skysight-inc/HackerNews huggingface dataset:
Malicious persons will spin up Windows in a VM with slightly different hardware, install the game, repeat.
If this sounds familiar it's because accredited labs made a similar claims about the iPhone 7/8 and then again the iPhone 11.

In each case it was the lab using an incorrect methodology.

I wouldn't be surprised if that's what's happened here. There is a canyon of technical knowhow between RF engineers and testing labs.
Ctrl-Refresh does not work in Chrome though, which is what was new to me.
Having worked in the semiconductor manufacturing industry for a decade, albeit a while ago now, this article seems a bit overblown. The packaging industry was moved to low-cost areas long before the semiconductor fabs were; the fab is generally considered the high-tech part. Not that packaging isn't important or specialized or difficult in its own way, but it's done in lots of countries, and it is not in the slightest unusual for it to be done in a different country than the wafer fab. Usually (though by no means always), a country with lower cost of labor.
> such as gaming soundtracks

These days I also feel like my workout playlists might as well be randomly generated dance music.
Nice,

Can you point me to an example I would love to check it out
Are you sure its a tarnished lead? Lots of lightning cables have one tarnished lead (often on each side) from arcing. If I remember correctly using such a cable in a new iPhone could even damage the matching pin inside the phone, leading to the situation where it would start arcing on a non-broken cable (damaging the same leads on the new cable).
>...But at that point you might as well just roll your own 128-bit version of a Snowflake ID.

Or UUIDv7, which is designed to solve the same problem
Google has a new tool to outsmart authoritarian internet censorship
Automated AI generated music in all genres, this all reminded me of this thread I read on reddit a while ago: https://old.reddit.com/r/Music/comments/15wnw74/is_ai_creati...
Probably a hot take, but I'd like an extended JSON syntax where you can do this:

foo = "something to use later",
bar = { "a": 1.1, "b": 2.2 },
baz = [ 1n, 999999999999n, ],
/* comments! */
{
[foo]: `\
multiline template string
${foo}`,
...bar, /* spread! */
"baz": [ ...baz, 1234n ],
"more": my_extension("something like !foo in YAML, but just JavaScript function syntax")
}
Yes, that is what I mean by my last point: "It allows for portable installations and to run software just copied from other sources." You can think of decompressing from an archive as running a very simple installation program.

If the only installer available was one provided by the OS how long do you think it would take to make that the only way to install and run software. These things are being done right now on many platforms in the name of safety, security, and to a lesser extent convenience.

The more phone-like a platform is the fewer ways you have to install and run software on it. So far general purpose computers still allow you to install software in other ways than the built-in method (i.e. just unzip and place in a directory), but it's getting increasingly common to require executables be signed, and things are always moving to be more and more locked down.

Now the use of "Special" installers/uninstallers is from the original comment, I would just refer to them as "regular" installers/uninstallers. I do like the ability and freedom to have an ecosystem of these things, as I don't want the one OS method to be the only way to install applications.
Handcrafted Emoji
As I understand this solution, all I need is some computer with static IP. My ISP offers static IP, but I am required to have a wifi router on every Internet connection I have an access to, which might do creating such a home server not an easy task.

A free (as beer) MITM service for having an ability to connect to some websites might be a great deal for not only this device but even for some older devices in my collection. But of course your link is not such a service.
RIP to the Microsoft Surface Duo’s support window, an unmitigated disaster
Unity has a lot of experience and marketshare in VR/AR.

Something like 85% of VR games/apps are made in Unity.
Given my experience and knowledge of how Spotify deals with much-less nefarious uses of fake streams, I'm very skeptical of these claims. There's a significant (several month) delay between a Spotify stream and the artist getting a payout. (This is probably shorter if you're Taylor Swift, but the artist profiles involved here aren't.) During this time Spotify will indeed do some checks for stream legitimacy. It's not hard to detect a song from a completely unknown artist somehow getting 1 million streams from southeast Asia.

Given that and the overall inefficiency of this scheme, my uneducated guess would be the "anonymous gang member" decided to fuck with the reporter by coming up with an outlandish, yet plausible-at-a-surface-level scheme, similar to Tony Soprano messing with his golfing buddies by telling them fake mob stories.[0]

[0] https://www.youtube.com/watch?v=i0D3xkOeMdA
Aren't Excel sheets still limited to 1M rows or so?
Woah your comment is out there. Most people on this thread are honestly commenting on a highly visible product that people interact with heavily every day - lots of opinions as a result. It isn't some higher level conspiracy.
I would use Ollama. The answer depends on your RAM size. 13B at 4 bit just fits on a 16GB. 34B at 4bit will require 32GB.
it is true, debian particularly has very good track record:

https://security.stackexchange.com/questions/243455/was-ther...

