skysight-inc/HackerNews huggingface dataset:
> This is absolutely false. What's your source?

So first, I was primarily responding to the claim that benefits are "usually the highest of any public employee," which is absolutely not the case. The insurance policies and retirement plans offered in the public sector are absolutely not more than the cash compensation of public employees. A state employee that has a gross cash compensation of $7k does not receive anything like $7k in insurance benefits monthly.

"Depending on the employee" and "broadly similar". So 69% (private) vs. 92% (state & local gov't) have access to a retirement plan. Yes, that's broadly similar. But for the context of HN readers, who will skew towards "professional and related occupations, " the gap is only 8 points. (Looking at participation doesn't make sense when evaluating jobs because it evaluates what other people do versus what is on offer.)

The calculation for medical and life insurance is similar. If you look more closely at the data, it will be obvious that the private sector numbers are dragged down by absolutely shitty jobs that don't pay well and have few benefits. In a sense, it's not reasonable to compare the pool of all private sector workers with state and local employees; the latter are dominated by "better" jobs that are better whether you have them in the public or private sector. In general, an engineering job comes with medical insurance whether that job is working for the state or Google.

The other thing that comes out of this data is that we should obviously consider making it so that private sector jobs have a higher floor of benefits so that taxpayers don't have to be the safety net. Instead of wondering why government jobs have such great benefits (they don't, really), we should wonder why so many private sector jobs are dependent on taxpayers picking up the tab for e.g. food stamps for people with full-time employment in the private sector.
Absolutely true. Even if you shut off all doomscrolling, block twitter, don't use facebook, don't read the news, you'll still interact with people in real life who are spending their time looking at doom narratives or have some sort of propaganda being pushed to them. It is nigh impossible to fight it off.
Without control of the client, it gets much harder to fight abuse.
So a Newpipe for Facebook? Finally. For sure more difficult to pull off, but good luck!
The cited study: https://www.nature.com/articles/s41467-022-33196-x
This wasn’t competition though. This was straight up theft of resources/services.

What? “extra-legal”? Don’t mix this with other behaviors Meta/Facebook/Instagram engage in, I hate them for all the bullsht they get away with too. However, this isn’t that, this is someone trying to build a platform on top of someone else’s platform explicitly against their terms of service and without reimbursing them.
The privacy policy link being broken is definitely unfortunate. Anyway, here's the page it is supposed to link to https://www.theogapp.com/privacy
> Yes, the app is downloading private user messages (ostensibly to show a modified messaging interface) and private photos, according to their feature list.

In 100 years, I wonder how we will look back at our generation tried to wrap its head around how digital information works. The implications are mind mending and we've been figuring it out our whole lives, with new aspects appearing regularly.

People like my grandparents couldn't ever download a conversation and share it, not in the same way
Not sure what are simple oral traditions, but the Vedas [1] are oral transmitted. To preserve meaning there is elaborate chanting techniques. They have been written down recently, however, to really learn them, one needs to chant. They are pretty complex for sure.

1. https://en.m.wikipedia.org/wiki/Vedas
Do you have any links to share on how to build a proper SD query, with parens for example? I have not seen that done.
*These companies can ban a terrorist from abusing their platforms as a terrorist control channel, banning him years too late due to their corrupt incentives.
Owning an SUV, a truck, a bicycle, and a motorcycle I can tell you that there is this huge difference between a motorist incident and a cyclist incident.

If you don't have a VIN you're not in the system and you can die and it won't matter. Being legible to the state is important.
Remember when Facebook built out an app platform on top of their website, it was all good until they made it clear they didn’t care at all about the developers and just saw them as a way to increase their control of the market.
Instagram has a chronological feed now, just in case you missed it
On Mr. Beast and being alone in a circle for 100 days
Can you imagine the poor intern that's just answering phones or delivering coffee, proud to have their first job, and loses their social media account? Sorta funny.

It also seems extremely petty considering they KNOW this company has endless fake accounts they use, and losing their personals doesn't really mean much other than a personal loss.
I completely agree that this isn't the right way to fight Meta, but I disagree about "Letting" you build a machine that consumes resources.

It's not OG or Facebook's machine that is consuming Facebook's API Resources. It is software that is running on the User's hardware. The user should be, and generally is, allowed to make any request to Facebook that's not actively malicious - Using whatever software they choose as their user agent. That means a third party client, developed with the express intent of not showing ads. It's my computer, not yours,
> so I built my own machine that consumes your resources

They designed the machine.

