skysight-inc/HackerNews huggingface dataset:
These days, information technology is table stakes. The specific technologies used are merely a means to the solution. Any technology will do so long as it meets the functional and "non-functional" (QoS, uptime, reliability, resilience in face of cyber-attacks, etc) requirements.

The critical expertise is in the domain. For example, if the business is insurance, how do you assess adverse claims? How is re-insurance priced? procured? How is re-insurance re-insured? syndication? etc. How to incorporate the works of actuaries, underwriters, investigators, etc. There are hundreds of business edge cases. Knowing their impact and how to address them is what constitutes domain specialization.
Says the person whose last comment is upset that their engineers have a $300k salary?
I have to say that if the JavaScript build ecosystem wasn't such a mess that needs reinvention twice a years, this would hardly be necessary.
What's wrong with the OS styled inputs?
I have never, in my 40+ years of life, been to a restaurant with "happy hour", ymmv.
> How about some minimal coaching so that all parents are aware of the state of the art in child psychology and techniques to do better as parents.

1. We don't know as much as people think we do about what constitutes "good parenting". At best, we know some behaviours which are typically harmful (molestation, violence), but everyone already knows that, and the people exhibiting those behaviours need therapy themselves, so a parenting course won't fix that.

2. You're basically turning what is normally considered an innate human right into a privilege for which you need to earn a license. This invites all kinds of abuse (only the right kinds of people get this license!).
The thing that really freaks me out is when you start thinking too much about what the heck is between all the parts of an atom.

The answer of course is "nothing".

Technically there is more of nothing in the universe even around thing that seem like a great deal of something.

So not just the universe but everything, is mostly nothing with just very small bits of something.

Don't think about it too much, lol
In the 27 minutes after you wrote your comment, our CI/CD rebuild two containers from a latest snapshot. No manual work involved.
Sure but they might've not discovered it just read it off internet or from other kids.
As someone who worked in finance I call b.s.

When you need to do any infrastructure change not to mention data manipulation it takes million signatures and meetings. Like 13 meetings to deal with one ex employee corporate cloud folder.

Unless they end up in court. Then somehow million things happen on their own in their benefit.
That's exactly what this is. It's Android System Webview, the embedded browser that apps use when they aren't a browser themselves.
> There are lot of much easier ways to compromise security both for careless or malicious users.

So what? There can be multiple ways to compromise security and it’s not like we only solve the easiest ways and leave the rest.

While there are easier ways today, when those get patched this will one day be the easiest.
Show HN: Self Sport – A lifestyle tracker for building a better sense of self
Hello HN,

I'm Clay, a solo developer based in Austin. After struggling with self-esteem issues for over a decade, I decided to confront them head on by learning React Native and building Self Sport (https://hiselfsport.com). I am excited to share it with you all here.

In Brief:
Self Sport is an app that's designed to foster lifestyle mindfulness and promote an active, engaged life. It's slated for “launch” in August and I'm hoping to get early adopters on board who can share their invaluable feedback.

The Journey:
For years, I was grappling with generalized anxiety, avoidance behavior, and depression. I felt like I was constantly struggling to maintain a semblance of normalcy in my life.

For me, my life took a turn when I shifted focus from my symptoms to their causes. This led to a new lifestyle of fitness, mindfulness, self-improvement and generally seeking more variety in my life. As part of this journey, I learned to code and built Self Sport.

The App:
Self Sport isn't just another lifestyle tracker; it's an attempt to create a community that promotes a better sense of self through lifestyle mindfulness. I don't expect it to become a viral sensation, but I do think that this is a tool that can help individuals transform their lives — it helps me.

Call to Action:
I'm now on the hunt for early users who can help me refine this app and grow the community. If you're interested, please sign up or drop me a line.

Self Sport is more about lifestyle optimization and presence than anything else. I guess you can call it a wellness app, in a sense, but it’s more active than most.

Thanks for taking the time to check it out, and I'm eager to hear your thoughts!