however, cpan, npm, ports, homebrew, gems etc there are examples: https://docs.brew.sh/Acceptable-Casks#apps-that-bundle-malwa...

but i was hinting more at the: there are so many packages, and so many that are used rarely, that there is no way we know.

i think just running weekly modified files report and running things in sandboxes also dont give internet to all apps is good enough for me, and of course be critical of the sources you install from, reputable repos are better than non reputable ones, but are not immune.
I love the part where they encourage suspicion of their employees for making friends with each other and for being interested in company policies and benefits. Definitely sounds like a healthy work environment.
Mobile support sucks. But over all cool project.
It seems 30% platform commission is pretty standard across digital platforms (apps, books, music). I'm not well versed in the world of money laundry, so I don't know if that's efficient or not. But if you're willing to pay the commission it seems pretty easy to launder money via fake apps/books/music or other digital goods than can be generated with near zero marginal cost.
Once again, it all depends on the frequency! Gamma radiation is EM radiation and can cause nuclear fission [1], which in turn can release neutron radiation.

I'm fairly certain that no iPhone model to date emits gamma radiation, though.

[1] https://en.wikipedia.org/wiki/Photofission
I'm amazed how I triggered you so hard, you are now crufting through all of my comment history, downvoting and commenting like a maniac.

Imagine being this dense and still incapable of defining "normal" as a high school student during statistics class would.

And you know why I'm taking a stance? Because people like you make me to. I have no choice, a few years ago I was told "Oh these pronouns? Yeah just ignore it if you are cis, no worries." But now I get banned from a mod site if I upload a modded INI file removing it from my single player game, where no one is affected by my decision to remove it. Cancelled by people like you who claim to be the "good guys". Fascism is back, but now a different flavor, thanks.

Now think about that after you ruined my day by stalking me.
Having a visual way to configure this makes it much more accessible to non-programmers, with error checking available through the host (Excel, in this case), while also reducing the eng effort in building this.

At Google, many internal tools use Sheets as their source of truth for config data, and it works really well.
Makes sense! thanks
I think a lot of westerners are going to be unpleasantly surprised if they select items based on typical western sizing categories for S/M/L/XL, which seems to be how they're categorizing the available wardrobe kits. Japanese sizing seems to usually be significantly smaller than EU sizes, and outrageously smaller than US sizes. I've even found that you can't really trust off-the-shelf items with specific dimensions to align to what you'd buy in the west either (neck/sleeve/inseam etc.), as Japanese brands tend to be more accurate here than western brands that include 'vanity' allowances in dimension measurements.

Some of these selections seem goofy too. Wardrobe #122 has a pair of pants that are comically mismatched in terms of inseam length. One pair either has to be absurdly long, or the other is way beyond fashionably short.
While I've always been happy with the VS Code ecosystem, I'd be lying if I said that JetBrains products haven't been a favorite of many developers I've worked with.

Disappointing that the open source plugin is a casualty, but this is probably a net positive for getting Rust into more hands that might need it. Writing Rust with and without IDE help is a night and day experience and having an official, goto, commercially supported product is great news.
Same. I have a debit card that I literally only ever use to take money out of a secure bank ATM (the ones attached to actual branches), or ID myself at the bank teller.

Every single thing I'm actually paying for goes on one a handful of cards.
Apache Nifi: easy to use, powerful, reliable system to process, distribute data
Or, uh, people have a better idea of whether or not a fall would have a good chance of injuring them, based on a lifetime of being themselves and knowing how likely they are to land hard (vs roll) when they fall, than a researcher who knows little about them?
> Uninstaller should not exist. Installers should not exist either. Every OS should have a package manager

What is a package manager, if not an (un)installer shared between projects?
No of course it's not a SteamDeck specific thing, hence why I started my post with "If you have a SteamDeck". As in, hey, if this interests you and you have a SteamDeck (or are considering getting one), here's some things I found useful.

That being said, I had no idea RetroAchievements even existed until I bought a SteamDeck, went through the EmulationStation setup, and got to the setup screen that was like "Hook up RetroAchievements?" and I went..."you can DO that? Holy shit!"

I've had emulators on my PC for years and didn't even know this was possible, as nothing ever let me know it existed before then.

Also while I've had emulation on other portable platforms over the years (and bought some dedicated hardware), I haven't had any portable hardware just work for emulation and work for such a wide variety of platforms as the SteamDeck.

I didn't even buy the SteamDeck with that in mind originally, and just a few weeks prior to getting it I was screwing around trying to get my old Vita set up for emulation with frustrating results (had to keep reinstalling something, never seemed to take), and then I checked it out on SteamDeck, and now I use it for emulation more than for playing my Steam library.
Definitely the fault of the person clicking tiles on a webpage and not the company that built, trained, "tested" and deployed the system with that data...
Yes, I use regexes in vim all the time. Never use look-around or really much regex features beyond the basics. 99% of all searches are easily just literals.

