skysight-inc/HackerNews huggingface dataset:
> Just goes to show, you can lead a horse to security patches

I don't agree with the poster but he has one thing right - our industry is a shitshow.

The soviet government handled Chernobyl better than we handle security.

Its impossible, even for most proffeshionals, to tell if a device is secure
It would be easier for me to measure radiation.

The british government had Mi5 check Huawei source code and even couldn't be sure.
Why believe the shoe seller? Perhaps half of the shoes appear usable and are sold as such, but most of those quickly disintegrate when worn. After all there are plenty of people in Singapore who will happily buy used and usable shoes. Anything that falls through this sieve to be exported is probably trash, which the Indonesians well know. It is reasonable for them to reject imports of which 1% are unusable, let alone 50%.
Yeah Tauri is in Rust, whereas I want to write the backend and frontend in the same language (TS) and share code
I've heard of electron, but not tauri. Maybe it's just not known enough to be included in the decision?
The models are extremely large to ship around, sync, and load on consumer hardware over the internet. Maybe there are better ways to build and train a model for a distributed use case though.
Aren't projects like PostmarketOS upstreaming many devices? Meaning that you can then update the kernel, right?
See also Turing Drawings http://maximecb.github.io/Turing-Drawings/ (One of my favorite things on the Internet!)
Please don't put security stuff in DNS. DNS isn't secure and DNSSEC is a travesty. Just take the records it gives "under advisement" and confirm it over TLS or another secure transport protocol.
Same. I figured I could be out of the loop but ... so are other people.
Nobody ever said that all the socialist states in the USSR were willing participants.
I guess, but that just strengthens my point that being a simple adjustment away from a simple symbol doesn't mean you inherit any of its meaning.
Please read Putin's essay, I don't think it's a problem of travel.
http://en.kremlin.ru/events/president/news/66181
Indonesia bans the import of 2nd-hand clothing and footwear, specifically because a large proportion of it ends up in landfill or incinerators. That definitely would be a worse environmental outcome than being recycled into running track. I suspect the reason the shoes from the article did not go to landfill was probably because they were in unusually good condition.
I started to use it when I used VTK in the early 2000; I closely followed all of its lifecycles, including all pipe dreams; and thank you so much for teaching me about build systems.
They needlessly broke the start-menu and taskbar in Windows 8 and Windows 11 for no good reason.

And there still isn’t a coherent native desktop-app dev story for Windows. Even MS is using Electron for their own software.

One step forward, two steps back.
Ask HN: What comment-system do you recommend for a static blog?
Currently I'm using Disqus, but it's now adding 10 huge clickbait thumbnails on every page. And $11/month doesn't seem worth the cost to remove them...

I'm interested in other alternatives, hopefully easy to integrate like Disqus was. Also interested if comments can be migrated too.
https://m.youtube.com/watch?v=lHr7GXuqzm0
How short term rental kills cities.
The same channel also constantly boast about "transportation revolution" as something "trains, but less efficient, nice demo"

Maybe the solution is hotel
Imagine all the word of the mouth marketing they have gotten since they did it in 2017. I think it has been beyond worth it.
It took him 17 days to even show up. What has he been working on that's more important? He's not just incompetent, he's an uncaring sociopath.

https://www.usatoday.com/story/opinion/2023/02/23/east-pales...

I will say though, at least he did finally show up. Better late than never I guess. His boss doesn't have any plans to.

https://www.cnn.com/2023/02/24/politics/joe-biden-east-pales...
It doesn't matter. If the content of the paper were worth even looking at, it should exist in channels that do discriminate more.

Yes, the venue or the speaker matters, not just the message.

Calling that an appeal to authority, or failing to keep an open mind, is just something the quack cries to explain their lack of impact. That cry is just another thing it is entirely reasonable and defensible to utterly ignore.
https://archive.is/KJKR8
> Yup, there is no documentation for these chips, you probably gets some SDK with an old version of heavily modified linux kernel in a big ZIP file (so no version control history, no diffs),

We need to legislate that the user has a legal right to precise documentation of any hardware they bought.

