skysight-inc/HackerNews huggingface dataset:
Even seasoned developers struggle getting in to big-name companies. So as a self-taught programmer, you’ll have to be even more strategic

This will help
I admit I don't know much about Startrek, but from descriptions I've read of their society it sounds pretty good to me.

A society where basic needs are taken care of, and beyond that–as long as you aren't hurting anyone or infringing on anyone else's liberty–freedom to do what you believe is most valuable.
>People will be willing to pay for communities that guaranteed to be "human-only" and where content is created by trustworthy sources and trust is quantified and monetized somehow.

And then someone will let in an AI and spoil it all.
> That could, possibly one-day provide public benefits, but it doesn't have to

The text you quote is explicit: the public benefit—promotion of science and useful arts—is the purpose. Providing benefits to creators is a mechanism for acheiving that purpose, not the purpose itself. That’s what I said before, and it remains true, and you’ve just quoted the bit of the Constitution that says it while claiming it is false.
Very interesting. To summarise, I think the issue is that the phone gets itself into a state of waiting for a locked SIM to release itself before it unlocks the phone - the problem being the attacker could have their own pre-locked SIM they can hotswap in that of course they know the code for, and this will erroneously also unlock the phone.
Content-generation AI is advancing much faster than others. There's still little AI in the realm of, say, voice assistants. I can't say "Hey google, take me to the McDonald's that beside the Best Buy."
Actually to me his explanation kind of sounds like he's blaming the economy
Reassessing a cryptic history of early trilobite evolution
How come the security model is so basic?

I even think they should dismiss modal by id instead of type.

As this is a highly sensitive part, I think stacking lock screens on top of the unlocked menu leaves the door open for many bugs that could unlock your device.

The unlocked menu should be locked at all times, and use a flag to monitor if it’s locked/unlocked, and only flip the flag when you unlock with biometrics or with password.

If the flag is locked, then the whole screen is black and can’t have any interactivity via touch, mouse, kw…

This way is more robust, so even if you manage to bypass the stack of lock screens, you end up with main menu locked.
example of country specific niche devices for the curious?
Ironically Elon's buying of Twitter has increased transparency into Twitter.

What a timeline!
> The bug just got fixed in the November 5, 2022 security update.

Lovely. My Pixel 4 got it's last update in Oct.
I often think about this. My grandmother was born at the end of the 1800s (yes, I'm old) and remembered electricity and the first car coming to her rural village in Wales. By the end of her life she'd lived through two world wars, seen men on the moon, could talk to her relatives in Australia on the phone, and been on holiday to America on a 747.

And what always amazed me was that she grew up with people (mainly farm workers) who had never been more than 5 miles from where they were born. I go further than that to visit the supermarket!
Most Indian ISPs employ Deep-packet Inspection to block websites
One approach I’ve found useful is publishing a test suite as a module for use in these kind of “fakes”. For example, a file system blob store that passes the same test suite as an S3 blob store can be used as a reliable fake.

https://github.com/maxogden/abstract-blob-store
An increasing percentage of people’s relationships will be with AI versus other humans. A conversation with GPT-3 can already be more enjoyable, given the right prompts, than conversations with many people. This will only get more powerful as AIs increasingly adapt themselves to conversational partners through the addition of longer-term memory (e.g. remembering your favorite foods, and so forth). It will be incredibly compelling to talk with something that is both a polymath genius and knows you deeply. Perhaps a bit risky if it decides to optimize for something you didn’t want, but definitely compelling.
Hey stemming from this is a lot of talk of eq and rooms. I hope no one minds but may I also add something for budding sound techs: mics and speakers and why it’s easier for a dance venue compared to a live rock venue. These are what I’d call newbie-ish problems so forgive me if you’re talking about pro level rock venues. Low end builds up on stage and unless managed gets into mics you don’t want it to leading to lots of sloppy bass. One might low cut mics that aren’t meant to be receiving low end content for example or mute ones not in use. Another thing is that producing bass frequencies requires the speaker diaphragm to move more air and so there’s a slower transient response or time to complete a cycle. If you send too many different things at once to the low end the poor thing gets ‘confused’ and things get sloppy. Double hangs seem to be getting quite popular for this reason, less instruments fighting over the same cycle. Otherwise don’t send everything you can to the sub just because you can. Personally, unless there’s some reason to, I rarely let anything go below 80 anyway and defs not 60. I hate giving advice, tell me how I’m wrong.
If I write the code “cy.wait(…); console.log(“hi”); cy.whatever()” then the “whatever” will indeed be queued to run after the network request completes. But “hi” will have printed immediately before any of this happens! So if that log was, say, me wanting to condition on something that just loaded, I can’t assume it’s even set up at that point when my JS code is executing!
Regarding learning a new paradigm and having to build an application with it, I think it’s possible within a reasonable time.