It's the users that are making instances and running it, right?
An interesting thing is that "100 point ID" applies to physical documents, but somehow it's been conflated with the number on the document being equivalent. One is obviously more easily copied than the other, and scales better for fraudulent use.
There could be multiple pickup and dropoff points distributed throughout the city. Check-in could be streamlined through an app.
Actually a lot of them. The record is probably held by "This server could not prove that it is no-common-name.badssl.com; its security certificate expired 829 days ago." (but haven't checked each one).
Simple question: Epic of Gilgamesh is one of the oldest stories we have. Is it good? Is it worth reading today? Or is just just preserved for history's sake? Actually curious
What evidence do you have that this application was acting as a "proxy" where the developers can "intercept and see all data"? That's a pretty big claim to make without providing any supporting evidence.
Dev blog exploring retro (Windows 95) computer virus development
So...what is it? I couldn't parse.
> The whole thing would work just fine on a couple of FreeBSD servers

And you need dev servers. And a way to keep them in sync with production because you can’t just create a branch and provision a bare metal server on the fly. And you need a deployment process to get code from dev through test, UAT and production, and this process is lengthy and fraught because you can’t just fire up a new instance and switch the elastic IP, you actually have to deploy code on the physical machine and make sure there aren’t any configuration differences between your test and prod environments that’ll cause ‘it worked before’ problems. Developer productivity tanks, people are afraid to make changes, any pretence of agile/devops goes out the window and eventually everyone gets sick of the crusty old server and decides a complete rewrite is needed.
There already exist other forms of organizing workplaces that eliminates management.

https://hbr.org/2011/12/first-lets-fire-all-the-managers
And here I thought it might be a variant of the Dutch Reach method to avoid killing cyclists. (https://www.theaa.com/driving-advice/safety/dutch-reach)
i don't think they look for open wifi, they look for a mesh network they're part of and you've all already a agreed to be part of
Blows my mind we are going to have commercial electric planes BEFORE they bother to get poisonous lead out of avgas for decades after knowing it was deadly
Yes, arduino-cli is very nice. You get the convenience of arduino ecosystem (prebuilt cross-compilers, board files, libraries), without the downsides of using full blown IDE.
> Pay ranges are useless without seeing the distribution.

"Useless"? Or just "not as useful as a more complete picture would be"? I agree that the latter is true, but that doesn't make them useless, IMO.
'functionally equivalent' except where it's not.

There's a bunch of places where they've got some sort of ID requirement that only accepts either a licence or passport.

There's a really big assumption in this country that you must have a driver's license, and if you don't well then difficulties arise.
I realized today that being a contrarian is good in times when people are doom saying. I've felt relatively optimistic with all the talk about long term recession etc. I unfortunately had to talk to someone today who was talking about how the market might not recover for half a decade and my immediate though was "if this smoothbrain thinks the market has further to go, maybe its time for me to move more into the market."
Hacker news comment threads are a different kind of doomscroll, the steady litany of expressions of all the ways this industry is going to hell in a handcart:

This isn’t a new idea

You don’t need Kubernetes

Why do we need another JavaScript framework?

This won’t work, because of this one specific scenario

I guess nobody cares about performance any more

Developer compensation is ludicrous

This security issue wouldn’t affect you if you were on FreeBSD

I could do that with a 20 line shell script

Warning, PDF

Why does everything have to be about politics?

Etc, etc, etc..
Great due diligence on this deal. Who thought it was okay to rip off the old UI and reverse engineer the API?
I don't think you need a niche for consulting at $250,000+ a year. Even with aggressive industry pricing, you'll gross that on the principal owner alone. My firm charges fair rates, and that's just typical business.[1]

[1]: https://www.andrewmcwatters.com
For short to medium distances I think trains offer superior comfort. Train stations can be put in cities so they're much easier to get to. No TSA (I think that's still the case?), you can walk into the train station and straight onto the train. When flying I plan on getting to the airport two hours early but when traveling by train I only arrive 5-10 minutes before the train is scheduled to board.
I fail to see how this is different from augmenting a website with Adblock and userscript.

If you don’t want to leak info then don’t expose it on the API, private or not.
Am I the only one that is bothered that the finger stop (or whatever it is called) moves?
That’s how any third party interface works. It’s a proxy that ostensibly just formats and displays the data to the user but there is no way to guarantee they don’t upload it to their own servers or something, as Cambridge Analytica did (which got Facebook in trouble)
>Are my hands more "me" than my feet?

Meta's avatars (and many other ingame models representing a human) would have you believe so, since they don't have legs.
That "deep bass resonance" really depends on what kind of HDD you're talking about. Is it a modern 2.5" laptop drive, one of those even tinier 1.8" drives, a full-height 5.25" MFM drive, or one of the old 8" drives from the 80s or earlier?
RootMyTV is a user-friendly exploit for rooting/jailbreaking LG webOS smart TVs
If you've ever worked on an online service, you might realize that what you ship for the client is almost irrelevant -- it can all be reverse engineered and an unofficial client can _always_ be created. This happens for all online services, even if it's just someone's data-mining app running on a local machine. The number one rule is "never trust what comes from the client", because it's trivial to create carefully-crafted network calls to basically do whatever the API allows (and sometimes more than what was supposed to be allowed).

