skysight-inc/HackerNews huggingface dataset:
> I wasn’t thinking of reproducible builds specifically, more that you’d be able to disassemble the binary if you wanted to check [...]

Disassembling and analysing a binary (even with source available as a reference) is an *extremely* huge leap from comparing checksums. We're mere mortals. Get real ;)

> I did not know this. I thought iOS binaries are always encrypted.

I've just checked a bunch of iOS apps I have installed on my Mac (Apollo, Blink, Bandcamp, Organic Maps, iSH); ran strings, dyld_info, otool, etc on them, no walls. Maybe only the headers, rodata, linker metadata, etc are unencrypted? Should I keep digging?

> Why would they make the unencrypted binary available for M1? And now that they did, why would they bother still encrypting the same binary on iOS? (Do they still?)

No idea. But the binary being distributed on macOS and iOS is the same; or at least, it doesn't need a separate build/upload, apps published before the debut of M1 just work.

My company actually needs to release an update to an iOS app in the near future, perhaps I can take the chance to compare the artifacts.

> More that it could do something malicious with the data it has legitimate access to.

There are two possible scenarios where this happens: the developer being malicious, and a supply chain compromise.

In the first case, the developer risks getting ostracised by both the community, and the Apple overlords (e.g. for violating App Tracking Transparency). It's also a very risky move, since the traffic from the app can be analysed (e.g. on your home router) at any time, without the app ever knowing; and without e.g. certificate pinning, can also be snooped or MITM'd; this puts a timer/window on it. So in practical terms, for this to be remotely useful or worth the risk/effort, this would have to either be a narrowly targeted attack, and/or a one-off smash & grab. Again: not perfect, but the system has countermeasures.

The latter case is something we (as in: the entire industry) are still trying to figure out. Even with a fully OSS supply chain, it's far from ideal: https://drewdevault.com/2022/05/12/Supply-chain-when-will-we... - and again, in case of the App Store, with a third-party (Apple) review step, there is at least the idea of independently verifying the app's legitimacy.

> I was merely pointing out that “open source iOS apps” might as well be called closed source, since I thought it was impossible to know if you’re really running that code on your device.

You've never asked me, what was my own motivation for preferring free/open source software - and made a bunch of assumptions, not all of which held.

However I do share your view, that under certain (actually, very common) circumstances, software that is nominally free/open, can be considered closed in practical terms: and that, in my book, is rampant complexity. If the code is too complex for me to read and fully understand it, what use do I have from source access? Hence, my actual vote is for OpenBSD; but sometimes you just need to compromise to get stuff done.
here you go:

* https://centreforaviation.com/news/pilot-union-accepts-emplo...

* https://www.flightglobal.com/strategy/klm-clears-path-to-bai...

VNV is the pilots union of KLM, the Dutch national airline. IIRC they were the very last of the unions to sign up to the 'commitment clause' the Dutch gov required as part of their bail-out during Covid. Not a union without teeth.
Poe’s law in advertising.
Thanks MS for single-handedly breaking open source. You've done a huge disservice to everyone.
From UI/UX point of view, it even got slightly worse since 2020:
The user no longer needs to type the code. Instead, the same code is prompted and the user just needs to click "Accept" or "Decline", with "Accept" being emphasised.
They’re selling the dream to plebeians. Patricians have Burka’s Peerage, the Almanack de Gotha, Who’s Who or the Social Register. This is for insecure strivers.
Buried in the Kubernetes docs is also a link to the API reference https://kubernetes.io/docs/reference/generated/kubernetes-ap...
If you make a mistake with excessive resources allocation, you can get in touch with aws and ask for a refund and they will gladly do so.

I’ve had to do it a couple of times for personal and profesional accounts, and I’ve never had any rejections from them
A couple of months ago I had a debate with someone on this forum.[1] He was saying that 128-bit floating point numbers were needed for chip design for the precision.

It took a bit of digging, but I eventually found a paper talking about fairly modern VLSI design being done with 32-bit floats, which aren't even as good as 32-bit integers, but apparently are nonetheless "more than good enough".

A lot of people are under the mistaken impression that twice as many digits is "twice as good", and so they have this mental model that 128-bit is "four times better than 32-bit".