Best,
Clay
https://hiselfsport.com
This is by institutional change, not fundamental balance sheet change.

In 2023, if Bank A comes to the Fed/FDIC/SEC/Treasury/Congress in the middle of night after a huge margin call, our institutions now have the processes in place to declare different accounting or collateral rules for that specific bank at the stroke of a pen.

"Ok Mr. Dimon, as of midnight tonight, you no longer have to mark all of your shit paper to market. Carry it at the valuation you think is cool, bro"

That's a different definition of "stable" than we had prior to the GFC.
It's a weird way to phrase it, but "local-first" is different than "local-only", which was my gut reaction to the phrase. I think as a flip over the remote-then-sync model, it's apt, but could probably use some rebranding.
More details about that on their github page [1]. It seems you basically need to include a JS file from [their CDN](//cdn.jsdelivr.net/npm/eruda).

As someone who fondly remembers the early Firebug days, it is great to see this. It is very frustrating to me that tablets and phones are so powerful, but we can't do even basic dev stuff on them.

[1] https://github.com/liriliri/eruda
> And yet, in the 90s, demo writers routinely produced literal operating systems on a single floppy disk. Remember Amiga demos? They 'hit the metal' because they weren't hobbled by drivers and other abstractions.

That was possible because the hardware was essentially a "game engine API" (e.g. the hardware was designed to be conveniently used directly, and was also designed with game requirements in mind).

Whether that's good or bad is definitely debatable, for instance on the Amiga the need for hardware backward compatibility because of popular games that directly accessed the hardware was definitely stalling the Amiga's progress in the 90's.

I don't disagree with most of your points though. We're definitely in an age of unnecessary software bloat, but I think the answer isn't to go back to accessing hardware directly. A lot can be gained by just applying some common sense when writing code.

PS: Apple or the iPhone definitely isn't at fault though. The mess already started with the PC and Windows (but this mess also gave us increadibly fast hardware progress in the second half of the 90's by allowing hardware to evolve faster because of driver abstraction layers).
Reminds me of the Dutch government who "accidentally" deleted confidential documents that were related to the formation of a new government. The process is under investigation, and the documents containing transcripts of conversations could be used as evidence against some political figures. This is even more remarkable, since government bodies are typically very sloppy if it comes to document retention.
Reading Lisp isn't that onerous. For a start, the brackets (and particularly the closing brackets) are basically irrelevant. They help the computer parse the code but you can read it mostly based on indentation.

Anyway, there is a version in Javascript and the linked page has a textbook in Python.
Base 12! The operations humans do a lot divide by 2,3,4,12 can be done evenly. Your goal is to pack as many factors into your base as possible. They're called highly composite numbers and their big brother superior highly composite numbers.

Base 10: 1,2,5,10

Base 12: 1,2,3,4,6,12

Base 60: 1,2,3,4,5,6,10,12,15,20,30,60

https://en.m.wikipedia.org/wiki/Superior_highly_composite_nu...
I guess this is simply straight-up unenforceable. Making babies is the one thing almost anyone over 12 is capable of doing, with no effort. A key tenet of public policy is that it must be achievable, else forget about it.
Getting to a browser isn’t really a security vulnerability; many devices will even have a “guest” mode that provides direct access to the internet.
Yes, fair, I'm thinking of primarily but not exclusively Western Europe.
https://archive.ph/eTGvR
I can’t help but feel this is mostly hype driven by a company that’s looking to reinvent themselves while facing the prospect of irrelevance. The piece reads like it’s a press release, with abstract things such as “corporate leaders under pressure to get their data ready for AI”. That has nothing to do with LLMs, as the current AI “hype” cycle has been going on for almost a decade already. Corporate leaders have always been under pressure to get their data cleaned and in the correct shape, and Databricks’ business model is to sell to these corporate leaders expensive packages combined with consultancy with generally very high operational costs. Compared to 5 years ago, nowadays I rarely encounter people that actually care about Databricks’ product offering.
Ptrace -e open
Kill Your Phoenix Context
> Fathers should absolutely be there for emotional support, especially for small kids.

