skysight-inc/HackerNews huggingface dataset:
> Want to do the math on electrification? Go figure out the emissions produced by the entire process. The fact that you believe it is 0% says a lot about just how little you understand about, well, everything.

Frozen world fallacy again. The 11% is the point of use stuff, embodied emissions come under industrial heat, or chemical, or electricity or or mining or shipping. What processes produce those emissions? How does a steel smelter produce emissions if it is running on solar electrolysed hydrogen? How does a mine produce emissions if it is electrified, and the nitrates are sequestered and the hydrocarbons it uses come from the air? Mining basalt hosted formations becomes carbon negative at about 120g/kg of host rock if you spread out the silicates after.

> My guess is you'd be lucky if you get a 2% to 3% savings, if that.

Good thing reality doesn't conform to the vague gut feelings of someone who is trying to spread FUD then.

> For a sense of proportion, if all of it was nuclear, we would need somewhere in the order of 1200 brand new 1 GW nuclear power plants. If it was solar, we would need at least ten times that much and more batteries than anyone could imagine. Good luck with any of that. We would have to rape the earth for resources just to do this in one country, much less every nation on the planet. I don't even want to think about additional CO2 contributions to the atmosphere.

You don't need 1.2TW to provide well under 300GW. And you certainly don't need to store energy in a battery to store it in a battery. Just plug most cars in most of the time and they become 3-day dispatchable load that massively drops the storage required for electrification. Some PHES or hydrogen is needed for seasonal storage, but this is a few dozen TWh.

The part of first generation of PV and wind will produce around 20g/kWh. The rest will use PV and wind to produce the Al, ste, and polysilicon. Same with nuclear. This drops it to 5 or so. Electrifying a few other steps makes it negligible.

And your claims of it taking centuries are incoherent. It will happen within 50 years simply because of resource depletion even with no intervention.
Idk as you loose the index and several operators your database might get useless and this solution would not scale well.

From my experience you better have dedicated views for different stakeholders and your problem is solved without those downsides.
Then maybe you need a free "Speech Culture". Meaning, you need to be free to choose to have the Cleansed Speech or the full fat experience. Now that's a freedom that 18th century people did not think about.

It always surprises me that people never question the writings of the constitutions as if they were godsend in a monolith.
1. We don't know what mitigation steps have been applied. However, it seems that at least some affected vendors are still signing their apps with compromised platform certs: https://www.apkmirror.com/?post_type=app_release&searchtype=...

2. Unknown. Could be multiple independent hacks of the OEM or an ODM, could be an insider, etc.

3. The attack vector is usually sideloading.
Why don't you like the softener water? I thought it was better for the skin.
'freeze peach' is a dig at the blatant disingenuity of some self-styled 'free speech absolutists' who are actually dedicated trolls out to upset people. Since you're new here this trope might not be familiar to you.
Having stolen the key, the thieves themselves could push such an update and lock the OEM out. Imagine millions of Apple devices getting an update, locking Apple out while simultaneously installing some nefarious code which uploads all saved credentials to the thieves' server. Sure, the time window is short (if the breakin was detected), but having full-access to millions of people personal data could be a long term money-trove while simultaneously bankrupting Apple through damages. One could short-sell companies by leaking sensitive data, impersonate people and send messages, blackmail people, even simple ransomware would be devastatingly profitable.
The world has become so weird. That elizableu person responded to one of her tweets 'Important to note, Elon Musk himself “liked” a tweet in this thread last night. If this information wasn’t valid, if it wasn’t factual, that wouldn’t have happened.' and turned her story over to 'teslarati.com'
Dropbox | Full-time | Remote North America

I work with Drew (the DBX CEO) on 0-1 bets at Dropbox. I'd love to chat with former founders/early employees passionate about project management, task management, calendaring, or the intersection of the above products with ML/AI. Send your LinkedIn to odio+vip@dropbox.com.
A reason behind mysterious endless baby crying is often soap residues left on milk bottles. Always rinse a bottle again before using it.
For various historical reasons a lot of the device-related security work is housed on Chrome infrastructure.
I don't mean to be trite, but that won't work since everything is chemicals.
Submitting this without comment is the smartest thing to do - because if one truly implies what I think parent intends, they’re about as bone headed as they come.

