skysight-inc/HackerNews huggingface dataset:
Airbeak was poking at the ResMed Airsense 10 series; it was just a TagConnect connector and an STLink and some jumper cables.

https://airbreak.dev/disassembly/

Standard disclaimers apply, I'm not responsible for people bricking their CPAPs or other life support equipment with this information, you live your own life the way you choose. Please don't screw around with a "live" machine hooked to a patient cough.

I was trying to see what the differences were between the lowest-end "start" CPAP and the highest end - while the firmware would flash over, the menu controls wouldn't work due to the changes made on the low end model - but the therapy start/stop did work (and it was delivering the correct therapy I programmed in via SD card with the clinician software).
Blueprints for good houses are assets, that is what code for good programs is.
Science is slow for sure. You need to gather samples and run tests. Often testing for causality is impossible, because you literally need to "cause" the issue in your sample group and that raises ethical issues if the thing you're "causing" is harmful.

It's not even the human parts that are flawed with science either.

Science is fundamentally flawed by nature because in science and therefore reality as you know it you cannot prove anything to be true. You can only falsify things in science. Proof is the domain of mathematics.
Neurodivergence isn't a free pass to commit all the crimes you want. Lots of shooters are neurodivergent. That doesn't mean that society has to let them kill all they want.
But there is no contract to begin with. Anyone can enter your credit card number on a LA Fitness website.
>Apple has a strong interest in at least being perceived as pro user privacy.

Perceived is doing a lot of lifting there. The public largely cannot audit Apple's ACTUAL security.
I run a bug bounty program and I pay upon successful triage: while our engineering teams do have security SLA’s, it’s not fair to whomever reported the vulnerability to wait for our (sometimes broken) processes in order to be paid.
Show HN: Codemodder – A new codemod library for Java and Python
Hi HN, I’m here to show you a new codemod library. In case you’re not familiar with the term "codemod", here’s how it was originally defined AFAICT:

> Codemod is a tool/library to assist you with large-scale codebase refactors

Codemods are awesome, but I felt they were far from their potential, and so I’m very proud to show you all an early version of a codemod library we’ve built called Codemodder (https://codemodder.io) that we think moves the "field" forward. Codemodder supports both Python and Java (https://github.com/pixee/codemodder-python and https://github.com/pixee/codemodder-java). The license is AGPL, please don’t kill me.

Primarily, what makes Codemodder different is our design philosophy. Instead of trying to write a new library for both finding code and changing code, which is what traditional codemod libraries do, we aim to provide an easy-to-use orchestration library that helps connect idiomatic tools for querying source code and idiomatic tools for mutating source code.

So, if you love your current linter, Semgrep, Sonar, or PMD, CodeQL or whatever for querying source code – use them! If you love JavaParser or libCST for changing source code – use them! We’ll provide you with all the glue and make building, testing, packaging and orchestrating them easy.

Here are the problems with existing codemod libraries as they exist today, and how Codemodder solves them.

1. They’re not expressive enough. They tend to offer barebones APIs for querying code. There’s simply no way for these libraries to compete with purpose-built static analysis tools for querying code, so we should use them instead.

2. They produce changes without any context. Understanding why a code change is made is important. If the change was obvious to the developer receiving the code change, they probably wouldn’t have made the mistake in the first place! Storytelling is everything, and so we guide you towards making changes that are more likely to be merged.

3. They don’t handle injecting dependencies well. I have to say we’re not great at this yet either, but we have some of the basics and will invest more.

4. Most apps involve multiple languages, but all of today’s codemod libraries are for one language, so they are hard to orchestrate for a single project. We’ve put a lot of work into making sure these libraries are aligned with open source API contracts and formats (https://github.com/pixee/codemodder-specs) so they can be orchestrated similarly by downstream automation.

The idea is "don’t write another PR comment saying the same thing, write a codemod to just make the change automatically for you every time". We hope you like it, and are excited to get any feedback you might have!
> I don’t think the engines will switch their happy-paths to splats until artists have the proper tools to create assets with splats.

