skysight-inc/HackerNews huggingface dataset:
I personally use it for LOTS of stuff, both personal and commercial (as a Slack replacement). Other than a couple bugs (pinch to zoom on Android, media playback), it's fine - I don't feel like I need any more features, though I'd love it to be a bit snappier. KBFS has been excellent for stuff like secrets in CI pipelines.

Disclaimer: I'm one of the ex-Keybase, now Zoom people. I'm definitely in a bubble. The non-Keybase people I talk with are my consultancy's employees + a couple clients.

Keybase's security model is excellent in protecting you from attacks like the one described in the OP. If you can't sign your device with another one, you can only recover a username if:

- it's not in [lockdown mode](https://book.keybase.io/docs/lockdown)

- it has a verified email / phone number

- you either click a reset link in the email / SMS _or_ know the password

- _and_ the user fails to cancel the reset over many days of warnings.

And if you manage to go through all that trouble, all your contacts will get blasted with warnings about your identity. Fun!
In my previous roles I've read the cover letters sent to jobs I'm trying to fill. They're a useful insight into the personality of the applicant.

I definitely know people have read my cover letters too, but that might be due to the size of the companies I apply to for jobs. More importantly though when I take a lot of time on a cover letter it helps uncover why I'm applying for a job in the first place, and sometimes shows me why I actually _shouldn't_.

It might seem like a useless exercise but putting thought into a cover letter helps you decide if it's the right job for you and also sets a theme that you can follow through the rest of the interview process if you want. If you're able to say something like, "As I mentioned in my cover letter ..." in your interview then people get a sense of continuity in their interactions with you, and it also underscores your seriousness with the role.

If you're one of those who sends out dozens of resumes at a time then of course this doesn't apply.
Apple ad exec wants to more than double ad revenue with new ads across iOS
Google is undeniably leftist in its political orientation, so this must have been either the work of a pro-life employee or something that a pro-life hacker was able to do. What is absurd is to think that Google Maps intentionally did this.
What you see is only a subset. Many creations are really bad, creepy and unbalanced.

This is also true for human artists.
> Page 49 of 49

That tells you something...

Cupertino, we have a problem.
An academic journal that might appeal to you is Survival[0], from the International Institute for Strategic Studies. Even though it is academic in nature, with the corresponding quality and standards for publication, it is largely jargon free and not too lost in the weeds.

[0]: https://www.tandfonline.com/toc/tsur20/current
- Andrew Camarata: Background noise. He has big vehicles and uses them to do big jobs. Just nice ambiance without being distracting.

- Apple Drains: About yard drainage installation/design/ideas.

- ChrisFix: Posts rarely but extremely high quality car repair/maintenance videos.

- City Beautiful: Talks about urban design and how it may be improved for people (a little anti-car, pro-public transport).

- Doug DeMuro: Sometimes has unusual or quirky vehicles.

- FortNine: Fascinating motorcycle channel even though I don't own, have ever owned, nor plan on buying a motorcycle (yes, I know).

- Mentour Pilot: "If Air Crash Investigations was done by an actual commercial pilot."

- Practical Engineering: What you think it is from the name. Rarely posts, always worthwhile when they do.

- The B1M: Looks at civil engineering projects.

- Project Farm: One of if not the best review channels on YT.

- Technology Connections: Interesting "deep dives" into every day technology.

- Tom Scott: Science adjacent channel that often looks at quirky locations.

Those are the "biggies." I have others too, but they're far too niche to list here.
Sure. Despite my assessment of him (more neutral than it may seem as I'm not a US citizen and therefore don't expect him to think of me as in "his tribe"), I don't claim special insight either.
Nowadays it's emulators all the way down.

On most of these architectures the software eventually executes as x86 machine code, and the distance between x86 machine code and the actual processes inside a modern CPU implementing the x86 code set is so vast you can call a modern CPU an "x86 emulator built in hardware."
Most electronics including Apple mention that they’re rated for 35°C while working and 40°C while off.

