skysight-inc/HackerNews huggingface dataset:
>Conversations between users who have enabled iMessage Contact Key Verification receive automatic alerts if an exceptionally advanced adversary, such as a state-sponsored attacker, were ever to succeed breaching cloud servers and inserting their own device to eavesdrop on these encrypted communications.

Generally the biggest threat that end to end encryption (E2EE) addresses is the people that actually run the servers "inserting their own device to eavesdrop". So Apple in this instance. We would normally have to assume that Apple would do this on a request from state level entities as part of the threat model.

Apple has to provide some sort of E2EE identity verification if they want to claim that they are providing E2EE messaging. I note that they have been making such a claim for some time now. After this, all that will remain is the issue of control of the software. We will still have to trust Apple to not subvert the clients in some way. So nothing has substantially changed yet.

From the little we know about the usability of this new feature I note that the warning about new/changed devices is in small grey text. So very easy to overlook. hopefully Apple will provide enough context to allow the user to do something meaningful in response to such a warning.
In theory this could be handled by stuffing the extra 96 bits in an IP extension header. But this solves nothing because then any switch that isn’t IPv4+ aware will route packets incorrectly. Literally every single switch on the internet needs to be updated/replaced before you could start generating IPv4+ traffic otherwise the one outlier will send your IPv4+ packets off to Uzbekistan.

OR

Maybe you don’t use those 96 bits for routing. But then it becomes nothing but a sort of subnet address and you haven’t fixed the routing table size problem. And actually every endpoint needs to upgrade too because endpoints that don’t recognize the header extension will generate crazy responses and confuse TCP packets from different computers as coming from the same machine.

There’s no useful and backward compatible way of extending IPv4.
Now do restaurants
> It is a pile of biases masquerading as an intelligent agent.

Oh you mean like human beings.
If I was looking for a f/t job I might use LinkedIn, mainly because so many recruiters use it. In my own career, both with f/t jobs and freelancing, referrals and word-of-mouth always work best. A good recruiter can put you in front of hiring managers, but I would prefer finding a good recruiter face-to-face rather than on LinkedIn.

I think the worst way to find a job is filling out applications online and blindly sending in hundreds of resumes. LinkedIn at least sits a notch or two above that.
I have to say I’m super disappointed in the ignorance and negativity in the comments on this thread. Ignorance of both the difficulties inherent in upgrading a fixed size wire protocol designed for a research network fifty years ago, and the widespread adoption of ipv6 for real customer deployments. Heck most of you are probably using ipv6 through your mobile carrier and don’t even know it!
Sensoria Obscura: Event Cameras (Part 2)
The issue is that it's not just that Apple "could" add client-side scanning or something tomorrow. It's that they've already tried to do so once.
the fact that anyone who is that terrible would logically not want you to know that they're terrible doesn't really change the terribleness just points out that they're aware of how terrible they are.
The drivers didn't have a guaranteed pay + tips. They had a variable pay + tips.

It could also be interpreted as Amazon "topping up" workers who didn't earn sufficient tips.
The last survivor of the Titanic died in 2009:

https://www.theguardian.com/world/2009/jun/01/last-titanic-s...
Pedestrians choose healthy obstacles over boring pavements
Both, if I wanted freelance work I asked them, usually they say no, but sometimes they say yes. It's much easier if you're talking to the founders of a startup, rather than a recruiter, since the former are much more flexible.

I'm not sure how people find freelance work for big companies like Google though, unless they go through an agency that has prior connections.
WAL mode does have some slight decrease in durability by default. If you pull the power immediately after a commit the commit may be reverted when you come back up.

