skysight-inc/HackerNews huggingface dataset:
The manifest has ACCESS_FINE_LOCATION. When you run the application, the developer actually displays a popup saying to grant the permission so it can do BLE scanning to connect to the hardware device.

Of course they neglect to say they will also use the permission to collect your GPS co-ordinates.

Then the AMap location services SDK goes further collects MNC, MCC, LAC and CELL IDs (CGI) and Wifi SSIDs. Here I think the battery app developer does not even know this is happening, they use AMap SDK to obtain the GPS data only. It took me quite some time to figure this out (documented in part 2[1]).

Will also note the manifest has CAMERA, IMAGE_CAPTURE, ACTION_VIDEO_CAPTURE, RECORD_AUDIO and MODIFY_AUDIO_SETTINGS. I have not seen where/how they are used (yet). The code that included strings requesting various permissions (In the AMap SDK code) uses string obfuscation to conceal what it is doing. Likely to trick automated static code analysis tooling.

Note:

> Alibaba state “in 2018, Amap became the first Chinese maps service to navigate a path to 100 million daily users”. [2]

How are Google allowing this SDK to be used in developer's applications?

[1] https://doubleagent.net/2023/05/22/a-car-battery-monitor-tra...

[2] https://www.alibabacloud.com/customers/autonavi
As a taxpayer, I think a lot of different things. That doesn't mean I am right!

State employees also do a lot of different jobs. A park ranger working remotely might indeed be wasteful, but maybe someone who is an accountant gets more done working remotely.
Are you sure it's really pinning? On Android it's almost impossible to add certs to the system store, and the user store is ignored by most apps.
This has been driving me crazy, I thought I had accidentally broken something on my end.

Why would they do this?
'Woke' is a very loaded word. A heads up that if you use it in the way you just did, people will assume certain things about you. Unless you don't care, in which case continue so that everyone knows what assumption they should make.
Yet a kitchen sink is way more dangerous (in terms of harmful bacteria) than a loo. Measured by scientists by dropping a carrot, and then analyzing what got stuck on it.
> Are you arguing that zoning, red-tape, and generally anti-development politicians and voters aren't the fundamental problem here?

Minus the leading language (as I presume these so-called "anti-development" politicians don't self-define as such), yes, this is what I'm arguing.

> Do you think voters who fight relentlessly to block development feel differently about public housing?

I believe the tales of such voters are highly overstated, a really common red-herring used by advocates of private developer subsidy to deflect criticism. Do NIMBYs exist? Of course. But their impact is overstated, and overconflated with genuine concerns: there are valid reasons to object to new developments, though these have a tendency to be lumped in with less valid objectors for political gain/expediency.

> How do you expect it to get funded even, when a single unit of "affordable housing" costs ~$1m to build in a place like San Francisco?

Have you ever stopped to think about why it costs $1m to build such a unit in SF in 2023? About what system of incentives lead to the current status quo? I can assure you it wasn't decades of publicly-run projects.
i replaced cloud autoscaled docker runners with fixed set of machines with nix store cache pee machine. 10x imrovement.
Wait for Europe to do something.

That’s all we can do. Us government will do nothing.
I work for several beamlines at the Advanced Photon Source. There are probably far, far over 1,000,000 electronic signals at the whole APS facility that use 5 volt signaling. So almost any level shifting will be to embed 3.3 volt signals in a 5 volt world. It is simpler to buy equipment that has already done this.
I'm happy to foot a bill for false positives if the true positive rate is 1/4. Seems like money well spent.
+1 on fun game that's relaxing. Felt kind of soothing. The rotation of the tree in the corner frustrated me a little at the end because it all looked super similar.
Looks like this: https://play.google.com/store/apps/details?id=com.victronene...
The tech behind the Remix feature looks really impressive! I haven't used it myself, but while working on this project I had some people mention it to me and I looked at some videos showing how it's used. Very cool feature!
I think American drivers are much more selfish and more glued to their phones than Europeans. However I think your point about SUVs make sense too. I guess we could tell the difference between pedestrian accidents vs pedestrian deaths to see how similar they are between Europe and the US.
Yep, that works great for cases where you trust all your contributors. We do the same for some projects internally, too. However, for public projects where you don't it gets a bit ... dicier. Glad to hear that's working for you!
Isn't it a good thing that it informs the average user that the app can know your location?
yea with the stats about how governments need commercial property tax to balance their books...

