skysight-inc/HackerNews huggingface dataset:
They used an "invisible 0-click exploit"; where you don't even actually receive a text message or need to click any links or attachments. https://citizenlab.ca/2020/12/the-great-ipwn-journalists-hac... Would Lockdown Mode prevent those?

And what about the SMS equivalent? https://www.firstpoint-mg.com/blog/step-by-step-silent-sms-a... Apparently the German authorities sent 440,000 "silent SMSs" for tracking purposes in 2010: https://www.heise.de/newsticker/meldung/Zoll-BKA-und-Verfass...
I also take it to mean that most of these hardening features will be able to be enabled by configuration proflies / MDM anyway. Lockdown mode being essentially "Apple being the MDM for individual who don't otherwise have an MDM."
Once specced up with memory and a bigger SSD in Australian dollars, the difference turned out to only be about $150, so I got the pro instead. Was really looking forward to the air, so very disappointed in how it turned out price wise.
There's a lot of siloing along lines of role, power and seniority
going on in the comments. In any suboptimal communication situation
like this try for Communicative Rationality [1]. It's no use different
groups inventing their own languages and rationales for speaking past
one another as a form of combat.

To pick the most important ones (in my opinion) keep it:

- Sincere

- Relevant

- Falsifiable

- Goal directed

Also keep it inclusive and acknowledge conflicts and power relations [2]

[1] https://en.wikipedia.org/wiki/Communicative_rationality

[2] Some people do not like having power relations made explicit
(because they essentially derive their power from subterfuge and
insinuation). Openly doing this may cause trouble in some settings
(see "48 Laws" by Robert Greene).
Have you given a notched device a fair shake? Not suggesting you haven’t, but I never notice the notch on my iPhone<some number here>

I figured it would drive me nuts
I lost nothing, but I can empathies with people who are screwed.

It’s not that Bitcoin or any alt coin has X paper value right now, it’s nobody can get out without someone else getting stuck holding the bag. The underlying system is predatory because mining isn’t free so it’s a negative sum game where people have already cashed out.

I remember being saddened when it was less than 1/1,000th isn’t current value I realized how many suckers where lining up for the fleecing. I briefly thought the odds are very good it’s going sky high, but I didn’t want to be part of someone losing their retirement when things eventually fell apart.
> Or you could rewrite your application in part or in full in Go, Rust, C++

Or you can just throw more hardware at it, or use existing native libraries like NumPy. I don't think there are a ton of real-world use cases where Python's mediocre performance is a genuine deal-breaker.

If Python is even on the table, it's probably good enough.
There's some great stuff in here I won't go over, but it's mostly performance theater. Management, and people, love to talk, but especially management. I'm always amazed how some people would rather have a whole day of meetings to figure out what should happen, when one person could just test the theory in an hour or so. But people love theory and hate facts. In theory no one is wrong, the conversation can go forever, and it's fun to have your mind think about something less mundane for a while.

I'm reminded of a study although the link currently evades me. It was something about who feels best after a meeting, feeling the meeting was productive. It was usually two groups, which many times were the same person - the organizer, and the manager. Both of these people feel like even having the meeting is some kind of grand gesture of teamwork that is good, even if it was a complete waste of time and sent your team angrily in directions toward bathrooms on different sides of the building.

The more people present at a meeting, the more useless they are. Of course the prime example of this is the "all hands meeting". Never go to these. They are a waste of time, and at worst, you can ask anyone else what else happened.
It simplifies the parser somewhat, but C3 restricts the grammar somewhat from C, so it's possible to unambiguously parse it. However, for people writing tools using `fn` is much easier to parse for. Say you want to write a program that dumps all function names in a file. With `fn` that's a simple regex. Without it you have to do more work.
He's already using Go. Does Nim provide any "killer features" that Go doesn't?
Hi Jeff,

I currently host the largest collection of bilingual Manx[0] <-> English texts (~1MM words). How would I formally get in contact to chat about the steps to make machine translation available (and would there be grant opportunities available for further production of machine-readable data?)

[0] https://en.wikipedia.org/wiki/Manx_language
If you are going to make swag, make it in black. I wouldn’t be caught dead in yellow or blue.
Agreed. I can't parse the details of this article too well since I'm not a very smart person, but anecdotally I grew up with high heat and high humidity virtually every day, and I also had (gave) a strong aversion to drinking plain water (I'm better about it now, but my teeth suffered greatly for a long, long time due to sodas and juices until modern dentistry got me fixed up). If I understand this link, I should have died. So should most everyone else who lived in the same region.

