skysight-inc/HackerNews huggingface dataset:
The iPhone transfers card details to Apple Watch automatically, so no, that data is not stored in a non-exportable fashion.

The data-storage capacity of things like a TPM or Apple's secure enclave is absolutely tiny (e.g. the TPM specification[1] only requires ~7KiB) - which makes sense considering it only needs to store a handful of encryption keys and other stored-secrets.

[1]https://trustedcomputinggroup.org/resource/pc-client-platfor...
Can you elaborate on some of the reasons why you regretted the purchases?
It's far more likely that the multi-national has already signed such a contract with the bakery, preventing you from entering the market in the first place.

Even if you were to get there first, when the contract comes up for renewal the multi-national can offer terms that would be unsustainable for a small producer.
There are other affordances though: the fleet can now have a legitimate chance of standardizing on a coherent software platform, reduce the network admins afloat (which cost way more), improve cybersecurity, etc.
Not even that; the CPU they use is from 2004. Socket 478 wasn't introduced until 2001. And they're using a SATA SSD!

Then again ... this is 20 years old. In 2004 20 years ago was 1984, and computers from 1984 were definitely seen as "old computers" in 2004.

On the other hand, a lot more changed from 1984-2004 than from 2004-2023. Windows XP is conceptually the same as Windows 10, macOS, or GNOME today, even though details between implementations differ, and a Pentium 4 is essentially the same as a modern CPU, except slower.

A C64, DOS, or old Unix machine was conceptually quite different to Windows XP, and the capabilities of these machines were radically different from a P4.

"Age" and "old" is not really about years, but more about concepts.

This reminds me, around the same time I got a Sun SPARCstation from the early 90s for free, and I was doing the guy a favour by taking it off his hands. With inflation and EU import tax the price of this machine must have been €15-€20k, easily. And I got it for free with keyboard and (huge!) monitor, and everything. I don't think anyone is giving away 10 year old high-end workstations today; they're perfectly functional (my i5 midrange laptop is 6 years old).
China Deploys ‘Floating Barrier’ to Cut Off Disputed South China Sea Shoal
Firefox and Chrome dev tools make this super easy, but I think people just aren't thinking about it.
While I agree it’s not best practice to enter your password on a random device, turning off find my is pretty standard for Apple repairs. I think one of the reasons why is that Find My enables activation lock which will prevent them from fully restoring the iPhone if they need to for any reason. Also, if they decide to replace it with a new unit then you need activation lock disabled so the old one can still be usable. With it still enabled, the old iPhone would essentially be bricked for life otherwise since it’s linked to your account.

As far as the Apple support app, I think that Apple does have a legitimate app under that name. However, usually find my is disabled under the find my app, not the Apple support app (unless Apple stores use a custom version with it in there or it’s hidden in the regular app where I can’t find it). It’s also possible the support app just redirected you to the find my app. Either way, if you don’t trust the app, you could just go to a web browser at home and disable it via the web app for find my so they can proceed with the repair. I don’t know if third party repair shops will also make you disable find my, but I know Apple usually asks you to disable find my first
I disagree with you but more importantly, so what if you're right. Are you going to design a proper brain for these jellyfish, or advise them to evolve one? What you say is just so totally non-actionable and uninformative as to be entirely useless.
anyone who has ever had a pet goldfish knows that they're more aware than people give them credit for. they recognise their food containers and get visibly excited when it's feeding time.
I get why you’re being careful, but following on from your logic there… there’s nothing from them also adding in some root kit.

