skysight-inc/HackerNews huggingface dataset:
I first heard about Pegasus Mail on ScreenSavers with Leo Laporte. Someone wrote in and Steve Gibson suggested it. Fond memories!
This is probably not productive, but I think the response would be; I bought the software from you so it's mine now.
You're right, of course; being open source does not automatically make apps safe. There's a vetting process by the F-Droid devs before an app gets added ot the repo, but after that changes get picked up without an in-depth review.

With F-Droid it's almost impossible to hide the infection. Once your malicious code has been found eventually, you're one quick scan of every other app away from getting all of your infected apps kicked from the store. You can obfuscate your source code, but that makes any app with obfuscated source code suspect immediately.

This is a lot harder with precompiled apps, especially those loading native libraries. With the tens of thousands of vague shadow companies that hobbyists and small dev shops have left behind over the years, it's impossible to find out which apps to reverse engineer if you're looking for similar infections. Obfuscating compiled code is quite normal as well, whereas open source projects stand to gain very little from obfuscating their source code.

You still need a certain level of trust (and a certain amount of hobbyists/security researchers to go through the apps) but that's inherent in any modern computer system. The days of the VIC-20 where one person could understand the entire system from top to bottom are long behind us, for better and for worse.
Ask HN: What do you like for quick and easy (paid) back end hosting?
Firebase is meh, Vercel has been ok. Haven't tried Render but it looks promising. What have you tried, and what do you like most?
The BEAM's multi-node scaling works really well. The argument that you'll need to break things out if you get big enough doesn't really hold water.
I really agree with the second point. Even if there are enough junior devs, there's small issues where you're on the go and delegating is relatively expensive as the expected turn-around time is generally in the hours. Often times I would just do it myself, but then it burns part of the stamina. Also we're trying to make reviewing easier with webpage previews and automated testing through Github actions.
"Enhancement of the performance of a proton battery" - https://www.sciencedirect.com/science/article/abs/pii/S03787...
Is there a spreadsheet that supports units in its cells and GNU Units in formulas? Seems like that would be an amazing open source tool.
I also would like to subscribe to your newsletter.
> because every website was made to work in IE and any other browser would simply fail to display the webpages properly either due to the way HTML/CSS is handled or due to some proprietary technology.

Ah. I know of this, but I've never experienced it first hand.

This is more of a nuisanc for users than devs though, but I see what you meant now.

Maybe I am too young, but I vaguely remember using IE5.5/6 and it already slowly being slowly phased out. I also remember the struggles as it tried to stay relevant. I can't even remember a website that was made "for IE"; all I remember is sites saying IE is poorly supported and to download literally anything else lol
> The fear, as I understand it, is that an actor will get scanned as an extra background mook in whatever movie, then not own the rights to their image when they get famous later.

Exactly. People are talking as if this is just about background roles, but that's not the point. Studios already use CGI people for background roles. That's cheap and easy, and there's no need to scan individuals for that.

The whole point of doing these body scans is to generate images that look like that specific actor. They're not doing that because they loved Joe Schmoe's performance as Silent Background Witness #4. They're doing that because Joe Schmoe might become a big star ten years down the line, and if that happens, they want to be able to produce movies with Joe Schmoe without paying him, or without even asking him beforehand at all.
Microsoft phones only died because they were bad at making an App store. Microsoft made the exact same mistake with the later Zune HD. Despite having a massively superior IMO experience for the user, Windows phone was doomed.
This is so irrelevant. There is no need at this point to scan real people to make fake people. The entire thing is a term to be negotiated and let the union win one.
From what I've seen, gov contractors don't really know what an SQL injection is, but they use frameworks so its all good. Bad thing is that some of these frameworks sanitise rather than escape data and the injection may slip through. I wouldn't be surprised if a system somewhere that reads this company name will just crash one day out of the blue.
More like they’re a DNS service that offers a registrar as a convenience.
The only “secret “ feature I want is a reliable way to permanently disable the bullshit. I could even live with the new taskbar that’s a bad dock ripoff (and I say that as a Mac Windows and Linux user who has tried alternative windows shells and multiple Linux Desktop environments for the last 20 years)

