skysight-inc/HackerNews huggingface dataset:
The cameras - i.e. FaceID - on the iPhone are unlocking the iPhone prematurely (to early).

Why?

Because they unlock the device in advance before you request it by action. Watch the small lock. It unlocks before you swipe up.

Example?

You ask a stranger to take a photo of your group. I think a normal situation. Not an issue with an iPhone SE (1st Gen - 3rd Gen). Just open the camera app from the lock screen and pass it, the photographer just needs to know “red button” and cannot access anything. Same with FaceID? You’re likely in trouble because you probably didn’t covered the front camera while passing the smartphone - it is completely unlocked because FaceID unlocks the device as soon as it recognizes the you. Apple has broken a security promise which we all know and expect. And usually the screen turns on when the phone is picked up (FaceID starts searching) and even if not - by habit many will touch the side-button and launch the camera app from the lock—screen.

Workaround?

Turn FaceID off. Or always remember not to look at the device and cover cameras with your fingers (FaceID can be quick). Guess what? Only the first one works for me.

Previously?

Stealing an iPhone handed over for photography was useless. Investigating private data was not possible.

Please note that an unlocked iPhone allows access to all data. And resetting your passwords via E-Mail. I don’t know if the E-Mail is enough to reset the Apple ID.

I’m afraid FaceID was considered too slow by Apple and they decided to make it “feel faster” by scanning for the owner already before the owner swipes up to unlock. It could be secure - only unlock if the user actually requests it by swiping up. The tiny “lock icon” also part of the problem. Within iOS itself a use of FaceID is much more obvious, users note when it is happening.

PS: GNOME and seahorse are nice - when you login in with password it is automatically unlocked. It handles changes of the password also through the shell well, it recognizes the mismatch and ask only once for the old password. Maybe the reason why I didn’t feel the need for “password managers”.
Location: Lahore, Pakistan

Remote: Yes

Willing to relocate: Yes, but require sponsorship

Technologies: FullStack | Ruby on Rails |
Javascript/Typescript | React JS | PHP Laravel

Resume/CV: https://drive.google.com/file/d/19nhb5ZvdrZb_0y5eNQ1zBPxk6o0...

Email: afzalali2728@gmail.com
From "curl: add --ca-native and --proxy-ca-native" https://github.com/curl/curl/pull/11049#issuecomment-1528118... :

> It looks like according to their CHANGES for OpenSSL 3.1 they've added SSL_CERT_URI and for OpenSSL 3.2 they've added SSL_CERT_PATH and are going to deprecate SSL_CERT_DIR (which could do both but had some parsing problem, still I don't get why they would deprecate it for paths). [...]

> curl reads SSL_CERT_DIR (note it's ignored for [Schannel,]) and sets that as the path. I don't know if OpenSSL is now reading the environment itself but the URI is org.openssl.winstore:// not capieng. If you have a master build then try SSL_CERT_URI=org.openssl.winstore:// curl ... and if that doesn't work try curl --capath "org.openssl.winstore://" ...
Well, if Optane wasn't dead, it would not be stalling. If SSD speeds would be improving, so would Optane speeds.
Why Windows Is So Much Better in the EU [video]
Being an entitled dickhead, endangering the public and flaunting basic rules of decent society - pretty much in the 'don't do it' column. Worth it? If your ethics are worthless an argument could be made. But there's no conversion between character and cash; it's a null set.
Indeed, from a couple of friends who moved to Finnish Lapland, I know the frozen north is a great place for exercise in the winter because of all the skiing and fatbike opportunities, with a network of free shelters stocked with firewood so that one can do overnight trips. But now that I recall that most of Norway’s population is on the coast where temperatures stay more moderate, I wonder how many of them have access to good skiing conditions right outside their door.
I think the rest of the developed world would cheer on if the US just copied any of the dozens of other models for universal healthcare that produce better outcomes cheaper than the current US system.

What we find shocking is that the US appears uniquely unable to fix these things among developed countries despite the vast wealth and resources. There's a level of political dysfunction that is really hard to watch, but also incredibly hard to ignore.