Oh - I agree and it's a bit chicken and egg. I'm not expecting this shift to be quick (or even universal). But I do feel the need to put the idea out there that meshes might not be the be-all and end-all for games and other spatial media.
I agree with you. I just read it for fun. And that’s still worth it
Socket Organization Alerts: View Dependency Security Risks Across All Repos
That might be a bit of propaganda from the gas industry over the last 50 years. I heard similar but when i dug into it appeared to be bunk… i cook on electric now and love it.
I'm not familiar with that...but are you comparing anonymous workers in a distant and "this call will be recorded..." call center to front-line workers, who may have an armed & angry "law" enforcement officer right in their face?

If so, Apples != Oranges
SiriusXM doesn’t operate in Europe - so I don’t think GDPR is among their concerns.

https://www.siriusxm.com/help/service-outside-us
The legal standard for a subpoena from a federal agency is "reasonably relevant to an authorized investigation." As determined by the agency itself.

That's an incredibly low bar. And if pharmacies respond to subpoena without even having a lawyer review them first, there really isn't anything to stop requests that fall below this low standard.
I read an analogy once and its that:

Fastly == Linux (ability to changes lots of things to tailor to your exact needs)

Cloudflare == macOS (prepackaged to work for most general users, limited config)
Whether or not a link gets any attention here depends on a lot of things aside from the link itself. For instance, if it happens to hit the front page at the same time as something else that is drawing everyone's attention then it may simply go unnoticed.

Also, although this isn't the case here, if it's just a link without a description or some sort of commentary explaining why the link is of interest, it may not get the traction you'd expect.
Ever think about partnering with ARA [1] (and/or Subaru) when it comes to winter/snow and inclement-condition driving? There are groups like Team O'Neil [2] up in NH that offer closed courses for challenging driving conditions, and it would likely be a cool marketing opportunity for Waymo.

[1] https://www.americanrallyassociation.org/

[2] https://teamoneil.com/

I've always said that self-crashing cars will win my stamp of approval when they can compete in stage rally. It'd likely push the Waymo team to evolve even further by getting involved in something like that, even with just the basics.
Collision geometry is also generally triangles or other primitives.
And then, don't just drop the constraints because you read an article about how FK constraints don't work with a distributed relational model, take a careful look at the docs of whatever DB engine you're using. PostgreSQL 12 for example supports foreign keys with either side being a partitioned table.
1) Some do. Requires mechanisms to enforce it, which aren't present on most laptops yet. Intel ME, motherboard firmware, Secure Boot, et cetra et cetra. Some Android phones has it too.

2) YES.

3) Part of ... not specifically the Secure Enclave but the whole system. Hardware, firmware and software. You cannot bypass it.
It's a pity that there is no DM functionality - but this was a huge help for me! This feels like one of those moments where I learned that "yay" & "yea" sound the same, as do "yeah" and "ya" (and importantly, yea != yeah)
This hacking is more DMCA than CFAA
https://github.com/feross/timidity
Sending an email will connect to Apple’s SMTP server and make use of Apple’s resources that way. (I happen to run my own mail server that does exactly that.) Yes, receiving iMessage messages presumably works differently from receiving email, in that it’s probably pull rather than push, but that doesn’t change the basic argument.
The paid appearance came as part of a celebrity-focused program the American Gas Association launched in the 1970s, after the association had reportedly conducted its own research into the health dangers of gas appliances. After finding a link between gas stoves and indoor air pollution, the trade group sponsored shows hosted by Pépin’s frequent collaborator Julia Child, as well as actors Mary Tyler Moore and Doris Day, Rebecca Leber recently reported. (The industry still includes celebrity restaurateurs in its pro-gas campaigns.)

This reads like satire, like it could have been a throw away line in Thank You for Smoking, but no, this cartoonish level of villainy is real, and all too common.
Related:

Show HN: Slint – A declarative UI toolkit for embedded and desktop - https://news.ycombinator.com/item?id=36388821 - June 2023 (148 comments)
Apple is doing it for our security and save the environment. If Apple can do it, others should be able to do it too.