Including any spying activity it might be enabling.
Show HN: NoteLock – Minimalist MacOS App to Encrypt Text Notes with AES-GCM 256
I expect Twitter to be worth even less than 40% with that $8B in debt on the books.
This is a great point, I guess this is also something that will become more prevalent too...

People becoming bots...
That's a fair point, but indeed a lot of people will kill their phone in less than 3 years. Either breaking the screen (which, IIUC, will be also replaceable/self servicable) or killing the battery. Most sources say that the battery will keep an acceptable capacity for around 500 cycles, i.e. 1.5 years if fully charged daily. (Now I don't know, because I'm very cautious not to fully charge and to discharge below 25-30%, so mine is pretty good after 1.5 years and the previous phone that I've used for 5+ years started draining the battery after a software update when it was less than 6 mo old...)

Speaking about batteries, what would be nice if they added a setting that allows defining charging limits, e.g. like what we have on Lenovo Thinkpads. (You can specify both the upper threshold and also the lower one, so that charging doesn't start if the battery is above that level even if you connect the device. Which you may do to a phone even without wanting to charge, e.g. if you use it as a modem.)
The burden of proof is on your side.
Dow's reaction to being confronted about this was to say they had stopped working with the company that managed to arrange for the shoes to be reused instead of chopped up. That seems fairly clear.
What Is Backspace.ai?
Backspace.ai is a project by George Hotz started in 2019. Apparently its not being worked on anymore.

Can anyone please explain what he's trying to create here? This looks interesting but I can't find anything on google. Thanks!
Reverse discrimination is still discrimination. Civil Rights Act says race, religion, color, national origin, sex, etc. Not everyone but white men.

https://www.dol.gov/agencies/oasam/civil-rights-center/statu...

Those laws that say everyone but white people can receive funding are also unconstitutional.

I studied employment law and business law which refences civil rights in college.
By comparison to the Samsung Galaxy A series this is unimpressive. Everything in that line is either 2 OS upgrades/4 years of security updates or 4 OS upgrades/5 years of security updates. That's all the way down to the A03s which is <US$100.

Those are from the release date of the phone, but I think they're doing roughly annual releases on that line.

Edit: Samsung also planned for longer device life - there's an option to turn on a battery saver feature that caps charge at 85%, which should significantly increase the years of service from the battery.
Previous discussions:

- https://news.ycombinator.com/item?id=16041295

- https://news.ycombinator.com/item?id=25385038
> I mean that Russian citizens would not be allowed to travel to Ukraine for any reason and vice versa.

It seems a prerequisite for that would be an agreement on “what is Ukraine and what is Russia”, which is something of a topic of violent disagreement at the moment.
That's a wrong look at security, I think. Everything is "pwnable", if you put enough resources into it. The question is how much resources do you need to put into it?

If you have a 5 years-old never-patched Android, probably a student can go read disclosed security issues, pick one that they understand (or for which they found a tutorial online), and hack you. It's not the same thing as saying that your patched iPhone can be hacked by NSO, though.
It's always possible to create shared clock between two points and keep it accurate, then measure time of events A and B according to the clock.
A local piece of HTML works fine as a modern hypercard. Or various app platforms that give you a similar experience. As far as I can tell the pliability you want is already there.
People will note that there are worse problems in the world, but tossing a sophisticated piece of electronics every three years by design sounds really wasteful, especially when practical capabilities change so much more slowly now.

It’s a bummer that this is normalized.
I'm not GP, but I used to write firmware. I had a C compiler, a debugger, and emacs.

IIUC, if you write a web application in the MS world, you have Visual Studio, ASP.Net, and IIS.

There doesn't have to be piles of libraries.
Hey Hacker News, I'm excited to share my latest project with you - NoteLock, a minimal and secure note-taking MacOS app that lets you protect your private information with ease. With a simple and intuitive interface, NoteLock makes it easy to create and manage your notes, all while keeping your data safe with industry-standard encryption.

