skysight-inc/HackerNews huggingface dataset:
Agreed with the sibling comment. To quote Apple, this feature can "detect sophisticated threats against iMessage servers". Essentially it's to protect against state-sponsored attacks MITMing you. Doing that also probably requires the attackers also have access to some root CA private keys so it's a very small pool.
Nothing! And I do use a lot of them personally. I pay for several creators on Patreon and subscribe to a few creator-owned website publications to encourage work I care about most...

These are not mutually exclusive things, sorry if I implied that.

My point was more about the race to the bottom with commercial content sites/networks/publications in what seems like a borderless space, with increasingly bad incentives to draw in users.
No argument from me but regarding workarounds for (1), accessing ProcessInfo.processInfo.hostName has been a reliable pop-up trigger for me for a long time. Eskimo also offers some (esoteric) suggestions for how to notice if your network operation has been denied due to lack of permission: https://developer.apple.com/forums/thread/663852
> He will remain at a secure hospital for life unless doctors deem him no longer a danger, Southwark crown court heard on Thursday.

For life, haha. Probably a few months at most.

> Many young people wish to explore how technology works and what vulnerabilities exist. This can include learning to code, interacting with like-minded individuals online and experimenting with tools.

Learning to code and experimenting is wayyyy beyond what topic OP is doing.

Personally I don't really care. Rockstar has a grip on it. I'm proud of this fellow for finding and exploiting holes. Yes, he should have gone through proper channels. But he is also just a kid and likely don't understand responsible disclosure.

The target person in this article should be educated and administered. They clearly have a lot of potential. Limiting them is not the way to go.
> How so many HN readers can justify flagrant misuse of private API's and servers as some sort of liberatory move

So that I better understand your position, would you feel differently if Beeper Mini was just a GitHub repo hosting the code to an unofficial 3rd party iMessage client? Why or why not?

HN as a community is made up of quite a few people who care about interoperability, the right to use our computers as we see fit, the joy of building solutions to solve problems that other people won’t solve, etc.

What is surprising to me is the growing number of comments that are defending Apple and framing the creation of an unofficial 3rd party client using terms like “flagrant misuse”.

Don’t get me wrong. I didn’t expect Apple not to fight this, but I think we need to walk back the hyperbole a bit and consider how utterly normal it is for developers to try to build their own clients when the official options either suck or are too restrictive.

I do think that trying to charge for the service was a questionable decision.
Your premise seems to be that they want Apple to sue them?

That point is moot now.
Not a single mention of "Not interested" or blocking the page. This wouldn't be anywhere near the actual usage of the app.
Review: Van Leeuwen Dill Pickle Ice Cream
Text as simple ASCII

Images, videos and others, attach a text file with the format description, syntax and structure, who knows if in 200 years people still use jpg or mpeg or how to read/decode them.

I have some very old games with binary formats without any additional information, reversing them takes a lot of time, so, other than the physical medium, remember that what we take for granted today, might not be tomorrow.
That's just how bad FSD is. It can't even cope with that.
OpenID Connect and all its extensions are so high in complexity and scope. The documents themselves are massive and written in a quite hard to understand form. I've implemented many protocols and RFCs so I feel I have some experience.

Because OpenID Connect and OAuth2 are so closely related, I worry that some of this overengineering is making it's way back into new OAuth2 extensions.

I'm worried both will eventually collapse under their own weight, creating a market for a new, simpler incumbent and setting us back another 10 years as all this has to get reinvented again.

My outside impression is that the OIDC folks are highly productive with really strong domain knowledge and experience, but they're not strong communicators or shepherds with a strong enough vision.

The sad thing is that this is the second thing with the OpenID name that's going down this path. The original OpenID concept was great but also collapsed due to their over-engineering.
Whatever efficiency you gain in the winter will largely be offset during the Summer.
It‘s an emulator for the 80s and 90s popular home computer Amiga running on Windows. https://en.wikipedia.org/wiki/UAE_(emulator)
I didn't really believe the Apple fanboy effect was real before, but I'm honestly just blown away by this thread.

If they were up against any other company, I'm absolutely certain this thread would be rooting for Beeper hard, with all the usual arguments about interoperability, open source, the right to control your own devices and own your data.

Only for Apple, suddenly all of that falls out of the window and the most blatant anticompetitive behaviour is ok because of "security".
No, Nvidia was not lucky. They are a strong engineering culture who also has deep marketing expertise in 3D in all its facets for decades .

Nvidia wisely recognized that only so much horsepower could be used by a conventional 3d graphics pipeline with a given screen resolution, and they needed to invest in growing future compute-heavy adjacent markets.