But yeah most of the time it isn't an issue.
I don’t know if this is frowned upon or not among assembly programmers, but I often just use naked functions in C with asm bodies, which gdb will provide the args for, rather than linking against a separate assembly file.
Why would you want to put out natural forest fires when that just builds up more flammable material for next time?
It's a good thing that the "histrionic" privacy advocates succcessfully pressured Apple to back down from introducing a vulnerability in the product before releasing this feature.
Various software vendors who dont support IPv6 and render IPv6 only setups without any kind of tunneling useless. And for the worst part play it down with stupid reasons in 202x. My favs "Why you need IPv6, just use 6to4 tunnels", "what do you mean IPv6 only?", "We dont have the resources", "It will take some time die to major changes in the software" - jesus...

I tried running IPv6 only with one machine (VPS in own hypervisor) but gave up after 2-3 hours of yak shaving and quickfixing things that should just work out, official Ubuntu repos not speaking v6 was one of them.
> The issue here is whether Apple's pivot to services and advertising revenue will corrupt their privacy protections

Considering the way they treat FB data collection vs their own data collection… I’d guess yes. Apple has a not-so-subtle growth in ads that we’ve been hearing rumors about, and I wouldn’t be surprised to see a suit from Eg. Facebook. Apple ads will focus on app content - which the biggest competition used to facebook.

> Similarly, we can wonder if EU privacy protections will vanish if a future adtech unicorn gets born in France or Germany

I think the bigger likelihood is that this cements the reality that no new ad-tech giants will emerge. If you ban geese, you’ll never get a golden one.
> Case in point: type classes, the Monoid type class, and Monoids as the mathematical concept; [...] when implemented by a compiler behaves exactly as expected when the program is executed.

Not true in general. For some specific instances (such as fixed-size Int under addition or multiplication[0]), it works[1], but in the general case (eg Integer under add or mul, [Foo] under concat) `a <> b` can fail with out-of-memory if a and b are large enough. (This debateably violates closure of `<>` (you could say `undefined`/`error "out of memory"`/etc is a valid element), but indirectly breaks all the other Monoid laws like `(a<>b)<>c==a<>(b<>c)`, since the result is `undefined`(/etc), rather than `True`.)

0: Actually, I'm not sure it's true even then: does Haskell actually guarantee 2s-complement truncation on overflow?

1: Give or take "How many bits does Int truncate to?".
With the amount of now entirely verified and true information that was initially labelled as misinformation, I welcome our new [lack of] data overlords, and will endeavor to become the fact checker I need or externalize it to other authority figures of MY choosing, instead of those deemed as such by institutions with power to suppress information.
Android offered it for a long time for decrypting on boot. I'm sure Apple could communicate it well enough.
Given how long it's been since IPv6 was released, I'm surprised that there hasn't been a big proposal for an IPv7 that would fix the alleged problems with IPv6. Has anyone worked on anything like that?
Re not allowing pay-in-lieu, I guess that is correct, but this link implies that the penalty for not giving notice would be the wages, so the 60 days in-lieu would satisfy this - no room for extra damages https://california-business-lawyer-corporate-lawyer.com/empl...

Admin burden of dealing with COBRA is non-trivial, so I would rather have the healthcare than the money.
Same issue with my spouse. Solved it by buying a fancy manual espresso machine, and me learning to steam the milk to the correct temperature by feel. For tea we have an adjustable temperature electric kettle.
Yes, they are refusing to enable it if you have older devices signed in to your Apple ID.
Ask HN: Ways to stay up-to-date on ChatGPT?
The internet moves fast. AI even faster. What are some good ways to stay up-to-date? Currently my resources are the OpenAI discord and HN itself. I wonder if there are other good resources
I'm going to be a bastard and argue for the soviet take on large scale concrete construction.

My personal favorite is the Russian Academy of Science https://en.wikipedia.org/wiki/Russian_Academy_of_Sciences
For those who are curious how Solana staking works in Ottr - https://twitter.com/ottrfinance/status/1600507410447302657
They word their announcement carefully.

> For users who opt in, Advanced Data Protection keeps most iCloud data protected even in the case of a data breach in the cloud.