But I am currently holding back the upgrade because i keep hearing about adverts in notifications, about absurd spyware levels of telemetry, of massive steps back for users who are more advanced and more experienced because Microsoft didn’t just “move the cheese” they decided to replace the cheese with a tomato while moving to to another continent…
I am not sure how this is an answer the my argument. However saying that distributed system in JAVA EE are more performant that in C++ ( i am no familliar with DCOM/CORBA but i do know other libraries and system ) is news to me.

And again, the success of JAVA in the 90 and 00 can also be explained by better tooling, safer language,better x-platform stories,better libraries etc... etc...

Saying that java/jvm are not particularly performant is not bashing ... java/jvm have other great things going on... performance just isnt one of them
Then they should pay me rental fees in compensation for electricity I have to purchase to haul their hardware around.
Yeah can’t really use this in a secure context without the ability to use your own infrastructure.
You are confusing her legal entitlement to recover her damages through tort, as opposed to what she might be entitled to a company that didn't have insanely regressive policies. They are similar, but not the same things!
Possibly because it's their job, it's interesting, educational, maybe there's a monetary reward, maybe the reward was the journey all along.
The article mentions it can't be fixed by software update.
Current takes a surprising path in quantum material
https://www.worlddata.info/life-expectancy.php#by-population

All the top drink like fish. Now hold my beer.
Only tangential to this but somebody might find it usefull. I’m doing lots of calculations in Python involving various units. I’m using a similar library called Pint. https://github.com/hgrecco/pint

My business is thermodynamics of power plants. Professionals in the industry tend to use convenient units like C, bars, kJ/kg and so on. But the formulas usualy need basic SI units.
Using this library not only streamlines the conversion process but also keeps track of the unit itself. So instead of variable turbine_output_gj and turbine_output_mw I can have just turbine_output which is convenient.

It is hard to put a value on that but I believe it has already spared me many trivial mistakes that I had to explain to my clients.
Cloudflare doesn’t use GeoDNS for their CDN, it’s all anycast. They have no use for EDNS for their own traffic. Honestly I don’t take any CDN that doesn’t operate on anycast seriously these days, the issues with GeoDNS are well established at this point and if your network operations can’t handle the complexity of an anycast deployment you’re probably dropping the ball on a lot of other fronts.
>For me it's the ecosystem.

My laptop is a Chromebook.

I need to re-research how to get Linux on this thing.
Bobby Tables Incorporated
Can you point me to examples of Launch HNs using funky licenses? Show HNs are free-form but Launch HNs are curated by us, and I'd like to know what red flags to watch for.

(As this is offtopic for the current Show HN, it might be better for to email hn@ycombinator.com if you, or anyone, would be willing to share that way.)
Location: India
Remote: Yes
Willing to relocate: Yes
Technologies: Blockchain, Automation ,AI ,ReactJS, NodeJS, Solidity,NFT ,
html,css javascript,MySQL,php,Git
Résumé/CV: https://drive.google.com/drive/u/0/my-drive
Email: abinbiju0801@gmail.com
I ran Pegasus until I switched to Linux and used XFMail [1]. It was a great client, and my parents continued to use it until they eventually switched to Thunderbird.

I eventually gave up on imap / pop3 clients and strictly use webmail today.

1. https://directory.fsf.org/wiki/XFmail
As a software engineer, I don't sell software, I'm paid to make it. I don't even own it afterwards. I hear some people are paid to develop open source software. I don't think my career depends "pretty fundamentally" con copyright law, as if the software I produce is otherwise worthless. Most people on the planet can't do the work I do, which means that somebody pays me for this work. Changing copyright law wouldn't change this fact -- at most it could affect my pay grade.
> “Readable” is mostly a matter of “fits the grooves already worn in my brain”; to me, the Elixir there nonstandard-macro-based-syntax-and-all, is vastly more readable than the Clojure.