After all, the whole SV is trying to make the world a better place, make humans interplanetary species, protect freedom of speech, democratise stuff etc.
Hugs: Human Gaussian Splats
Which EV is that? I know Tesla doesn't support bidirectional and most other EVs top off at 75-80kWh.
In the past you had to chat with a rep, but for at least a couple years now you can cancel your NYT subscription with just a couple clicks.

You can also pretty much perennially keep your sub at $1/week w/o talking to a rep just by starting the cancellation flow when the promo rate nears expiration.
Does anyone have a link to the actual study the article is referencing?

The article links a different study from September with some questionable methodical choices: https://arxiv.org/ftp/arxiv/papers/2309/2309.01206.pdf
I won't speak to cooking. But, gas central air heaters are much cheaper to operate than heat pumps in Phoenix, AZ. I wish it wasn't so environmentally speaking. But from a cost point of view, its better to use natural gas than electricity.
I still don't know what any of that means. Then what is patience about? Who is "they"? What does it matter if people can guess at an outcome based on prior experience?

I still don't know what you mean by "patience" and I still don't know what relevance it has here.
Midjourney v6 is finally here
>you definitely can say that the human drivers are worse

No, you can't. You can say the drivers are worse only on the segments where Waymo was willing to test it, and that is worthless. It literally is cherry picking. What does it matter to people driving in Boston, Chicago, New York, Paris or Berlin if cars can drive safely on a suburban grid in Arizona?

If you get to pick the sample you get to pick the outcome. We could literally put these cars on the worst 1% of roads and get the opposite result. In fact we could put them on the worst 90% of roads and get the opposite result. Even the average American consumer gets no meaningful info out of this.
In 'Live preview' I casually inspected the the first button, and it has 63 classes, wow

<button class="relative isolate inline-flex items-center justify-center gap-x-2 rounded-lg border text-base/6 font-semibold px-[calc(theme(spacing[3.5])-1px)] py-[calc(theme(spacing[2.5])-1px)] sm:px-[calc(theme(spacing.3)-1px)] sm:py-[calc(theme(spacing[1.5])-1px)] sm:text-sm/6 focus:outline-none data-[focus]:outline data-[focus]:outline-2 data-[focus]:outline-offset-2 data-[focus]:outline-blue-500 data-[disabled]:opacity-50 [&amp;>[data-slot=icon]]:-mx-0.5 [&amp;>[data-slot=icon]]:my-0.5 [&amp;>[data-slot=icon]]:size-5 [&amp;>[data-slot=icon]]:shrink-0 [&amp;>[data-slot=icon]]:text-[--btn-icon] [&amp;>[data-slot=icon]]:sm:my-1 [&amp;>[data-slot=icon]]:sm:size-4 forced-colors:[--btn-icon:ButtonText] forced-colors:data-[hover]:[--btn-icon:ButtonText] border-transparent bg-[--btn-border] dark:bg-[--btn-bg] before:absolute before:inset-0 before:-z-10 before:rounded-[calc(theme(borderRadius.lg)-1px)] before:bg-[--btn-bg] before:shadow dark:before:hidden dark:border-white/5 after:absolute after:inset-0 after:-z-10 after:rounded-[calc(theme(borderRadius.lg)-1px)] after:shadow-[shadow:inset_0_1px_theme(colors.white/15%)] after:data-[active]:bg-[--btn-hover-overlay] after:data-[hover]:bg-[--btn-hover-overlay] dark:after:-inset-px dark:after:rounded-lg before:data-[disabled]:shadow-none after:data-[disabled]:shadow-none text-white [--btn-bg:theme(colors.zinc.900)] [--btn-border:theme(colors.zinc.950/90%)] [--btn-hover-overlay:theme(colors.white/10%)] dark:text-white dark:[--btn-bg:theme(colors.zinc.600)] dark:[--btn-hover-overlay:theme(colors.white/5%)] [--btn-icon:theme(colors.zinc.400)] data-[active]:[--btn-icon:theme(colors.zinc.300)] data-[hover]:[--btn-icon:theme(colors.zinc.300)] cursor-default" type="button" data-headlessui-state="">Button<span class="absolute left-1/2 top-1/2 size-[max(100%,2.75rem)] -translate-x-1/2 -translate-y-1/2 [@media(pointer:fine)]:hidden" aria-hidden="true"></span></button>
Ask HN: How do YC startups that are not from the US incorporate in the US?
I've been coding and building and am now at the point where I can offer a software product to the world for the first time :)