might not even need a lobbyist; it's already in the powers' best interests
Not if you are doing it for 10,000 signals or more.
There's enough German words in there, often appearing twice, that it would be very strange if this wasn't the decrypted data. If they could just read the message and understand it(and they had the German experts and general knowledge to do so), there's really no reason(and no time, the information is only useful for so long) to perform any kind of statistical analysis to confirm it's correct.
I wish we explored this path more down here in Australia, especially with one of the largest Uranium deposits in the world!
If unregulated capitalism is the problem, shouldn't people be voting for regulated capitalism?
Hello stranger,

I have printed out the last substantive paragraph of your comment and taped it to my monitor.

I don’t know what, if anything you had to go through to learn this. And I figure that in my heart, I probably knew it already. But reading it once every few hours will probably do me some good. Thanks for that.
Davewasthere. In our tiny test market the yard sign produced all 4 buyers. The sellers all came from word of mouth. We think the 100 will be enough for people to see it works. 1000 is closer than 100 but may not be close to critical mass. We have a long runway and we are patient. as long as we see it growing and accelerating we will get there.
> It's an expression that someone needs to check in on them, not that they're bad

Trust me, in context it was an implication they are bad. I understand that it isn't always used that way, but in this case it definitely was an implication they are bad.

> it means they're "not okay" in the same way you might say to someone "The situation in Russia is not okay" or "Thank you for your concern, I'm not okay at the moment". It's an expression that someone needs to check in on them

I understand it is often used this way, but trust me in the group of people I know in real life it isn't always. Plus frankly even that usage could be seen as kind of patronizing, though again I want to stress that I am not personally offended by the joke itself

> If it's too personally distressing to deal with jokes about you being white or straight or a man or cisgender or abled, you almost always have the option not to listen to them. Even if you're a diehard comedy fan, the vast majority of standup comics are not making jokes about how "straight cisgender white abled men suck amiright?" Guarantee it.

I feel like you've really missed my point. I don't mind the jokes, they are (mostly) not a reflection of any genuine ill will, many of them are funny to me, etc. What is frustrating is how quickly people will assume ill will when jokes are made about certain groups of people and not others. The jokes themselves are fine.
What would it mean for an AI to beat the best humans in a 5K race? Obviously robots can do that, is there some definition of "humanoid AI robot" which exists for such a task?
This is the state legislative branch imposing something on the executive branch. Maybe there's a difference in perspective on remote work, and the representatives don't like how the agencies are handling remote work and want to impose their requirements rather than make it a matter of agency or executive policy.
Wow that's surprising, especially considering most buyers would buy these things to drive a few times a year. It's not really something you get to drive to work or do you shopping :)
> yank(?)

To be clear, it’s not a real problem in the US either, but some people like to pretend it is. Don’t believe things you read on Reddit or wherever.
> Relying on plain OAuth 2.0 for authentication is dangerous if you (the client) are just trusting ANY valid access token you receive that's associated with that user as a reliable indicator that you're receiving the request from the actual user, without knowing whether that access token was generated by the user trying to log into your site or if it was generated by the user logging into some other (malicious) website/app.

That’s why there’s a “state” param that is passed between the source and the identity provider. It validates that the request indeed came from your system. Combined with prop CSRF protection you can ensure the user willfully logged into the system and the response from the IdP was intended for your system.
A corporation of any size caught doing this with any amount of knowing about it (i.e. not sabotage by a troubled lone wolf) should be seized, sold for parts, and the proceeds from the fire sale going to the victims and if anything is left over afterwards, the state.