They invested in generalizing their GPU into a more flexible vector coprocessor for HPC and then adjacent markets. They convinced fundamental engineers and researchers in this area to come work for them.

There was deep fundamental work done by Ian Buck in 2004 on leveraging GPUs as general vector processors ( https://graphics.stanford.edu/papers/brookgpu/ ) and that leadership and deep thinking went to Nvidia, not to Intel. Intel did not have the passion from the top to care about this. They couldn't even care enough to field competitive 3D chips (and associated software), much less extend their thinking to generalize beyond it skillfully. Nvidia did.

Anyone who spent every day thinking about how to grow the vector coprocessor market would have pursued crypto and AI when they came along but Nvidia's strong engineering and profits from a leading 3D position gave them competitive advantages which they are, for now, reaping.
What's the actual vulnerability? Steps to reproduce?
> Aside: I really hate how the nullprogram site linked seems allergic to type-safety.

Could you give us an example, I'm not sure what you refering to.
was reading through open llama, looks like
way to get pertinent results is via different ranking algorithm and score based on convergence. then shove that back into the LLM
Of course, then you're complicit in funding the genocide of Palestinians. But might be worth it.
Me too. I've been trying to find the piece of art with the earth's kingdoms of life surrounding a macro scale - it used to be my wallpaper but I lost track of it. I'd put some of those artists' works on my wall.
Actually I don’t care about these kind of “benchmark” . I just ask waymo to start running commercial trucks with goods only on closed roads first that should make it profit of it really works.
"AI in the cloud" with user data requires users to give up any pretense of privacy so it's amazing to me that people are ok with this?

If you build "AI" into an OS, and that "AI" is on the cloud that means you are requiring your users to upload their data in plaintext.
Yup. If you reverse the situation it gets even harder to define. Ie to say you're not allowed to automate your avoidance of ads seems to bundle your consumption of content with your attention to ads.

How much attention are we required to give these ads? How much annoyance in bypassing them is required? Are we only allowed to walk away from the TV to avoid ads? etc
Dealing with customers and managers.
I agree with you; but that is a low bar for qualifying Acela as a decent system.
Ehh sure, that's a take.

There's still plenty (too many?) commercial websites - most that include their own YouTube channel - trying to compete for eyeballs by repackaging the same preview/review/press materials that companies send out..

They're no longer the only game in town though, that's for sure. I don't disagree that many hobbyists (definition up for debate) can compete on merit for the audience, which is awesome of course.
> heating supply doesn't match demand well

Yes. However you still must run chillers that would dissipate heat into the environment with or without heat re-use.

I was talking to one of DC technicians about this and mentioned - hey, if a chiller ever breaks down (they are redundant), one can (even in summer), put radiators to max to help dissipate heat from DC rooms. He said yes. I asked whether this is some actionable item on some risk plans or whatever - nop, that is not something that we depend on. And it would just extend the time to do something but not prevent from overheating.
What he did was illegal. Not just non-neurotypical.

You saying something isn't illegal. You're not going to be put in prison (or a hospital) for life for saying something.

I see in your other post that you think hacking businesses may be completely justified. That's fine; you can think that. But you understand that there are laws against it, right? And you can expect the laws to be enforced, whether or not you personally think the laws are justified (or even right)?

You may think in terms of civil disobedience. That's your choice if you want to go that way. But that's your deliberate choice, not just some random thing you do ruining your life.
Sure, but you should only be using space heaters and not heat pumps (or non-electric sources of heat) if you're using them infrequently, at which point the cost of silicon over resistive wire is not worth it.
Things like newspapers and comic books and whatnot have had ads for over a hundred years. These types of things partly being sponsored by ads is hardly a new concept.

Ads are not going away.

I would argue that the internet has gone rather overboard with it, but that's a different thing.
Removing the pedaling removes the motivation for the huge front wheel -- the wheel was big simply to get more forward movement without gears.
Just because two medications contain the same active ingredient doesn't mean they'll have the same results. A lot of work gets put into speed and location of of release.
Real-Time Change Data Capture from Postgres 16 Read Replicas
If we could trust adtech to be honest we wouldn't have to vigorously block them. You and I both know X-Block-Ads would be nothing more than an extra wrinkle for your browser fingerprint.
Mitre ATT&CK: knowledge base of adversary tactics and techniques
Hi, ar5iv creator here.

You can think of both arxiv-vanity and ar5iv as the "alpha" experiments that lead into the official arXiv "beta" HTML announced today.

Once a few rounds of feedback and improvements are integrated, and the full collection of articles acquires HTML in the main arXiv site, ar5iv will be decommissioned.