A CEO should know about corporate finance but that doesn't mean he should also be the CFO. Both roles are important enough to have separate execs. Parenting is similar. I did not advocate for an emotionally shutoff and cold father, but rather the responsible person and the person the child runs to for emotional support is the feminine parent which is the mother (usually at least). Similarly, boys need to be taught how to be men. Women have their own unique perspective and as such, mothers should take part in this but ultimately, the parent who should be responsible for masculinity education is the masculine parent, who knows how to handle a testestrome filled body and the specific society's expectation of men and how to address or confront that, and the father (usually) is the right person for this due to biology.

You and others are saying both parents can do this. I am saying, the parent with the most experience and qualifications should be the responsible parent without excluding the other parent entirely. You can blame the CEO for being ignorant about the company's financial state but you can't hold him/her responsible for mismanging finances without making sure the CFO did his/her job right.

> Also, distant mothers are not a modern creation, there have always been distant mothers.

100% agree with this. But so are fathers that teach boys weakness, cruelty and cowardice or who themselves don't know how to be a man (like abuse their wives). Parents who suck at their roles exist and that sort of is my point. If a mother is cold and distant then should the father take on the role of an emotional support primary parent as well as masculinity training? What is the mother doing? Neglecting the child? Is that really ok for the father to be expected do both things or maybe should the mother teach the boy to shave and to fight off bullies and succeed in the sport of the boy's choice? No problem with that so long as you are not saying one parent is responsible for everything. That's the root cause, you and others are caught up in politics and appearances and avoid holding both parents responsible. Neither fatherhood nor motherhood is a shared duty, parenthood is. These terms are not some patriarchal social construct that you must rebel against. They simply mean children have specific needs that need to be met and parents need to choose which role to take on and be an expert in that role who will meet that need. If a father doesn't know how to take on the role of emotional support for the child because the mother is distant and cold, then why are you blaming the father for not being two parents when you should be asking what could be done to help both parents figure out a way to share parenthood and decide who will take on what role?
*Cheap only if ignoring the massive externalities.
Haha, yeah, exactly what I thought when I read that.
> right click the event log and mistakenly hit clear

Had you immediately pulled the plug on the machine at that point, you would almost certainly have been able to recover the event log. Sure, it would have been many days effort, but probably better than failing to get evidence of a suspected evil do-er.
The conversation is very technical and I just wanted to point towards a "simple" example that most people can relate to.

Yes the behavioural effect of hormones goes beyond simple "aggresion up" nonsense, however it is reported that feelings of loneliness, aggresion and hornyness are reported in many transmen when starting the test treatments. Between this observation and the memories of male puberty many cis men have I think using aggresion as a proxy to describe some of perhaps bio causes of our societal understanding of masculinity is not a terrible example.

I used pink/blue as an example of non bio masculine and feminine traits that point towards the core issue of masculinity being entirely a social construct and the bio argument being almost irrelevant when discussing the whole thing. I just thought it was a simple example, but I do concede that hormone effects on the body are multiple, complicated and in many ways misunderstood so perhaps it was not a great choice.
Doesn't this just delay learning about responsibility and consequences until later, when the consequences might actually be real? Parents getting this involved in the children's learning seems really, really weird to me.
Yes, any specific accident has specific circumstances. The next nuclear accident will too.

Powering the world with nuclear will require breeder reactors. A Chernobyl-like prompt criticality accident in a fast reactor could be an actual honest-to-god nuclear explosion, not a piddly pathetic steam explosion like at Chernobyl.
It looks great but I suppose the downside, like a lot of nice native Mac apps, is that it seems to be Mac-only. So if you also want to back up non-Mac systems (e.g. to make off-site backups of NAS or server data), you'll need to set up, maybe pay for, and grok 2+ backup systems.
Scientists Accurately Predict Individuals’ Income Solely Off Social Media Posts
> It is suspected that the beeping alarm had been triggered by a mechanical malfunction that had prevented the unit from maintaining a constant temperature.