EDIT: To give one example that I personally find shocking: That Medicare has restrictions on the extent of its ability to negotiate drug prices. I get your point that this is in part due to entrenched interests as seen with the attacks on the recent attempt to fix this issue by using powers under the Inflation Reduction Act, but that even chipping away on things like that is proving as hard as it is, is bizarre seen from the outside and the new ability to negotiate prices is still ridiculously limited.
I love SF but it's as bad as PDX these days. Both cities are falling apart in weird ways. You'll be in a restaurant and a deranged homeless fentanyl addict will walk in and start screaming at a waiter for food. Most of the customers pretend like it's not happening and some act like they're proud of it or snicker. The staff has to bribe junkies with food to get them to leave. Weirdos snatch stuff off of shelves in the grocery stores. The alarms go off and no one does anything. People in self checkout look scared. It's surreal.
> Broadcast radio has fewer deadzones than cell service

I guess this depends a lot on where you live, but my experience has been the opposite. E.g., I get cell coverage inside buildings, basements and tunnels where FM turns to static, and there are more cell repeaters in mountains where the FM gets radio shadow
The way I understood both makes it seem the goals are different, as PragVer is more marketing oriented. The ANNOUNCE is also a bit different than MINOR because it can also include breaking changes, as opposed to just feature additions
I have never benchmarked Java vs other languages, but from experience java applications always have horrible startup time. So, there might be some contexts in which long running Java application can beat Rust or other language, but if you need something that starts instantly (like CLI utilities) Java is a no-go.

Another wart is that there are some written and non-written standards on CLI arguments (e.g. long option names should start with double hyphens) that 99% of Java CLI apps violate for some reason. Maybe I'm a perfectionist but it makes me uncomfortable to use Java CLI apps.
Literally unoptaneium?
They both engage in the same shenanigans to confuse consumers and move $LATEST_PRODUCT off the shelves.
A friend is constantly bugging me about moving to SF. I understand it is tech central but the PR of the city is just really not great currently.
US Postal Service to Release Dungeons and Dragons Stamps
Can't we replace DVD sales withs streaming revenue?
Typical over engineering that would worry about stealing the encrypted hard disk when discussing about a fingerprint scanner that would only really take a couple minutes to fool for the determined attacker...

When did we forget that biometrics were supposed to be a convenience and not a replacement for true authentication against any real adversary? As the entire concept of using irreplaceable parts of yourself as key is broken since the start...

Who is the adversary here? The point of all this is to at best protect against untrained thief, but with biometrics, never against anything more...
You would have to find a junior or more experience eng and check his earnings online.

As to earnings by industry, you can check them on the statistics bureau website:
https://www.ssb.no/arbeid-og-lonn/lonn-og-arbeidskraftkostna...
One don’t have to be invested in the exact building office workers pushed to. Just in the same city - lower vacancy rate (across the city) keeps office buildings valuation afloat.
I am a huge fan of Carlo Rovelli, and read all his books to date, so I am siding with him on this one.
Perhaps it’s the death of variety (in general, yes there are some individually excellent films every year or two).

Have a look at your 2023 disaster list.. superheroes and remakes.

I’m bored with the same old movies, characters, plots… have been for at least a decade.
Rossmann had some rant recently about NYC, talking about how the loans developers get when building out buildings tend to demand a certain minimum rent (or, if you don't meet that, you gotta basically show up with more capital). This leads to the whole "empty spaces but rent not dropping much" thing.

I get there are costs with having people in the building but at one point it would be nice for society to just be like "let's not leave stuff entirely empty"
> They always seem a bit in disbelief at how safe, comfortable, easy and secure life is in reality

The US is by no means unique in this regard. Outside of active conflict zones and failed/failing states, most countries in the world can provide comfort and at least the illusion of safety to those with resources and means.
I agree. Combined with a few good habits like favouring select_related() - it's never been a problem.
> To be clear, not all users are affected. Our test Windows 10 PC was far too busy suggesting that we should take a look at Copilot to bother with the HP Smart app nonsense.

