skysight-inc/HackerNews huggingface dataset:
I think this will be unpopular with government workers, but to some extent it mirrors what the US government did with Chinese phones as well (per my understanding, US government workers can't use Huawei or Xiaomi phones).

In a utopian world, it would be lovely to see Earth's governments work together to collaborate on mobile security. Exploits for popular Android and iOS endanger almost the entire population of both China and the USA, because everything from basic banking to complex intellectual property is digitized these days. If everyone was able to work together on this, and pool resources, we could probably eliminate a majority of the world's biggest vulnerabilities.

As a software engineer, I get very sad looking at politics. Every major government in the world shares a common interest in keeping their citizen's secure digitally, but rather than collaborating, we've fallen back to the old human habits of lies, grudge-carrying, and distrust. The USA, China, Russia, Israel, and others all have advanced espionage programs, and rather than fixing bugs they enjoy the privileges of hoarding and exploiting them.

I completely understand that my utopian ideal of a world without such programs is impractical. I am likewise aware that we'll never see this type of behavior stop. But I still fantasize of a world where, rather than trying to get advantages over each other using technology, people can build towards the common good.
Scala, The Walmart of language paradigms.
I think a better approach would be to acknowledge that the CVE system thoroughly conflates two almost orthogonal things:

1. CVE numbers are a way to refer to a (potential) issue. With a CVE number, one can look up an issue in a distro bug tracker or ask support a question or search mailing lists.

2. A CVE number comes with an assessment of whether an issue is real and how bad it is, often in the NVD.

From the FAQ [0]:

> No, CVE is not a vulnerability database. CVE enables the correlation of vulnerability data across tools, databases, and people. This enables two or more people or tools to refer to a vulnerability and know they are referring to the same issue.

So I think that a CVE should probably be rejected if it’s a duplicate, but not just for being a non-issue. But anyone using a CVE as evidence that an issue exists and thinks that NVD is doing a bad job should complain about the NVD, not CVE spam. And people should be extremely cautious about expecting the number of CVEs to mean much.

[0] https://www.cve.org/ResourcesSupport/FAQs#pc_introcve_nvd_re...
> That just does not happen with physical controls.

I was driving a car once where the handle to the stick shift literally popped off in my hand. So... no, that's just silly. Stuff breaks. Important stuff breaks. You deal with that with careful design and redundancy[1], not whining on the internet about touchscreens.

[1] Like how in the Tesla all the driving controls are, in fact, NOT connected to the touchscreen controlled by the MCU but to the AP computer.
> I believe that was after Kaspersky reported on the targeted vuln/backdoor attack

If that is true, what a bizarre reaction. Apple wasn't behind this, and, if anything, it highlighted Kaspersky shortcomings.
Same, but we are likely in bubbles. I love exercise, and many people I know are the same. But, I know a large number of people from the gym and things like BJJ.
“Everything is out of my control” is a common pet theory about self treatable mental illnesses.
Instacart Is the Best and Worst Grocery Business Imaginable
I don't like where my thought process is going.

A state sponsored team decides to creates hundreds of bogus CVEs that get through. People stop trusting CVEs and it becomes a dirty word. Legitimate CVEs now start getting ignored and there is no good mechanism to surface those properly to teams that need to know. People's systems are now more attacker friendly. Governments and corporations too.

Or, some private company steps in and says they'll take on the burden of sifting through the bogus. But they are not incentivized in the same way... and might only pick and choose what they work on, or not work on, or ignore their own CVEs.
Very cool, will definitely try out this version. Wondering if it's now possible to change the color scheme of the viewer, that'd be nice. (Colors used to be more or less hardwired to black on white, IIRC).
Why Socialism? (1949)
(I up voted you because it was good information that do not deserve to be greyed, I really like the study, but I disagree)

The ultra-processed food are not nonsense, only hard to define depending on your culture.

One example my sister used is bread.

If your bread contain flour water and salt, it's processed food but not ultra-processed. Everyone agree. Even if you use multiple different flour and nuts, still the same.

After that, you can add oil on the bread before cooking it (not mixed with the bread,just on top, to change the crust formation). It is possible to consider it ultra-processed now (people rarely do, even in France).

Now come the question of sugar (there is a salt question too but I don't know enough to talk about it). Sugar help conserving the bread. In France, some people (including me) consider that any amount of sugar in bread makes it ultra-processed. Some consider that it only is if the bread cannot be just called bread, but that depends on your culture. Some 'bread' in the US would be called 'brioche' here by almost everyone.

But for the majority of stuff, it's easier : if it's a pre-prepared meal with conservatives, it's ultra-processed.

Which does not mean it's bad, though. Generally it is, but not always. Nutri-score (at least the last iteration, the previous one was flawed against fat in general and insaturated fat in particular) is imho a better way to look at food.
This appears to just be a review of privacy policies.