I created NoteLock because I wanted a fast and easy-to-use note-taking app that didn't compromise on security. NoteLock uses AES-256 GCM with SHA256 to encrypt and decrypt your notes, and never collects or transfers any of your data to the cloud.

I'd love to hear your feedback on NoteLock, and I'm happy to answer any questions you might have. Try NoteLock today and experience the simplicity and security you've been looking for.
docker etc is on a flash partition, data is on a few 16 drive arrays…

… but this made me discover this:

docker volume create \
--driver local \
--opt type=cifs \
--opt device=//uxxxxx.your-server.de/backup \
--opt o=addr=uxxxxx.your-server.de,\
username=uxxxxxxx,\
password=*****,\
file_mode=0777,dir_mode=0777 \
--name cif-volume

So that simplifies a lot for my use cases.

Thank you for all the replies!
Yeah, the problem isn't that some of the donations end up in Indonesian flea markets. That's great. The problem is that 90% of what gets sent to Indonesia, is deemed unsuitable for resale, and then ends up tossed in a landfill.
I'm not really sympathetic to the way that this article suggests the owners of excess housing are suffering from too many rentals on the short term market.

These are folks who are wealthy enough to own excess housing stock, and they are using it not to house people but for vacationers.

Prices low for short term rentals? Good. Hopefully they'll enter the long term housing market (or be sold to home owners).
I also told them this, to encourage searching.

Though I hate Chegg and the like with a passion, since this sort of thing takes a lot of work (over the course of teaching same class a few times) and then w/ Chegg you immediately find the answers.
I have, but it was ultimately due to being phished or similar social engineering tactics, which I'd say is far more likely than being hacked remotely by some obscure exploit.

Just goes to show, you can lead a horse to security patches (or vaccination, or the effects of climate change) but you can't make him apply them.

Many of us would rather continue fighting for our freedom instead of advocating for and cheering on the rise of dystopia.
Really? I don’t spy on other people so I don’t know. But I know 6-digits passcode is the default and Apple makes it intentionally harder for people to switch to a shorter, I think it’s the norm. And if people are so lazy and lax with their security, what is the chance of changing 4-dits to a much more inconvenient password? Yes, old people cannot even use the soft keyboard without glasses!

In general, I don’t get the meaning of the article. Face-Id is so convenient and secure, 6-digits code is the norm. If people just follow the Apple instruction, they won’t need to worry about anything.
Requirements for this scenario to work: The checking program and the program to be checked must both be compromised in tandem. This is covered in RoTT.

This has already happened in various areas. For one area, look at gambling (two decades ago). Ron Harris worked at the Nevada Gaming Control board as a tester of new systems and configued the field verification of those systems. Eventually he turned that into video gaming devices that would hit a jackpot after a certain button sequence was pressed.
There have been lots of thoughtful comments in the subthread under your original comment explaining people's experiences with this and why it isn't so simple. Have you read them? What deficiency do you find in them?
No shit. It's important but I'm wondering if it's overrated. It's a phone. I've passed on lots of devices because they aren't supported for long. It makes me wonder if the security updates are a mere sales pitch that doesn't actually benefit the user a whole lot. Great, it's harder to hack me. Would I have been hacked if I stuck with my Pixel 3? Hard to say. Overrated
"There is no royal road to logic, and really valuable ideas can only be had at the price of close attention."
-- Benjamin Franklin
> Far more interesting to speculate about, I think, is if we could create a non-linear written language taking advantage of the two dimensional property of paper/screens to write things which aren't forcibly constrained to the 1D nature of speech.

I think the problem is that human language is inherently one-dimensional. Spoken language involves a temporal succession of sounds, words, sentences. Even sign languages, while the signs may be 2D, there is still a 1D temporal succession of distinct signs. Real texts involve certain limited escapes from one-dimensionality – footnotes, hypertext (which exists even in printed books, with the table of contents, index, "see page 123"), etc – but, still they are only limited deviations from the essentially 1D nature of human language. SignWriting is interesting as a way of writing sign language by using pictorial symbols for each sign, as opposed to using the written form of a spoken language text – but SignWriting is like the CJK languages, they may be 2D at the micro-level of individual characters, but at the macro-level texts are still fundamentally 1D.