In fact, it is 4,951,760,157,141,521,099,596,496,896 times as good for integers, and "merely" 618,970,019,642,690,137,449,562,112 times as good for floating point numbers.

[1] https://news.ycombinator.com/item?id=31092448
Unfortunately us devs are really good in starting companies that sound smart, but have low real-world usage.
Successful companies generally speaking are rarely high-tech.
This sub looks like an echo-chamber for bitter spinsters. Not sure how anyone can recommend it in good faith
Healthcare spending of the UK is at the OECD median and is just 80% of the EU15 median. The UK also has an aging population which means its spending needs to drift upwards over time.

https://www.ons.gov.uk/peoplepopulationandcommunity/healthan...
This is pretty tremendous: https://codegolf.stackexchange.com/questions/19397/smallest-...

Chess computing is one area where there’s a lot of attention to hard details as well as the algorithms, lots of gems like this in the genre
NeXT :P
> Outside of math, formal logic seems actively misleading. For example, the "principle of explosion" (from a contradiction follows anything) is definitely not how people think.

It's generally very easy to find natural language constructs that rely on any given principle of formal logic. For the principle of explosion, an example would be "if you're thirsty, there's tea in the kitchen".
I don't really know Swift, but does the following line from that site make any sense?

"And with Swift concurrency, it’s easy to request weather data with just a few lines of code."
But it goes wrong very often actually (meaning the outcome is non repeatable). Most of the time you don’t find out, but if there’s two or more people doing the exactly same process (application for getting something out of say a government institution). You just need the forms to end up with different clerks to get two different outcomes.

This is why in Germany the common wisdom is for say claiming disability, you will always have to reject the first ruling, no matter what. You will get a better result the second run through (maybe even reject that, too).

Imho it’s the curse of complexity. But there is little incentive for bureaucratic institutions to „refactor“ their processes, as it would mean less headcount.
In most of the modern world it's not capitalism Vs communism but rather how we define freedom and democracy.

Live is a lot better here in Switzerland, but we are just as capitalistic, and nearly as gun loving as the US
Your continued use of the word parasite to describe a living human being is pretty disgusting so I'm not going to continue to talk to you.
https://mithril.js.org/autoredraw.html
Why is 50 a cutoff? There are lots of smart successful guys in their late 50s, early 60s who realise that their time to have a family is almost over.
Asset-Level Transition Risk in the Global Coal, Oil, and Gas Supply Chains
I guess then causality will be broken if some external force introduces FTL/time travel to our handful of dimensions. Looking at our 4D hypercube of space time, any point in that x|y|z|t space becomes mutable, whats the problem? ;) (I know you need at least one new "time" dimension then to have mutability, this is difficult to talk about. And then somebody in 6D will find that very cute..)
The Gray & Farrar won’t let the turnover & growth get in the way of ensuring real exclusivity. :)

https://companycheck.co.uk/company/OC346350/GRAY--FARRAR-INT...
> But my guess is that they only need 3 or 4 clients a year to run it as a sideline.

I mean, keeping a website and limited company running for a year costs a lot less than the minimum £15k quoted in TFA. They could have had one client since they incorporated in 2009, and be in the black.
Ok, but can we keep the ads off HN? :)
pros and cons, will depend on the type of thing a team/company is working on. I've been on the receiving end of this with some negative experiences as well.

Team1: "Hey, we've launched a new initiative a few weeks back. Important for us to be able to add one field to the response of your internal billing API. Can we discuss what that would take?"

Team2: "Hey, probably a few hours of work. But, we just had our quarterly planning last week. In 12 weeks you can submit for Q2, and _maybe_ we will plan it somewhere in May or June."
Since the distance between two galaxies isn't made of stuff, it's allowed to 'expand faster than light'. There's other examples of the same thing, and we know how to do it. But it can't be used for anything useful.

If you point a light at the moon, and slide your hand in front of the light, the shadow can also "move" faster than light accross the surface of the moon. But the shadow isn't an object that moves to the side, it's really many lightwaves moving forwards (or their absence), so again there's no real thing moving faster than c that could transmit information.

Some materials can be made to have an index of refraction below 1, so that light's phase velocity becomes 'faster than light' (while the group velocity, which is the speed of light, remains the speed of light).