There is no fine value appropriate that isn't "considerably more than the company is worth" for that kind of blatant violation.

You should not get to continue to exist after poisoning people for profit margin.
Have you checked that test with known lead chromate to rule out test error?
How does one convert a prototype generated by clicking around in the console - into terraform code? Is there a best practice approach?
Pretty much everything that uses AMap does this - any popular Chinese-developed application with mapping functionality will exhibit the same behavior.

I have trouble seeing this as being quite as sinister in motivation as it first appears; while this data is certainly invasive and valuable, it's the same data that Google and Apple collect to build their mapping services, as well. It's a tough problem. I think the Big Issue exposed by this car battery monitor is the lack of granularity in mobile OS permissions. By granting the Android app BLE access, you also give it "fine location" access which lets AMap slurp your data.

I think this write-up is pretty good but I wish OP hadn't buried the lede as much in the first paragraphs. Why not mention it's AMap in the tl;dr summary?
https://archive.is/hTQku
This page is fascinating! I love the iodized-vs-non salt test by rubbing on potato and then sprinkling lemon juice to see if blue (iodized).

At the same time, it feels so sad this page is necessary.
+1 to this - I’ve had countless interviews for SRE positions that were pure leetcode. If I were applying for SRE roles today, I would take it as a signal and just stop the interview and leave. Leetcode interviews are a big part of the reason why I left my career in tech.
I’ve built infrastructures that handled 30,000 requests per second at dozens of datacenters - never once had to implement my own graph search.
Our injury prevention and treatment is better. Our knowledge of kinesiology is better. However, how many people even care about the findings of kinesiology or public health? Not a lot as it were if you were to go out in public and observe the average state of health for most people, some people take good health advice and straight up take offense to it. People made political campaigns out of it not long ago with the pandemic.

That being said, if you were to take your average hunter gatherer who is not ill or infected, compare them to your average american office worker, I'd guess you are comparing a slender low bmi person with great endurance, functional strength, and practical knowledge on survival to one who is overweight, doesn't know how to feed themselves without a modern grocery store, only walks to the car, and will probably end up dying sooner due to health issues stemming from being overweight, a poor diet, and general inactivity.
Snowflake only really offers SQL (with UDFs) to do data transforms. Spark offers SQL, but also code-based solutions (Python, Scala, Java) that can be used to scale things like ML pipelines and non-SQL transforms.
AFAIK, the WiFi isn't all that intensive, but requires special considerations. With the ESP8266, you had to be careful to call yield() every few seconds, or the WiFi would hang. So it made it harder to write processor intensive tasks. The dual core of the ESP32 did away with that.
> Even among democrats, only a slim majority of 53%, consider porn to be morally acceptable for adult consumption

Is that from this[1]? Because this is a meaningless question.

How many people think alcohol is bad for you? Compare this with how many people still drink alcohol anyway. And with how well prohibition worked (and alcohol objectively is bad for you).

~69% of US adult men age 30 to 49 watched porn from 2021 to 2022. Only 12% of them claimed they have never watched porn. [2]

And that's assuming some of the 12% are not lying. [3]

The answer to porn issues for minors in households is good parenting, not a clumsy state law-mandated technical solution.

[1] https://news.gallup.com/poll/235280/americans-say-pornograph...

[2] https://www.americansurveycenter.org/research/march-2022-aps...

[3] https://ifstudies.org/blog/the-truth-hurts-less-pornography-...
>and what we've been told has already been shown to be false information

What do you mean exactly?
Huh, I think I bought one of these. Or a knock off of one of these. Either way, it's not in my car because it never actually read battery voltages (well it did, but evidently would crash after sending them or something).
You still haven't given me one objective argument as to why introducing MMO elements breaks the universal definition of Diablo. You saying it's ridiculous doesn't invalidate the analogy.
> you'd push it a bit then the spring would take over and snap it on.