The product is making insanely powerful api’s so that you go from thought to code and from code to customer base at the speed of ideas while still maintaining amazing performance for the end user.

That is still happening - whether or not we agree on SwiftUI - it’s obvious they still care. These ideas BUNDLED with the AppStore is the product for developers and end users. Either enjoy it - or enjoy life on the web, the cross browser compatibilities, the crazy header vulnerabilities, the css not shaping right, the js everywhere… you name it. Just try other fields for a real commercial app - then you’ll see the iOS native app is valuable for a reason.
Google Says Links Will Be Less of a Ranking Factor in the Future
It just happens to be where vulnerabilities are disclosed under the Android Partner Vulnerability Initiative: https://security.googleblog.com/2020/10/announcing-launch-of...
Why doesn’t Twitter, one of your “private parties”, also get to pick “who they don't want to do anything with”?
Start with sensible trash disposal ? The city literally lacks alleyways which leads to uncollectable trash on the main streets.

15th century London had better trash disposal, and those people threw their poop out of their windows. (or so I am told)
> We haven't had a major signing key stolen yet

The DigiNotar case seems fairly close ...

https://en.wikipedia.org/wiki/DigiNotar

https://darknetdiaries.com/transcript/3/
>but stealing a key only takes a pencil and a piece of paper.

You need to have a serious discussion with your HSM vendor if that is the case.
Those billions are also mostly R&D. It's also from a country external to Taiwan. ASML, the Ductch.

Yes, Obviously there's a lot that goes on in this process, more then "just" silicon. But if you want a summary, then cost expertise and knowhow, eclipses actual process. In a sense it is just "silicon" when measured relative to the ability and knowledge required to transform that material.
Right, agree. What I'm asking is: why can't the OEM over-the-air-update Secure Boot on all the online devices? Is there no channel to re-key Secure Boot from an online source?

I agree that anyone who wants to muck about their device on purpose could just not connect to the Internet, but I'm focused on protecting the users who don't want to be victims of hacks.

(My only mental model for this is the bugs in the early protection on the original XBox and how Microsoft fixed it with OTA updates and specific games they released that patched the bug).
Even now you can see in this thread some people going waaayyyy out of their way to try to pretend like this CA is an embattled party on an island and companies that aren't the CA don't matter even when they share entire officer structures, dev teams, etc. It's wild.
I wonder if any of these leaked keys were used to sign the base android installers for the phones themselves?

If so, this might be a way to get new versions of AOSP onto Samsung phones that are bootloader-locked and have no current support by Samsung. Can anyone anyone experienced with Android+Samsung comment here?
I feel like particle physics has gotten a ton of funding and there just be a lot of software engineering involved at the experimental level. I’m surprised if this software is that fundamental one or all of the funded experimental programs don’t break off some modest cash to pay people to improve and maintain it.
Accelerando (2005)
Miele has it. It's a reservoir with a twist-cover at the bottom of the dishwasher that you fill with salt whenever the dishwasher tells you its time. Seems to be about once a quarter.
We do filter duplicates, but only when the story has had significant attention in the last year or so. This is in the FAQ: https://news.ycombinator.com/newsfaq.html#reposts.

That leaves two cases where the dupe detector is deliberately left porous [1]. One is if the story hasn't had significant attention yet. We want good stories to get multiple chances.

The other case is when a story has had significant attention, but not in the last year or so. In that case we want to allow reposts because some stories are of perennial interest and a year (or so) is enough time for the hivemind cache to clear. Also, it's good for newer cohorts of users to get exposed to the perennials and classics. That's part of how the culture propagates.