Now OK I am not a "climate denier" but I feel the need to remind Northern hemisphere people that it's Summer. That's all I'll say on that topic for now.
That's fair, I was mostly just responding to the parent comment's point about language models running into potential difficulties in languages where the men and women speak differently (though I don't speak Dakota, so the gender-specific differences there may be more pronounced than in Arabic, where there's also the "default"/neutral option of just picking the masculine version of verbs unless you know the subject(s) are female).
Exactly, from an employer's point of view, they want someone that can work well with others and not be the "lone genius" stereotype. Most companies don't need people to innovate, they just need people that can maintain and work within their boundaries.
Also, malicious fighting over selecting and deselecting destinations
'hummus' Slack notification sound
Cybercriminals and terrorist organizations mostly pay the private companies Apple refers to here to do their dirty work.
Almost nothing in your comment is much of an obstacle at all.
I just did an experiment with Lua 5.4.4; moved the file luac.c to another directory and then executed "gcc *.c -lm -o lua" in the src directory; compiled the vm without an issue, and "./lua" does what expected.
Launching CIS Force Accelerator program for startups
> On the bright side, Amazon will send a complementary Blink Mini (plus a year of Blink Subscription Plus) to all affected customers. The Blink Mini is nearly identical to the old Cloud Cam, though of course, its a bit more modern and offers better integration with Alexa devices.
Newton's law of cooling just says that your loss is going to be proportional to the temperature difference. But 1) the capacity of the battery is also proportional to the temperature difference, so the loss as a percentage of total energy stored should be roughly a constant. 2) If the application is home heating, you can't heat the home to a higher temperature than the battery itself, and you also can't easily group together the energy into a higher temperature. You would on the other hand want a high temperature for the heat to transfer quickly from the convection medium to the actual houses. So starting hot would make a lot of sense despite the downsides?
This strategy of "Pester friends at Google" instead of them having legitimate customer feedback avenues seems odd to me. Every few days we see something rise to the top of HN and other social media sites about areas where Google/YouTube is doing problematic things and every time we "solve" it by having people pester their Google friends.
So what they want isn't the power to turn off JS in their own browser, but the power to turn it off in other people's browsers (at least the browsers of people developing websites).

More seriously, I guess they might want a way of avoiding sites that don't have a good no-script experience. Perhaps if there were a trustworthy way to vote on that (or detect it automatically), someone could offer an extension which puts scary red boxes around hyperlinks which point to such sites.
AWS Outposts ?
So glad it's Facebook doing this and not some other weird company, when translating and delivering information to every culture on the planet it's good to have a trustworthy, ethical company without any past (or heck, even any current, ongoing) issues in spreading misinformation around the globe and contributing to the rise of fascism across the world while profiting massively off of it and denying any culpability, making sure it all goes smoothly.
I love being a linux/BSD server admin.

I totally cannot be arsed being a desktop admin for either.

So I use WSL2+Xsrv to give me my -client- environment on windows and then use that to ssh into servers to actually do stuff.

Meanwhile, windows acts as a fat driver layer that provides firefox and my X11 setup and easy access to games.

I am in no way recommending this. But it works for me.
Well, good generics and sane error handling, for two examples.
Anyone who knows or is learning another language can easily tell you that the "warping" methodology of MTL is insufficient. There was a really good video by Tom Scott [1] that talked about this but the short version is that there is critical bits of language in context and inferred by speakers. Any accurate MTL needs nearly full context both on the page and in the cultural moment, in addition to probably needing to ask questions of the author.

[1]: https://www.youtube.com/watch?v=GAgp7nXdkLU
he says it was a work project, so may be company money. That would explain splurging on Intel parts (and pretty niche/expensive ones at that)
Could you please provide the link about "hardware nested virtualization"?
What’s the best etl process for transferring the data?
I'm pretty sure that if the US Government wanted to be a BTC whale to mess up El Salvador, we would be able to do so and barely break a sweat.

The price of BTC, even today, seems very easy to manipulate.
So basically, these distributed systems are heavy on the light distribution because they actually rely on the trust of caretakers and that access.

So we basically have a worse banking system even if you believe crypto is a currency (it's not)
> Where are all the senior front end engineers?

There's heaps here in Australia, G'day!
If you're in the habit of worrying about persistent malware on your device, "regular restarts" are one of the best things you can do.

Much of the low interaction malware is only persistent in memory, so a reboot will clear it until they get their claws back into you. Depending on what the attack path is, that may take some while - and using those attacks is still somewhat risky. "Having to re-pwn a phone every 6 hours" is a lot more risky to an attacker than "someone who never reboots their phone and never updates it."
Volume to surface area: for every doubling of diameter you have 1/16th the losses, before factoring in insulation.

