skysight-inc/HackerNews huggingface dataset:
I really like my framework. I don't mind that it is not the fastest in the benchmarks, because faster computers will be released in the future anyway. I don't want to chase the newest and fastest when what I currently have is perfectly adequate for what I want to use my laptop for.

My biggest complaint at this point is that the battery connector is not designed to be disconnected on a regular basis[1]. I personally would prefer to remove the battery much more frequently, because I'm only occasionally disconnected from the grid and keeping the battery unused would be better for its lifetime.

I know that the UEFI has a cool option to disconnect the battery. But this option only stays until the next reboot. I guess that this option is also the reason why the battery connector is so fragile.

[1] https://community.frame.work/t/redesign-battery-connector/10...
Or, maybe they invested far more cash and care in marketing that feature than in programming that feature...
I am curious, why the weird requirement?
I think you are looking at it wrong way. A remote exploit is one where the exploit makes use of a vuln over network. The bug/vuln is exposed in either the networking or applications accessible over the net. In this case, you need to use a remote exploit to get local access and then use this to elevate the local access to root access. You can still do it through a remote system, but not without the intermediate step.
Have you ever seen an asphalt bike lane age? It never gets potholes. The top layer just expands and contracts or is invaded with tree roots. Over time the elements wear out the tar and the gravel loosens.

Compare that to a road where the truck literally forms grooves into the asphalt. It ripples like the viscous material it is in those conditions under multiple tons of weight. An intersection by me looks like its plaid with the grooves from perpendicular trucking traffic. And cement roads do last a long time but they aren't indestructible. I live on one. Trucks damage them and crack them up over time and the city has to fill in potholes. The more construction going on the more damage. Any big apartment build just destroys the concrete apron and sidewalk on the lot with the equipment because its that heavy. Orders of magnitude heavier than any human on a bike can be.
Don't ask. Tell. "Hey just to ensure that we are on the same page, I am ideally looking for a minimum of $xyz/year. Is that in the range for this role ?". Then pause and wait for their response.
> It probably will hurt app store revenues, but Apple makes such a premium on hardware that it may make up or even exceed the losses from software competition.

Seems very unlikely to me. the profit margin on app store tax is going to be extremely high. The expert witness at the epic games trial estimated an 80% profit margin on 20 billion dollars of revenue. Comes out to $16B profit out of their total 25ish. That doesn't just disappear if apple allows sideloading, but it could easily shrink a great a deal. Even if apple somehow manages to gain greater market share, I just don't see it coming out as a net positive for them.
bloomberg doesn't trade on that information, heck I didn't work on anything financially oriented while at Bloomberg (worked on BLAW) and I was still restricted in the type of investments they allowed me to make.

i.e. by definition bloomberg buying the data and making it available to the terminal is making the data public.
99.9% haven't
See the retrospective call summary is insane to me. I wouldn't be able to do anything besides offer a partial, if not total, refund. I literally, fundamentally, do not understand how people can brush off such major mistakes with "Yeah, sorry, that was a misstep on my part."

I've only worked with a handful of clients so far, but the number one thing I care about most is providing an honest service. I estimate rough timelines for each major task in my head, then add a few hours depending on complexity. If I go over that limit, I'm usually working on that task for free until it gets completed (unless there's some major flaw that is causing the slowdown, like previous developer bugs or slow responses from client). The client never sees this process, but in the end they see tasks being completed in a fair timeframe.

If I'm noticing events are causing me to slow down on a client's work (by like a week, let alone the several months OP had to endure), I quickly communicate with the client to let them know & have us work out a plan.

These aren't things that make me feel like I'm doing something unique in this space, because they just feel so simple & basic to how any working individual should conduct themselves. If OP was dealing with a fresh in the field freelancer, still wet behind the ears, then sure, I guess I can see how things can get away from you in your first project. But this is supposed to be an agency with big clients? And they had this many "missteps"?

Insanity. Actual insanity.
I'm not trying to rag on "Isaac" too hard here, I'm more trying to word my confusion on whether or not this is the norm for other freelance agencies. I hope not, because the recount reads like a shameful state showcasing the lack of care in this industry.
Every time someone says the word Android in this discussion, the next reply is that Android allows any <insert software here> you want, therefore it's up to that software to implement such a lockdown feature. Ergo, "lockdown mode" isn't able to be a thing on Android. And following from that, if iOS is forced to have all the same openings, then Lockdown Mode will be just as meaningless.
Human nature doesn't change in a meek 8 years.
> Interestingly, there was a lot of speculation and misinformation. So even on Hacker News, this topic is still only vaguely understood.