Depending on your level of carefulness… I would consider your phone not secure if it’s confiscated and you’re not in the same room as it.
Howmany pixels are each cube? Bitmap usually assumes one pixel each cube, can't find that info anywhere on the site
I don’t reconsider outlandish theories because of misinformation campaigns I do my own research. My research and learnings have showed that the temperature and pressure increase quite dramatically as you dig deeper and a few miles in it’s too hot for even metal to stay solid. So yeah I can personally confidentially disregard the hypothesis that there’s places where complex beings can exist deep inside earth unbeknownst to us. We are not in kindergarten giving gold stars for effort. Especially poor ones at that.
No idea. Matt Pocock has a much better cheat sheet for tsconfig configurations and his is set as es2022.

https://twitter.com/mattpocockuk/status/1701619240686485799
FYI, if you do this option they’ll likely still ask you to disable find my iirc
AFAIK, it'd only open a PR if the flag is fully enabled and has some heuristics to determine when it's safe to remove. Honestly, I haven't tested it but I'm curious to know if someone had either good or bad experiences.

If all the PRs are instantly rejected, that would be a bad sign, but I couldn't find someone who effectively used it. I mean, it's been around for a while but it didn't spread out, so that already gives me some hint
I suspect it will work better, but you have to convince all the other collaborators to also switch, as well as lose tooling in say, Xcode.
Most people here are referring to transfers of their own data.
How do people transfer their confidential information to say, their solicitors, who may be on different operating systems and behind NAT / firewalls?

Specifically if cloud services are banned by the solicitor's company.

You'd have thought by 2023 this would have been solved but I don't believe it has. Particularly as PGP email administration (including key management over time / replacement hardware) is non trivial and unlikely to be successfully achieved by the non tech savvy.
SPF is broken in many more ways than described in this presentation. I work as an email hardening / deliverability support engineer and our advice is always to focus on DKIM + DMARC, rather than SPF. You still need SPF for legacy reasons, but it should never be relied on for deliverability or anti-impersonation.

Slide 54 says that DKIM + DMARC does not help against this attack, but that is not completely true.

If (and only if) you have set up DKIM for all your delegated senders, then (and only then) can you safely enable a DMARC p=reject policy. Once you have reached that level, you can start opting out of SPF for third party senders, by using the '?' (neutral) modifier in SPF.

So this:

v=spf1 include:relay.mailchannels.net ~all

Becomes this:

v=spf1 ?include:relay.mailchannels.net ~all

This gives emails from MailChannels a neutral SPF stance with DMARC capable receivers, causing them to use DKIM instead. Old legacy email services should still accept neutral results as well.

Granted, it is not a perfect solution, but email will never be 100% reliable, or secure anyway.
There are thousands of HN users now who have read your comment and not one of them knows what you're saas is, how to find it, or even what it's called, but we know you think marketing is hard...
> MS have a current commercial OS that will run on 30 year old hardware!

i586 support was dropped by major linux distros some time ago, i somewhat doubt that w10 will run on something pre-pentium and w11 won't even install on my ~5y old dell laptop
As late as June 2022, on Firefox on iPhone, one could go to www.reddt.com (not old) and in settings, right under Dark mode there was "Ask to Open In App" checkbox that one could uncheck. And it would actually stop!

It's gone now.
You decided to hinge on the last bit, which was actually a small additive statement and not the whole point of my assertion. Reading back, I understand that I worded that last sentence extremely incorrectly in haste to finish up typing a long monologue.

I'm not painting all Canadian Sikhs as gangsters and mafiosos. What I said was that, compared to other places such as Australia and the UK, Canada has a lower barrier to entry for someone claiming to be a refugee. A Khalistani Sikh cannot obtain refugee status in either Australia or the UK, simply because the bar for claiming refugee status is much higher, and it's very difficult to show "oppression" in a country where the former Prime Minister was a Sikh. In Canada, the barrier is much lower and the existing Sikh community was connected enough, so you have all sorts of people passing through, including many of the gang leaders and members involved in the drug mafia. They find safe refuge in Canada, simply because they find a lower barrier to entry compared to the US or the other commonwealth countries.

