skysight-inc/HackerNews huggingface dataset:
Isn't it potentially a replay attack the poster is describing?

In a simple form it seems like this:
The attack is you have a briefcase that contains specific RF transceiving components in it. You turn the brief case on in a hidden place, leave it, it records data, you come back to it later, and then press a button(s) that replays those RF signals.

Perhaps, there's some very weak cars that don't even need a replay, but are vulnerable to a master key, or bruteforce, or something else.
The importance of those Interop conferences cannot be overstated. Even the simplest, most precisely worded standard will always be implemented differently. Those conferences were a very smart way for the customers to apply pressure to vendors in order to get them to work out their incompatibilities.
> As a freelancer in IT: yes, 100%. If I keep rebuffing my clients, they eventually stop calling.

They might, unless you're the best freelancer in a niche, and they have no other choice.

The difference between you in that situation, and a driver "working" for Uber, is that you or your clients decide if you get any work in that situation, while for the Uber driver, Uber decides if you get any work or not.
Your criticism is fair, but I’m not sure there is a better framing. Between corporations, political elites, and the media, the most influential and highly visible folks that identify as being “on the left” are much more influenced by Judith Butler than by any socialist thinker.
> I’m using productivity as a measurement. Ideally, productivity accounts for inefficient work by comparing inputs (labor) to economic outputs. The U.S. is more productive in this sense, so it’s more than just butts in seats.

Actually, the differences are quite small and in 2017 Germany overtook the US in labour productivity:
https://ourworldindata.org/grapher/labor-productivity-per-ho...
Ok now I have second job managing all my subscriptions - can’t wait to have to call and subscribe/unsubscribe to the ice maker on my fridge, the dimming from function on my lights, the time zone function on my watch, increased battery life on my laptop, etc.
fwiw, I wouldn't personally be a massive advocate of supplements - dietary sources are usually better if possible - so not sure whether the study's supplement recommendation here is a good one. Just quoting the instructions given to participants
I look forward to the angry fan reaction regarding the Dopefish casting.
There's Scaleway that provide managed Kubernetes and also "serverless" (containers or functions as a service, based on Knative).
"As an experiment, I went through a list of holiday weekend sales, and opened all the sites. They all — all, 100% — interrupted my attempt to give them some money."

This is a good touchstone to use for "you've overoptimized your site, tone it back". I am also taken aback every time I'm on a site, I've got something in my shopping cart, I'm headed for the "check out" button, or I'm even on the checkout page, and some stupid interstitial pops up. Dude, I'm trying to enter my credit card information! Back off! Especially stupid for a "sign up for our newsletter" popup; we all know that unclicking the "yes, we can email you every 17 seconds from now until the heat death of the universe with valuable offers from 'our affiliates' which we define as 'anyone we share a species with'!" box on the checkout form is mandatory, and if we don't see it immediately we'd best go hunting for it. You've already default populating the checkbox to "yes" on this very screen, get out of the way!

Less unbelievably stupid, but related, is when I'm examining product X and just after I scroll down a bit to read more you pop up something related to... well... anything other than product X! I'm signalling interest in product X as hard as I can, and you've AB tested that this is a great time to jangle your keys over there instead? Your AB testing is stupid and can't possibly fail to be some stupid statistical fluke or other terrible error. What fisherman goes out on his boat, hooks a fish, and then rushes to throw another completely different lure out to the hooked fish and get them on that hook instead? This is another good touchstone for being "overoptimized".
Ask HN: Building a ZKP Scheme for Humans
Hello HN,

I am looking to find a ZKP scheme for humans. Instead of remembering passwords, the user can remember a unique function that has a certain property. Services then probe the user to prove that they know such a function, without revealing the function to the service.

The problem is, I'm not good at cryptography. I need to find a set of functions that one such function is

- is easy to evaluate in my head
- is possible for me to remember
- can be pre-calculated
- reasonably fast to use in ZKP

One example of a function is to imaging a 3D cellular shape with holes. The challenge type is a list of "discrete movement through the space", and the response is a list of "crossing the boundary of the 3D shape".