[1] https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...
Textorama is a web editor that works with plain text files in your local system
I've been interested in two interlinked technologies for some time. The first is Progressive Web Apps (https://web.dev/progressive-web-apps) which lets the websites behave more like native apps, and the second is the File System API (https://developer.mozilla.org/en-US/docs/Web/API/File_System_Access_API) which enables browsers to access the local file system.

I decided to go a little more deeply into them, and tonight, I uploaded a repository (https://github.com/joaomelo/textorama) with an open-source project I've been working on nights and weekends for the last few weeks.

Textorama is a web editor that works with plain text files in your local system. The content is in your disk in a universal open format, and the browser ensures the editor only accesses the files you permit.

There is a working instance available here: https://textorama.online.
> The problem here is that it's missing the "glue" to more real world applications. This is where more humdrum software engineering comes in.

This is a bold statement. The world does not function based on "well-defined rewards". The concept of "common sense", which some consider table stakes for a human operating competently in our world, is mostly made up of things which are neither well-defined, nor allow a tremendous amount of training data. Current ML approaches require both.
No, you should be safe so long as you only accept updates to system apps through official app stores, like Google Play or the Galaxy Store. Do not sideload updates to system apps through third-party websites.
The undersea cables are private property, also.

What if all of the layer 3 networks got together and decided to not allow you in particular to demand their resources?
If you want a code-first approach, you might try the "Reference CRDT" implementations, here, written by 'josephg:

https://github.com/josephg/reference-crdts

Seems to have good density of explanatory comments.

(Seph, if you're reading this, I don't know you but Angelo has had good things to say. :)
Yes and I think the advice in those situations is "leave" - nobody (smart) is suggesting you go company-first in those cases.
I have a new-ish Miele which has it. Good thing too, because we have really hard water here.
> Google doesn't have to rent their GPUs to anyone if they don't want to.

You're just restating the current status quo as if that some how refutes the notion that businesses can be regulated, and that businesses of this size should be regulated in a manner that promotes competition.
From other comments it's looking like this one of those US/European divide things, with compartments for salt being uncommon on US dishwashers except for a few rare higher-end models/brands that are likely common to both continents (due to low volume in the US not justifying a localized version, I'd guess). I'm middle-aged and in the US and this thread is the first time I've heard of adding salt to a dishwasher.
Now I actually have a valid reason I can give my mom as to why she doesn't have grandkids. Score.
The places that care store them in HSMs which few people have physical access to.
Ca²⁺ is the more important ion, since limescale is mainly calcium carbonate (CaCO₃). Otherwise, the explanation is fine.

The exchange of the ions is driven be the difference in concentration between water and resin surface. It works both ways, but Ca²⁺ is preferred (=stronger bonds) by the binding groups (e.g. carboxylate salts). That's why a concentrated Na⁺-brine is needed to flush out the calcium ions.
Not SD2.0 but SD1.5, I am getting 30 iterations in 10 seconds on 1080ti. 50 iterations 18 seconds.
100%|| 30/30 [00:10<00:00, 2.84it/s]
> I think he and the Cato Institute want to create a world where their funders can tell lies with impunity.

Free speech only makes it harder for people to tell lies with impunity since people are then free to discuss your lies and call them out for what they are.

"Sunlight is the best disinfectant". By all means, get those lies out in the open so we can publicly tear them to shreds, even better when online platforms are themselves fact checking posts.
It's isolated to devices from the specific brands whose platform certs were leaked and are still being used to sign apps.
Most people in Taiwan don’t identify as Han.
That's not strictly true. At one point, my desk was next to the room that held the vault for one particular signing key. You'd have to get through the building security, through a room guarded by one access control mechanism, and then into a vault secured by a second mechanism. It wasn't guards and guns but it also seemd sufficient for the task at hand.
> Make the hacking world and the physical mugging/robbing worlds intersect and you probably got an extremely dangerous combination, a nuclear bomb waiting to explode.