Here, "cloud" is treated generically - as if Apple doesn't have to do with it. I suppose they don't want to spell it out. A more honest, but still easy-to-understand statement would be:

> For users who opt in, Advanced Data Protection keeps most iCloud data protected even in if someone hacks Apple's iCloud servers.
That was lovely, and put much more eloquently how I feel about Chris than I've managed myself.

We really have lost an exemplar of how to be a member of a community based on knowledge and learning.

I hope he continues to be an inspiration to people in the Ruby world for many years to come.
I am so confused here. Again, what on earth are you talking about?

You live in the US, right? If USPS, UPS, or Fedex is given a delivery address, that’s where they deliver the package. It’s that simple. There is no complicating factor whatsoever. They do not wander off to the local gas station and drop your package off there. That is a fantasy.

Different websites do not dictate the behavior of the shipping carrier, that’s also a fantasy. Once the seller hands the package to the shipping company, it is literally out of their hands.

In your story, a package on the way to your residence got delayed. This happens sometimes and has zero effect on the shipping address. There was no point in which you had to worry that maybe it would show up at a gas station.

Again, how is it possible that you do not know _WHERE_ your package is being sent to?
The legacy IP at their edge is what I meant by terminating IPv4+IPv6 at the load balancers.

The tricky part is that almost all datacenters today need to talk out to other datacenters. Not all of them use IPv6 which means they will still need some way to speak IPv4 until all their 3rd party data processors are also doing IPv6 and for Facebook I happen to know that is a lot of 3rd parties. If they are truly IPv6-only in the datacenter then they would have to forward-proxy all outbound connections through something with an IPv4 address on the edge as well and that can not go away until all their partners and vendors are also purely IPv6.
@erindale_xyz (probably the most well known member of the GN community, fantastic YouTube channel as well)

@JacquesLucke (creator of Animation nodes, who was then hired by Blender)

@FreyaHolmer (not necessarily Blender stuff, but great game-dev geometry/math content)

Tinkerers:
@higgsasxyz @cmzw_ @artofriaz3d @WannesMalfait @JesseMiettinen @Bbbn192 @Mrdodobird @cgonfire @Sanctus_Art
Yes, I have heard of the GDPR and in my opinion it has improved/consolidated my digital privacy rights and not affected the "web browsing experience" in any negative way. I believe you are referring to the ePrivacy Directive (aka cookie law). As you may know, it's only mandatory to inform the user when the website is collecting information from the user beyond what is necessary for technical purposes - and in that case I do want the option to refuse that.
People rarely come up with a working solution within 30 minutes. Any solution is good as long as it doesn't overflow (there are a few suboptimal ones). But the point of this question is, again, to understand what they know about how the computers work.
https://archive.ph/zuJW7
Well sure. The 60 days acts as a lower bound. If it weren't there, then you'd see lower severance numbers.
To change your iCloud passcode: https://support.apple.com/en-us/HT201355

To change your phone passcode:
https://support.apple.com/guide/iphone/set-a-passcode-iph14a...
The thing is I did see the ads, lots of times ... but it go nothing correct, and really blunted the whole impact.
It's relief, not reduction. As in, relieving the pain of inflation.
>I didn't see N-dimensional humans in the article.

I heavily suspect there's a reason for that: the author didn't write them that way.
> What EU firms?

All dealing with personal data, not just tech. Hotels, hospitals, retailers, banks, government organizations, insurance brokers, education institutions, and so on.
outside of appstore ads and ios ads for their services, where is apple doing advertising?
Unfortunately, I personally dont think the average person is that capable of self regulation at this point. Social media culture has become a cornerstone for genz and late millenials, and is designed to make these dark patterns work on you better.

Meaning in future this issue might actuslly compound. And i dont think any of this is malicious intentionally. I think its just self serving assholes exploiting whatever gets them what they want.
I’m pretty happy with TablePlus. Does all the big dbs.
I'd rather fight that battle when it comes rather than compromise early on and trust they won't be back next week with a new policy move.
I do not think there is any way to impact science negatively except of, maybe, to impact science positively not enough fast.