Ah, a proper toggle switch! I thought they had gone the way of the dodo.
two mediocre companies join forces
If software had to go through the process of the FDA we'd be at the stage where VI was considered groundbreaking, and MS was considered a scrappy startup because IBM convinced regulators that anything but their business was dangerous.
I've heard of hobbyist SAP installations. Does a hobbyist Plan 9 installation exist with all the functions separated as outlined in this article?
Against injured/sick ones.

https://en.wikipedia.org/wiki/Eastern_coyote
https://archive.is/H62B6
I would love to see a world where all of those things use open source software and hardware. It would take a long time to make it a reality, but I see a path to that where more people are out there today making successful open source hardware systems and learning the parameters of how to fund them and financially maintain development.
> A chimeric human possessing the capability to produce neither gamete and possesing neither testes nor overies pokes apart that argument

You seem focused on actual when it should be potential. That individual, if one were to exist, would not be able to produce both if their disorder could be fixed. There have been no such individuals recorded so the scientific community waits with baited breath.

> In addition, as noted elsewhere in the thread, sexual dimorphism is typically used to discuss more than just gametes in study of other species, so why not ourselves?

As pointed out in the quote written by the zoology professors, anisogamety is determined thus. Whether other aspects of biology can be determined or inferred from sexual dimorphism is irrelevant to anisogamety. I know you want to make the “we are more than our genitals” argument but it’s just not relevant.
Or perhaps more realistically, tell them they can pick up their button when they come to meet you at the next DevCon.
I accept these thanks on behalf of those who actually deserve it. :)
Jokes aside but ancient rome was probably a disgusting place where setting foot into it put you at severe health risk compared to a quaint village. There's a reason why the rich rich of rome lived in villas outside of town.
Do you have any sources? According to Wikipedia, this regulation applies only in Australia, UK, and Taiwan.

Germany and Italy have the latches for sure.
I think it's pretty tough to not nuke the whole flora, all I've heard about it was people taking long courses of antibiotics had very little flora and could develop digestive issues, and at that point transplants make sense.
moneywoes, I mean any kind of broker, legacy, cut rate, flat fee MLS. Our flat fee is purchasing an ad. The ad page is unique. It is interactive and the customers are in full control. They negotiate directly online and close online. Our fee is for furnishing both customers an ad that creates a transaction.
This fragment: <<So [emoji of a dark woman] may literally appear as [emoji of a person] [emoji of dark brown] [emoji of the female symbol]>>

the "may literally appear as" is actually EASIER TO UNDERSTAND

its a person, of colour, who is a female. The single emoji is almost unviewable on my monitor at any precision and I could not ascribe feminine qualities to it, I almost was unable to ascribe personhood qualities.

This to me is the central problem of emoji: They actually suck at conveying meaning, where alphabets and words do really really well.
Why would somebody use this instead of a five dollar Bluetooth OBD dongle?
"At the beginning" there was a war that the Ottomans won. Then, at that very beginning, all of their non-muslim subjects were given the status of rum millet (https://en.wikipedia.org/wiki/Rum_Millet) - second class citizens with very limited rights, who were also, from the beginning, subject to Devshirme, or blood tax (https://en.wikipedia.org/wiki/Devshirme). I am sure there is a lot more of the beginning I am missing.

The point is, those were cruel times in most of the world - today we are relatively better off. However, I think we need to acknowledge the cruelty of the past to avoid it in the future. Rewriting history to make ourselves feel better is likely not the solution.
> poorly-informed transactions between VCs dumping these companies on construction workers

Who is doing this?
you pay for more than hardware.

$325k in hardware also needs people with expertise to run it, those aren’t cheap.

Maintaining reputation also means keeping your IP of blacklists and continuously monitoring the major ones . Spending time debugging delivery issues all of which needs people who costs a lot of money.