I also use regexes with ripgrep of course. ripgrep has features that standard grep doesn't have that typically mitigate the need for look-around, such as the `-r/--replace` flag. (I can't remember I when I last used `-P/--pcre2` in ripgrep for a reason that wasn't testing it.)

Otherwise the rest of my regex use is in programs for a variety of tasks.

Note that I'm the author of Rust's regex crate and of this regex benchmark: https://github.com/BurntSushi/rebar
I saw the pop-up and thought it was an ad for a tab container style feature they added in an update.
Why people care about PostGIS and Postgres
> these can be deeper than what normal sunlight or IR radiation would reach

Oh right, i did't think about the penetration depth.
It has also failed enough times for me, but luckily it often works like "on error resume next" do the package manager doesn't get stuck in a bad state.

Regardless, installation on Linux is often just dropping some files somewhere and perhaps a modprobe.

In Windows you have so many things you can do: filesystem, registry, COM registration, GAC, file associations, etc.
It's a bit weird to act as if macOS didn't have installers and uninstallers. For one thing, there's the App store. And then, probably most developers use something like homebrew.

What you describe works for a specific kind of app, the ones that can be easily sandboxed and don't have shared dependencies.
To put it lightly, this isn't a well supported theory.
I was going to share and use this, yes, but this smells of the kind of quirkiness I dont care for. Thats all.
A new twist on Zawinski's law? (“every program attempts to expand until it can read mail. Those programs which cannot so expand are replaced by ones which can.”)

"Every program attempts to expand until it looks like a mail client. Those programs which cannot so expand, are replaced by ones which can"
Yeah, ours was to an email account I'd registered for my son but wasn't checking regularly. Once we found out someone else had used it for Spotify I found loads of marketing spam from them in the inbox. I think it is fixed for new accounts but they obviously haven't bothered to go back and verify everyone who registered before that change.
I disagree. This is about the dark patterns and regional regulatory differences presented in their pop up, not about the tracking itself.

Google has done a new shitty thing here while rolling out their other shitty thing. It deserves to be talked about. A lot.
Ignorance of database basics is something I allude to in the article, but it's a larger topic that I might vent about later.
> We're not in charge of avenging the victims of anyone.

The analogy doesn’t state who you are in this hypothetical situation. So what if in fact you are exactly the one in charge of that? Does your moral compass change depending on whether you’re in the position of representing all of humanity?
Not necessarily

https://portableapps.com/apps/internet/firefox_portable
This is largely based on my experience (which may be incomplete), but static code analysis tools in our CI pipeline don’t add comments to a PR, rather generate a report and will sometimes annotate the affected coded.

Annotations are not tracked historically so any new ci run will regenerate the annotations. I thought this was better for chat gpt reviews since they’re non-deterministic and each CI run could result in different types of feedback.
Maybe I do! Many Windows custom uninstallers have an option to remove "settings" while uninstalling.

I sure have lots of junk in ~/.config I don't use anymore and probably never will.
Kindles are great on the eyes and a lot cheaper.
I feel like music composition is a fundamentally hard task for AI. Music production seems like it should be a lot easier but I haven’t seen that
Sure, but the "accredited" in accredited laboratory is itself a paperwork audit-based process. This is how you get your own paperwork as a manufacturer to give to an auditor to say "Look at our paperwork". It doesn't mean the regulator is somehow testing things itself.
I'm surprised that you even leap to people like Hans Zimmer and others.

The people we need to worry about are aallll of the people earning a living for everything else like background music for Indi games, Ambient music etc.
How is this meaningfully different than using Javascript?
Magnificent Stock That Could Join the $1T Club
It would be more like /somedir/etc.example.com/shadow
How do you differentiate between download and install? Is self-modifying code repeatedly installing itself?
well you would normally trust the package manager that comes from your OS/Distro provider, as opposed to an uninstalling script from a developer anonymous to you
> "We need to see pain in the economy."

Says the person who has been allowed to accumulate $912M under the very same economy.

> "We need to remind people that they work for the employer, not the other way around."

The people work for themselves. Too bad the free market is slightly inconvenient for you right now.

> "There’s been a systematic change where employees feel the employer is extremely lucky to have them, as opposed to the other way around."

So they 're supposed to believe that they are so lucky to be able to have a job at all and (most importantly) behave accordingly.

The nerve of that shithead...
No comments means it's not human friendly.
Analyzing Security Vulnerabilities in XWiki: In-Depth Examination
Leaded gasoline is still allowed for aircraft, racing cars, farm equipment, and marine engines.

BTW as somebody who wants to make my own website, I would like to know what is so special about those websites.
I haven't downvoted you in either thread (and unsure why you care about that so much), you seem to have more issues than I assumed, work on yourself, for your own good.