This situation is effectively the exact same one as Pakistan harboring Osama bin Laden, then USA killing him on Pakistani soil, in spite of the two of them being "allies". Replace Pakistan and USA with Canada and India respectively.
‘Capitalism is dead. Now we have something much worse’
Simulate the same experience by getting in you time machine and traveling back to 1972.
Bright Spots on Ceres
> Paxos has all of those things

Do you realize if that were true then the guy would have never been awarded a PhD for the work?
am i misssing something....but what can someone do with this that they cant do on chat gpt.
If you compare with such a low bar...Not all MBAs are the same of course, but around 90% of MBA people out there, seem just as corporate ladder climbers, seeking validation for management roles...
> Are we talking about a "slushbox" automatic without a locking torque converter, or an all gear manual transmission - there is a big difference.

Correct. IIRC again (numbers from 2010ish, probably there were some improvements since but I bet physics limit those) the best stick were 15%-20%; slushboxes were 25%-30%.

Such loss is justified by making the car able to operate on a much wider range, from standstill to highway speeds, and solve the ~zero torque at <1000rpm problem. IOW without a gearbox the car is useless.

Without that requirement a simple reduction would be much more efficient.

One of the huge benefits of going electric is that - in addition of having stellar electric to mechanical energy conversion efficiency (90-95%, vs a very lousy number I can't recall for chemical to mechanic energy) - the engine can basically be put on direct drive because torque is immediately available starting at 0rpm and all the way to max rpm, so no additional loss.

> I didn't specify what type of gear box because there are many different options. Belts of the front pulleys would work. You could rig up a chain drive system as well. there are pros and cons to each.

Totally fair! I didn't want to sound dismissing, only complementary.
Yes, on every function call, also some internal functions implemented in native code are instrumented with those checks. On average thread is switched out after about 2000 "reductions" as they are called. Also there's an optimization, where if you send something to another thread and you are waiting for reply, VM switches instantly to the other thread, which makes some message sending equivalent to a simple function call.
… says a hotbed of misinformation.
AskExcel eliminates the need to learn formulas
You don't need to know Excel formulas to handle complex tasks such as information extraction and insights, chart generation and data processing.
mpv+ytdlp my friend
Vendor != some repair guy in vendor's shop.
Everything about the new beast H100
> This court case is from a long time ago, but look at the market since the Ryzen inception, the last five years, and you'll find it hard to purchase worthwhile AMD stuff outside of some niches (desktop CPUs, low quality plastic gaming laptops with TN screens, or super low quality budget laptops with sub-Ryzen apus).

cough Acer Swift X
True, this advice made sense back in 1972 just as it makes sense today. Means it's probably pretty good advice when it survives for so long ;)
A big issue is that it doesn’t currently replace the old webtech, but instead just adds to it. You can’t use WASM in the browser without also using JS, which is unfortunate.
Man i just want to be able to use js instead of excels crappy meta dsl
Reader Mode with a lot of extra features
I hope you're being facetious.

Deprecating any tags in the post HTML5 world requires WHATWG approval and noscript is more of a fallback mechanism than a "security" feature or means to convey an opinion. There's no good reason to get rid of it.
I had similar problems maybe 15 years ago, so I don't remember exactly how I solved it. In my case it was a NIC driver that filled up some queue when I downloaded "Linux ISOs" too fast over bittorrent.

There are tools available to find the source of the problems, I think I used event tracing as a starting point.

https://learn.microsoft.com/en-us/windows-hardware/drivers/d...
> it is not significantly less

Maybe the productivity lens isn’t the right one to use.

Companies don’t provide benefits like health insurance and weeks of paid vacation because it makes employees more productive. They do it to retain talent.
You are confusing two different people:

> killjoywashere 46 minutes ago | undown | root | parent | next [–]

> I'm on an ship doing oceanographic survey work in the arctic.

and

> TrackerFF 2 hours ago | prev | next [–]

> Recently I was on a cruise ship, and out in the waters only my carriers “maritime” plan was available
> Since when is making fun of sexual dimorphism a thing?