My approach, ironically was the incremental approach mentioned in the article. So the first step was for me to view it as one problem - build app using X. Then the steps might have looked like

1. Learn ABC

2. Apply ABC

3. Refine ABC

I always know enough to build something. Eventually, I know enough to refine it.

Now the author said this is slow and I agree but at the end of what would be a learn-first-build-later approach is an actual, built system. You can now solve the next problem, enhancements.

To any new developers, I should mention that a good foundation of fundamentals is key to this kind of approach and I admit, there are much better ways to learn and build.
Hard disagree and flip it back to the freedoms of the user of the software. OSS is about giving the people using software the freedom to inspect and modify the code to the system they use, full stop. The developers have always had the ability and right to sell it or earn from making it. That people think it is developer servitude and virtuously giving it away is incorrect. It may happen, but it is def not a requirement
Likewise in Hungary. When an opposition party leader (after a big election flop) suggested that instead of importing cultural issues from the US, opposition parties should concentrate on the problems of the people living here, it was almost treated as a heresy.
I was under the impression that decrypting storage actually requires the passcode of the phone, but this bug makes it look like the device is able to decrypt itself without any external input.
Does anybody know more context about this? What's the point of encryption if the device can just essentially backdoor decrypt itself?
ah damn that mailbox doesn't work as expected :( feel free to email the one in my bio!
> Now imagine the toddler is part of a collective that has carefully built planes, mills, lathes, sanders and lumber-handling machinery to produce wooden toys and has been giving them away for free

This just makes the toddler's position that much more stupid. As the owner of the toys, he's free to set the rules for how they can be played with. But not if he's giving them away.
This was a decent attempt at trying to explain the economics around startrek if your interested. https://www.amazon.co.uk/Trekonomics-Economics-Star-Manu-Saa...

A nice change from all the dystopian reading!
GitHubNext here! Here is a little writeup that explains a bit more about the project https://github.com/githubnext/githubnext/tree/main/HeyGitHub

Hope this is helpful :)
Funny... I think the exact opposite. The spammers and bot-herders will flock to buy blue ticks in order to look more legit. The rest of us don't basically give a fuck.
Software Dark Matter Is the Enemy of Software Transparency
It's more that you see yourself doing FAANG Level work at other companies without FAANG Level compensation that keeps those dreams going.
Its unpopular in the "going against the narrative of dezentralisation that spawned the platform" way, as its human nature to have social places to gossip like a village plaza, church or in this case, many servers. Likely outcome is thus, one official battlefield of opinion, and some smaller echo chamber servers depending on political leanings.
Rent free!
There is also IoTaWatt which is also open source and supports 14+ sensors.
I can't believe this is not a "drop everything and get it fixed ASAP" bug. This makes me think there's probably tons of other similar bugs out there being exploited right now even with disclosure.
> It's not "noobs" and average Joes that have ruined social media/the Internet, it's companies and businesses.

¿Por qué no los dos?
That's what I mean when I say labour is linked to people's worth. In our societies we place a lot of stock in what job people perform, and people who don't work at all are often looked down upon in mainstream discourse, regardless of the circumstances.
I wrote this book. Let me know if I can help or answer any questions.
This is a dangerously naive view.
The US lied about weapons of mass destruction in Iraq, committed mkultra against its own citizens, and infinitely more.

It's not a trustworthy place, just has higher production standards for their propaganda vs your home country.
The McMaster website always comes to mind: https://www.mcmaster.com/

Or the reason I walk two minutes farther to a different place for my shopping - they have self checkouts fueled by a single queue. Far more efficient than the closer and cheaper place.

Utility first, uncompromisingly always. This is why we still use terminals. This is why I drive a smaller less cool granny car. It's why people still ride old terrible singlespeed bikes in denmark, and it works. It's why messy desktop icons can be peak efficiency. It's why everything good is good.
> Does the federated model deal with that? I understood that the owner of an instance can moderate any posts that come from that instance, whereas the only moderation you can do of external instances is to ignore the whole thing.

Mastodon has a lot of tools for muting and ignoring, both at the account and at the instance level. Here are the admin-level tools: https://docs.joinmastodon.org/admin/moderation/

Right now, it looks like admins can "suspend" or "silence" external instances as a whole, but not individual users. "Silence" is interesting, because it's essentially a "soft ban": Users from that server will only appear to local users who follow them, if understand correctly. It's essentially, "Mostly we don't want to hear from @wretchedhiveofscumandvillany.example.com, but some of our users want to follow specific people from there, and that's cool."

> Alternatively, they would only want to have two-way federation with trusted third parties, who they could trust to moderate extensively.