So you can end up with speed values in nature above c, but in all those cases it's not matter or information, so you can't move anything tangible faster than light.

You can see that as an outside-the-box where things move faster than light, and that's fine, but these can never be used to go back inside the box with some real thing that has moved faster than light. That'd break the box, and so any outside-the-box you create can't be usedul inside
Seems completely unrelated to the comment at hand
This really needs a (2013) in the title (or at least a "pre-Spectre/Meltdown").

The "up-and-coming" (back in 2013) high-resolution timer performance.now() exists on all browsers for a long time by now, but is clamped to milliseconds on some browsers because of the Spectre/Meltdown mitigations. The web audio timer is also affected by this precision reduction, but I don't know what's the current situation across browsers (I was actually hoping that the article would talk about this).

Anti-fingerprinting settings can also heavily reduce timer precision.

In short: timing on the web platform is (currently) an incredible mess.
I don't understand the time scales here. Three years of very wealthy noble women marrying less but still very wealthy commoner men lead to major educational reform less than 10 years latter through changes in the house of lords?

Even if such a blip of an event were to have an effect, it would surely happen on a generational timescale (20-30 years) rather 5-7 years later. These peerages are quite literally generational inheritances of titles - you don't suddenly become a lord after getting married.
I did not know the DC-10 had bit of dodgy record and oh hey, it's McDonnell Douglas. Again! What a coinky dink
Unless nautical cubits are different from land based cubits
Obviously to fit my point into what amounts to a tweet I’ve hand-waved a bit, and your less hand-wavy napkin math sounds more or less plausible. 5 standard deviations sounds like a lot for anything that can be called “jobs” plural: being an Olympic gold-medalist is a “job” in some sense but I think the idea of job has started to break down a bit there. Ditto Fields-caliber mathematicians, etc.

I don’t think I’ve ever heard anyone seem all that surprised that senior but not world-famous attorneys often bring in 7 figures, but I routinely see people act not just surprised but almost indignant that senior software people sometimes do.

I don’t think we strongly disagree as long as I’m clear that software pay seems to be growing roughly in line with the importance of software to life and commerce. My point was, why should anyone be surprised or even upset by this?
My goal is to reach financial independence ASAP so I can contribute my effort 100% to something that matters.
You have to be careful about referendums too, especially when the government organizing them disenfranchises a group of citizens that are very likely to vote a certain way (UK migrants in the EU).

People didn't vote to remain in the EU because they were scared, no matter how much you want it to be that way. There are real tangible benefits of EU membership that UK citizens didn't want to loose.

Last I checked the UK had left, it has not been stopped. That one thing caused a lot of problems for the conspiracy theorists and anti-EU crowd who were suggesting it was not possible for a country to leave. Now the goal posts have been moved on that argument to the EU trying to make it "as hard as possible".

I wonder if leaving the UK is harder than leaving the EU. We might get to find out soon.
They will continue to use UIKit / AppKit for their own apps. They will just make it so that doing so will require a private entitlement. 3rd party apps will be restricted to SwiftUI.

Apple is very much in the camp of maybe tolerating third parties, but only so long as they only ever do stuff in the bounds of what Apple wants them to do
There is no doubt Scrum is the answer here. We should also use story points. Then it can't fail.
How China’s Surveillance Is Growing More Invasive
I wonder if the author is just being incredibly naive about the real business here.
Quite right, except we are then talking about compilers and not OS APIs.

UNIXes are the only OSes were there is an overlapping between OS APIs and libc due to C's origin.
I have a bigger concern with myGovID. It pushes a notification, with "accept" or "decline". What happens if you accidentally hit "accept" when it wasn't you that logged in? There is no way to end a session/revoke a token from the app.
This would be way overengineered, all that's needed is a local monotonic time source with a good enough precision of somewhere between 1 to 10 microseconds. There's no need to synchronize the time with other sources, unless the goal is to control peripheral devices (which is out of scope for WebAudio anyway).

The other problem of (traditional) WebAudio is that all work needs to happen on the browser thread which runs in time slices at a very low frequency (usually 60Hz or the display refresh rate).