The plan is to turn all existing ar5iv links into redirects to the official HTML, and free up the resources for maintaining it. I am not sure what are the plans for maintaining arxiv-vanity, but I suspect they may head down a similar path some time later.
In the thread to which you replied, somebody mentioned that it’s possible to do that on top RCS, and Google already did it. If Apple wants to make their own encryption they can do it, nothing stops them. Interoperability would still be better, just like in the case of Google with other RCS solutions.
Google has tried to get everyone on board with RCS for years

https://www.theverge.com/2023/9/21/23883609/google-rcs-messa...
It's in the hardware.
MMS limitations stem from the carrier. They have different attachment size limits which affects how Messages will encode the content.
It says "optional", right?
This is a great illustration of how you can only take Apple's security claims seriously if you don't understand them.

One of the primary benefits of end to end encryption is that it can protect messages from an untrusted carrier. In other words, a proper encrypted messaging setup is not vulnerable to man-in-the-middle attacks
The used mac market is too risky, it's too easy for the seller to remote disable it, or it be locked into bullshit like this. I'm surprised anyone still dares to buy used.
There's also Cobol on Wheelchair[0], although they didn't follow the good name abbreviation practice.

[0] https://github.com/azac/cobol-on-wheelchair
Look up some alternative SMS clients on the Play Store and you will see there is a market for it. People on forums have been also complaining about there being no way to do this with RCS.
If one childcare worker can look after 4 kids, why shouldn't the equilibrium price be a quarter of the average woman's salary?
> Plus, Apple is the only safety- and privacy- enforcing ecosystem in existence.

You mean the company that wanted to ship CSAM detection for iCloud uploads with iOS, which was only abandoned because of the huge backlash? Or the company that's implementing privacy features which neatly don't affect its own apps, effectively boosting their ad platform? [1]

[1]: https://adguard.com/en/blog/apple-tracking-ads-business.html
>A Bitcoin miner is more expensive to produce and maintain, yes, but over its lifetime shouldn't it pay for itself?

No. They won't pay for themselves at current prices with current difficulty even if you get "free" electricity

And the electricity isn't really free either, a heat pump style heater like a portable AC is about 300% efficient.
Thanks for all the great work; I hope no one has an outage this holiday and has time to enjoy family and alone.

Keep up the good work, folks
I didn't say marketshare makes them the best. I said there were lots of metrics, that on any given metric, AMD and Intel trade first place spots frequently, and marketshare implies there's something special still about Intel.
I'm not sure how you go from being autistic and having something to say to being disappeared by fascists. Unless the thing you might want to say is "I intend to continue committing crimes"
I get the feeling that the bottleneck in most IO games is the IO (no pun intended, the genre name comes from the TLD), which makes Node a good choice.
> It has its benefits and nobody forces you to lock yourself into their ecosystem.

Network effects absolutely do and Apple knows this. Otherwise they wouldn't go out of their way to distinguish non-Apple users in chats.
What do they use to convert a PDF document to a clean, correct HTML document? It's a difficult space, especially with the variety of layouts you may find in PDF documents...
What we learned about financial modeling as a Series B startup
Includes how to forecast customer churn and retention, track subscription-based revenue, calculate gross ARR churn rate, suggestions for when to count revenue, etc. for other founders/startups that want to create a financial model.
Author here. I’m pleased to see DOS on Dope reaching new generations. This thing will outlive me, and I’m happy about that.

A few days ago at work, building an internal website for a customer, I designed a feature which involved executing a console app in another folder.

My fellow dev, a little younger than I, balked at the idea and said “are you sure web sites can even do that?”

A distant, dreamy look washed over my eyes, visions of ‘DOS on Dope’ shimmered inside the brain,

The words “are you sure web sites can do that?” echoed over and over, reflecting around and around inside the porcelain dome of the skull…

Strange mathematical symbols like “>”, “:\”, and “|” appeared and disappeared within the mind’s flickering cathode ray tube, and I said:

“Yep.”
Emacs with Emacspeak has a math reading module.
CAHSR may or may not do this. Terminating the project at 4th and King makes good and increasing sense, considering how the centroid of the city has shifted over the last 20 years, and the fact that 4th and King is now served by multiple streetcar lines while Salesforce has no connections at all.
> Yes, my Apple devices are the first where I felt AI was integrated for something actually useful. I can just select and copy text in pictures as if it was the most normal thing. I can search pictures based on their content, again including visible text

Apple’s so good at pushing out these kind of “little” features that immediately feel like a kind of bare minimum a system should do. Having to use a system where these two things weren’t automatic, quick, and practically flawless would feel like taking a big step back.

