropping on either the output of the headphones or the audio data before it leaves the computer/phone is the same for wired vs Bluetooth. The latter seems to be the mode used in the (pretty coo) hack you posted - it's software attacking the Realtek chip, which must be driven by the wire, so exploiting the quasi-equivalence/reversability of speakers/microphones and the back signal from the speaker diaphragms.

This still requires access to get malware onto the device itself, and I'm more considering 'drive-by' or remote attacks in my comment.

To do this against a ~1m wire with millivolt signals without putting a clamp around the wire seems pretty tough in contrast to cracking a signal that is explicitly broadcast with not great security. Not only that, while eavesdropping the signals on the headphone wires will yield only a conversation in the room, which can be much more easily gathered directly, cracking a Bluetooth 2-way comms channel will yield much greater access to the device.

For most of us, neither is a concern, but it certainly is for people who do have real security needs, e.g., I've read that the current VPOTUS specifically uses wired headphones for this reason. Many people who also work with Classified information, Controlled Unclassified Information (CUI), or just with business security issues have the same need. Failing to produce a device with this capability is a failure to address a key and leading market.
Can't believe this is not better known. I had huge problems with a git-lfs setup being slow on gitea, but I tried out onedev and its implementation was a magnitude faster. Plus configuring and launching the thing was pretty simple.... easy win!
The IPv4 address space is depleted, so remaining on IPv4 means deploying NAT everywhere, with all the downsides that come with https://en.wikipedia.org/wiki/Network_address_translation#Is...
There are definitely target dependencies. I just tested on Echo Dot, Echo Show, Google Home Mini, and Denon AVR-1913. On all but the Denon it obeys the autoplay setting. On the Denon it does not autoplay regardless of the setting. So maybe there are devices where it disobeys like my Denon but defaults to autoplay?
You no longer need services like tailscale or zerotier or VPN like wireguard just to connect to your home network. You also do not need static IP.

I host my own task manager, calendar, media center, document server, google drive alternative, google photos alternative on my home network and can reach it from anywhere. It is all possible with IPv6 without paying a whole lot to other services.

In future, I think IPv6 is going to play a crucial role in next generation of hardware devices and software applications that will bring people back from walled gardens to real Internet. We might finally have something where people host their own data like photos, stories at home securely and then they choose who should access or who should not. I know I am being way too optimistic but a man can dream.
Highly unlikely. The obesity epidemic is very well explained by diet and lifestyle choices, and regional variations in average body mass correlate with these explanatory variable pretty well.
When I first started programming I was pretty lucky to get a job at a games company. My first lead was a veteran who had shipped a lot of AAA titles and he loved his war stories. He was personally interested in performance and he would often cite hardware timings for specific cpu instructions.

One story he told a couple of times was about some grey beard who was before his time. The grey beard was once a legend in the company, often helicoptered into projects at the last minute to help them squeeze out the last bit of performance. His secret was he had a mental library of assembly language tricks applicable to the hardware of his day. But every few years his tricks were less and less relevant as hardware changed and compilers advanced. One day the grey beard was helicoptered into my leads project and everyone expected him to get them some gains. However, this was new hardware and none of his old tricks worked.

I think of this story whenever I see jQuery popup on Hacker News. There is always a strong contingent of devs who swear by this library. But to me, they are like the old grey beard who didn't update his knowledge as the times changed. At one time jQuery allowed them to be the hero and "Get Things Done" faster than their competition. But times have changed.

Argue with me if you must but take stories like this one for what they are worth. The writing is on the wall for jQuery. I was writing websites before jQuery existed, during the reign of jQuery and still today. If some candidate mentioned proficiency with jQuery during an interview I would be polite but internally I would note that the person might be out of touch. Not a red flag, but a yellow flag that I would follow up on. Nothing worse than bringing on a guy who claims to be senior/experienced and it turn out his old tricks won't work because they are no longer appropriate.
It was getting the favicon for the domain name of the emails not sending the actual contact list to anyone so you're spreading misinformation by shortening this to "The developer was scraping contact lists and using that to query third party servers".

Also that's very different than "sending/sharing contact list data.", it's not, it's querying the domain names to get the favicons. So I get why the author wouldn't want to declare that he is doing that when he isn't.

To repeat what I said below, reading the code, say you have in your contact list:

b@acme.com a@acme.com c@google.com

The code makes a single request to acme.com (to get the favicon) and one to support.google.com to get that favicon (there's a special case for google to avoid getting the new doodle of the day). That's it.

No one gets the contact list, the most anyone gets is that your ip requested a favicon.
Unity devs aren't on forums.