After a single year, most of Apple warranties void out.
The current macbook air body is pretty poor. I had one of the late intel ones for a spell before overheating killed the logic board, and it developed an outline of the keyboard on the screen within a few months just from the clamshell being closed daily. I wasn't even carrying this thing in a bag, it just sat on a desk.
I wonder how this affects their privacy options in the future.

>More recently, Apple threw a wrench in many of those ad networks' plans with the introduction of the App Tracking Transparency policy, which required all third-party apps to ask for users' permission before using certain tracking methods that collected and cross-referenced those users' data across multiple apps.

Also wonder if they'll be able to bypass this.
Discord and other biggest communication platforms should be legally required to provide a fully featured API. Forbidding users from writing and using 3rd party clients is outrageous.
Yeah, the most successful (and annoying) referral program I can think of is the One Plus phones, and it hit the marks you're describing.
Maybe the 2022 version is retailing something below market value, creating artificial scarcity, and prioritizing orders to referred people.
Correct. We take the control plane of Kubernetes and extend it so that it can be used to configure/orchestrate anything, not just containers.
Those 1900 phone numbers would be all the accounts that started the registration/re-registration process with Signal during the time the unauthorized access was available. That process is started on Signal's side and Twilio is only used at the midway point to send a device verification SMS.

Any Signal accounts that did not start that process during that time would not be able to be intercepted or accessed since Twilio has no means to begin it. The three specific accounts mentioned would be the cases found that the verification message was accessed through Twilio to register the account on the attacker's device.

So yes, in effect the 1900 were only the ones around when the attacker got access. Whether the specific three were targeted attacks or random messing around isn't clear though.
I had a funny interaction with a financial institution about this at one point. They were having a lot of trouble understanding that company@mydomain.com was the correct email address.

Eventually the conversation went like:

"So you're saying you created a new email address just to use with us?"

"Sure, yeah."

"...That's weird."
Is it really a reasonable goal to want an operating system to run a 27 year old binary without any modification or compatibility tool? There does need to be some way to run such binaries, but doing that by making the kernel and all core ABIs stable over several decades would make evolving the operating system very difficult. I think it would be better to provide such compatibility via compatibility layers like wine and sandboxing in the style of flatpak.
what's the relationship with US military-industrial complex ?
bikes can carry and tow trailers to help with some of that. Also...groceries can be carried on the bars if a few bags
I think you replied to the wrong comment when you wrote this, as the parent comment didn't mention bluetooth?
Dear Apple,

Its okay to not have to make your laptops ultra skinny if it means you avoid these sort of issues.

Sincerely,
A customer waiting to buy a decent laptop that is sturdy and comfortable to type on.
Carvana in hot water over title delays
I know there was a class action in late 00s for that where I was compensated because I had a similar interaction with an Apple Store genius. I was of the understanding they changed their "liquid damage" policy due to that lawsuit.
There's also ZooKeeper with its own consensus protocol.
They want to know the phone numbers. Despite everyone telling moxie that it's not secure from the day signal was started.
(I work at Discord and manage our Infrastructure, Security, and Safety engineering organizations.)

We currently don't intentionally block or disable third party clients or action the accounts of people who use them.

We do monitor the traffic of spammers and we build heuristics around how to identify them -- and sometimes third party clients get caught up in that. Cold comfort, I know, but it's not us trying to block/come after well-behaved third party clients.

Anyway, to OP, good luck with discordo! For one of our internal hack weeks a few years ago I tried to build an RFC1459 compliant Discord gateway... it was a fun POC, but definitely lots of rough edges because the paradigms don't exactly match up. :)
> “… will allow Deno to easily import npm packages and make 80-90% of npm packages …”

Do we know what will differentiate the 10-20% of packages that won’t work?
This was my first portable computer, and it was a lot of fun. I got it when Radio Shack was just starting to drop the price to close it out at their retail stores.
The issue I see most often is someone compiled the application on a slightly newer version of Linux and when they try to run it on a slightly older machine it barfs saying that it needs GLIBC_2.31 and the system libc only has up to GLIBC_2.28 or something like that. Even if you aren't using anything that changed in the newer versions it will refuse to run.
But attackers are able to impersonate you to your contacts no?
> It's just people having trouble understanding counterfactuals.