Since at least the days of the Roman Empire!

> I thought we stopped doing that.

Hollywood would love you to think so, but no, human nature is unchanging. This trend is huge exactly because it reminds us that men and women are different, and humans have derived humor from that fact since the dawn of time.
Could you give me references for this theory of meta-tracing in the 1990s? It seems to me that PyPy was the first to, systematically and in a lightweight way, solve the problem of normal JITs optimising the wrong loop, when JITing interpreter loops.
Provable safety (not to confuse with security as in normal discussion of vulnerabilities) for general intelligence is a pipe dream because, putting things simply, undesirable reasoning in full generality is not a meaningful class of computations. The end result of this line of thinking is centralization of AI development in a state-approved and military-associated facility.

> Why would governments promote provably secure systems?

Promote? The state demonstrably wants provably secure systems for themselves, in the military but also in the civilian sphere, see Matrix/Element, see DoD, see massive state interest in cryptography. This is an incredibly disingenuous argument, you talk as if people discuss tuning a generalized Safety Dial without any distinctions down the line.
Or have you considered the more likely possibility that it’s simply their site policy to place ads wherever they can, which is not necessarily the original author’s intention? Most likely the site just wants to make whatever they can from possible places to insert affiliate links regardless of the article, and that’s it. For all we know it might well even be an automated process to some extent.

Having an affiliate link is unfortunate and very much not smart on their end I would say, but automatically drawing the conclusion that the whole article must have the single purpose of serving as a Trojan horse for this one random link that they also know only a small amount of people will click on is another logical fallacy, and IMO resorting to attributing to malice when things can be explained otherwise.
> and noscript is more of a fallback mechanism

That is exactly the good reason to get rid of it, for Google. Why would they want to allow a fallback to script-less web?
Can’t we settle for a middle ground and require they must have remote human control in case of some unforeseen bug or conditions?
So? No business implements every single feature that might occasionally be useful to a miniscule portion of its customer base.
This is really cool! Have you play-tested it with people who aren't familiar with programming at all? I guess this could be a fun activity at a CS student party, but maybe a bit tough to pull out for casual games night..
Unlike Graal/Truffle, PyPy was done by a very small team.
Maybe not related, but if a npm package has conditional exports, what's current best way to patch that package.json ? I want to replace its condition exports with mine.
MS Teams is terrible at this too, I need it to only send me audio and ignore video, because a lot of times I am at sea with poor connection - these are company ships, so it's needed for a lot of folks at work...
The list of 405 programming languages
Reminds me everytime how awesome Torrents are.

I don't always run this one but have multiple backups of the .torrent and the video just in case.
How is that an advance?

Isn't it merely a new spin on something that has been done before plenty of times? Only this time it's done by Google and likely to be abandoned before it finds lasting success.
AOL was right having its own browser for Web.
Why is more and more languages embracing Fibers / Green Threads now? I’m curious
While the article is technically correct it avoids the most common issue with 'pure' typescript libraries in that you still need a bundler if you have multiple .ts files.
Once you enter that territory you realize how much more complex everything becomes.
> A huge amount of people got burned by shitty AMD hardware.

AMD or whatever crap Dell put in to keep AMD the cheapest crappiest option, perhaps contingent on “marketing funds” from Intel?

If you build it yourself you can get a fast stable AMD desktop. Prebuilts tend to be shitty and I wonder why…
There are a few case studies listed in most of the feature flag solutions, of course, each organization is completely different and the maturity of each organization varies. But feature flags are a 2-way-door decision, meaning that you can adopt them at smaller scale, try it out and see if it works for you before making a decision.

Here's a list of case studies from some of the solutions referred in the comments, some focus on operational metrics, others in lead time to changes:
https://www.getunleash.io/case-studies
https://launchdarkly.com/case-studies/
https://www.flagsmith.com/case-studies
It's also very easy to write alloc C++ code, no?
> With that said, I’m sure that’s just an extreme edge case - but still a legit one. If you’re stuck out in nowhere with low and/or prohibitively expensive internet, you want a fast and small alternative.