I hope you hackers have a better idea of what types to use for `C`, `R`, and how to choose `generate_f`.

details in pseudo-code:

```idris2
-- this is public
-- the secret `f` generator
-- should discourage rainbow table
generate_f : (random_seed: Seed) -> P -> F

-- this is private
-- the user remembers a function `f` with certain property in set `P`
-- this function should be easy to remember and calculate for humans
F : Type
F = (challenge: C) -> (response: R)
f : F

-- this is public
-- prove that the function is generated with `property` from its response
-- this should be straight-forward to implement using ZKP
verify : (property: P) -> (challenge: C) -> (response: R) -> bool
```
Yeah I suppose that's one way to do it. I go for the combo of having a garage and driving a manual, which is itself a theft prevention device in the US these days
The is little intersection between people who do frontend development and people who are comfortable at that level with Java.

Considering the tooling for almost any frontend framework is leaps and bounds ahead any of those two frameworks, it's a no brainer why no one uses it, in my opinion.
That means everyone should just stop complying to lawful warrants? Or that laws in general don't work? Or that you'd rather have companies maintaining laws? We can pick & chose what laws to follow?

I'm not sure I understand the reasoning nor conclusion of your comment.
I get your point, but the fact is these (except maybe for Brontë) commonly get spelled without the diacritics.
A problem for who? Given that people already invested in the product ecosystem seem to have almost limitless patience to scroll for the right content, I'm sure it improves almost every user time and attention metric.

It's why I saw it as my moral duty to leave (as well as the other FB properties), so that at least in a small way, I "produce content" that is only available by interacting with me as a person.
archive: https://archive.ph/fuUPG
Calling that bigotry is offensive to anyone that has been subjected to actual bigotry. You should be ashamed.
Depends on the specifics, but it could also just be a pair of wires run from a central body controller. The current's not that high.
A data-layout-optimizer could be as simple as 25 lines of C++. It's fairly trivial to just insert any other field where there would otherwise be padding. It hasn't been written because it would be a breaking change for the whole ecosystem of postgres addons, things that consume postgres WAL logs, etc.
Very cool! I’m a big fan of Fastify. In fact I’m working on a SQL-over-HTTP bridge right now, published first as a fastify plug-in. And I’m using Vite, so this repository will be nice to study. :)

I originally chose Fastify over express ~2 years ago, due to benchmarks and newness, and it’s been running stable in production since then. It’s great software. If you’re coming from express there is a bit of a learning curve. Fastify felt a bit more rigid at first - for example with defining schemas for request body or not logging with console.log - but it was totally worth it.

From that perspective, I think this dx framework you’re making here is a great idea! Might I (selfishly) recommend a variant for library authors?
In online dating, at least, this is a non-issue. Using an online dating app is, ironically, a solitary enough activity that people don’t go around comparing whether their UI is different from their friends’ UI. You of course can’t let the same user see two versions, but that just means doing permanent group assignment on signup. We used to A/B test subscription prices over enormous ranges (e.g., randomly giving some people 90% discounts) and approximately nobody noticed outside of obscure Reddit threads.
An update in postgres will always copy the tuple for MVCC, so it can't take advantage of an optimization like this to modify it in place.
Or they will make the frictional pain if unsubscribing painful, unsubscribe? Sure wait on hold on the phone for an hour and then you can unsubscribe..,
Because you have to do it? So you have to make time, it’s not something you pay for besides opportunity cost. I probably paid $500 total for supplies
Also, like any manual car I've driven, you have to press the clutch in or it won't start.