That's one issue, but another issue is how accurately we can estimate the counterfactual outcomes. In the case you described, where some up-front investment can reduce costs later on, the accuracy of the estimate of the counterfactual is usually fairly good. But when we talk about society-wide or planet-wide outcomes, our accuracy is much worse. Even in many cases where it seems fairly obvious that an up front intervention mitigated significant harm, we really don't know that with a very high level of confidence. There are just too many uncontrolled and unmeasured variables.
Contact Notes, specifically, require [0] a special entitlement to access them, so normal chat apps should never have access to them on iOS.

All other fields, for all contacts, are accessible once Contacts access is granted.

[0] https://developer.apple.com/documentation/bundleresources/en...
One thing I think isn't widely appreciated is that insecurity is a highly developed market.

People still have this idea of the lone hooded hacker doing everything from their bedroom.

In reality, people specialise in different aspects of cracking security and sell what they have to someone else. So someone is in the market for a zero day, or a compromised system in the government or a company, and they can just buy that.

For home users, the payoff isn't big enough to be worth more than automated type attacks. So you escape the human in the loop mostly.
True. This is a public-facing PR-style piece from USGS, which is what struck me as unusual.
It's honestly pretty fascinating to watch perfect be the enemy of the good in this space. As a result of the birth of cheap-to-free machine translation of human language, the space of things available on the global market has become incredibly vast, because the good-enough stab at translation is often good enough for a dedicated hacker to make the thing work anyway.
I was shocked when I saw there was 49 pages. Remember, the m1 is just a few years old!
There’s also even worse, Texas-based alternative called „Crossover for Work”
Depends on what you mean by "separation". My LAN devices have IPv6 addresses that would be reachable from the WAN if my router's firewall didn't block incoming packets to those addresses. For some of those devices that host public services, I enable traffic just for the relevant protocol and port to their IP, instead of bothering with port forwarding.
> I think it is a reasonable layer of defense for home networking.

Let's say Amazon won't deliver to your apartment number, just a central point at your apartment.

- This is like thinking you can stop locking your door because your apartment number isn't public information.

- It would be better if your apartment had a direct public address so you could get packages to your doorstep instead of having them wait in some common area.

- Most people take regular, obsessive trips to application-level exchanges like "Facebook" to interact with others and are fine with it. Hopefully everything you ever want to do is OK with Facebook.
>> Wouldn’t nuclear weapons or even plastics be a black ball already?

> No, the black ball is a technology that, once invented, humanity cannot survive. Nuclear weapons have been invented and humanity is surviving. Same with plastics.

I don't think that definition is a good one. Technological civilization [1] has survived nuclear weapons for ~80 years, but there's no guarantee it will survive it for another 80 years, let alone forever. It seems like these "black balls" should be though of like time bombs, there are at least two variables: how much destruction it will cause when it goes off AND the delay time before that happens. We shouldn't confuse a dangerous technology with a long delay time for a safe technology. My intuition tells me that there will probably be nuclear war at some point over the next 1,000+ years.

[1] I don't think nuclear weapons can make humanity extinct, so long as there are still little poorly-connected subsistence communities in remote areas. However, if The Market, manages to extend its tentacles into every human community, we're probably fucked.
By desktop app you mean a website cosplaying as a desktop app.
Why? What else should I be able to demand from other people's products, simply by dint of their products fitting a particular description?
On what grounds could they sue you if it was truly considered a "feature", and they used that exact terminology in their response?
Dear Giancarlo,

Please buy a MacBook Pro - the new M1 and M2 models are nice, thick, sturdy, comfortable, fast, and have a beast of a battery.