I don't know. Internet on a cruise ship in the middle of the Ocean is a bit like complaining you don't have good wine on your camels when backpacking through the Sahara.

In any case, it absolutely is an edge case for now so there should be a minimum of preparations before the trip (setting IMAP instead of webmail for instance, if you need heavy bandwidth site content then set a proxy that only keeps the actual content and access that instead of the original source, etc.).

Same with the beach house or the cottage lost in the woods not zoom-compatible. Well...

It's weird to me how when this subject surfaces on HN a lot of people defend they are entitled to the same capabilities when they are in white spots than when they are at home.
Exactly. Once they can lock everyone into a JS only world, they can maintain their position as the only viable web index.
I agree, but have a simpler argument.

Nobody deserves to have their computer compromised - whether they block ads or not is irrelevant. Saying otherwise is victim blaming. It's the same as saying that a woman who walks down the street in attractive clothing deserves to be raped, and society is making some pretty strong statements about that sort of thinking these days.
It makes some things easier, and some things harder, or more complex.

So I can deny that most development becomes easier with GC. At least if you also intend to actually run the thing. Running Java means forever fighting the GC, needing to do runtime and development to reduce impact of inherent GC problems.
No idea if there’s a native way to do this in Zoom since I don’t have that problem, but if you’re concerned about your upload bitrate, you can use OBS to downsample your camera and configure Zoom to use OBS’s virtual camera instead.
Payment cards aren’t transferred to Apple Watch automatically. The enrollment process occurs again and the watch receives its own unique card number.

The iPhone does allow you to initiate the enrollment for your Apple Watch without entering the card number again, you just need to re-enter the CVV.
There is nothing that WASM can do to interfere with adblocking that Javascript can not already do. The reason ads remain blockable is logistics. You want to serve the ads from a different server, if for no other reason than billing.
> its not something to be ashamed of

It's not? I mean I'm certainly ashamed when I behave hypocritically* but I guess I've just watched too many Disney movies where the protagonist overcomes their pretensions and learns humility.

* Isn't the US the great bastion of the free market, rugged capitalism, entrepreneurial spirit etc etc etc? I mean at least that's what I see all the people on here claiming vis-a-vis why SV is better than everyone else.
So, something that is very clearly true is that was need to make the website better :). We aren’t being vague on purpose! Most people who go to our website have gone with an idea of what Ash is already having seen a talk from me or talked to someone about it.
The actual TPM storage may be tiny, but you can use it to encrypt and decrypt arbitrary amounts of data. All the TPM needs to hold is the key.

That you can actively ask it to transfer data to the Watch or Cloud doesn't automatically mean that it is not using the TPM for storing that data at rest, requiring the phone to be unlocked for any such transfer.
The difference between having a bare-bones HTML page, versus a bloated one, could make a significant price difference.

A well designed Single Page App should be downloading a small-as-possible initial bundle with the page HTML and CSS, and then only downloading the data necessary for any given page. In theory that results in less bandwidth used if you're looking at a reasonably large number of pages compared to downloading a server rendered HTML page for each page because you only download the HTML once in the SPA version compared to every page you load with the SSR version. This is literally the reason why SPAs became popular in the first place.

In badly built apps this isn't the case - the data is bloated, the bundle isn't optimized, etc. I imagine in the case of Gmail this is the case though - you probably only need to read a couple of dozen moderately large emails before the JS version starts to win out. This is something you'd need to test rather than making an assumption though.

That said, a native app will win over both because it's already on your device so the bandwidth used is only the email data.
Remove Instagram Reels. Reversing Engineering Instagram APK
pushback against the stackless coroutine model mostly (i.e. async/await).

But people have been playing with stackful coroutines in C++ for decades.