> The amount of bullshit jobs available is positively correlated with how well everyone is doing.

Why to throw arguments you are never able to prove?
The Alaska snow crab population shrank from 8B (2018) to 1B (2021)
Hi, I'm on the PM team over here at Neon working on our pricing/ billing. First off, thanks for the appreciation! It's always gratifying to hear folks being excited about what we are building.

As for pricing 1) everything will be consumption based with an option to set guardrails 2) there will be an option to purchase consumption upfront via a "pre pay model" or "pay as you go".

Our goal is to be competitive with the pricing offered by Aurora V2 as we consider Aurora V2 to be one of the standards for serverless databases (even if we disagree with aspects of their approach). The actual numbers are still being worked on as there is further optimization in our product that will help us reduce our unit economics and by extension pass those savings on to our end users.

I understand this is somewhat of a nothing answer but I hope this helps. Is there any other clarification I can add? Also, we are always happy to hear feedback on these decisions. If you want to set up a call or simply share more of your thoughts you can email us at feedback@neon.tech.
I've seen numbers of about 2.7Mbps[1] for average peak traffic rates per subscriber on cable, which would give you about 37,000 users if I didn't mess up my bits and bytes.

But as the FSO link is point to point, you would need something like a high-altitude platform station (HAPS) like a blimp, UAVs with RF or a RF tower on the ground to receive the FSO signal, and then broadcast it to many users.

[1]https://www.nctatechnicalpapers.com/Paper/2018/2018-analysis...
A comment made two hours before yours literally calls it a monstrosity
Yeah but it’s still basically the great philosophical question of the douche or the turd sandwich.

With everything that has happened with Apple since Job’s death, my trust has been eroded so much that yeah I still use Apple but they are the turd sandwich at the end of the day. I trust Google a percent or two less.

I like that they are doing with this E2E encryption. It protects against hackers better. It doesn’t protect against Apple though… they will still continue to sell the analytics on you. Which is fine if you don’t care.
This is spot on. I'm very glad to see this post mention the "No Silver Bullet" essay. Despite being written in 1986, it continues to provide a relevant, skeptical view on the impact of these LMMs on software. It even has a section addressing whether AI can provide the "silver bullet", which is drawn upon by the OP.

My immediate response to all the rightly-deserved excitement for ChatGPT is to reread that essay and reflect on whether this new tool will provide me more than marginal gains in my productivity. Experimenting with it a bit over the last day, my initial answer is, no, this doesn't provide more than marginal gains outside toy examples.

These tools may very well factor into my workflow in the future, but I don't see them fundamentally changing the way I construct, support, debug, and maintain software.
That's interesting. You could make Copyright closer to the way Patents already work: you get protection for your work, but only for as long as you're making it available to the public; once you stop licensing your protected work, you lose the protection.

So if you publish a work and later stop making that work available, it would automatically lose protection and it would become legal to share online or for another company to print.
It isn't misleading though. It is exposing what really happens under the covers.

They didn't have to run the ads or even be truthful about being blocked. Fact is, they would have been blocked and the ads are indeed targeted. All of the details in those ads, are true.

Even if FB doesn't collect the data itself, any time you shop online, you get added to buckets and those buckets get shared when the seller uploads the target data back to FB and then the process starts all over again.
Gaben's response to Microsoft's CoD Steam deal
I tried to find a calculator (you can find ones for "laser over meters") that would support supernovas over lightyears and came up short.
They mine your data as long as it can be converted into a marketable product for them. The most recent example was this: https://9to5mac.com/2022/11/21/ios-privacy-concerns-deepen/

Maybe images/photos isn't something they want to expand at this moment in time but let's not get ahead of ourselves.
Performance Analysis of Binary Search Trees in System Software [pdf]
Kind of nice that cubesats and (SpaceX) rideshares brings down the costs enough that more of such experiments can be done.
I'm in a lot of these circles and usually it's exactly how it works.