This is easily within the capabilities of any state level actor. And unlike a nuclear bomb, it can be kept out of the news. I’d wager it’s already been done.
A lot of people including me from time to time do need to deal with some image editing at work and do not need Photoshop (nor have I ever used Photoshop) and GIMP's powerful tools more than fill this need.
Recoll is not just useable for desktop applications, it can also be used as a local web search engine through recoll-webui [1] (link goes to my own repo which has some modifications to make it work with the Searx/SearxNG engine) which in turn can be used as an "engine" in Searx and SearxNG through the recoll engine [2] (which has been merged so it is no longer necessary to pull it from my repo).

This last option makes Searx/SearxNG useable for all types of searches, both local as well as remote. I've been using this exclusively for many years now over a large collection of documents (about 600.000 entries) with good results.

[1] https://github.com/Yetangitu/recoll-webui

[2] https://docs.searxng.org/admin/engines/recoll.html

[2] https://searx.github.io/searx/admin/engines/recoll.html
On the one hand, I appreciate the attempt to bring this stuff into the realm of "double click to run" boneheads like me, but on the other hand, I really despise Electron apps when they're multi-platform, where such use is somewhat understandable if still despicable. For a Mac-only app to use Electron… Why do they hate us so?
I would also like to add to this the recent paper documenting the attacks on the 4K Blu-ray ecosystem for another reason this could happen.

It was actually really secure, until... PowerDVD. It included the AACS 2.0 Copy-Protection Scheme as an encrypted, obfuscated DLL. Which would've been fine - except they accidentally were shipping an unencrypted, unobfuscated DLL containing all the algorithms alongside it. Big oops there. As for the key material itself - it used SGX [a Secure Enclave for Intel CPUs], but it turns out it didn't check for known old insecure hacked SGX firmware, any SGX firmware would do despite Intel strongly warning that isn't safe. So for pirates, Inadvertently unencrypted DLL + bad SGX provisioning = Ripping movies ~1 year after release despite completely new DRM.

There's always the possibility for stupidity to leak a key.
Nothing can beat a MacBook except for all of the computers that can.
Why not feral cats? Considerably more pleasant than rats.

Or like teams of trained dogs.
My bank and local government aren't making game consoles one of my primary methods of accessing their services. Smartphones are heavily integrated into the daily lives of most people now. They need to be regulated that way and the makers of these devices need to have less control over their users. We wouldn't allow a car maker to charge a fee to parking garages because the driver is "their customer". I need a car, I need a phone; being a hub of value shouldn't allow for such a high degree of rent seeking.
Google can use their immense scale and resources to buy up GPUs so other companies can't. Apple buys up all of TSMC's cutting-edge production capacity for its own chips, preventing competition. The market has become centralized and monopolized and thus cannot be relied on to route around failures.
Keep in mind that "gun deaths" include suicides. I'm not sure what kind of policy choice is informed by counting suicide and homicide under the same category. But it does make the gun problem seem more severe to the inattentive reader.
Google is capable of detecting AI-generated content
Google isn't at fault, their certs weren't leaked (as far as we know).
They key is burned into the device.
It'll work as it does now on large websites, but smaller ones will probably not make the cut (due to filter list size limit).

Anyway, there's already a manifest 3 version, swap uBlock Origin for uBlock Origin Lite and experience the changes yourself.

Firefox promised multiple times that they're gonna deviate from manifest v3 on that front, so only uBlock Origin (proper) will only work there.
Can they still fertilize the egg? What % of people came from abnormal sperm?
I’m not sure it’s worse than what every CEO of dominant international companies say and do (Tim Cook included…he had to do a lot of declarations for the Epic trial, and boy were they bullshit).

I suppose it’s the sheer lack of linux support that pisses them, which is an impacting situation that goes beyond how they feel about the CEO ?
Accountants know the price of everything and the value of nothing.
All Poker AIs developped as yet approaches Nash Equilibrium -- it's just a "perfect" strategy that wins by default because it makes no mistakes. Since you make mistakes against the AI strategy, and the sum of the game of poker is 0, you lose by default.