There is no software in the car that looks for bouncing on the back seat while the car is in park and the humidity is rising...

But the privacy policy lets them add such software if they wanted to.
Paperlike Color: World First Color E-Ink Monitor
The sources exist:

The book, $13:

https://www.amazon.com/National-Security-Cinema-Government-H...

The article about the book:

https://www.wsws.org/en/articles/2020/02/27/nsec-f27.html

"Using the Freedom of Information Act, the authors gained access to files that exposed the extent of government censorship in films between 1911 and 2017. The DOD (Department of Defense, or Pentagon) provided military equipment and “advice,” and even allowed members of the military to make appearances, in exchange for some degree of control over the content of 814 films.

The authors continue, “If we include the 1,133 TV titles in our count, the number of screen entertainment products supported by the DOD leaps to 1,947. If we are to include the individual episodes for each title on long-running shows like 24, Homeland, and NCIS, as well as the influence of other major organisations like the FBI, CIA and White House then it becomes clear that the national security state has supported thousands of products.”"

The movie discussed in the title article, streaming $4.75:

https://vimeo.com/ondemand/theatersofwar
I like physical activity.

My brain greatly dislikes 'purposeless' physical activity.

For example, I can stock an entire store, no problem. I will gleefully put the right thing into the right spot. That accomplishes something. Take a quarter of that physical energy and put it into a jog or walk? Hate it. Yes, I am technically accomplishing something, but try and tell my bored-to-tears lizard brain that.
The supreme court recently decided there's no right to privacy in the US (they used this as justification for rolling back Roe v. Wade). It's pretty clear they'll be taking away more rights over the next few years.
Monetizing an Open- Source Project?
A few weeks back I set out on a small venture. The goal was to create something small to get me motivated again and to build something fun. I also wanted to dip my toes into open-source as after 13 years of being a developer it was time I gave something back to the community that made me.

The small app called BatteryBoi (www.batteryboi.ovatar.io) was a menu bar to replace the existing battery indicator on macOS.

Since the launch, the project has been what I would consider a huge success. It now sits at almost 6k downloads and 600 daily active users (in just over 2 weeks).

I am honestly blown away by the reception. In 13 years (of working in tech) I’ve never had feedback and love on an app quite like this. But with all the time and demand for new features, I simply cannot afford financially to spend any more time on this project as it doesn’t bring in nearly enough money - In donations the app has pulled in $120. That’s about $0.20 per download.

I am grateful to every single person for donating to this free open source project but this amount is not enough to keep it alive.

How do open-source companies do it? I know many will pull in donations from big companies, but this project is not really aimed at big companies, more so a B2C project. Furthermore, I have very little insight on the user base other than they own a Mac and what country they are in and my knowledge of this space is incredibly limited.

Any advice would be hugely appreciated.
> working iOS bugs chain to hack any iphone

I don't think this is true.
> cameras in cars. What they will detect? If I am drunk, or something more?

The more would be if you are watching your phone, in 99% of cases.
It's almost the plot to The Last Starfighter...
jackson-databind maintainer responds to a similar occurrence few weeks ago: https://github.com/FasterXML/jackson-databind/issues/3972#is...
I found this telling.

https://books.google.com/ngrams/graph?content=conspiracy+the...
It's that very same point which makes it acceptable (to some) to break civil law. Unless the plaintiff can actually prove that damages are due, then the preparations for the case (which are admittedly expensive for many) are the only costs that the defendant bears.

In the grandparent's example, the TV series is still available, and so the copyright holder could make a strong case for damages. If it's an otherwise unavailable news report about a specialist topic, it would be much harder to claim that any damages (such as loss of profits) was actually incurred.

The fact that YouTube can simply restrict access whenever they feel like it is of course tangential to the legality of distribution in general.
>It really is imo.

It really is not IMO.

A touchscreen UI is a visual medium. That is not what you want/need while operating a vehicle. You should be able to change the AC by feeling for the button and not taking your eyes off the road.

This isn't just HN being HN again. Driving enthusiasts are pushing back on touchscreens.
Yeah, a perfect thread to demonstrate the lower than average social literacy of HN users. It makes this community come off as a bunch of fun haters. This kind of fun low stakes “engineering problem” is exactly the type of thing that should be shared here, but everyone’s a critic I guess.
> "just get off your ass and do something"

If I don't have something external demanding attention, sometimes just getting out of bed is that "something" I'm doing for the day. I almost feel like I'm in a sci-fi novel. I'm in cryogenic sleep until there's a problem that needs to be solved. Then I am thawed and put to work until the problem is fixed and I go back on ice. It feels like I have little to no agency between fixing those external problems.
That most things are a mixture of things in and out of your control is a completely normal attitude to most things that we don't arbitrarily decide is just complete self-hitting.