If you could invent a truly 2D language, I doubt the human brain would be capable of processing it. Maybe some AI might become fluent in it, but no human ever could. But even software is predominantly 1D – memory is fundamentally a 1D array of numbers, and in some ways it has been becoming more 1D over time (witness the triumph of flat address spaces over memory segmentation) – which makes me think it might be less than entirely natural even for an AI.
Airbnb is a roll of the dice every time. No idea if it will be canceled the day of, the quality inside, hostile neighbors. We only use Airbnb for rural places without hotels, where our money is appreciated and there aren’t other options. In cities, hotels of known quality are just as expensive and much more reliable.
https://archive.is/KoKlT
You missed the implied “for phones” in there.
Doesn't "Magisk" alleviate a lot of that? Except for I believe Netflix and its Widevine bullshit
> No other desktop OS works like that. Both Windows and MacOS sunset support for devices. Admittedly - after much, much more time than phone OSes, though.

10x more. Windows 10 runs on computers that are 20 years old.

You have to remember billions of people don't live in the west, they live in india or africa where they use equipment much longer.

10 - 20 years is a real lifespan for cars and appliances, it is also realistic for electronics (leaving batteries aside).

The pace of improvement for computer hardware is slowing, so this issue will become more relevant
What is the connection between caning and dishonesty?
> Peace would have prevailed if the west respected the sovreignity of non-democratic countries.

A yes I keep forgetting its the west that forced Putin to invade and try and genocide Ukraine.

This kind of talk takes agency away from Russia, Russia had every ability to not invade if they didn't want.

Russia is solely responsible for Russias actions.
Yeah, the whole aspect of teaching C++ to beginners is fraught with tooling issues. That school is moving to Python (years after main campus switched)... but I'm not sure how I feel about that since I spent a lot of time talking about memory layout.

I ended up suggesting those who don't know how to setup a tool chain use VS Code. Not out of any particular affinity for it, but because of the good documentation covering Windows, Linux and macOS.
That's neither a phone nor the topic of the article. What are you going on about?
Related: rocket mass heater

"A rocket mass heater (RMH), also known as rocket stove mass heater, is a form of slow-release radiant heating system, designed to primarily heat people and secondarily to warm areas in line of sight around it."

https://en.wikipedia.org/wiki/Rocket_mass_heater
Hard to split the problem into small enough pieces
Yes. As a user, I’m rooting for Tauri, but as a developer, I could probably build my app faster using Electron. Unfortunately, past experience tells me that companies usually optimize for ease of development instead of performance, most of the time :(
I'd connect to the camera feed service using a PRNG, get the true random, reconnect to the camera feed service using that true random. I don't care if someone is able to connect to the camera feed.
With the money they[AB&B] make, could they not afford some kind of Zaggat-like roving rating staff who go around unannounced once per year to rate these places[1]. Not necessarily stay there, but go in and look around for basics. This would be the "hard" rating and then you could also have the guest generated "soft" ratings as well.

It need not be mandatory, but optional and eventually those not opting in are evaluated more suspiciously.

[1] places that rent out at least 100 days per year or some such cutoff.
Can't you choose a phone that does not do hardware remote attestation?
FTL rocket will be able to hit photons emitted from objects, thus it will be able to see in the direction of movement. Headlight will not work, of course.
Recent "inflation" has slowly become accepted as majority-driven by corporate greed (i.e. raising prices BECAUSE THEY CAN), not because of supply limitations, overall.

I think an additional and FAR SCARIER REASON FOR EXCESS SPENDING is because people are just accepting that they DGAF, and living/buying accordingly (i.e. minimal long-term planning).
Last Airbnb our host stalked us and mentioned us having 3 guests not 2, and gave us shit for dirt on the carpet in the entrance
Who has the belief that every answer ChatGPT gives will be accurate? It's hard to imagine many people reaching that belief.