I'll admit to being able to read Lisp syntax without choking on the parens, but I don't even use Clojure (or any other dialect that uses special syntax for the different collection types) and I think it's way more readable and malleable (you can literally do whatever you want that makes sense to this data and it'll work, meaning you're free to write whatever middleware you want that takes and produces the expected data).

I've used Elixir since 2015 so I have no problem actually reading the syntax at all; I just think it's factually much worse than the Clojure example because it's basically just a bunch of macros you can't do much with and lots of implicit behaviors.

This also applies to Elixir's greater position in the BEAM ecosystem. I think the idea was that Elixir was going to be a boon to Erlang and other languages in there over time but I think it's demonstrably pretty useless as a BEAM citizen except for some of the patches they've submitted; most big Elixir libraries can't even be used outside of Elixir because they're full of macros and don't even provide interfaces with just functions.
I’m an author and I never hear this, what I hear is “only writers subscribe to lit fic magazines.”
None of the levels you mention (until Level 5) operate any differently from this feature. In any of those cases, if I replace the missing parts, I get my heated seats. I would be ticked off if Level 2 had physically integrated seat warmers had some protection people could not work around so they had to cut out and replace the seat warmers.

Level 5, and this case, all I'm doing is adding the missing component. A flag or something.
Off topic pet peeve: can we stop posting graphs and images with transparency to sites that offer dark mode? This seriously just leads to an unreadable mess. This seems to be a common thing (wikipedia...) and I'm not quite sure why, but then again I'm not sure how people live with light mode.
Intel Arc A580 could be the next great affordable GPU
There's a small difference in that Windows clims to be a general purpose operating system and Chrome OS is exactly what it says on the tin, but also a Chromebook running Firefox would be pretty great.
I mean honestly level 1 is frustrating when the cost is negligible or for safety. Plus it isn't like you can choose which features you get, and it is not like the seat costs 1000 dollars to heat. Somewhere between 3 and 4 should have legislation against it. (Also level 5 isn't like final cut pro not being installed, it's like Apple blocking port 22 unless you pay for a special developer license)
The PPI time series they use is indexed to the outlier you see in 2020, although that's the incorrect chart - this should be a better one: https://fred.stlouisfed.org/series/WPU0221

The conclusion is that industry PPI is down 20% since 2020, which is ridiculously misleading.

Speaking of incorrect charts, they used "Meats, poultry, fish, and eggs", which is the time series easily available on FRED, but on this timeframe is mostly about eggs - the one component irrelevant to the article.

The fact that this was written by a "Sr Data Scientist" is laughable, but probably average Silicon Valley economics.
How exactly do you do that. Are you passing the raw HTML, or just the extracted text?
Darwin will have his due, all right. Sad but true.
One of the interesting components of Polars that I've been watching is the use of the Apache Arrow memory format, which is a standard layout for data in memory that enables processing (querying, iterating, calculating, etc) in a language agnostic way, in particular without having to copy/convert it into the local object format first. This enables cross-language data access by mmaping or transferring a single buffer, with zero [de]serialization overhead. Something genius and obvious in hindsight.

For some history, there has been a bit of contention between the official arrow-rs implementation and the arrow2 implementation created by the polars team which includes some extra features that they find important. I think the current status is that everyone agrees that having two crates that implement the same standard is not ideal, and they are working to port any necessary features to the arrow-rs crate and plan on eventually switching to it and deprecating arrow2, but it will take some time to get there.

https://github.com/apache/arrow-rs/issues/1176

https://github.com/jorgecarleitao/arrow2/pull/1476
Is the size of the erlang vm one such point? I think I remember reading it's about 500mb, and you won't find it installed by default in many systems.
Traffic is not solved by moving the roads underground...
>They killed[1] cross platform apps

No they didn't! Extremely lazy devs deciding that they should just be able to deploy javascript and html anywhere and using Electron "killed" native apps. Why would anyone ever invest even 1% more into a native app when you can just hire intern javascript kiddies, pay them terribly, oversee them with one or two expensive javascript bros, and all your users will blame the slowdown on the operating system and Microsoft as they always have?
Nobody legally stops you from yelling at your parents, publicly disparaging your parents, writing extremely specific reviews about any health professionals your parents see, making formal motions to get your parents evaluated for mental incompetence, or pulling them into local & federal with a blast of lawsuits.