I'm so happy for this small, but significant milestone.

I'm integrating payments with stripe and to go into live mode I need a business entity in the US. I'm not an expert in laws and such but would like to learn what is the optimal path. Stripe offers Atlas so that might be it, but curious on your thoughts. I hear new Mexico or Wyoming or also decent states to incorporate into other than Delaware. Also, do I have to live in the US?

Grateful for any knowledge, especially if it comes from a YC non-US startup that has gone through the process before.
Natural gas supply companies incentivize their sales channel to install the connection which is needed in order to consume the gas product. This seems like business 101.

In many places, heating your home and your domestic hot water is still financially less expensive using natural gas. Sure, there's negatives to using natural gas, but being more expensive is not one of them.
Your place may have an extremely underpowered gas stove?

Tons of places do stir fry on gas.

Probably the norm I would say.

If you go to a hibachi grill, they're doing it right out in the open.
C# support in neovim is pretty solid, too. Omnisharp, Roslynator, Neotest, nvim-dap. Not much I feel I’m missing
> That's quite a feat.

Is it? I don't see what the big deal is in installing a chrooted Linux environment (or SSH/RDP client to remote into an external machine) in an Android device?

The fact this is even mentioned really smells like they're trying to make this guy sound more skilled and evil than he really is, potentially also to cover up for the fact that the police made an oversight in letting him be around internet-connected devices even though their instructions was to not provide him internet/computer access.

I'm not downplaying the GTA hack (although I would still bet good money it was typical phishing/social engineering rather than anything more advanced), but I'm disagreeing that him doing so from a rooted TV stick or phone makes him any more of a monster than doing so from a typical computer.
Apple is evil
The relevant factor is whether it's more expensive than peaker gas plants. Because that's how you get energy when the wind doesn't blow and the sun doesn't shine. And no, battery storage - or any storage other than pumped hydro, which is already in heavy use - is a drop in the bucket; it doesn't even come close to covering serious shortfalls.
I live in the middle of a big downtown and the nearest drug store to me is a 3 mile, 20 minute drive, 45 minute bus ride. I have to go monthly. It's literally the only place I drive for months. I don't know what exactly has happened but the last 5ish years every Pharmacy option has become just terrible. I recall there being 24 hour pharmacies and everything in the past.

I don't even walk down the home aisle of mine anymore when I'm there because they will NOT have my detergent or dog food in stock and haven't had it the last 4-10+ trips I've made. Just an empty shelf where it should be sitting. It's an extra kick in the teeth because living where I live the CLOSEST "grocery" store is this Walgreens. I basically live off of Amazon deliveries and hate it but oh well.

Sometimes I'll drive the 20-25 minutes (3 miles) and get there and they're so understaffed that there's either a "We're at lunch, back in 1 hour" or "Everyone is sick, Pharmacy is closed."

Our pharmacy options are pathetic. And living in a food/pharmacy desert is a nightmare for people who don't have reliable transportation.

All this bs just to get my ADHD meds every month for the last 30 years of my life.
Why is Apple obligated to support iMessage for people who aren’t customers? This seems to be at the root of the discussion, not this silly blue bubble thing. The costs of iMessage are included in the high price of Apple devices. Why should Apple customers subsidize non-customers?
I suspect this problem is really dependent by city or even neighborhood. I think the real practical limit is the municipal supply design rather than the available units.