Is there any evidence of the existence of scams which deliberate use poor grammar to filter respondents?
The most radioactive spot in New York City can also fix your muffler
"Someone" might know something, but you in particular have no idea what you're talking about. You think you know better than Indonesians what their laws should be, but you don't.
Could it be that you have not understood the argument?
The leading [shipping] container database
This is a budget phone, so there are very few people who would purchase extended security support after three years. There certainly won't be enough to cover the business costs for keeping the support and testing of an old crufty phone used by few people.

It's unsustainable to put the costs on the backend, so phone's price would have to be raised to cover those extended security updates. But, that won't happen for a budget phone. There just won't be enough people willing to pay after three years.

That's the problem with purchasing a budget phone. You get what you pay for, a phone that will go away soon.
"A very racist caricature of the prophet Mohammed"
Android runs the Linux kernel, but the rest of the OS is very, very different from typical Linux distributions.
The history of proposed technological replacements for human teachers is filled with highly enthusiastic and widely touted failures. It's not simply a matter of presenting information --- a book, or streamed lecture, or audio or video recording can do this --- or even interactive engagement ("educational software"), but a highly-attentive in-the-moment back-and-forth and with the student, sensing where they do and don't follow or understand a lesson, and most critically allowing them to discover for themselves a principle, concept, or fact.

It's not that these cannot happen alone, via self-directed (autodidactic) study, or with the assistance of technologically-mediated aides. But time and again the effectiveness of such methods falls far short of direct human instruction.

LLM AI chatbots can respond to written or verbal cues, to an extent, but as yet lack an underlying pedagogical framework and understanding of the context of a communication.

From what I've seen so far of such models, "lacking an underlying framework", the bones and skeleton of a conversation, if you will, which can be subsequently fleshed out, seems to be a general failing of the models, so far.

I'm not saying that this cannot emerge, and parts of this may in fact be a relatively simple additional step or advance. Given other advances such as sentiment and mood assessment and analysis they may even be largely in-place. What's left however is the motivation of such efforts, and alignment with the educational mission, again a place where previous technological education programmes have foundered, as most have been coopted by, if not outright conceived as, propaganda and cultural programming tools. (A part of traditional education as well, but far less effectively and uniformly delivered when mediated at 1:15 -- 1:30 or so ratios amongst millions of instructors[1]). It will all but certainly be difficult for corporate-based LLM models to resist such temptations, see the earlier case of Backrub and perverse incentives.[2]

________________________________

Notes:

1. Figure based on an off-the-cuff estimate, though substantiated by US Dept. Ed. statistics, see: <https://nces.ed.gov/fastfacts/display.asp?id=372>.

2. "The Anatomy of a Large-Scale Hypertextual Web Search Engine" (1998), Appendix A: <http://infolab.stanford.edu/~backrub/google.html>
Yeah, all three.

GCC 12.1.0 (MSYS2)

LLVM 15.0.7

MSVC 19.33.31630 (not on PATH)

(This thread's probably getting too long, you can reach me at my email address. See my HN profile.)
Queries are compiled, i.e., a query plan is created and then executed. Depending on various things that plan may get re-used the next time the query is run. So what you are talking about exists. Databases can examine the plans, database statistics, and the resulting metrics from executing the plan and make recommendations about indexes.
For anyone else curious, the NTSB accident report (2014) about the same 2012 train derailment: https://www.ntsb.gov/investigations/AccidentReports/Reports/...
Roads seem to remain fully funded for some reason
While yeah, no one outside a recent immigrant would call themselves French, 62% of people in Quebec identify as Québécois, not as Canadian.

https://www.lapresse.ca/actualites/national/201903/21/01-521...

So I'd presume those Russian-speaking Moldovans simply talk about their Russian values and defending their Russian uniqueness, but they won't say they're Russians simply because they lack a word. Maybe Transnitrians?
I had a similar experience. The host offered a free photo shoot for staying at her house, which was a weird perk but hey…whatever.

While we stayed there she watched the camera and counted each person who went in the house, and then claimed we threw a party (we didn’t).

She wanted $1000 extra dollars and it had to go to Airbnb arbitration.

And I never even got the photo shoot.