No poker bots yet I know of have developed "exploitative" strategies, where they deviate from the Nash Equilibrium strategy to exploit opponent mistakes.

Back when I played professionally (2012-2016, poker AIs being relevant in 2015/16) the standard was to use a bot to study the best default strategies and use expert human judgement to deviate from it against bad opponents.
My favorite, albeit from the questions section:

"I'm somewhat confused by exactly what that means"

I'm working on the egalitarianism-failed-elitism quote..
> Got the Apple signing key? Revoke any app you like and have it instantly lock out from millions of iPhones. Break every app for everybody on iPhone and give Apple employees and users a miserable week and cause a political panic. Sky's the limit.

How are you getting to the iPhones? You need to be able to intercept any internet connection too.

nb I'm not sure there is such a single signing key.
Exactly. The entire list of her responses are "pounding the table" attempts to throw a lot of misdirection around how the companies are separate, while avoiding at all costs the evidence that they really aren't except on paper.

It feels like all the people swayed by this have never worked for smallish shady clusters of companies or with them, and it shows.
You’d have to impersonate Google’s web servers to push the update, wouldn’t you? That would mean both hijacking the DNS and faking or stealing the TLS cert. That’s not impossible, but it’s pretty much a moderately-well-equipped-nation level attack.
Nice. Very thorough, that’s a more positive take than what I was presenting, though I feel we are both (rightly) being standoffish on the whole inheritance requirement.
We view certain companies that provide essential services as “common carriers” — who aren’t allowed to discriminate based on how you use their product. Common carrier status for essential services is one of the ways we protect freedoms in the US.

Examples: power company, phone company, ISP.

People are starting to view Twitter et al as similar to phone companies — and hence think they should be bound by common carrier rules.
This is particularly ironic since Adams famously was responsible for the Alien and Sedition Acts and had people imprisoned for criticizing him.
A theoretical piece of paper and pen
I’m saying despite the constitution. People in Taiwan don’t claim China to belong to them. This is a relic of the past that is stuck in writing that people suffer from.
I had to check what you meant and turned of uBlock on a Fandom wiki. Ye, well, those popup ads are really distracting. Even pop-up video ads. Following your scrolling around.

It's good to remind oneself about how the internet looks like to most people ...
Getting to it might be very, very hard. But once it's in your hand you've got it. Diamonds can found as you're leaving the building, or you can be stopped at the airport, or the big pile in your house can be found, etc.

A signing key is like, 4096 bits at most? 4 sms messages will do it.
HN is still a very niche community where Eternal September hasn't happened yet. Moderation is largely enforced by the community itself thus far, and one(?) superhuman moderator.

You can be sure that if a flood of new users happens, the current system won't scale, and we'd see a diminishing quality of content and comments posted. Some old timers would probably say that has already happened, but it's still largely under control.

This site doesn't have the benefit of, say, Reddit, where niche communities can still exist in relative isolation and with their own moderation rules, even with the amount of users and low quality content on the rest of the site.
Are they though? I doubt that Apple, or Xbox, or PlayStation, use HSMs for storing their most sensitive keys. If something goes wrong with the HSM, can you recover the keys, or did you just bork your update system forever? In which case, does the key exist outside the HSM? If it only exists on multiple HSMs, how is it protected in transit between them, and is that vulnerable?
Imo these tiny quotas are specifically put in bc a lot of people (especially on this site) always complain how they managed to rack a huge bill by accident. You can’t have it both ways
(posterity) Sure the primary OS/Bootloader key probably falls under vendors, but wasn't much of the core systems (phone, play, browser,etc) moved to be under Googles control due to the vendors being sloppy with providing updates for devices in the olden days? (And as such this key would be the thing that the os/loader grants privilegies to).

Edit: Noticed the comment about them being lowend(mediatek?) certificates.