Indeed - and thanks a lot for the link, that was a super interesting reading!

> The way I understand it, the wallet can chose from a large number of possible signatures and thereby signal many bits to its creator. In every transaction.

Isn't it possible to make that deterministic by adding some rank-ordering heuristic? (ex: always prefer the smallest numerical signature, or with the most consecutive numbers etc)

Then if 2 wallets from 2 different providers disagree, you would know there's a problem!

In a way, it would be doing like in reproducible software builts: controlling the randomness, except it would be done ex-post (ranking the possible choices and selecting one) instead of ex-ante (setting the clock etc).

If that's impractical, a simpler way may be to require the wallet to make say 100 possible signatures, but then randomize which one is used in another independent step.

Also, from the article:

>> “deterministic signing” means that at least one deterministic way to generate signatures exist. It does not imply that a signer can only generate one valid signature. Due to the nature of the signing algorithms, an observer cannot detect if a standard algorithm or a customization was used.

The core problem seems to be that the hardware device obfuscates the algorithm, which should be less of a problem with software you can compile.

> Even with an air gapped hardware wallet, you are always at the mercy of the wallet manufacturer and the delivery chain that gets the wallet to you.

That's because of the above: you need to control for different things (ex: good source of randomness, correct implementation of the algorithm etc)
If your wallet was compromised during shipment it doesn't need to exfiltrate the seed (this is called a covert channel), unless you're somehow importing fresh private keys. It can just generate all of the keys (and seeds) using randomness that's already known to the attacker.
>Does that meet the standard of "some influence?"

I would argue that all of western culture and civilization has been influenced heavily, almost exclusively by Christianity (including the Hebrew Bible), at least since Constantine.
What do you expect from a Movie / Show Recommendations app?
I'm currently working on a Movie Recommendation app and I don't wanna build on something that is generic and takes some likes and dislikes of users and show movies in that particular genre.

We might like a wide spectrum of movies based on the plot (or anything) of the movies so,
if you guys could tell me what do you expect from a movie recommendations app it would be helping me a lot.
Typically I've been asked by the recruiter what my expectations are, as one of the first questions in an initial candidate screen.

I'm generally in favor of posting salary ranges. I like to know how the company values the positions they are hiring for, and I don't really want to talk to a recruiter at all if it's not going to be a salary match, so I like the idea of being able to screen better as a candidate.

But now that I've been on the hiring side, there's some flexibility I think we lose if we post those ranges: what do you do if you like a candidate, but not for the role they applied for? Perhaps their skills and background are not quite what you're looking for in this role, but you know another team has an open rec and this candidate is perfect. Or, maybe you've posted for a particular seniority range and you like the candidate but they are more/less senior than the posting, and you want to scale the position up or down to meet them. Neither of these scenarios (which seem to happen with regularity) preclude putting the range in the job description, but then the redirect or rescope feels bait-and-switchy when it's really not.
Contrary to the author's assumption about disincentives, it seems like terminating the contract may have been why all the work suddenly got done. That's when the author went from a customer to a potential threat. If the agency hadn't completed the work (including the "no charge" fixes after the contract ended), I'm guessing we wouldn't have gotten a pseudonym for the agency and project lead.
Never ever become 'the SQL guy' in your group. No one wants to learn it.

SQL is the intersection of set theory, computational theory, network usage, cpu usage, and laziness.

"your table is 120 columns wide and nothing but strings with no rules of the data types and no indexes, sooooo your perf is a bit slow huh?" "yeah how did you know?" "wild guess"
Are you suggesting disabled people receive a regular fixed sum from the government, or that they'd have to individually apply each trip for the compensation? Both seem problematic/inefficient to me, compared to having Uber being able to, for instance, reduce/offset their reportable taxable income to compensate for the cost of providing services to disabled customers.
Look, speaking as a trans person, I would love to ignore social issues and focus on economic ones, but I can't exactly do that when there's a growing movement to simply have me banned from society, and a smaller but also-growing movement to declare me a pedophile and have me executed. Class solidarity doesn't help me if I'm dead.
dark energy doesn't seem to have much practical use yet
Nominal years of experience = actual XP
"Why am I sweating right now? Oh, the Nest set the temperature too high again!"

And then after a few instances, I just turn off all the automation and set up a schedule like normal.