EDIT: But let's just think of something that might take months to change (this might be exercise routines): that falls into the set of things that you can change yourself but that can't be condescendingly described as something that you do habitually and are “surprised that you don't feel good” (it's 90% about habit-building and 10% about intellectually understanding the cause and effect). It's not a simple “one weird trick”.
The Balancing Act of the CTO
Most apps lack users for A/B testing to be significant; and the product teams to develop in an isolated enough way to avoid biases.
Takeout predates the GDPR by years: https://en.wikipedia.org/wiki/Google_Takeout
I was also a Miata owner: An NB Madzaspeed. A lot of fun to drive, and it's nimbleness saved me from a couple of crazy accidents. Unfortunately the car has one major weakness: It doesn't matter if the car is very agile if you are surrounded by vehicles with far worse characteristics. The car was rammed 3 times in 12 years, either on the side or the back, by people in brodozers that either couldn't see it on the side, or had crappy braking performance. The person in front of me does an emergency-level stop, and with the Miata I stop too, 3 feet before I hit them. 3 seconds later The brodozer behind me, however, has failed to brake, and launches the Miata forward. I walk out fine, the car in front of me gets very minor damage, as I was stopped and with my foot on the brake pedal, but the Miata's frame is bent, and the repair estimate is over 5k.

So yeah, hell is other cars
I agree, examples would help. Preferably not in notebooks. Especially examples of how you found a problem with this tool.
>So you're paying ~10x the power costs to get worse

I mean I don't usually plug myself into an electrical outlet, isn't food much more expensive for the same amount of energy?
Greg Kroah-Hartman on Formatting [Git Pull] Emails to Linus Torvalds
fyi, there might be an Onstar fuse you can pull. My owners manual had a diagram and list of all the fuses.
Cookie banners existed long before the GDPR, due to the ePrivacy Directive: https://en.wikipedia.org/wiki/EPrivacy_Directive
UL tests and certifies electrical devices voluntarily. I would like to see improvement on a industry basis without more government regulation. Apparently people voluntarily purchase carbon offsets when purchasing airline tickets, do people pay for non-tangibles.

Open standards of tcpip allowed for tremendous innovation, unlike the old Bell System which regulated through monopoly what could be attached to the network.
Ukraine Situation Russia Advancing North Korean Artillery Deal
In general both ext3 and ext4.
In case there are still any doubts: NO ONE has any technological advantage when it comes to LLMs anymore.

All that money that so many companies have burned to train giant proprietary models is unlikely to see any payback.

Soon enough, more of those companies will realize it's in their best interest to open their models -- to gain mind-share, and to mess with competitors' plans.

First, it was LLaMA, with up to 65B params, opened against Meta's wishes.

Then, it was LLaMA 2, with up to 70B params, opened by Meta on purpose, to mess with Google's and Microsoft/OpenAI's plans.

Now, it's Falcon 180B. What comes next?

We live in interesting times.
Do you have links on this? I’ve not heard anything about it
You just described coal. So, you're suggesting taking coal on a backpacking trip along with a very heavy canister of hydrogen. To make water? Anything else you want to do to help destroy the environment you're backpacking through?

You realize this whole thread started with the concept of dehydrated water, right?
Sure, it's ok to feel that way too.
I've found that the wheel is much easier to use while driving than a touchscreen, since you don't have to look down or stretch your body away from the steering wheel.
Godot-rust devlog: FFI optimizations and benchmarking
SEEKING WORK, REMOTE - WORLDWIDE

Remote: Yes. I am working remotely with clients from USA, UK/EU, AUS/NZ for last 12+ years.

Willing to relocate: No

Technologies: Senior Ruby on Rails developer with 12 + years of experience, Rails upgrade, Rails security audit, Rails tech-debt reduction planning, DevOps, fractional CTO

Résumé/CV: https://docs.google.com/document/d/1fvnKGKM6T2yAtkMhShAyxJtS...

Email: skfix@outlook.com

I am Sunil, a Ruby on Rails specialist with super happy clients from all over the world. I am open to part-time, but will prefer full-time opportunities. I work on a contract basis through my firm incorporated in India.
Ideally yeah, the bar for critical appliances would be high enough for this. If not, disabling IP at the OS level would still be pretty good.
The uranium capacity was already sold off. Another source of income was needed.
It's not sustainable.

Yes, and water is wet.

From a business perspective, Open Source only makes sense if you're prepared to fully support the code yourself or you are confident you can reliably contract for support.

Otherwise, you're building a support time bomb into your product.
That's the thing, most users didn't know they joined a botnet, they just thought they cheated the system by finding a free VPN.