You see a fat person, someone says they're beautiful.

Do you A: call them ugly to make them feel bad

or

B: keep moving.

The basis of body positivity is to help folks have less self hate while being like "wtf dude, don't be a dick" to the people constantly criticizing them.
It shows links to other Wikipedia articles from a single page.

Could be a game of getting to the article with the fewest links
I would've thought that everyone who has done any programming at all would be familiar with the term as used in the article—why would this not be the case?
One point about abstractions that you might want to make in a future article is that developers tend to discount the cost of all abstractions that they have internalized. Therefore when they get to a new environment, they immediately try to recreate and incorporate the abstractions that they used previously.

However these abstractions are not free. They are not free for performance. They are not free for debugging. And they are especially not free for any future developer who is not familiar with them.

The joke I grew up with was, "Andy giveth, and Bill taketh away." It is no longer Intel under Andrew Grove who gives us better performance. It is no longer Microsoft under Bill Gates who gives us slower software. But the basic phenomena is still true. Hardware improves over time. But developers happily introduce abstractions with no awareness of the associated costs.
The argument is akin to the bans on toxic chemicals in domestic products. It worked for lead, mercury, asbestos and a host of other things. These have saved many, many lives.

Similar rules around predatory lending, predatory insurance, mandatory all-in air flight pricing have all done wonders for consumers’ sanity and improved market offerings enormously.
I don’t know pocketbase, will have a look.
Controlled burns are something firefighters are something many states are finally starting to recognize the importance of and providing funding for. However, given how critically understaffed firefighters are (e.g. California has ~3.5k fighterfighters total, down from 5k a few years ago) and how undertrained they are for a technique that has only recently been recognized for its importance, it's hard to imagine us having any success without the help of the indigenous communities that are fighting for the RIGHT to practice their cultural burns

Besides that, prescribed burns and cultural burns often have different goals. Firefighters sole goal is to use up residual fuel sources to prevent larger fires. Cultural burning practices are often done with the aim of supporting the health of forests and other ecosystems. They're often much more narrowly scoped and frequent and require much more intimate knowledge of specific ecosystems and landscapes. Given that so many tribes have been displaced from their homeland, a lot of this knowledge is lost. But the goals of these communities are to revitalize landscapes with the intent of returning to them and make use of them. I think it's that fundamental difference in goals that tends to cultivate much more thorough ecological knowledge about specific landscapes often shown in cultural burning practices

Hazard-reduction burns also simply use different techniques. They tend to rely on drip-torches to burn through control lines. These types of fires are controlled but still very hot and damaging to the soil. Compare that to indigenous experts that use a wide range of techniques to ensure the fires are as slow moving and cool as possible
IMHO, findings have no value until and unless they build real routes with 'healthy obstacles' and see if people actually use them over flat and 'boring' pavements. I am not optimistic.

When I'm walking home from work in December I can tell you that I will personally choose the easiest and fastest route... That may be different if I am on a sunny Sunday stroll.
Great! This is not the common attack vector for data in iCloud though.
One commenter on that article points out that there is a symbiotic relation between scientists, the press and the public.
All of them desire spectacular results and there is little incentive to ever play down a paper.

The result is that scientists "polish" their results when communicating to the press, who again make sure that it "sounds good". In the end the public usually gets the truth only in so far as "could" means "there is a low but nonzero chance of this ever working, but only if there are massive engineering efforts and many more breakthroughs and economic and resource incentives line up right".

Putting scientists into the media game, instead of isolating them was a grave mistake. It even creates competition for gtants, based on how "flashy" the results are.
Submit a pull request then.
I’m aussiming you don’t use Touch ID or Face ID?

I’ve been using an alphanumeric passcode for about 7 years now. I’ve gotten used to it. It’s not too long to be annoying but better than a numerical pin.

Even if you used 4 numbers for an alphanumeric password, it’s still much more secure than a 6 digit pin.