There's now a solution called audio worklets, but those aren't exactly trivial to work with unless all work can happen in the worklet thread (for instance you need to write your own ring buffer to push commands or sample data from the browser to the audio thread).
Or the typewriter’s monkey
My biggest gripe with YAML is significant whitespace and the inability to use tabs for indenting, so still a No for me.
Maybe faster than light travel is clearly observable in dark matter or quantum entanglement
Pricing page is on the way!
Should be up on our website this week
I think they were just being playful.
Apple could use this to build a weather app for the ipad. Calculator kit when?
I had the weirdest reaction to that last sentence.

As an engineer, the first thing that went through my head was "lots of photos of their faces available, easy filter. My face specifically: hard filter"

But as a person it was "ok wow, f_ck you too then?"
Apple has not that many products. The opportunities for sophisticated marketing based on purchase history are pretty slim. If they wanted to run a strategy like “market iPads to people who already have iPhones and Macs” starting a credit card business is a pretty roundabout way to do that.

I think it was clear from the beginning of Apple Pay that they’re running a very long term embrace-extend-extinguish on Visa and Mastercard, and everything in their product roadmap to date has been consistent with that, especially opening up native tap-to-pay acceptance on iPhones.
Ask HN: Lead Architect Experience / Expectations
Dear HN.

I am going to start soon a new position as lead architect. I would appreciate to learn from your experience and expectations in this and towards this role. Please start your response by sharing your own role to better understand your relationship to your lead architect.
Surely people have now learnt when it comes to fruit, don't drink it, eat it.
You can pretty much list the highest-paying UK companies on levels.fyi. There's FAANG, Bloomberg and a couple of other financial/trading companies. The financial companies are the only ones to engage external recruiters.
I wasn’t clear. Pilots absolutely have strong unions (which is partly responsible for their levels of pay).

I was contesting that pilots are paid more than developers. If you have data that supports that, please share. It seems like an absurd claim.
That's not how percentiles work. They could be almost exactly as rich for what we know, but given the context (extremely high wealth inequality) four deciles would likely imply many orders of magnitude in absolute wealth difference.
The first full GA version of the Titanium SDK is available. A community made release powered by TiDev, Inc.
I don't think this true at all. Your intermediate SWE job will be adding functionality to a React page or writing REST endpoints in Python. You will reach this level with around 2 years of experience.
I don't see this nearly as demanding as the 10+ year preparation to be a neurosurgeon, or to be a teacher.
I think being an 'average' dev is pretty easy after all in the grand scheme of things.
Location: Los Angeles
Remote: Yes
Willing to relocate: Maybe
Technologies: C, C++, C#, Python, Ruby
Résumé/CV: https://justin-lloyd.com
Email: wanted@justin-lloyd.com

.' `"###---------.......________
/ ___......______________ ____ `\
: .j"""' ___ __ _ `T`#;
|/ : # # ## #\\ # # # # # |
`; # # # #__# # \\# # ## # | |
/ #/ \# # # # \\# # #__ #_# .-#'
< ____....ssssssssss....____ '".
| -~ justin-lloyd.com ~- "|
| \\// ,'
` -(@ @)- KNOWN ALIASES |
`+----(_)--oOo--+ Principal Engineer|
:' | Booking no. | Technical Lead;
; | 0xC0FFEEFULL |Head of Engineering/
< +-oOo----------+ CTO'.
,' Last known location: L.A. (remote) ;
| /
" IS ACCUSED OF: \
'. 20+ yrs shipping $2B+ in product `,
/ Robotics & autonomous vehicles ;
l Embedded & firmware programming `:
; Creating AAA games & VR/AR tools l
| Building low-level device drivers ;
| Computer vision & sensor fusion /
| |
| PREFERRED MODUS OPERANDI: \
| C, C++, C#, Python, Ruby, Golang, >
| ASM, Rust, computer vision, SLAM, ;
\PyTorch/TensorFlow, GPU, gstreamer,|
\OpenGL/CL/CV/AI, Solidity, Lisp, .
>body tracking, robotics, CUDA, ~`
. autonomous vehicles, Clojure !,
! .'
.` ARMED W/: MSc S/W Eng, MSc AI/DL,`.
| MBA, MS ProjMgmt, MBA Entrepreneur ;
! |
| Known associates: Ericsson, Apple,/
| Activision, Intel, PayPal, Facebook|
\ ___ __ __ _ _ _ _ ___ \
|(|_|` _) (__) / \ / \ / \ / \ (|_|` ,
|.|_|) /__ (__) \_/ \_/ \_/ \_/ .|_|) :
__: If seen, contact: |
\ `'-._ wanted@justin-lloyd.com | /;
\ `###----....__ _____.....---+-#'/
`-.__..-------.. `:,-' _.'
`##--...___...--###''
Great article. Buidling a chess engine is an awesome way to level up as a software developer! https://blog.devgenius.io/level-up-as-a-software-engineer-by...
Academic funding?
Domestic matters are inherently too complex to predict. Through my life I've known many long term happy couples with substantial cultural differences and seen a lot of divorced in ~5 years couples from similar backgrounds.