So, obviously 3rd party clients are thus able to perform malicious acts, but existing laws already forbid this.

My suggestion to ensure 3rd party clients are always legally permitted isn't mutually exclusive with existing laws protecting the creators of services and software. :)
> prescriptive description of how to keep up with news

Don’t

Read books instead, real books, nothing published in the last 10 years.
> D&U

I've never heard this term before, what does it mean
If a comedian is deplatformed should they ban the production team, ban Alex Jones' sound guy maybe, what about the people who voted for Trump, willing participation?

I could imagine certain protests being demonized and their attendants removed from meta for violating terms of service.

The real question is do they virtually round up the avatars for public deletions, or do they just disappear them?

I think a lot of people would enjoy virtual public executions, if anyone from meta is listening.
In the long run, this sounds great; today, I'm... skeptical. The sorts of nonsense that come out of some of these machine learning algorithms is sometimes subtle, and you could really confuse a newcomer to a language in ways that could mislead them about how grammar works in the new language.

This as a peer-to-peer service, between advanced and junior students of the language, might be a neat service
i don't have enough backstory on this. but i find it troubling that they banned personal accounts. the developers speculate that they used linkedin to source their personal accounts.

aren't developer and personal accounts separate on facebook?
> There's no such thing as non-production/production systems

Strongly disagree. If it's an isolated copy of your production system with fake credentials, fake data, etc, there's no associated risk. We explicitly turn off various security checks in our nonprod environment because it makes it easier to poke around and debug issues. That would never fly in prod, for obvious reasons.
"a small percentage"

Yeah, 2.x% sounds like a small percentage of the ~10M records.

It's still 2.x million people's records.
>The bureaucrats are never trusted with even the most minute details by the populace or the politicians. This is a problem of the left and right.

This has to do with the founding principles of the United States.

Remember, the US came about as a result of giving the finger to British governance (read: bureaucracy). All Americans can unanimously agree to hate on politicians and the government, specific exceptions notwithstanding.
And yet Meta was involved with things like Free Basics, or forcing the Oculus account with a bait and switch, and repeatedly lying about Whatsapp - but I'm sure this Instagram thing is much worse, somehow
That is a naive view. If/when the app devs go malicious, it will be Meta on the legal hook for users' "stolen data."

The press and users will blame Meta, not the developers of this app, or the users that unwittingly handed over their data. The headlines will say "X million Facebook users' data leaked," or "X million Facebook users hacked."

Meta is acting in an entirely reasonable manner for a company under such regulatory and press scrutiny.
I build and use my own - RAMADDA - https://ramadda.org
I also just use the Apple TV remote for my tv and it works fine to turn the tv on and off and to adjust the volume, so I never have to touch the TV remote. However, even if I did want to do something like change inputs often I could exclusively use the TV remote and it also works just fine to control the Apple TV.

Mileage may vary. My tv is older but does seem to have good CEC support and the newest Apple TV supports CEC.

Some devices do not support CEC and it seems others only partially support CEC so when that happens one thing, like the power on and off command, doesn’t work and you end up having to use a second remote anyway, which defeats the whole point.
Reasoning from etymology can lead you down some pretty misleading trails, especially since a lot of the most popular etymologies are nonsense and words are not obligated to change with our understanding. For example, "atom" comes from a Greek term meaning something which cannot be cut, as in something indivisible, but we apply the term to physical objects we now know are quite divisible indeed. Computer programmers still use atomic in the old sense, certainly.

Also, reasoning from an etymology hardly anyone knows is not going to get you any insight into what others mean.
Post-paid involves a credit-check. That's what they're using the ID for.

They won't let you open a post-paid account if you've got a history of non-payment.
There is in fact a way to verify whether the application sends the data elsewhere.. The most basic of network monitoring tools will immediately indicate what external hosts are being communicated with. If all the network activity is strictly with Instagram's servers, it's plainly clear that the app dev is not siphoning off user data.

So, this is why I ask. It's actually really easy to find out what network hosts a piece of software is interacting with. If the dev really is stealing user data, it should be trivial to prove. This is the evidence I am asking for, otherwise that person's claims are completely baseless speculation.
I for one live in a small town right now because of my new remote job. Small towns are great and cities feel so frantic now, speaking for myself at least
I like the way Japan approaches data leaks. The government is able to fine a company a fixed amount per person (how much depends on the nature of the PII leaked) and are also able to prevent a company from trading for a period of time. I don't have any figures to say how well it works, but I can say that companies over here are bloody afraid of the consequences.
Instructions unclear, got a society whose language is Orwellian Newsspeak.
Right now standard mental health care is highly abusive for a substantial percentage of patients.

ie. even if they do everything 100% by the book, they are harming their patients in horrible ways, and depriving them of their civil rights.
> If you own a house, the amount you paid for it and its current value are public information.