Same with the "away from home" which seems to randomly think I'm away and I have no idea why.

Oh, and the app doesn't show me filter reminders, only the actual device, which I never touch all the way downstairs. There's not even any status to let me know if it's accepted a new dialed-in temperature, as I've had it fail to capture a request, and then I go back, and see it never updated/saved the new temp. Just zero feedback to confirm that the thermostat has responded to any input, and zero notification from the app if this happens.

Just thoroughly unimpressed.

Thankfully I didn't buy this junk, as it was pre-installed by the owner of my rental. Can't imagine actually paying for something that's only real feature is being able to remotely control my temperature once in a while.
I see no T routes down Arlington
"observing employers frequently having email campaigns soliciting "positive reviews" (and positive ones only)"

I've seen this happen once, to the point where HR stepped in and said 'no, we don't do this!" to the execs that were pushing this. The irony was delicious.
Well.. then its a good thing I said I support regulation on big tech.

Living in a corporate mining town is basically just an authoritarian government on its own with extra steps imo.
>Other permissions like ACCESS_FINE_LOCATION being required until recently for accessing Bluetooth devices meant that users would think that every BLE app was spying on them.

This was a dumb hack by Google. "BLE can be used to spy on your location" => "you must grant all location data to said app".

This is something that is better dealt with a clear privacy warning next to the actually relevant permission rather than conflating it with GPS.
The thing is, people often start with a previous salary and a lifestyle/saving goals such that they have some expectations. Telling people to not start at salary, when most people will do so for good reason, is not particularly useful. I, personally, am not looking for 500k+ craziness, but I am expecting a baseline and you trying to waste time I’m not willing to unless I’m otherwise extremely motivated by what you do (very unlikely) is going to make me pass.

This is essentially Tinder “swipe left or right” and it should treated that way.
Star Wars supposedly picked them up from Hidden Fortress.
It scares me that we all seem to agree that the federal (and state to a lesser degree) government model is no longer going to solve major/existential societal problems. I don't mean the current government - a.k.a. set of legislators - I mean the model will continue to fail after subsequent elections. How many steps away is civil war or revolution?
From Google’s page on this:

> When Google becomes aware of a discrepancy between your app behavior and your declaration, we may take appropriate action, including enforcement action.

(https://support.google.com/googleplay/android-developer/answ...)
> If your primary reason for responding to an ad is based upon salary you are not going to be happy where you work

You might not be wrong, but a higher salary makes me less miserable than a lower salary
Actually, yes! That's what happens today
The American-made weapons that could change everything
Incredibly, extremely common on tons of sites.

Normal web pages that load ads will attempt to detect "fraud" by connecting back over WebRTC, running benchmarks to see how "valuable" of a user you are (how shit or expensive your hardware is), and running benchmarks to see whether you might be a fake browser/"ad fraud" user running large amounts of sessions at the same time and therefore have slower performance. It's bullshit and should be illegal.

I already dislike webgl leaking the model of my gpu, concurrency leaking memory and cores available, and disk space.

Go visit walmart or really any major site - almost more likely than not it will do this - and watch it attempt to enumerate all of your plugins, connect over webrtc, enumerate performance.* msPerformance, mozPerformance, make a webgl video and ask for unmasked renderer, enumerate thousands of fonts, attempt and fail to spawn piles of ActiveXObject, use "window.msDoNotTrack" as a fingerprinting feature point, enumerate hundreds of browser functions and getters (maxTouchPoints, doNotTrack, hardwareConcurrency, ...) and calling toString() on dozens of specific things like window.RTCDataChannel.toString() and seeing whether it fails in a try/catch, if it returns a function, or if it returns "function RTCDataChannel() { [native code] }" as a string, etc.
'High-Tech' Reforestation Company Starts Wildfire in Spain
Salary might not be the primary consideration, but IMHO it's absolutely necessary to at least post the range. no matter how good the job sounds otherwise, a salary that's too low is a huge red flag that they're not going to treat you well otherwise.

as you say, the salary is a sign of respect from your employer, and including that number in the job ad is an easy way to signal to prospective employees exactly how much you respect them.
> but you have to accept the costs of dealing with all the externalities.

cost benefit analysis seems rather simple to me. You either pretend you can govern money into a better place using vast amounts of precious resources, such as time and political capital of our central planners, or you celebrate that no one has reasonable expectations that crypto is a safe market and allow it to continue to be an unsafe market which will either die or sort itself out with market pressures.