This is such an infuriating trend in modern cars, especially hybrids. I can never tell when the damn thing is done starting up so at least ten percent of the time I take my foot off too early and it just goes "Try again, bitch."
At least in California your birth certificate is only a certified copy of a document the county has. As long as you have a living parent they can get a valid copy for you to bootstrap your identity recreation project. Once you have the birth certificate you should be able to get a new ID card, then get a replacement ssn card, etc.
What I really don't understand about this shitcoins is the scale of it. When I read this story I basically thought "ok, but you're going to spend a load of money pumping but there's no way there's liquidity for you to actually perform your dump". But if you look up DOCK today you'll see its market cap is $14m and it's daily traded volume is $1.5m. I would get it that you could move some of these coins using a few bill boards and some sponsored ad reads if they were tiny volume traded, but the implication of this is that millions of dollars are moving back and forth every day on a coin that has absolutely nothing going for it. Who is doing that? There can't possibly be retail moving in and out of this stuff. Really I kind of assume this all has to be wash trading right?
It's a solvable problem that would help everyone. Why would a manufacturer add a feature if there is no data on what users look for? I just want shuffle and a few TB of storage. Without knowing how many users there are for that amount of storage we have to resort to guessing if it is a popular configuration.

As a first world problem it is less important. You can just buy a different mp3 player if the current one sucks to much. If it is a very expensive item to buy it's really sad if it doesn't do what you need.
Two recommendations:

1. Switch to a team (or company) where they are developing in the language you want to learn.
2. Work through the book "Computer Systems: A programmer's perspective"

Nothing beats daily programming in said language on a daily basis. Similar to yourself, I was predominately writing in higher level interpreted languages. Although I did teach myself C by working through books, writing programs and more, it was not until I started writing C on the job that really accelerated my learning. Very quickly, hit my fair share of segfaults ... discovered that we never called malloc (i.e. allocating memory on the heap) during runtime, stepped through our mark-and-sweep algorithm.

As for the book recommendation, it will cover all the above topics you are interested in such as heaps, stacks, memory management, etc. There are lots of other books that I studied during my CS education but self studying "Computing Systems: A programmer's perspective" really switched a light bulb on in my head.
It does make sense for extra add-ons / parts sometimes, for things you use occasionally, provided they are already not charging you for the part / add-on (which in this case BMW isn't - they allow you to pay for the heated seats monthly or yearly or purchase it outright). But remember that when you subscribe, you don't own the part / add-on. And if you only plan to use them for 3 months a year, it will not be profitable for them and they will realistically not allow it. Unless it is profitable for them, why would they turn something unnecessarily into a subscription service?
Can you please stop with the false narrative that Uber is using VC money? They haven’t gotten any new investor money since pre-ipo several years ago. It’s a disingenuous lie to keep claiming “as long as VC money flows”. There isn’t and hasn’t been for years.
A very unscientific and anecdotal comparison of KDE Plasma on Kubuntu 22.04 and my install on FreeBSD at the very moment I am looking at both: the memory usage seems similar overall, but individual processes seem oddly different. Example, kded5 on kubuntu (kde version 5.24.4) is using ~57 MB of memory, on FreeBSD (kde version 5.24.5) uses ~112MB. For kwin_x11, ~61MB on kubuntu, 140MB on FreeBSD. I restarted Xorg on FreeBSD and that's what they booted up to.

This is interesting why it uses a bit more memory on FreeBSD, but there is probably some reasoning behind it.
Why does it matter that he was a home improvement contractor?
Case-in-point why reading online comments needs to be taken with a heavy grain of salt. Following your needs would lead them into a grave. You are not a customer worth pursuing.
I'm wholly in favour of artists getting paid work, but isn't there a vastly inefficient layer of design 'consultancy' that sits in between them, effectively wasting money to turn out bullshit for corporate bullshit (mostly marketing) departments?

How many more artists could be paid and paid more by cutting out the bullshit merchants both inside and outside companies?
I think the biggest reason is that they are really bad frameworks. GWT isn't really supported anymore, but for a while it was a creative way to build UI in a world where Javascript frameworks weren't that advanced. You might not like Angular, but React, Vue, Ember, Meteor, and many many others exist. If you want types and don't like the JS style, you can use Typescript.