This is already true to a certain extent. It appears that instances that won't moderate especially abusive users may gradually be defederated from other servers (or at least silenced). And of course, individual users can also ignore entire instances.
iPad has 3GB ram and model needs 2GB, so, I think your device is too underpowered.
It seems to me this bug appears when a phone is booted, unlocked (and decrypted) once, and then locked again, but the decryption key still stays in memory.
Glad he got rewarded. Feels like this could have played out differently, if it had hit his disclosure deadline we might have been reading about him going to prison, such is the febrile nature of the legal situation around vulnerabilities.
Projects from big companies disappear faster than, say, Vim and many other similar projects.
The scale of the web, the authority of print
vhs forces nothing. Seems to me direct interaction with the tool that changed is far less trouble than editing a script in an attempt to match the I/O involved with a command.
Roof over your head. Seriously? In Europe if keep it modest you can keep a roof over your head by working in supermarket. I don't think this should be your aim honestly.
I'm almost certain a trained professional is still going to do a far better job than an amateur.

That part is unlikely to change much, if it all.

Trained professionals will always outperform the latest fellow dragged off the street.
In the write-up search for the bit that says "and one time I forgot to reboot the phone".

tl;dr: It's not an encryption bypass, it bypasses the lock screen once the phone has been unlocked once.
That with the video of shakira someone posted, it's a shame Japan now has a reputation for being behind the times now, I wonder how much the language barrier had to do with why none of the tech companies in japan other than those tied to video games have an international footprint today.
It looks like Twitter had alot of employees selling access to push trending topics or even charging 15k for verification.
Because softwares ability to change are a living thing and it becomes stagnant and brittle once its left with no humans to keep it alive in symbiosis?
Screw that money. I’d rather have the old Internet vibe back.
Agreed, but if the evidence is from some research company notorious for promoting in-office culture will it really matter? I'm sure evidence equally exists for in-office and remote work, it really is just a preference. Personally.. I think employees that are independent in making their own decisions produce better work and are more passionate about the company they work for. I don't think Musk is looking for passion, he is looking for drones that will ignore his childish antics and don't question the ethics of what they are being asked.
> A difference is that I can't just spin up a copy of George Lucas

... yet.
It didn't work on a fresh reboot, so presumably, it functioned like you're describing. But, when he swapped the sim live, without the reboot, the phone was already running with the key in memory.
Work Hard / Work Smart
As a Nordic citizen I am not sure we don't have the same problem of executives not sharing responsibilities.
A good editor (and the ability to use it efficiently) is a relatively small factor, comparable to the ability to type quickly.

Much greater leverage can be found in the ability to innovate, to have the undestanding needed to quickly select a good approach to solve some problem and the social skills needed to lead a team or company in a direction where they can (to re-use the term) leverage such new innovations in ways that generate maximum value.

For instance, if you have a team that uses RESTful java microservices on k8s for EVERYTHING, many compute heavy or IO heavy tasks may require massive clusters to run a data processing pipeline.

If you're the engineers that identifies this as inefficient, finds way to build the pipeline using a more suitable tech stack, and introduce this stack to your company, you could the infrastructure cost of a company by millions per year. That's kind of comparing the use of cargo ships to mules for transporting goods.

And if the tech you introduce also enable 10 other devs to develop 3x faster, this alone would make your effort as valuable as having at least 20 more such engineers. (20x).
> Hmm, I'm not sure I follow the part of static imports

====== COMPONENT FILE

import PeskyChild from './PeskyChild'; // THIS IS A STATIC IMPORT. STATIC IMPORTS IN ES6 ARE HOISTED

const MyComponent = () => (<div><PeskyChild /></div>);

====== TEST FILE

import { render } from '@testing-library/react';

import MyComponent from './MyComponent';

// THIS ATTEMPTS TO MOCK A STATIC IMPORT. IT WON'T WORK SOON-ISH
jest.mock('./PeskyChild', () => () => <div data-test-id="mocked-child-component" />)

describe('MyComponent', () => {
it('is awesome', () => {
render(<MyComponent />)
});
});
My experience with super apps is that they are information overload. We already have super apps that work and they are called Android and IOS.
I slightly disagree with one point. There's not a better time/way to learn a new language than on a new/real project.
Core Textbook – The Economy
And imagine the next day, when you are back to square zero.
Use the search, set the weekly filter, and schedule it:

https://hn.algolia.com/?dateRange=pastWeek&page=0&prefix=fal...
I'm not interested in your assertion of the popularity of that opinion, though. If you have data to _show_ it's unpopular, that would be interesting. Otherwise, let your opinion stand by itself, allowing other people comment and vote on it.
IPad Air 4 is ok too.
I've never met someone who wanted a diverse, unique app experience. For the most part those are just a pain in the ass created by some overzealous junior designer eager to show off.

Bland and predictable apps are so much nicer. It's not an art project, just a barrier to getting something done... please don't go crazy with it...
Selenium supports things like waiting till an element is clickable?