See also: Live Photos. I wouldn’t even consider any kind of phone or camera without that feature, now that I’ve experienced it.

[edit] context of how good it is: some days back there was a link here that went to an image with a bunch of text on it. I followed the link, read it, and did my usual compulsive-text-selection thing I do when reading on the web.

I didn’t realize I’d been looking at an image, rather than html, until I came back to the thread and read complaints about it. Double checked, yep, it was an image.
It wouldn't be legal to build Rance in the EU today, because of the enormously disruptive effects on the local ecosystem. It's not something that bothers me personally, but it's a total dealbreaker in a country like the UK where wildlife activists hold considerably more political sway that climate activists.
Ironically Wikipedia is practicing the worst form of censorship itself.
>You are reading my comments with the most uncharitable perspective possible.

Im sorry if thats the case and I am trying. unfortunately, I didnt get that from your prior posts and this response as a complete nonquitter.

Maybe it stems from a different understanding of the underlying facts. The perp was not sentenced to life in any way, just custody until they stop claiming they will commit more crimes upon release.

In general, I agree a life sentence would be unreasonably harsh for hacking or reading secrets in isolation.

Charges and conditions of release can be unrelated. You may be placed into custody for hacking, but not release if you say you will commit a more serious crime immediately after.
Not only are you expected to put up with the ad, you’re expected to put up with your personal data being sent to hundreds/thousands of third parties whenever someone wants to show you an ad.
Computers aren't free, if it costs even $1 to add a computer that generates enough heat (several hundred watts) to be useful as a heater...why not just omit the computer and make an extra dollar of profit, or charge less and undercut competitors that have computers?

Also consider the externalities...making unnecessary computers contributes to e-waste, it increases demand for rare-earth metals that are often mined in extraordinarily bad conditions (slavery and child labor)...

All this for what benefit? Is there a market of people that want to use a computer attached to a space heater? What useful thing is this computer going to do? Maybe it makes sense as a wi-fi repeater or something, but once again as the manufacturer what's easier/cheaper/simpler to design - a computer that generates heat and does some useful software task, or a fat 1500 Watt resistor that converts DC current directly into heat?

All that said, you might be on to something. With some clever advertising and marketing promotionals, I bet you can convert some portion of the space heater market into "premium" users of this contraption, all while make them feel eco-friendly through a greenwashing campaign.

So my answer is, this product doesn't exist for lack of technical creativity - it exists because the advertising industry hasn't sunk to such depths as to market this product yet.
Maybe this is semantic but how do you have 4 kids all in daycare? Shouldn't some of them be in school? (unless you had 4 kids in under 5 years?)

At least in the US and UK school starts at 5.
Not having separate VMs for QA and Prod seems like madness to me
They break down too fast being exposed to that much heat so it’s not a good experience
What does it mean? Rich parents?
We’re only talking about pollution here - the problem is that multi-ton heavy machinery has a much bigger footprint than any other common option for moving a person around. It’s not a “free country” debate, just unavoidable physics: using 4-6K lbs of machine to move 200lbs of person is going to require a lot more energy than a 20lbs bicycle or having that person share a bus with 50 other people.

I think taxing carbon would be a great way to encourage people to reconsider how they travel, and would expect many people to pick things like those small EVs for urban usage if that became common.
No, I don't recall that. I recall a lot of flame wars and virtue signaling about mask wearing. I recall a lot of denial of science because of ideology and fear. And a lot of name calling.
do you happen to have a link where I can read more about this?
I believe this was from a XKCD What If? question, it was asking how much would sticking a toaster into a freezer effect it? The answer was not much because the toaster heats up to 500F, so from a toasters perspective everywhere is cold and it wouldn't notice much difference from being in 70F or 0F. I remember this when talking about heat pumps since to refrigerant most places would be hot.
It sure should be, but Quartz is SV/startup-centric virtual fishwrap, and thus lying on your financials is just 'fake it till you make it' and perfectly cromulent. Plus, you wouldn't want to conflate that annoying little detail with the real reason you failed: it's all someone/something else's fault, nothing to be done about it, and definitely not in any way to do with how they ran the company. 6-12 months from now there will be fawning reporting from Quartz about the new startups that the Bird founders are disruptively flogging with the help of a few tens of millions from friends and there will be nary a mention of financial 'creativity' or annoying collateral damage to humans the last time around to spoil the fun.
Apple has released a paper about running LLMs efficiently with low memory

https://arxiv.org/pdf/2312.11514.pdf
That’s a pretty reasonable position for you to take concerning your own children, but you should consider that you don’t get to tell me how to raise mine.