I have used GWT, I wouldn't use it again. I tried Vaadin, and it was so terrible I would never touch it again.

>So I'm relegated to the backend.

You are not relegated to backend. You can always learn JS Framework stuff. You shouldn't pigeonhole yourself into one area. Many many many developers do both.
Sadly, not anymore. In 2017 they replaced the comprehensive 4yr/50k mile "BMW Maintenance Program" with the 3yr/36k mile "BMW Ultimate Care", and it only covers fluids, filters, and spark plugs.

https://www.bmwusa.com/explore/bmw-value/bmw-maintenance/ter...

https://www.consumerreports.org/bmw/bmw-reduces-free-mainten...
https://rclone.org/ + backblaze b2.

It Works on every desktop and server and takes minimal cpu and memory. Backblaze b2 buckets can be configured to retain overwritten copies, or you can take periodic snapshots within b2.
For me, your use of automobiles and airplanes does not help your argument. In my opinion, those industries got way too powerful and negatively shaped our entire society's infrastructure at a colossal magnitude. It's really very regrettable that those changes came about.

Ridesharing companies are doing the same. They promised less cars but now there are more. People getting into crazy debt to just drive around the streets looking for clients, creating more traffic and more pollution.
I was hoping to get a glimpse into the chaos that occurred after the city of Austin, TX voted against Prop 1, a "citizen initiative" in 2016. Basically, the prop was to reverse the city's requirement on TNCs, like background checks and fingerprinting.

During that time, Lyft AND Uber spammed the people living in Austin with a shit ton of mailers, local billboards were bought up encouraging people to vote yes on Prop 1, and even the apps were pushing their propaganda.

At some point, I remember Lyft and Uber pushing a false narrative that the number of DUIs and alcohol related deaths would go up if they pulled out of the market. Highly aggressive with this approach. IIRC, the amount of advertising spent to get Prop 1 passed surpassed any previous citizen initiated proposition in the city.

Would have loved to see that two faced fuck Kalanick cry after it was defeated.

edited: passed -> defeated
When I tried to go car-free, I was surprised to learn just how many different kinds of once-or-twice-a-year occurrences there can be in a single year.
There can be a good intellectual challenge in refactoring code like that to be both efficient and readable (although at some extremes, and depending on the programming language, perhaps there'll be conflict between those two goals).

All the better if that refactoring is in a FOSS application/library to save other people the repeat effort (and potentially gather further improvements).

Your question reminded me of Raymond Hettinger's excellent 2015 PyCon talk about refactoring functional-but-messy Python code: https://www.youtube.com/watch?v=wf-BqAjZb8M

(as previously discussed on HN: https://news.ycombinator.com/item?id=10023818)
Our Subconscious Deepfake-Detection Skills Could Power Future Automated Systems
Check out Lens Protocol, it's a decentralized social graph on Polygon (brought to you by the Aave Companies), where you can mint your profile as an NFT, therefore own it, as well as own your content and audience.
Lens provides the API and smart contracts for decentralized social apps to be built on top, and there are already quite a few apps built already, including Lenster (https://lenster.xyz), Lenstube (https://lenstube.xyz), Iris (https://irisapp.xyz/) and more.
Check it out here if you want to experiment with it and build some web3 social : https://lens.xyz

Full disclosure, I work on the team building it.
This is part of the "unchecked" part of AB testing the headline mentions.

You, of course, need to ensure the granular tweaks can be rolled up into something usable as the granular tweaks prove successful. You can't just keep bolting on UI changes while losing sight of the larger experience. Each incremental A/B test is testing against a previously successful variant so eventually the control is radically different from where it started and you're only concerned about beating the control. Using a longer-term holdout group or reseting the control experience during incremental testing can help mitigate this and get you zoomed out a bit from the local maxima.
The problem is not necessarily the principle, it's that surge pricing is opaque, governed by algorithms which attempt to maximise profit for Uber, not by simple supply and demand.
To make it clearer: If the company knowingly breaks privacy laws by secretively sharing data with 3rd parties and using domain cloaking/redirecting to hide this fact, that's a different issue.