The webdriver issue is definitely annoying though. Not sure if there's a better way, but we're using a binary regex on the electron app in question to find a matching version and download it on the fly as part of test setup.
this is just a bad analogy. the internet is not transporting anything like a road would. the whole system works by copying “your data” every step along the way.

they are not thieving your precious bits, they are copying them as they are transmitting them. this s also why you cannot even notice the “thievery”.

furthermore, this analogy is mangling together data legitimacy, security, and property rights all into one big ball of “be worried, the internet is stealing you because it wasn’t designed with safety in mind”
LnS: https://www.wilderssecurity.com/threads/why-did-you-buy-look... (perfect stealth) + the ability to block at the level of every dll run by svhost till windows 7 - then the author disappear and no solution like that anymore (it used TDI removed after windows 8).
Whatever ecosystem that remains is already hollow and degraded. Have you ever tried reading the responses to Elon Musk's posts. They appear to be a bunch of simps and unoriginal bot spam using automation tools to be the first to post. Nothing about it is organic.
In Egypt anything is possible if you know the right people, and give them enough money.
There are several reasons this wouldn't work:

1. How do you check the output of the voice to code step? If you need as much expertise as you do now to actually review the code, then the voice to code step is just a layer that adds confusion

2. How would debugging work? Again, would you still need to be able to understand the code? Same issue.

3. What if you have to pause and think? This will affect how the voice to code interface interprets your speech.

4. How would you make a precise edit to your source audio using a voice interface?

5. How would you make changes which touch multiple components across the project? How would you coordinate this?

6. Precisely defining interfaces between components and using correct references to specific symbols is very difficult to do in natural speech, which typically uses context to resolve ambiguous references. The language you would be using would still have to resemble the strictness of a programming language even when spoken, but you have replaced a reliable checkable channel (input through keyboard, transfer as-as to text buffer, feedback from visual view of source) with an unreliable channel (input through microphone, transfer through complex signal processing and multiple neural network language models, through multiple representations, where you have to be able to check multiple representations for feedback about the structure of your program (initial speech-to-text step, text to source))
How to secure your Java application with OpenID Connect
It read like the payment came only when disclosure was imminent. Google basically extorted themselves into paying it to encourage pushing disclosure out a couple months.
It would be interesting to understand if it is also reproducible in other brands
I forget which Pixel generation.

For one generation Google I believe never shipped the ability to unlock your phone with your face. Despite having all the hardware on the phone, it just didn't have the feature.

This was a serious feature deficit viz a viz the relevant iPhone at the time.

The gossip was, the feature was finished, completely.

Had to be ripped out after external pen-testing bypassed it with Facebook photos.

They have many, big, problems.
I feel that you and the GP are mostly in violent agreement. GP just stated his experiences, which are not obvious for one's first large project.

What is missing is recognition for those small projects without marketing or branding that are better and more bug-free than corporate projects.

Money is not needed, just recognition.
But why does everything look like it was made for children?

https://news.ycombinator.com/item?id=22490089
Umm… how about the entirety of technological progress and human civilization as evidence? You are aware that we worked together in offices until 2 years ago, right?

Heard of the iPhone?
Or the internet?
What about life saving medical equipment?

These things were all developed by people working together in person.

To pretend there’s no evidence to back up a pro-office claim is to pretend reality didn’t exist until March 2020.

And I say this as someone who works from home.
Eternal september is a problem if you depend from someone else for your fediverse instance. If you rely on your own server, you have an atom button for blocking traffic from selected instances at least at firewall level. It is not usenet or "social network du jour" anymore if you put some effort or cash.
A decentralized cyber environment is hard for building stardom status and for making money, if you have both of those probably it has no effect be it positive or negative.
> This is digital imperialism, American ideas and values are inconspicuously spread through memes (in the original sense of the term) and foreign children, teenagers and young adults are raised on them.

This has been going on since missionaries, perhaps going back to the original Apostles, started travelling the planet:

* https://en.wikipedia.org/wiki/The_WEIRDest_People_in_the_Wor...

* https://news.ycombinator.com/item?id=25227902

The fact that it is now American, as opposed to some European country, is just a recent phenomenon.
Summary of the FTX drama that is blowing up in crypto
This is a great example of why you should use iOS. Most android devices do not receive security updates long enough to get this update.

Since the author effectively tells you how to do it, all you need to do is find a pixel 4 or older and you’re golden.
We should investigate all the kids', grandkids', cousins, nephews, etc of every politician. /sarcasm
I think the biggest use case for this is accessibility. There are plenty of people who permanently or temporarily cannot use a keyboard (and/or mouse). This will be great for those users.

For the average dev, I agree this is more of a novelty.
The Gaians: A Real-Time Dystopian Fantasy