Sounds like the research was already in jeopardy, but in this case, there's someone to blame.
The hidden help browser features in some FRP bypass methods on some older versions of Android. I used it to rescue test devices left by former colleagues.
As a parent, it’s concerning to me.

It’s funny how I never thought it would be an issue but kids have real impulse control issues and devices are super easy to spend too much time on and contribute to negative mental health. Screen time controls don’t solve this, but they help a little bit as part of many other things to help people learn about how to self regulate.
> He has relatively wealthy parents who let him convert a garage into a home fab, and talks about dropping $30k on a second hand ESM like it's no big deal.

The envy I feel when I see these guys with such equipment is enormous. I really would love so much to have a loaded electronics work bench especially oscilloscopes, LAs etc. and of course the time to actually play with it. :-(
What do you mean ? It was the same in 1492. /s
$4 million feels like chump change. I'd imagine JP Morgan globally earns that amount in less than an hour.
Next they need to train all the animals to drink from public fountains

How does benzene impact plants?
For something as specialized as aerospace engineering software? Definitely yes.
> Comparing continents, Africa is expected to continue to have a ton of kids per woman compared to, say, Europe or USA.

Fertility is most strongly correlated with child mortality IIRC. The more likely your kid is to die young, the more likely you are to have lots of kids. Very low child mortality in developed nations, so very low fertility.
This is excellent advice. I would only modify it to say that one should first focus on getting something working, not necessarily the shortest path Then you can refactor and improve the code before you actually deploy it to production.
There is a similar company in Europe: https://www.vinted.com/

I think the popularity comes from the really good mobile experience, that would be a top priority from a service like this.
This guy's experience reporting a bug to Google reminds me of mine:

Me: Here's a bug in Google Sheets that exposes deleted content to third parties.

Google: Not a bug. Working as expected, closing issue.

Me: Really? I was personally harmed by this bug while using the application.

Google: Actually, it is a bug but it's a longtime known issue, therefore you are not eligible for bug bounty. Closing issue.
Gotta make hay while the sun is shining.
Do you mean bail? The only thing bail does is get the defendant out of jail until the trial, and the only (Constitutional) reason to jail someone before trial is to make sure they show up.

E.g. Elizabeth Holmes got out on bail, but just recently went in to serve her sentence.
Still better than 99.999% of the other kids out there :)
Generally go for ones sold as for "industrial" use.
Everyone thinks it's malicious. I'm more likely to believe it was a poorly-trained IT person who thought they were in the test environment, or something along those lines.
> How would network restrictions help, there is WiFi at friends houses / everywhere.

> > If you don't want your kids to connect to things then don't let your kids have devices that connect to things.
I see what you're saying. You push content onto IPFS but you access it over HTTP using an IPFS gateway, which pulls content off an IPFS node and basically "streams" it to the client. The IPFS gateway is acting only as a proxy to IPFS itself. IPFS clients can also download directly from IPFS but IPFS is not natively supported in a browser like HTTP(S) is.

The content itself is stored on IPFS nodes which "pin" the content they wish to persist on the network. I think there would be grounds under DMCA to ask IPFS pinning services to stop pinning copyrighted materials, but going after the gateways seems misguided and a misuse of DMCA, as they're only acting as a proxy.
Privilege escalation is a typical class soft security issues.

The device owner (parent, school, etc.) set restrictions, which some other user bypasses.
...and also the number of integer factors of your base. 10 only has 1, 2, 5, and 10. Bases 8 and 6 have just as many. Bases 12 and 60 (used by the Sumerians and Babylonians) offer more convenient divisors.
really surprised faang management doesn't see the value in addressing technical debt.
An observation that will make Zootopia much more enjoyable is realizing that the predators and prey don't map onto racial groups and aren't intended to be seen that way.
Did some investigation.