You CAN get most people to comprehend the problems they're causing...
In what way? No copy was ever made.
The information in this article alone is likely enough for some Tesla engineers to sit down and figure out the exploit themselves.

And if this research group wants to enable regular people to "jailbreak" their cars, they have to publish their full methodology anyway.
It's even worse than that. In Texas, refusing to work essentially puts you in solitary confinement! [1]

[1]: https://www.tdcj.texas.gov/faq/cid.html#work
Linux Patches Updated to Fix Latest Suspend/Resume Issues for Some AMD Laptops
Did they block you as a customer?

Did they then block a SIM transfer request to another phone provider?

In my country there are significant consumer protections around mobile phones.
We have a human in the loop as the fallback. It’s just a different attack vector. Brute force becomes a lot harder, but social engineering becomes easier.
The time and cost to acquire the land for such a system would be enormous, if it is possible at all.
Price gouging is immoral, and supposedly, illegal in some cases. And yet...
I've got a blog if you're interested haha https://fn.lc/post/

I've been hacking on my car and creating my own self driving models

Code is at https://github.com/d4l3k/torchdrive
Thanks, I never expected to hear anything like this when I started out, so it means a lot!

I started around 2014 or so, when there were fewer systems available. I saw Alex McLean perform with Tidal and that was enough for me, although I like to think I would have ended up using it anyway.

The main thing that initially grabbed me was the arbitrary subdivision of time in the mini-notation, something I’d spent countless hours doing painfully by hand in a DAW. I love the terse syntax and simple yet powerful philosophies underlying Tidal.
AI Generates my Tech News Podcast before I even wake up
End to end automation of news collection, scripting, text to speech and publishing.

Available on all major podcast platforms
Some of the complaints here seem to be focused on the idea that specific actors are being scanned and reused elsewhere. That's kind of silly of course. Maybe it is happening, but it's not like the background actors have any value to their individual image and if this is the hill to die on, just wait for some generative model to create a bunch of new ones.

Regardless... I can't see this really going anywhere. Background actors are just not important enough to matter.
> Where is the right line between "my hardware, my rules" and "my software, my rules"?

If someone roots their phone or car, which they own, despite the manufacturer's best efforts to prevent this, it should be legal because they are modifying a physical object they purchased. If they teach other people to root their devices, it should be legal the same way teaching lockpicking is legal if you're just lockpicking something you own.

Nobody is asking manufacturers to stop trying to get in the way of people hacking their devices. Most people won't have the skills or desire to jailbreak anyway.

But John Deere will sue farmers who try to fix their tractors themselves, Sony will sue you for jailbreaking your PS3, etc etc. That's wrong.

Additionally, DRM generates physical waste by making it hard for people to fix things they bought. The right to repair is important.

For software, illicit redistribution is covered by copyright law, no? But the same is true: if you own a copy of software and want to hack it (e.g. mod a game you bought) why should that be illegal, provided you were able to get around the game's built-in circumventions?
It sounds silly because Germany is a good place to retire in, not a good place to be young and work.
The positive feedback loop is the most troublesome part of climate change. The only way out it seems is reduced consumption and sacrifice.
Thanks! Our goal is to have it published in Q3 2024.
World is more complex than you make it.

Police can have big problems, that you mention, and at the same time can be interested in justice.