The Macbook Air line is specifically for the non-Pro consumer who values portability and size over everything else.

Sincerely, Anyone that can Google this.
I would assume a little of both. I've seen weeks wasted just because someone wouldn't say "that's a bad idea". I've also seen whole projects turn to crap, and then get canceled, when people that new better decided to remain silent, to avoid conflict.

Through my years, it seems to be increasingly rare to find disagreeable people, and that agreeableness is being favored/demanded. I'm not one to judge if it's working or not, but when I see people getting upset at managers because the manager criticized their work/explanation during the presentation of that work, which is literally meant for criticism, I know quality coming from that group will be impacted. Maybe not surprising, but many of these people are new graduates. The few "senior" people I know, like this, are from companies who are in the process of failing, in very public ways.

I think the ideal scenario is a somewhat supportive direct manager, and a disagreeable, quality demanding, manager somewhere not far above, keeping the ship from sinking.
Interesting twist.

> people in New York State earn

I assumed this was referring to age cohorts (assuming the statement is true in at least some sense).
I know that ag subsidies exist, I'm not getting why you or the writer of the article you link assume that ADM gets the profit from it.

It seems like a misunderstanding of both ag subsidies as they exist today and of ADM's business model
Not news. In fact, wine/proton really is the preferred wayof doing things.

Valve saw the light years but they weren't the first. Even Carmack has been saying it before the whole gaming on Linux thing became viable.
There are also these:

https://www.ft.com/content/11ca7193-f7d8-496f-bb90-d3270b2cf...

https://www.gov.uk/government/news/government-fund-to-accele...

https://www.bbc.com/news/uk-england-62038190

But i do agree more can be done.
Looks mostly abandoned to me:

https://github.com/keybase/client/graphs/code-frequency

https://github.com/keybase/client/graphs/contributors
After the keyboard fiasco I am very nervous about upgrading my 2012 macbook. I tried the last intel model air (same body as the m1) and that computer was an absolute lemming. This 2012 computer sure looks old and ugly, but I can replace all the components myself with a screwdriver, and the body was designed so the cpu could actually work at 100% and not end up thermally throttled. The computer gets hot and the fans get loud for sure, but it doesn't throttle any. Back then the base clocks were probably set to more sane thresholds for heat's sake versus today's turboboosted cpus in thin cases with poor air circulation that inevitably throttle under long term load.
oh jeez guess that's one reason out of many why they call it mutually assured destruction
Most of them are, yes. AppImage also solves this, but doesn't have as robust of an update/package management system
Interesting! What would be a better way to think … or, what is harmful about GDP thinking?
Any clue of what is causing that? Is it the aluminium chassis expanding as a function of temperature and causing stress on the glass?
I...do not understand this take. Those names are their differentiating marks because most of them (not all, and TTI is more aggressive about this than most but their mark licensing is very long term) have existed forever and been aggregated together through different acquisitions.

SBD didn't invent DeWalt, they bought a company called DeWalt and expanded them to more tools.
Carvana was shut down in Illinois earlier this year over similar issues:

https://foxillinois.com/news/local/carvana-no-longer-allowed...
That is not a bug. Just make a chroot with an older glibc and build there if you want to link against an older glibc. That easy.

It works with future versions, not with past versions.
The thesis here seems to be that if Musk really opposes restricting speech, he should restrict his speech; by not addressing the people of China through the only available means. (Every publication is filtered there, not just Cyberspace China one, of course.) That conclusion doesn't automatically follow, needless to say: only if his publication would lead to more restricted speech in future can you get to that conclusion, and no such argument is given.

There's no reason to think that if Elon Musk had demanded no censorship on his article (as Reagan was able to do for a TV address to the Soviet Union on a vist IIRC) that wish would have been granted, just 'cause he's Elon.
I have gone dozens of times on foot at 3 in the morning to get medicine.