I think there's some merit to the idea, especially for free VPNs, but you'd need a whitelist for things like streaming services and something to prevent abuse. Of course these companies were just interested in building out botnets, but it could be done somewhat okay if the right groups of pirates and streaming customers banded together.
My least favourite thing about vanilla JS is finding out at runtime that I made a typo. That's an annoying thing that TS completely solves, among many others. I really don't see how you could use TS for any amount of time and wish to revert back.

>Things that should be easy become hard, and things that are hard become `any`. No thanks!

Denouncing a type system because you refuse to use it correctly seems short sighted to me, but I am of course biased as a TS fan.
Most modern data collection uses embedding vectors. Those vectors are just a short list of numbers (for example, 128 decimal numbers).

However, from those numbers, one could make a pretty accurate guess about your sex life, political alignment, desire to buy a lawnmower, or how many rotten teeth you have.

In fact, even the developers of the system don't know what the embedding vectors will be useful for. They just know that if they take a bunch of data and create a user embedding vector, then that vector typically doesn't count as PII, yet can be used for almost all moneymaking schemes.
I built a Chrome extension that adds a chatbot to every GitHub repo
Agreed.

Though, also, maybe don't go too far with kicking things out into individual separate libraries. Last year I did AoC in Scheme, and there the annoyance was figuring out exactly which of the approximately nine kajillion SRFI packages I needed to import to get different bits of functionality. A smaller number of more tightly integrated libraries that are allowed to evolve over time would have been more pragmatic.
milliliter?
Noooo. Manuals are on average much more efficient. I drive a 1st generation Honda Insight, and the manual version gets ~10 mpg more than the automatic.
Sounds like swapping/trashing + an exception loop taking all resources
The planning period involved all key stakeholders and buy-in. This includes QA, engineering, and the customer.

In a GxP validated release, everything starts from the documentation and ends with a sign off by the QA team before it's delivered to the customer who does their own validation process. So it was absolutely critical to get agreement between the teams.

I was Director of Engineering and represented the engineering team. Over a 1-2 week period, the stakeholders would meet to discuss the objectives and we'd draw up a rough outline ("Business Requirements"). Then each lead would take that rough outline back to their teams to determine feasibility (for the customer team, it was to rank priority so if we came back to make cuts, we knew what to cut). For engineering, we'd review each feature and breakdown to determine if we could do it all given our resource load and time frame ("Technical Design Specification"). We'd provide a rough idea of how we would implement it and consult with the QA team on how they would test it ("Functional Requirements Specification" and "Validation Plan") and if there was some angle we missed.

But because a lot of this ended up being negotiations and documentation ("Here's what you want, here's how it'll look, here's how we'll build it, here's how we'll test it, these are the compromises we have to make for now, this sub-feature will be released next cycle"), I ended up doing most of that "dirty work" and only consulted the team when needed and to get their buy in. This left my team with plenty of time to play with that new framework or build a sandbox for some new tooling or build process and so on.

Even if you are a skeptic, I strongly recommend reading the Shape Up guide. It's very practical and prescriptive.
But you have to rely on Mono or .NET Core for Linux which isn’t something many want to put on their servers or desktops.
I mean, I've spent time in west Virginia, the people I met at Huntington's organic farmers market (and Fayetteville) were significantly more normal-sized than most Americans I met, even those I met in Cali, so I don't know if it's true.
Hyperbola releases final GNU/Linux-libre before transition to HyperbolaBSD
Not only that, but a lot of features of various forms of Latin American Spanish also occur in Spain, especially southern Spain which is the "root" of much of it.
A new hope is rising!
the target audience can continue to live dangerously, doesn't mean the app can't add this basic feature to be a contender
Interesting, didn't realize it was quite so simple :)

I was thinking that since the binary seems largely unchanged... that the presence of DLLs and such wouldn't really matter.

The cracked version wasn't aware of Steam, so I wonder if it's even checking
Unreal Engine 5.3 Feature Highlights [video]
There's definitely differences between countries and regions, and I don't have data for it, but the stereotype of Latin American Spanish being slower than Spain has by and large been true in my experience.

Do you think on average Latin American Spanish is spoken at the same speed as Spain?

Edit: And regardless of regional variations I am certain that there are Latin American regions which have a generally slower speed of speech than regions in Spain. So the thing that interests me is whether in that case the Spain Spanish has more pauses etc.
That's strange. I've never had it crash for me. How many tabs do you have open?
> Humans run at approximately 100W

I believe it's many times less for the brain. There's no way it dissipates anything close to 100W without cooking itself.
This track transports hundreds of Duplo citizens and various other toys daily. Damaged parts will not be able to be replaced until next birthday or Christmas, leading to significant delays. Furthermore, if the train were to snap mid play session, a citizen could be flung into the wall leading to loss of limb, which are not easily fixable like Lego minifigures. The train track is a critical part of playroom infrastructure and thus affords extra scrutiny.
That was actually adorable. Kudos.
CDW Hit with Ransomware