So when you click on "Manage my account" you actually get taken out of the settings app and into an Activity (name for the "screen" God object on Android) embedded inside of Google Play Services. Eventually, following this the browser is

com.google.android.gms/.auth.folsom.ui.GenericActivity.

This doesn't seem to be using the default system webview implementation, as on my phone that would be Chrome.

Android allows you to build a JS interface between Android code and Javascript code using addJavascriptInterface[0]. They seem to be doing this...a lot in GMS, which is an interesting attack vector to look into later.

Our suspect "mm" interface is in MagicArchChallengeView. Which gets you an obfuscated "bwuz" class as what mm links to. bwuz seems to be pretty empty though, again linking out to a few obfuscated classes.

Doing a straight string search two classes expose these functions, "qvc" and "pdn". pdn seems like the meat, while qvc has some helpful error logs exposing what each param is.

Looks like setVaultSharedKeys expects a gaiaId (Google Accounts and ID Administration ID), and a JSON array of JSON objects with two values, epoch and key. It creates an arraylist of them and passes them off to an abstract class that is everywhere in the package, but seems to be really involved with account security.

addEncryptionRecoveryMethod expects a gaiaId, a security domain list, and a member public key. It again packages them into lists and passes them off to the same abstract class mentioned above.

That's where I drop off because I have to get to work. Interesting though and warrants further exploration, both on this specific interface but also the others they expose through GMS into webviews.

[0]: https://developer.android.com/reference/android/webkit/WebVi...
> If you don't want your kids to connect to things then don't let your kids have devices that connect to things.

This is not an option as school, at least in my region, requires devices directly since 4th grade and indirectly even earlier for homework.

Devices move between networks so having controls directly on the device is helpful.

Your argument seems like arguing that there should be no local access permissions on files and just let the network handle everything.
What is somewhat more concerning is that depending on the particular Android version and OEM customizations there are various way how to get into this browser or even complete Android Setting screen from the on boarding flow. Most FRP-bypass exploits involving only user manipulation of the device are built on something like that.
Dust to dust, ashes to ashes.
MosaicML Agrees to Join Databricks to Power Generative AI for All
If hitting kids did anything positive, we'd be living in the worst not the best time to be alive.
Unfortunately not, it’s a complicated process. I’m working with a software that does this and is using wktmltopdf and it’s a real mess
Unfortunately, as in math, there are such things as unsolvable problems. Unless and until everyone's running a bunch of formally verified OSes that can't be converted to botnets you have to pick your poison. I won't pretend it's a solution though, it's trading one problem for another. Who can say which is worse.
Good luck resizing a typical modal window though. Also good luck with high-DPI...

Even resizing regular windows was not always an option, and if it was, it was very rarely thought through by the developers. I vividly remember that the Swing framework for Java was very special just because of this, as in you couldn't really specify it in pixels where your components would be placed, you'd have all sorts of strategies to divide and position them. (Not saying it was any good, but certainly a notable effort.)
A rising tide lifts all boats.

Databricks may have its thunder stolen by snowflake. But the true AI boom happening right now, benefits many data product vendors.

The basic requirement for enterprises to use LLMs is having their data in order, which basically requires a cloud data warehouse. It is simply responsible to profit off the hype for a established data company.
My read is that everyone is just looking to spread out risk more. At first this was the Euro, but then the 2014-5 crisis sort of killed that. Now it’s a wider range of currencies including Chinese, Japanese, Canadian and Aussie. The Chinese reserves are all in emerging market countries.
Taking away many billions from billionaires is worse for them than detention.
This $1.3B dollar figure is surely relative to Databricks 2021 valuation from their Series H (most recent round), and doesn’t represent real money since multiples have plunged since then

Estimates of Databricks revenue is $400M and “valuation” of $36B, which would never hold today