1/16th probably sounds high, but the extra halving is because flow rate increases as radius^4, not cubed as one might guess.
LEGO has been on a tear for the last couple of years after being a little slow to get behind trends. IMO it took them a while, but now they are expanding so rapidly that I expect a reverse issue to arise in the next couple of years -- LEGO fatique from having gone too broad and causing a massive after-market of limited edition scalpers, followed by floods of new choice overloads.
> They used an "invisible 0-click exploit"; where you don't even actually receive a text message or need to click any links or attachments.

AFAIK, yes, because Lockdown Mode disables any non-audited plugin code from running in response to the receipt of an iMessage message (which is what "disable formats other than images, link previews" et al really means under the covers.)
Calling people by their preferred pronouns isn’t politics, it’s not being an asshole.
Did you sense that it was a lack of experience or was it nerves?
I don't think they're talking about links but about content. No need for real links when the content is within reddit. For instance, I've curated my subs to all my hobbies: farming, watch collecting, coffee stations, coffee in general, musician fan pages, etc and they're mostly very small and have content very much like the old web I grew up on.
Those are great points. I asked because I have seen people get excited about new JS runtimes a lot when Deno came out, and not understanding that it was using V8 under the hood. So many people thought they wanted a "new TypeScript runtime" that would "compile to WASM" without really thinking through how that would work or what it would be. Spoilers: it would work the same as V8.

But thanks for those specific wishlist items, which are much more sensible! Isn't your last item WASM though, with its interface types proposal?
I know what the label is, but from a strictly technical point of view, a breach is a breach, an exploit is an exploit, this is not like AI research where you need server farms.

From my own experience and from the postmortems I have had access to, most of the time this a work of patience and skills.

In my opinion, this is a way of saying to the public that their devices is secure against everything but state actors, this is simply not true.
All social networks with thorough mappings create vulnerability because of the trust people have in each other.
ffs, that's about time.
I can brush my teeth just fine, I just hate doing it and I felt like this field had been lacking advances like this for a very very long time.
> Optimal community size would be 200-300 homes to realize the economies of scale. The number of systems would remain the same; only the number of boreholes would need to increase

Decentralized systems like this one are cheaper and faster to build so it makes sense that the number of households served is on the low end. That doesn't mean it's not useful tech.
When you have unlimited resources to be a helicopter parent and no requirement to do any of the typical parental scaling work of raising them yourself, why not?
If the user has large text because they can’t read easily, how is clipping it short going to help them read it?
Agree that it's an abstraction that OP doesn't know the definition of, but there's also a tendency for people to

* over-abstract (where you could replace the abstraction name with a slightly more verbose but clearer definition)

* over-generalize (it's a meeting about handling returns in multiple physical locations but they keep talking about "channels" instead of physical locations)

* propagate abstractions without actually understanding the underlying concrete implementation (they know omni-channel means having multiple ways to return, but not exactly which ones)

But yeah as the consumer of abstractions you have to dig into the definition and understand the context in which it's applied in order to understand what's going on
There is no meaningful difference if you are a modestly attractive target. The prevailing level of security is such that a single technically competent individual with a year of time can completely breach the commercial IT systems of any Fortune 500 company in the world and steal essentially all of their internal documents and IP and materially disrupt their operations. That is the maximum level of security in commercial IT systems.

So, if you have nothing worth more than ~$1M and indefinite disruption of your systems is worth less than ~$1M, then there might be a meaningful difference. However, basically every business is beyond those levels, so quantifying the differences in a professional context is kind of like discussing whether a tshirt or a single piece of paper provides more protection against a gun.
Why is that not enough? What do you mean? Because it would take too much time?
I've been consistently getting 3 or 4 repeat messages that evade spam filters. They all seem to come from 'life' TLD domains. Marking them seems to have little effect as very similar message will arrive straight to my inbox, but a new domain is used.

I wish I could stop winning makita drills.
shades of Wall-E

entertained while we're chaffeured from one diversion to the next
It isn't hand-written, artisinally crafted HTML on a self-hosted server so obviously it's shit.
Hey mate, as it takes courage to open up like that, I congratulate you for taking that step.

Because you said you are losing the drive, I strongly recommend to work from within so that you regain your drive, confidence, mojo, whatever the inner thing that will make you wake up with the desire of conquering the world.

Before spending those 50k, what do you think about joining a gym, maybe hire a coach to help you lose some weight and get into a better shape?

Regular workout will boost key hormones in your body, ultimately leading to increase in your drive.

I think you can do it man.

Don’t give up and stay strong!

Book recommendation:

You Can’t Hurt Me - David Goggins
How LinkedIn Redesigned Its Flagship for Hybrid Work
Space Force launches new intelligence unit: Congress voices concerns over growth
The creative elements in MCU films are (mostly) not director-driven, they are franchise-driven. You need a 'good' director and a 'good' script, with 'good' and 'famous' actors, from there, so long as the creative leads are professional and the budget is there, you're good.