We're not talking about necessary resources like food land or shelter here. Crypto can live or die by its own merits and to pretend governing into the remarkably unfair landscape that is modern finance is worth the resources necessary, seems to me, to be easily dismissed as anything approaching reasonable.

Crypto will very likely continue to get more governance, but that's not good or unexpected. It's just centralized power doing what centralized power does, which is expand its power and reach.
> before you say, perhaps your salary ranges were bad, they weren't.

Care to mention what they are? Because I suspect your ranges are out of line with industry standards that have risen quite rapidly.

I know because I've started responding to any recruiters that sound interesting asking for comp ranges and they are all below my current base, let alone TC.

If the upper bound of your range doesn't exceed $350k there is no chance that any of the senior engineers I know will apply and honestly to get something to think about leaving a job they are moderately happy with you'd have to have that be the lower bound of your range.

But I suspect you're posting ranges that are less than or barely over 200k at the upper end.
The problem is that separation of powers make most frauds a state matter. If you were ripped off in NY, a local county district attorney would prosecute you.

The problem with that is state laws and capabilities are inconsistent. Even in New York, where there is a well established body of law for things like financial frauds, the local prosecutors make lack capability or venue. If you live in Lake Placid, NY and are scammed, it’s unlikely that the Essex County DA (probably 4 attorneys) has the capability to prosecute a complex financial crime. If you live in Manhattan, different story - that DA has thousands of attorneys and expertise.

The Federal government side-steps turf issues and inequity by using more “umbrella” laws that are easy to approve. If you commit a fraud that has a connection to the mail, “Mail Fraud”. If you use a phone, “Wire Fraud”. If you take money that isn’t yours from an FDIC insured bank, that’s a Federal crime. If you lie to a Federal agent, that’s a crime.
The premise of your argument is incorrect. One does not need to participate in securing the network for the network to represent the "democratization of financial power". Democratization doesn't mean "voting", it means something like make equally accessible. What crypto does is make financial transactions equally accessible. The method by which this is accomplished (proof of work/stake) isn't equally accessible, but that is a tangential concern to the accessibility of executing financial transactions. What matters is the miners can't unilaterally interfere with the expected function of the network. Further, that the coordination required to interfere with the expected function is implausible and/or prohibitively expensive.

>The level of coordination isn't implausible either, it's already happened several times already

For instance? And what may have happened in the early days of the network is irrelevant to what is possible today.
A salary isn't a reason to be happy to work. It answers the question "how will this change the lifestyle of my family and I?" It is useful to know because a sufficient salary is one of the few 100% hard-line conditions for applying to a place, so posting it saves everybody time.
It is about perspective. The government & Coinbase are antagonists to the POV of the fraudster and the fraudster is an antagonist to the POV of the government and Coinbase. Since the release is from the government, I think that makes him the antagonist?
No question that Google has just been trying to ape Apple lately, but for mobile specifically there are actually lots of features that android and its ecosystem had for years before Apple finally added (copied) it for iOS.
I am writing to a somewhat technical audience on my blog... but, yes, I don't care if my devices can't play some online WebGL game if the tradeoff is far better security in general.

Also, since you can turn it off for specific domains, it's easy enough to re-enable WebGL for some site, while still having Lockdown mode apply to all the random ad serving backends and such you come across. If you're not someone who might be specifically targeted, I think that's entirely reasonable. Secure by default, drop the security level somewhat, by concrete actions I've taken, for some site I want to do something more on.

At some point, I'd assume attackers will try to get people to turn it off so they can attack, but you've made an awful lot more noise by that point.
IMHO the importance of currencies is getting highly inflated. It's just a tool and if the real economy is not going well - or the part that is actually mapped with the currency anyway - then the numbers don't look good. I'm not sure about the zero sum game part but I highly doubt changing the scale (which is what Bitcoin for instance does by limiting the max. amount of coins) is changing the dynamics
I'd argue there are no non-capitalist countries
and i thought that germans were obsessed with poop
Oh, that's interesting. I hadn't thought about that.

One of the other surprises from the postmortem was that Isaac said that I was the only client that ever did code reviews for the code the agency was writing. It sounded like they'd had checkbox-style audits in the past for security/compliance reasons, but no other clients had asked for reviews just for the sake of keeping quality and maintainability high. That also hints that they're not normally dealing with owners or stakeholders who'd care or be able to recognize code quality.