The author seems to agree.
> not countries like the US

It can't seriously be argued that the US are not a rich country? In GDP, the US are in fact in the same class as Norway. And for Norway part of that goes to the fund, while the US government runs a deficit.

As for Norway specifically, their sovereign wealth fund is there specifically so that the country does NOT use this wealth quickly (or much at all for now).

At any rate, no, the US could absolutely do much better.
> no good reason to concentrate workers that much

It doesn't and then it dominates.

"Metropolitan areas with a human capital stock one standard deviation below the mean realize no productivity gain, while doubling density in metropolitan areas with a human capital stock one standard deviation above the mean yields productivity benefits that are about twice the average. These patterns are particularly pronounced in industries where the exchange of information and sharing of ideas are important parts of the production process" [1].

[1] https://citeseerx.ist.psu.edu/document?repid=rep1&type=pdf&d...
Having looked at the job market, there are less job postings currently than in previous years.

While overall there will still be more jobs than qualified people to fill them. Let's not pretend like the employee market is full of people who've just been laid off from very reputable companies.
https://archive.is/FkP0E
On a related note, I have a blast playing old school magic 93/94 with my son. Of course using physical cards. We travel to Madrid each year to participate in the world championship of 7pts Singleton. This summer my son placed #9 which I am very proud of. 7pts Singleton is such a wonderful way to play the game with diverse affordable deck-building and balanced gameplay ( https://7pts-singleton.com )
To clarify, do you mean that they just shove the fiber down an underground electrical conduit hard enough for it to make it to your house?
That's exactly what it is. That coupled with high rent. You can pay an arm and a leg just subletting a single room in the Sunset district.
but that's a bit of a stretch isn't it? Like why go through all of these hoops instead of changing up your portfolio. It's not like the CEO of UberForDogs doesn't have other things to do than plot this out.

Every executive I've seen pushing for RTO, it seems prima facie explainable by "executive is lonely and wants to see people". Legit, and I get it! And all the other WFH debates are there, but especially if you've been an exec for a long time and really don't do anything apart from talk to people all day.... RTO sounds nice compared to the alternative
Show HN: Figma to Lottie Animation via Lottielab
Hello HN!

We're super proud to announce the launch of Lottielab's official Figma plugin. The plugin allows nearly 1:1 import of your Figma designs into Lottielab, an easy to use animation tool (still in beta---we launched 3 months ago!).

From there, you can use Lottielab's animation powers to animate your designs intuitively and quickly. Then, you can export the animation as a Lottie JSON, or as an animated GIF or MP4.

This plugin is the culmination of 3 months of hard work, and we hope you'll like it! Me and a few members of the team will be here to answer all of your questions.
Interesting. I'd like to see a full app's code to find where the skeletons are hidden.

I don't mind the opinionated take on JS, each to their own
That's interesting, if anything I would have expected the opposite. With how tight Apple restrictions and DRM are (e.g. there's DRM on the screen and the phone will not work if you put in a non-approved one), what exactly is the market for stolen iPhones? Paperweights? Or the small non-DRM-able parts like... the case? maybe battery? buttons?
https://www.xda-developers.com/windows-update-bug-renaming-p...

Seems like some buggy software/pattern matching identifies all (many?) printers as a particular HP model, and Windows Update "conveniently" installs the HP driver and crapware for it...
The suits probably want the social control that comes with physical presence. Like they want cogs that don't see themself as cogs. If all you have to do change employer is to login to a different Teams account in the morning they lose alot of their power.

I.e. they want you to leave a notice in person which might end in you being humiliated by some "security" parade to the door. A higher threshold to quit.

The biggest difference I noticed with WFH is that "soft intimidation" and nagging more or less is ineffective without physical presence.
San Francisco Is Building to Bring Residents Back
A chess TUI implementation
I love everything about this! Its amazing seeing fun in an otherwise soulless corporate-esque government.
This is actually even closer than you realise, in that "add oil" can also mean hitting the accelerator in a car
Moody's Cuts China Credit Outlook to Negative on Rising Debt
Hey, tone it down a little. I'm indigenous European, you might be talking about my great great great great great great grandparents here.