I believe that DC suffers from bad creative direction and bad scripts. Most of the rest is workable.

Star Wars suffers from bad stories/scripts and Kathleen Kennedy interference politics.
I quite like this. Looking forward to continuing to use it.
Not having client devices accessable via unique IPs is a great security feature. Certainly an unintended side effect but NAT is what is dropping unwelcomed incoming traffic on consumer devices.
"We had a good team on paper. Unfortunately, the game was played on grass." - Brian Clough
> far more children are not the children of their named or assumed father than was suspected

The origin of this factoid is one British study about paternity tests for fathers on some street. However, the methodology of that study was deeply flawed and the fathers self-selected (i.e. they already suspected they weren't the biological fathers). Later studies has put the rate of "false fatherhoods" at about 1%. https://www.iflscience.com/false-paternity-isnt-actually-wid...
> But: The one big question I have with elevator UX is this: why isn’t it possible to deselect a choice? So pressed 10th floor but wanted 11th. There is no way to press button 10 and then button 11 to correct that mistake.

In many elevators, one can double-press a button to deselect it.
Even after recent professional experience in modern PHP (7.0+ are much improved over legacy PHP) I'd be hesitant to choose this framework over something like Electron/Tauri, but of course to each their own. PHPDesktop would have to be much nicer than Electron for me to consider using PHP for my application logic.
Actually, it's sort of a proven conspiracy. Edward Bernays (Freud's nephew and student) went to America and basically invented modern advertisement. His system of propaganda found its way back to the likes of Goebbels and other unsavory types.

"The conscious and intelligent manipulation of the organized habits and opinions of the masses is an important element in democratic society. Those who manipulate this unseen mechanism of society constitute an invisible government which is the true ruling power of our country. …We are governed, our minds are molded, our tastes formed, our ideas suggested, largely by men we have never heard of. This is a logical result of the way in which our democratic society is organized. Vast numbers of human beings must cooperate in this manner if they are to live together as a smoothly functioning society. …In almost every act of our daily lives, whether in the sphere of politics or business, in our social conduct or our ethical thinking, we are dominated by the relatively small number of persons… who understand the mental processes and social patterns of the masses. It is they who pull the wires which control the public mind."

Quite conspiratorial if you ask me.
Different people who specialize in different aspects of security can be working on different things at the same time; and contrariwise, experts have comparative advantages and would be mostly wasting their time working outside their nich.

In other words: there's no "instead" here, any more than there's an "instead" between e.g. UI work and backend server work. Different people, different competencies, concurrent capacity.
This is going to be tough.

Rail is absolutely fantastic for commuting and short haul city to city, but air still reigns for medium to longer distances. The key advantage flight has is you don't need to maintain much infrastructure between the termini apart from radars, ATC and other such stuff. Trains need rail, signalling, bridges, tunnels, power, fences, flora control, flood management, etc. Flights are also quicker, which means fewer pilots, less crew, fewer planes, less maintenance, etc.

That makes long distance rail quite expensive by comparison, if left to the free market. The only way this works is huge government subsidies, but my gut feeling is that'd be better spent on developing zero emissions flying, as I don't think flying is going anywhere. I'm guessing biofuels, synthetic fuels or maybe hydrogen will replace fossil fuels in flight.

That being said, I love travelling around by rail and I'm generally a train nerd, so more investment in the rail would make me personally happy.
Seems like just going with bash would be more straightforward?
For rackmount, Dell R210 II and later R2x0 seem nice short-depth 1U, sometimes for even less money.

For quieter and less Watt-hungry rackmount in the living room, I ended up moving towards Atom-based ones, currently from Supermicro, with fans replaced with Noctua. Plus a 4U chassis for GPU, with a consumer motherboard (non-ECC RAM).

I recently again almost redid a home K8s production cluster using RasPi 4 8GB (and also looked at products from Pine64 and Turing Pi and others), but product availability is terrible right now. Meanwhile, used x86-64 hardware is easily available, and easily runs official Debian Stable perfectly.
Exactly. What would superman do?

https://www.smbc-comics.com/?id=2305
Uh.... shit. Hopefully that's a look en vogue at some point during that time. Norwood 3 vertex snuck up on me over the last year and my chest hair seems like it got bleached overnight.
A T-shirt that makes us invisible to smart surveillance technologies, so are
we misleading the artificial intelligence?
Variants... that's a bug in the documentation. Thanks for finding it!

I agree about strings. There are basically two strings we use: the string builder and the "string data" which is any sort of slice of bytes that can be interpreted as a string. But starting from there are a lot of different ways one can name and implement them. I'm doing some experiments and before those are finished I don't have a strong opinion.

One thing to note though is that C3 does not have RAII or move semantics and so the C++ std::string or similar isn't even an option.