Are software engineers force of evil, because of lot of them work for companies that disregard privacy and make billions of dollars off it? And are not required by law to follow ethical standards?
It’s an interesting angle given how much Twitter is used by Fin Tech people. Also because Twitter is used for generating sentiment for pump and dump type operations as well. Elons dodgecoin pumping for example. I wonder if the SEC will take note.
The old name was in this tweet:
https://x.com/zofrex/status/1319286955314614275

Looks like the XSS tried to load this script that has since been banned: https://mjt.xss.ht/

Edit: huh, looks like HN translate 𝕏 into xn--971h.com, but the link still works. So much for my dumb twitter link.
Some stuff replicated. It was clearly not cold fusion.

Some people made a career studying the kinds of sonoluminescence needed to explain what that experiment saw. (And AFAIK, nobody found a use for the theory yet.)
If I may ask - why?

Why is increasing your code coverage to 100% matter? Would that reduce bugs or speed up development in any way?

Wouldn't it just add lots more code to maintain and make refactors more time consuming?
Type safety, undefined behaviour, and us
Well, this is quite thinly vieled attempt to let corporations hurt people and make a profit doing it!

You've linked to a politically Republican organization's page, where they're promoting legislation that would let companies produce unsanitary and unsafe meat. Do you not understand that the USDA guidelines are (a) easily obtainable and (b) exist to keep people from getting sick or dying from unsanitary meat? Or do you just stand to individually profit from this legislation?
What makes NAT the "main factor" for that.

I'm pretty sure every consumer router since at least 2002, if not further back, has had some stateful firewall implementation with default deny rules.
Using a copyrighted work without license is copyright infringement. Not sure how to make that clearer to you.
Ok but what if we made a Titan sub but with Teslas in it..
That's likely because it's a hardware issue, nothing really for tesla to do.
I've been using Proton as an alternative to Gmail. Potential security issues aside it's been ok. Web interface is definitely more usable than Gmail is now. Big down side so far is no SMTP/IMAP support on the free plan. You need a paid plan to use a real email client. Caveat emptor.
>The concept isn't a problem, it's companies taking advantage of it (and us).

To borrow a phrase you used earlier, I truly don't believe that we need to come to terms with companies blurring this line and taking advantage of us.
Wages are sticky. Prices of undifferentiated commodity products are not, which is why Tyson (as an example) has falling ASPs and negative margins on many products.
I see it as more of a potentially disruptive innovation. In some ways it is obviously worse, but it is also much cheaper. They might eventually be able to keep most of the cheapness while improving the capacity partway toward large expensive systems.

Might end up very competitive in terms of capacity versus cost.
https://philosophygeek.medium.com/meditations-a-requiem-for-...
Thanks! So I tried again. Here’s what I noticed
1. Date time is not local to the country I’d like to travel
2. Lack information about transport, routes, weather season, hotels, foods or restaurants, price… why not start with a country or region and be very good at it? Trip planning should be predictable
3. I want to see the places on map. Maybe?
4. Responsive but not fully on mobile

Overall this a hard problem you are trying to solve. I don’t even know where to start if I were you. Good luck!
stateless in web frameworks means that requests don't alter state of the code for a user. If you look at say JSP with traditional Spring, it tracks the state of each user on the website, which page they are on, which flags they have, etc.
I see they say "if a domain or page is not crawlable by any search engine (it has a noindex tag), or if it is not crawlable by googlebot, then Brave Search’s bot will not crawl it either."

1: https://brave.com/search/api/
The atoms do touch, by interacting electrically--which is the physical definition of how anything touches anything.
> You stated that you couldn't believe how out of touch a single dev was. Now you are claiming that Google as a company is acting in a certain way.

To the contrary. I stated this:

>> What I see of the one bad^H^H^H clueless apple is that their incentive with WEI aligns with a monopolist's goal to vertically and horizontally integrate.

Clearly, I see that the dev is out of touch with reality in a way that benefits Google's short-term profits without benefiting society at large, and my comment explains such at a higher level of discourse.

> And yet the feedback from higher ranking members of the Chrome/Blink team has been negative towards this proposal.

And thank all higher powers for your identified reasonability of more experienced, understanding devs working against their employer's short-term interests by publicly holding back the shit-storm that WEI would unleash.