Also 4 million is list price , at that scale most providers like Mailgun, sendgrid , postmark will give you pretty steep discounts and dedicated account managers and high priority support .

In any company every bit of effort spent should be on developing your product, not wasted in trying to do someone else job just as good as them then not selling that skill.

AWS exists because Amazon figured they were spending a time and effort managing large scale infra and should be monetized.

Even at Amazon.com scale it makes sense to externalize it to a shared service like AWS.
I don't suggest that. I suggest denying trans women opportunity to (professionally) compete. I believe this is inherently discriminatory, but better than all other alternatives.

I also believe this is 99% smaller problem than anyone talking about it believes.
What's the difference between an Arduino arm cortex and just getting an adafruit feather board? They have m4's on them and can be programmed with an Arduino IDE and the same tools.
I'm Polish.
Yeah, unfortunately that ship has sailed.

The more practical advice at the moment seems to be "don't buy anything with an internet connection if you aren't 100% OK with it tracking your every movement".

Seems like that's only going to last another year or two with 5G and shit like Amazon Sidewalk making every single device internet connected.
I don’t understand. If someone gets lead poisoning from regularly using a spiked batch of theirs, can’t they sue the everlasting piss out of these companies?
As a complete nix noob, will this help with caching node dependencies? We have a few projects that take over 20mins for a `yarn install && yarn build`. I’ve read setting up
Nix for node isn’t that straightforward, but that was a couple of years back. Has anything changed with respect to node projects?
Every supercars owner knows to leave them on chargers. Or rather, everyone responsible for super cars leaves them on chargers.

One time, I had to change the oil on a McClaren… it has no dipstick, no oil pan, and you need to remove ~50 bolts and two skid plates to access anything.

They are art and engineering pieces that you get inside. They are not cars per se.
> When I graze in the backyard... I don't brush off all the dirt.

Given everything we know, this doesn’t seem too reasonable to me. I’m sure those hunters and gatherers would have loved a reliable way to purge those parasites from their digestive system. Even better if they didn’t require removing them in the first place.
Fukushima would have been helped by FCVSs.

https://en.wikipedia.org/wiki/Filtered_Containment_Venting_S...
Good, it’s insane to have to wait at the pump because there is one guy there and a line of cars. I think any adult who drives understands how to pump gas.
When it says something funny and german
I did a 3x of my career by doing this.

Now everything thing looks like a shell script or json exchange.

Ansible is a bunch of scripts.
Terraform is a bunch of json exchanges.
Yeah it may be even more precision than what a feedback mechanism can do?
Defined benefit pensions are only income once received. They accrue while employed.
Except Keychain credentials. I still don’t know how to make my iPhone forget how to log into Discord after deleting the app. (It logs back in after reinstallation.)
This is pretty cool! Will you consider open-sourcing it?
In 1991, a 10% federal luxury tax went into effect. Result: rich people stopped buying yachts and planes. Revenue raised was a rounding error (less than $13 million in a year and a half), luxury industries were decimated, and the tax was repealed 2 years later.
The issue is that once again the permissions model as implemented on phones is complete garbage. Showing a list of permissions with "accept" as the only option is brain dead.

Google easily has the money and engineering resources to provide a complete fix to this issue (multiple spoofing options, deny options etc.) but of course they don't want to - because Google's business is advertising and advertisers want your location data. And your frequently visited locations. And wifi networks. And probably brand names of whatever is on your network.

We desperately, desperately need to get open-source considered as a national security agenda item. We need hardware vendors forced to publish full interface specifications. We probably need to require firmware blobs to be open source and tell Nvidia and AMD to stop breaking the law (i.e. they both suspect they'd be done for copyright/patent law if they had to publish their source code so they don't).
There are plenty of times however where you can choose between open and closed source, and in those cases its best to chose open and support that sort of development.
Why should I trust open source hardware / firmware / software?