For starters, the number of times that myself or either of my former or current spouses has felt the need to seek out a vendor of medications at 0300 has been...zero. That said, and I don't mean to be trite, you deal with it by living like you live 2 hours from an ER. Know your first aid, make doubly sure to keep those fingers away from that table saw (and even that won't likely kill you before you get to the ER). That, and just don't obsess over it. People have lived far away from emergency medical care for many years. Sometimes they die as a result. Sometimes people die driving to the ER that's right down the street. But me and my house, just because a hospital could be close to home doesn't mean it has to be.

(Says the guy smack in the middle of Redmond, WA within a long walk to the ER...or a five minute drive. That hasn't always been the case, however.)
Anonymity isn't part of Signal's risk model. If you need to stay anonymous, then there are more suitable options.
Yes, I remember when this happened. Everyone who got banned had their accounts unbanned (I was not banned however, and I've used Ripcord daily since 2018). You were also just as likely to have gotten banned if you used an outdated Android client.
I'm sorry, but please cite some sources, because this contradicts everything that's been said about M1's x86 emulation that I've read so far.

> Well, did you know Apple ported Rosetta 2 to Linux? You can get it by running a Linux VM on macOS. It does not require any kernel changes to support in VMs, and if you extract the binary to run it on Asahi Linux, it works just fine too. None of the Asahi team did anything to support x86 TSO. Rosetta also works just fine in m1n1's hypervisor mode, which exists specifically to log all hardware access to detect these sorts of things. If there is a hardware toggle for TSO, it's either part of the chicken bits (and thus enabled all the time anyway) or turned on by iBoot (and thus enabled before any user code runs).

Apple tells you to attach a special volume/FS to your linux VM in order for Rosetta to work. When such a volume is attached, it runs the VM in TSO mode. As simple as that.

The rosetta binary itself doesn't know whether or not TSO is enabled, so its not surprising that it runs fine under Asahi. As marcan42 himself said on twitter[1], most x86 applications will run fine even without TSO enabled. You're liable to run into edge cases in heavily multithreaded code though.

[1]: https://twitter.com/marcan42/status/1534054757421432833

> Both of those happened purely because M1 and M2 are so hilariously wide and speculative that they trigger memory reorders no other CPU would.

In other words, they're not constantly running in TSO mode? Because if they were, why would they trigger such re-orders?

EDIT: I've just run a modified version of the following test program[2] (removing the references to the tso_enable sysctl which requires an extension), both native and under Rosetta.

Running natively, it fails after ~3500 iterations. Under Rosetta, it completes the entire test successfully.

[2] https://github.com/losfair/tsotest/
Do you have __any idea__ how difficult removing the chip and re-surface mounting it for an attack...

Removing the trace means an extra step which is the whole point. Ffs
"You might win this car!"
I think the keyboards are sub par on the pro and Air models.
> I'm pretty sure I encountered that one with both Disney and Royal Caribbean reservation workflows just flat out breaking.

My favourite is services that let you sign up with a + in the address but then break when you try and login or reset your password.
I don’t know you if you’re being sarcastic but definitely +1 this sincerely. He’s by far the candidate I like the most on the left.
This makes a lot of sense. It's very hard to be better than existing products de novo. They have years of evolution baked in, tiny elegant tradeoffs that aren't obvious from the outset.

I see this a lot in indie games. Many games that do well copy an existing idea, with a few tweaks/transmutations to make it unique. Theres a sweet spot of similar enough to reuse the template (and not get stuck in the weeds during development), different enough to be exciting. Dota Underlords > SNKRX > Just King comes to mind, where the slot machine/tribe/economy mechanic is kept wholesale.

Or Slay the Spire, which has been copied to death in the last few years.
Timelock Encryption made possible and easy to use
Encrypting something that cannot be decrypted until a given future date is now possible :D
This was presented on Friday at DEF CON, and there's also a web demo to try it out using the second compatible TS library: https://timevault.drand.love/
Impact at the edge of screen created microscopic crack. Thermal change caused the crack to spread. It happens all the time with vehicle windshields.