This is not the case in every jurisdiction. Even in my jurisdiction (where purchase price is), for my house purchase you get a small amount of indicative information about what my salary was 17.5 years ago. (Indicative only because you get the purchase price, but you don't know how much of that I financed vs paid cash for. Knowing what I made 17.5 years and 8 positions ago seems not that helpful.)
Ah, so the efficient market hypothesis is not just a hypothesis anymore.

Can you point me at the proof?
"Never trust the client" is true, but in practice, some control over the client still helps reduce abuse if you make third party clients a lot harder (eg remote attestation.)
I simply moved out of America. If you want to live a real car-free life safely in a place where you can have a real job, a normal life, and not just live on some weird little tourist island, that's the only way to make it happen.

As a bonus, you avoid many other problems that America has: a spiraling crime wave, housing crisis (depending on where you go), school shootings, mass shootings, more guns than people, religious restrictions and laws pushed by religious groups, I could go on and on.
As much as I'd like to support actual competent Green candidates, this example is what I've seen my entire life in the US.
hope at least it has the decency to work with a noscript/basic (x)html browser.

I still wonder how they would detect click farms.
The feeling I often experience scrolling news / social media is not hopelessness about the state of the world as a whole, but hopelessness about the state of these platforms.

HN might have a few idiosyncrasies, but it stands as one of the last places to go with a shared front-page and a high density of interesting and intellectual content.

In contrast, the algorithmically curated and individualized feeds of other platforms feel extremely claustrophobic to me... maybe because I know there's interesting stuff out there, but it's hard to find it when you have to fight through the giant mass of superficial and engagement-optimized posts and articles within the little personalized bubble that the feed algorithms think you belong in.
I agree with you, but specifically, I believe it is the user which should have this control. This prevents abuse by the service provider.
Use chrome just for Meet?
> This company saved $800k/year. Perfect time to go in-house with this solution.

$800k/yr is like the cost of 2-3 engineers. Even if they're capable of doing all of the work that used to have been done by aws, you don't have any room to expand without having to put up high capital costs, and certainly not on a dime.

It sounds amazing now, but wait till the future comes and you can no longer run your own data center as cheaply as amazon.
I've read GP comment three times now and I don't get that meaning at all. Either they did a really bad job, or (more likely) that's not what they were trying to convey.
The Australian version of the NSA, ASD, produces very good information security guides for network design and security hardening. Obviously not read by the Optus CEO (Which is kinda insane, when did a telco stop being a tech company?).

Anyway, a key point is not to have a network design that's like a Poland where people can just drive across it with little effort. That goes for developers and hackers. It should be organizationally hard for a developer to request to connect a test application to a production system. Change control should automatically put that as a ticket for review and the network team should also be cagey about doing it. It was a big oversight.

The mixing of personal data back into a insecure test system is also a bit iffy.
If you think about classification for government secrets, sometimes a large volume of low level data will attract a high protection. Because it's loss represents significant harm.

Optus should have seen it's database of client secrets as a top secret asset and guarded it as such. The release of this information is having profound impacts on many governments, and government systems as well as the individuals (50% of Australia almost).

I think we are still too accepting of non technically literate CEO's. They don't have to know how to solve all the issues but they should know to be very very curious about their IT systems. And this is a telco!
> You can emulate anything on a microcontroller if you're determined enough. It just won't run as fast as you might want.

You can absolutely compile Verilog to C using Verilator and run it on a microcontroller. The performance is abysmal, and it completely misses the point of using HDL, but it does work. :)

https://www.reddit.com/r/FPGA/comments/r86hod/running_verila...
I really really love this - sooo satisfying.
My first true computer was a Pentium 60.
So much love for that beast.
Related: here is my collection of links/domains which are useful, but difficult to search for on Google.

DNS / Networking:

- http://neverssl.com/ - manually trigger a paywall / login screen on public wifi networks

- https://ifconfig.co - Simplest way to get own IP address, especially from scripts.

Web development:

- http://vcap.me, http://lvh.me - Main domain and all subdomains resolve to localhost.

- http://nip.io - Subdomains resolve to that IP Address, e.g. `127.0.0.1.nip.io`

- https://httpstat.us - simple service to generate desired response codes

- https://badssl.com - test SSL client configuration against many invalid certificates

- https://permission.site/ - test various permission requests

Anyone have any other good candidates?