The US is definitely a more difficult place for the couple to be settling, though I know some there. I find European countries are simpler logistically in an absolute sense (not necessarily familiar to an American) and the average European who marries someone from a different continent is starting from more knowledge of intercultural complexity than someone in the US who doesn't really need much more than shallow awareness of other cultures.
Cryptomuseum.com is such an amazing website.
What about:

The wheel

Plastics

Internet

Memes
Many bureaucracies took "throughput, latency, user friendliness" personally.

So, out of sheer spite, they decided that should mean "the slowest, least responsive, least friendly thing ever so people give up and piss off" :D

Also helps a lot of "fixers" who work in the system, get paid government wages and want to make some actual money.
Primitive tools / Survival builders: the carnage left behind (2021)
Handy for some rock paper scissors entropy
I looked into this when I worked there almost 3 decades ago. It was originally the sample database for Microsoft Access, of course, and was the first of its kind. I surveyed pretty much all the database managers made for personal computers at the time, and it was always a pain in the neck to work up something like a usable sample set. It was inspired by (not copied from) customer lists, but of course extensively massaged and completely removing anything that might accidentally seem identifiable. Even back then Microsoft was high profile, so they made sure there was nothing that could get them into trouble. Putting it together was a fairly complex process with considerations for localization, fake city names that didn’t sound bad, somewhat realistic record count, etc.
You're probably going to seriously confuse someone familiar with the "actor pattern". Look it up.
Not related to dating, but gave you consider freezing down your eggs and get it done when you manage to find someone?
Having used yaml for anything from configuration to Gitlab CI pipelines, I can't see how JSON could possibly improve the situation. It's an ugly subset of YAML more readable by computers at the expense of being readable by humans.

Yes, if you want, you can write some terrible YAML. It's your project though, you don't need to make your YAML terrible. The same is true for everything else about your configuration, code, and infrastructure. I've seen some terrible JSON configuration that used the fact that some JSON parsers will overwrite subsequent reuses of keys as a method of documentation, for example.

I know that in YAML 1.2 you can just enter JSON into a YAML file and it'll work if that's what you want. I haven't found a real life example of why that would be better, though.

If you're going configuration format purist, use XML. It's actually good at requiring you to follow the schema and there are XML parsers for absolutely any platform. You can write conditions in an accompanying XSLT file for "active" configuration.
I do it old-school. I go shoot my data in the wild and prepare it myself on the kitchen counter.
Up to 39.15M KDDI mobile lines affected during nationwide disruption
It wouldn’t change anything about the job description. Even unionizing doesn’t mean that developers suddenly get more say in how uselessly their time is spent.
I don't really understand why people would use something like that instead of writing pure css. The amount of the code you're writing is same, plus you need to remember class names.
Khan Academy was my teacher
I hope not :-)

It is probably ok for estimating how many pavers you need around a circle garden bed.
One day I'd like to write a rubbish Chess Engine purely for personal use, so that I can play chess against the computer and actually have a good probability of winning, instead of getting thrashed even on the 'easy' setting.

The way my brain works, the act of writing the engine would probably also level up my chess playing skills as a side benefit.
Marketing people are some of the least creative people. There's clearly some fad in their industry, and they're pitching it to everyone and making bank.

I feel bad for the mastodon people being swindled like this.