/s
>What are typical bracket for software engineer as junior, 3 years, and 5 years of experience?

For Oslo the salary range is something like this, a bit lower in smaller cities. These are the "typical" brackets, but you can definitively get a lot more:

- 0 YOE - €45k-€60k

- 3 YOE - €55k-€90k

- 5 YOE - €70k-€150k and up

A "median" salary in Oslo for a developer with 3-8 YOE is around €70k-80k. Anyone who has 5 YOE and actually asks for a higher salary can easily get 1 million NOK or €90k++.

Expect a 32%-38% tax rate on your income.

If you earn 1 million NOK (€85k) you will pay €27k in tax.

Here is the tax calculator from the official tax office: https://skattekalkulator.app.skatteetaten.no/

EDIT: Here is an article in Norwegian about software developer salaries. It shows about the same numbers as mine, just a lower ceiling.

https://witted.com/blog/software-freelancing/lonnsniva-for-u...
Parts for sure.
It's certainly remarkable that countries exist with cheap affordable health care for all, unemployment safety nets, disability support, and no fear of school shootings at all.
It looks the same as a jacket hook too.
My phrasing was perhaps too strong. I learned this from here https://dynomight.net/air/
This is a great read.
Here is a previous HN discussion on this:
https://news.ycombinator.com/item?id=26964722
There are some disagreements but I find the argument that air quality is greatly underappreciated as a health risk convincing. And that candles cause bad air quality.

The article talks a lot about healthspan which I think is a great measure and idea. Your referenced article talks about at-risk people and that they should avoid candles. It also states that candles should be burned in well ventilated spaces, which I believe most people don't do as they don't consider it.

A healthy persons healthspan is negatively affected by candles and such. They just have more health to spare.

The article talks about cooking as well and they are likely talking about cooking with gas which is very unhealthy. It should be illegal to sell indoor gas stoves for cooking in my opinion.
We have wooden houses here in Norway that are considerably more than a hundred years old and wooden churches from Viking times nine hundred years ago. My house is timber frame, built in 1952, and there is no reason why it should not last until the end of this century. But many US timber frame houses are built on the assumption that they will be demolished after only forty or fifty years and built accordingly.
Anywhere from 500-600k NOK with a fresh bachelor's degree to well over a million NOK with experience.

The best paying jobs are usually provision-based consultant/contractor positions. Some companies go hard in that direction, others lean more towards job security and stuff like that. You get paid less, but you get paid the same amount regardless of whether you have work to do. They spend more money on social things like company trips and other events etc. Then there's various benefits like pension, insurance, they might pay for internet and gym memberships, lots of stuff like that.

You pretty much just have to see what they offer.
what if it was a crappy 12 character password like 123456789012 and got bruteforced in 2 tries?

also, at one point it was popular to use l33t speak for passwords so there are many crappy 12+ char l33t passwords floating around that are trivial to guess, no brute forcing required.
It will be interesting to see how it plays out. I can imagine Wiley, McGraw Hill, Pearson and other publishers[0] of educational content OpenAI used could sell the rights to their material to be used for training GPT, but the price would be high enough we would be paying $100/month instead of $20.

[0] Heck, they could even unite and found an LLM startup themselves training the models legally and making it available for users at various tiers.
Orange Pi AIPro SBC Features a 20 Tops Huawei Ascend AI SoC
If Ghidra is made by NSA, does it mean that it can have backdoors for non-US users?
Bc us society is relying on dependency: ppl will depend on cars to move/buy groceries, ppl will depend on jobs bc they neeed health insurance, ppl will depend on office working bc they should depend on cars and businesses will depend on office bc govt will get money.
A Pluto.jl notebook is also a regular file. You need to use a package for precompilation caching though.
Properly built concrete will protect you much better. But that is assuming that it is built in accordance with the regulations regarding earthquake resistance.
Hi there! I work on Strawberry GraphQL, would be interested in sending me a list of the things that we can do better? You can send me a dm on discord or open an issue on discord, I plan to spend more time on Strawberry next year, so hopefully I can make it good for you!
Similarly, but I think slightly better, in France anyone can run fibre to connect to homes, and they can have exclusivity over it for some time, but afterwards are forced to share it with competitors on fixed prices. Why I think it's better is that due to the limited exclusivity, and the fact that most people won't switch providers if prices are similar, you know you'll probably keep a decent chunk of the people who sign up during the exclusive period. Therefore you're incentivised to put in new fibre connecting more people.
Are you forgetting the enormous amount of carbon emissions from commuting?
Unencrypted unauthenticated UDP.
Tell me more, /u/ChatGPT!
Do you hire only in the US and Canada?
There is a M2 version you can download, should be one of the menu elements.