They're on Discord, Matrix, IRC.
At this point I can expect anything from this thread. Some conspiracy theory claiming that masks are manufactured by aliens.
Though for that little work, I'd rather have a small local library that implements what I need over standard DOM & JS parts instead of the full weight of jQuery.

Unless of course I need to support legacy browsers, then jQ is a no-brainer - that crap is solved there and I don't want to have to deal with it myself.

And while jQ is large compared to my little home-grown set of wrappers, it is small compared to all the other stuff many pages draw in these days, so perhaps size isn't a great metric to criticise it on!
it is exciting to see an upgradeable laptop actually be upgradable.

But I have to wonder what the market for this is? The primary use case I see for something like this is a gaming laptop, which this is just nowhere near being suitable for.

Outside of that use case, for the vast majority of compute workloads is being able to upgrade really a need? I have 2 laptops (well technically 3 but I don't count my work one really). A gaming laptop and my Mac as my primary computer outside of gaming. I tend to upgrade my Mac maybe... 4 or 5 years. Maybe even more than that. My Mac I got in 2019 and feel no need to upgrade anything in it.

My gaming laptop on the other hand... If I had the ability to upgrade that I would likely upgrade parts every year or 2... like a good a gaming desktop.

What am I missing here outside of the excitement of an upgradeable laptop? I don't want to diminish the work on that, I am just unclear the use.
Thanks, this is now standard it seems. TIL
This is good and bad at the same time. It's like having a law that says that the police can shoot anyone at will, and then announcing that since people were concerned that the police would shoot someone going to the grocery store, all police are ordered to not do that.

It's better than shooting people for going to the grocery store, but the real problem is the law.

What's actually happened is that the government interprets the CFAA so broadly that it's easily abused, people have been pointing this out in court, and the government response is to keep the broad interpretation but announce they won't enforce those specific abusive examples. What they should do is admit that their interpretation is too broad; this is smoke and mirrors to avoid doing so.
I think that will be up to the Integrity Department to decide?
But oil goes to $110/barrel sometimes (like it is now), and Exxon gets to make a ton of money.

With renewables, you're locked in for decades when you sign the contract. There's no upside swings.

And oil isn't a great business to be in either. Return on Equity for the whole US industry since 2010 or so has been ~0%
What are the others? Any recommendations?
Translation: as has been the case since the dawn of capitalism, companies going forward will have to turn a real, liquid profit from selling an actual good or service. Gone are the (highly anomalous) days of starting a purposefully unprofitable company whose only path towards “profitability” is a) getting acquired or b) endless rounds of VC funding.
They are only slow to compress. They are as fast to decompress, or even faster sometimes. Source: I tested.
The Trackpoint seems redundant to me because I can manipulate the trackpad with my thumb without leaving the home row, and for me it's faster and more comfortable than a Trackpoint.

Using your thumb to control the trackpad works better on Mac laptops because the Force Touch trackpad allows you to press anywhere to click. Most PC laptops have a "diving board" click mechanism which means it gets progressively harder to click the further you are from the bottom, and clicking near the top is impossible. Also, Mac laptops position the top of the trackpad closer to the keyboard than other laptops I've seen.

You can use tap-to-click as a work-around for being unable to click the top of the trackpad, but I find tap-to-click less usable for other reasons.
You’re saying that there’s an account with FDIC coverage that pays 5-8% returns? Please provide a link. This doesn’t line up with my understanding of banking regulations. The current risk-free return of a callable loan on dollars is less than 1%, so I don’t see how the FDIC would agree to guarantee 5-8%.
It was a screen shot of an app recognizing the logo, with their permission.
For me, I moved off of K-9 to Fairemail for one reason: OAUTH support. One of my accounts uses Outlook 365 and disabled support for IMAP (and did not allow app passwords).
There was a podcast a while ago discussing with Jio the reasons for going IPv6.

https://blog.apnic.net/2022/03/03/podcast-taking-ipv6-by-the...
Not OP, but I think I can add my 2c here.

It means (pun intended) that the meaning is not self sustaining term in our reality - there is no absolute meaning outside of our perception.
There is only relative meaning (as in what kind of meaning my perception assigns to things that can be observed by me - simply put - we create our own meaning).

It can be simplified further to there is no meaning or the meaning does not exist but in my opinion this is oversimplification and reeks of nihilism.

So if You look at things from the point of view described above the "why" question (which can be paraphrased to "what is the meaning") is wrong.
Feels weird that a law can apply to too much & be damaging to society to such a degree that the judicial arm of government just agrees it'd be awful to enforce the law & declares that they dont intend to.