I think it's a huge difference between:

A. I track visitor stats and usage details and send all the details to Google and their partners (which enables them to create a profile of the visitor across the web, have in-depth stats about your website's traffic, traffic sources, sales, visitors demographic, use the data to target specific or groups of visitors or share it with your competitors or other companies for marketing purposes).

and

B. I track visitor stats and usage details, store them locally and use them to improve my website.
Please explain how Uber exploits their drivers?
taxi drivers weaponized themselves like this in france at some point, they probably learned from this tactic because i think it got uber banned in paris or something

I don't have a link to any source, it was some years ago and it might have changed since
There are also vulnerable bootloaders signed with the MS production CA. The DBX set is not just shim hashes, you know.

If MS's distrusts its own ability to vet other people's code, why trust their ability to vet their own code?
I say this a lot and I will keep saying it. Conversion != customer obsession.
There is a place for A/B testing. It is necessary and can be extremely beneficial in helping your customers enjoy and use your product more successfully.

The main issue is that people mix conversion with customer obsession!
Whenever you work on a product or feature you should be asking yourself "Is this really good for my customer" - if the answer is no, then no matter what the A/B tests/conversion rates show you don't do it.

Unfortunately we mostly hire the wrong people as PMs, who then hire clones of themselves. They are not truly customer obsessed and use A/B tests incorrectly which results in products that trick or force customers to do things they don't understand/want to do. Long term this is bad for the product and company
> Only narcissists and not very aware people are able to "enjoy the world as it is, in all its messiness."

I don't know if you meant to come off as harshly as you did, but this is needlessly reductive, which is especially ironic in a discussion about Buddhism.

What you propose is that there are two extremes: enjoyment of the world while ignoring suffering and self mortification while trying to solve it. These are, in essence, the two extremes which the Buddha argued against in favor of the Middle Path[0]:

> There is an addiction to indulgence of sense-pleasures, which is low, coarse, the way of ordinary people, unworthy, and unprofitable; and there is an addiction to self-mortification, which is painful, unworthy, and unprofitable.
Avoiding both these extremes, the Perfect One has realized the Middle Path; it gives vision, gives knowledge, and leads to calm, to insight, to enlightenment and to Nibbana.

I don't think that OP is saying we should ignore suffering and not try to address it, but they are saying that self-flagellation is unhelpful and toxic, and we should approach suffering with a forward eye not a backward one.

[0] https://en.m.wikipedia.org/wiki/Middle_Way
Your arguments strike me as inconsistent. You say we need consumer rights protections so we don't end up renting our devices, but then you criticize the comment that speaks up about a consumer rights problem.

> There's separate issues at play: the mechanism, what value it adds or subtracts and how it can be used.

The thing is, it's absurd to separate these issues. Look at it from the perspective of most users: Secure Boot is a solution to a minuscule problem. The vast majority of exploits happen in their browsers, office suits or due to social engineering (phishing, ransomware, adware).

So from the start, to sway the trade-off in favor to Secure Boot, the trouble it generates must be minuscule as well. And that is not the case: From the beginning Secure Boot has been a threat to free OS choice on PCs. Microsoft did not start by proposing a non-profit steward that will find good rules how code signing can be implemented and what rules you have to follow to be let in. That would have been "pretty reasonable". Instead they declared themselves rulers and it required a massive effort of the free software community to find ways to fulfill the requirements Microsoft unilaterally declared.

Being able to find a working process with Microsoft has generated some fragile trust, but all of that is in peril with news like Lenovo removing the Microsoft Corporation UEFI CA from their default installation.

If you would really care about letting the mechanism stand on its own without it being intermingled with politics (and I read that you care about that from the cited line) there is only one solution: Take the private keys to the Secure Boot certificates away from Microsoft and hand them over to neutral party. (And of course that will not happen, and thus the political and technical side remain deeply intertwined.)