> Fascism is back, but now a different flavor, thanks.

Says the racist.
Yup, happened to me too (Arkansas).

For context, I moved in January of the year.

Sent me a letter saying that because I had filed my federal return with my Arkansas address I clearly lived in the state, and because I hadn't filed a state return they were assessing taxes on me for the entire year at the single rate.

I called and they said the same thing, I interrupted them and said "so should I tell California to fight you over this money, since I lived there until (XX/YY/ZZZZ)?" Oh and here's my AR lease, here's my CA lease, my CA tax return, me transferring my license to an AR drivers license, and me transferring my vehicle registration on (XX/YY/ZZZZ). Anything else I can help you get from the state, since you don't seem to have access, but do from the feds.

I got the most sheepish "this case is resolved" letter from them <72 hours later.
Yes, but "defaulting on $100k as an income strategy" is a tier above the usual tax avoidance schemes in terms of risk, so I suspect he availed himself of those too and wound up paying very little tax on the $60k.
A typical Linux install is actually less secure than Windows nowadays, which in turn is less secure than macOS.
As a warning for love2D, it is very easy to get the source code, since the .love file is really just a zip that can be easily extracted
The Inevitable Death of Localhost
> No one is claiming that buying a pair of sneakers from a company that uses part of its funds for an evil end makes you guilty of the crime

If you are a German company, yes, the law makes you guilty. This goes by the sweet name of Lieferkettensorgfaltsplichtengesetz (also known as LkSG), and makes it a duty (Pflicht) for companies to pay diligence (Sorgfalt) to the absence of crime at any point in their supply chain (Lieferkette). I do not know exactly what the criteria are to decide whether you did your search with enough diligence, should a crime be found in your supply chain, but I just wanted to point that this concept definitely exists in some jurisdictions.
Too many encounters with Excel’s “smart” date parsing would make me very concerned about using it this way.

https://support.microsoft.com/en-gb/office/stop-automaticall...
This Fiat advert from the seventies is remarkably honest:

https://i.pinimg.com/originals/22/8e/70/228e700a28f190746ea9...
Seriously? According to the article, their only "proof" is that four criminals said "oh yeah I do this trust me bro". This qualifies as "investigative journalism" today?
Look inward, my friend. Be strong and self-sufficient.

You do not need cofounders and permission to do what you want.

You are capable of building it yourself. Once you do, others will seek you out should you want to bring them in.
> if solar radiation was a direct cause of cancer you should reliably see consistent skin cancer rates among people with similar complexion and exposure rates.

...which you do.

> My point is simply that the body is complex, cancer generally develops over years, and trying to narrow down a common link strong enough to claim causation is tricky if not impossible.

That sounds like weasel language to try to muddy the waters to me. If it's tricky or impossible to nail down the effect must be small, and probably not worth caring much about.
To clarify, TFA says that the open-source plugin will remain open source and freely available on GitHub and the marketplace.

If that's what we're calling "malicious" these days, then I'm not exactly outraged. Rather, I find it exciting that Rust has grown to the point where a commercial entity wants to commit to a commercial product like this.
I think the author is just vastly over-reaching by claiming the regulations around the crypto backed asset is "robust" vs the other being "haphazard". Financial regulations are largely created in response to situations rather than tabula rasa.

The context is that crypto assets are a scam and people constantly got scammed with them, so NYDFS has stepped in and basically said "You know all those practical considerations we've made surrounding reasonable approaches to holding people's money? You get the benefit of none of them". It's much more economically efficient to allow institutions like Paypal do something a little bit smarter than just sit on the money, but there has to be a consideration of risk vs efficiency. What's happened with NYDFS is crypto companies have been so bad that they've basically lost all privileges that make the operation efficient.

Paypal is not a bank. Customers who use it as a bank risk losing some or all of their money. That's absolutely true. But Paypal is pretty clear that money exists in it's system as part of a way of transfering it, not as the equivalent of sitting in a bank. All the major risks of money being in paypayl is that you get scammed sending the money to the wrong person etc.
This happened to me and my company with a F10 retailer in the US long long ago

The reality is, most times you have no options and that whale is your highest likelihood exit

The reality is, this is what being in a market with what are effectively monopolies looks like. You either bully your way to the top or have to deal with being bullied till you can get out.
I must say: I don't agree with the tone of your comment, but I fully agree with your overall argument.
>any random code from the internet

Like installer.exe?

Installation-free software doesn't have to be web software.
Wouter van Oortmerssen, the author of Sauerbraten recently started his own game studio, VoxRay Games. Check out https://twitter.com/wvo or his talk about scripting/engine languages: https://youtu.be/TOnhqoUxLy0?feature=shared and the slides https://enginearchitecture.realtimerendering.com/downloads/r...