It does require GPT-4 API access, right now if you have just 3.5 access there will be an error.

We have adding open source models long term in our roadmap
> So you are saying "You can't do it, even though it's trivially obvious that you can."

They're referring to the halting problem. If you believe you can solve it, you will win money[0].

[0] https://www.claymath.org/millennium/p-vs-np
I dunno. I use gerrit frequently and nothing in this article surprised me. Aside from "ML-powered woo woo" I've seen and used everything bragged about in this article.

Gerrit is awesome. I will never, ever go back to github.
i mean... just go by legal age
SEEKING WORK - (WORLDWIDE availability) - Remote
Technologies: iOS (Swift), Python (Django), Stripe

Super-short bio: 13+ years of professional software engineering experience

Email: mmavris{at}paleblueapps.com.

Looking forward to hearing from you!
I run it via Termux and proot-distro:
https://discourse.julialang.org/t/how-to-set-up-julia-on-and...
Forced infinite loops are still a draw, but setting up a complex-enough board state where the infinite-ness or forced-ness of a particular loop is hard for the judge to decide on will just result in a game loss.

Put another way: you can try to set up a game state in a competitive match where the judge has to solve the Collatz conjecture, but because that would take way too long and clearly be contrary to good sportsmanship, you'd never reach that point.
I’ve been fortunate enough to travel all over the world and hands down the most dangerous feeling city I’ve been in is SF. I have no idea why people want to visit there, let alone live there.

In fact the only cities I’ve been to where I felt like I needed to really have my guard up and head on a swivel were US cities. Not that I don’t keep my awareness up in other places but something about the US sets off my spidey senses. NY felt fine but SF, Miami, Buffalo all felt iffy.

*clarification: I’m not saying that SF is the most dangerous city in the world, but of the cities I have been to around the world, it has felt the least safe.
So is this a trailer for a new TV show? I don't see anything that says anything about the game.
It always amazes me how you can take numbers and twist them they way they fit you and be technically correct. I bet many (if not most) people will only remember the headline.
They lost at the box office, but reviews for The Marvels suggest it's the better movie (although not by much). That's even taking into account the fact that horror tends to get worse reviews as a genre. There are a lot of reasons why The Marvels might have performed so much worse in ticket sales (I'm guessing superhero fatigue, and the character(s) not being very popular to begin with had a lot to do with it), but Disney's MCU can recover as long as they're willing to put more effort into giving people a story worth watching. The NYT's review was titled: "You’ve Seen This Movie 32 Times Before"
Fascinating. Maybe a similar mental model applies as in Switzerland. I am a foreigner living in wealthy Switzerland. They also talk about themselves as being very poor a few decades ago. Maybe it is that people really were poor back then, just not as poor as the other europeans, and this for them is hard to imagine.

According to the statistics that I can find, they have been one of the wealthiest european nations for 250 years now, with GDP per capita being 50% higher than the Netherlands consistently for the past 70 years.
Another argument PRO big-tech regulation considering Microsoft is willing to have two variants of Windows in parallel, the "user respecting" one in the EU, and the "fuck our users" everywhere else.
But you do: if the first line is `users[15].name.family_name = "Foo"`, all you need to know is there: there is an array of users, each is a map containing a field called name, which is a map with a field called family_name.

If users[14] is a string, or there are 1500 users, the amount of memory usage to ungrok that line is exactly the same. Prove me wrong, I can't think of any way it would not be trivial, provided one uses the correct datastructures.