A friend had a 5 burner unit in their house that visibly dropped output if you ran 4 or 5 at the same time, just not enough gas coming into the house. By comparison the commercial kitchen on the same block was happily running a flat top an 2 other stations at full blast; so it can't have fundamentally been supply just the way it was distributed.
It kind of makes sense though. The dominant messaging app has always varied by region. The US is just really unlucky that the one that won there happens to be owned by Apple. And I say "unlucky" - it's not really luck. iMessage could only ever dominate in the US really because iPhones are very popular there and because SMS is free.

In most of the world iPhones aren't nearly as dominant so nobody would use iMessage or they wouldn't be able to talk to half their friends, and there was a much bigger incentive to just ditch SMS-related systems entirely.
Tesla are getting exactly $0 of this money (it goes to the customer).

Also, every other automaker can make cars that qualify. In fact, many already do!

Also note Tesla do not make a single PEHV, so in fact plenty of automakers make vehicles that qualify and Tesla doesn't.

Here's the lists:

EVs:
https://electrek.co/2023/11/07/which-electric-vehicles-still...

PEHVs:
https://electrek.co/2023/11/07/which-electric-vehicles-still...
How often is data actually DELETEd from production databases? Unless following through with regulatory removal such as GDPR, it’s far better to use an isdeleted flag IMO (so you can un-delete if the action was a mistake).
I had this happen with an iPad that I received as an exchange when I sent one in for a repair. I booted the new unit up and was prompted to enroll the device in MDM for a school district in Florida. Kind of a frustrating experience, but Apple support was eventually able to get it unenrolled after enough escalations ("yes, I bought it from you", "no, I'm not going to sign in to an MDM-enrolled device with my personal Apple ID", "no, I've never heard of this school district and don't know anyone in IT there who could unenroll the device", "yes, I'm quite sure I didn't buy it off a truck").

I never learned what caused the issue.
I’m a huge fan of privacy.com’s virtual cards. I create a new one for every service. I can place time based /absolute limits so nothing can be surprise overcharged, and can just kill the card anytime.
I meant the opposite.

Warren Buffett is letting See's Candy is happily chug along, staying true to their identity (as far I hear, I'm not a customer), whereas another investor might have insisted on quick quarterly results and ended up IBMing them.
A Closer Look at Asia's Favorite Chord Progression (2013)
China bans export of rare earth processing technologies
>The only reason the holo deck captures our imaginations is because it had space, smells, sounds, touch.

You don't need the exact fictional holo deck device to have a VR product that sells. 150 years ago Sci-Fi writers imagined we'd have robots in our homes doing our chores, and we do have them today, except not humanoid robots doing the washing and vacuuming by hand for us like we originally imagined, but we have fixed function dedicated robots for each task: dish washing machine, clothes washing machine, Roomba robo-vac, etc. They're a rudimentary and limited far cry from the fantasy and capable humanoid robots in sci-fi novels, yet they're ubiquitous today and sold by the millions. Same will be with VR, it will be more limited than the holo deck but it will sell at the right price/feature combo.

>You can't have a nice realistic image of all of your colleagues in a VR meeting unless they each have a 3D camera setup, and everyone has enough bandwidth to actually receive and send all of the 3D videos, and do so with latency similar to audio traffic

People also fantasized about video telephony like in star trek and yet those challenge got overcome with the introduction of 3G and camera phones and has improved ever since. Tech will also improve for VR. The iPhone already has had a 3D camera since a while now.

>These are at least three fundamental problems that make the whole VR/AR craze just certain to fail. Again.

It will fail today, but it will succeed in the future, even if you're too dead set to not see it.
Apparently they announced this in October. They are kicking Altera, which they acquired for 16.7 billion back out into the world to live or die on its own. Which feels a bit weird given what feels like AMD's relative success with Xilinx.

It also dampens their "US developed" technology pitch (which they had been pushing pretty hard vs other solutions that were fabbed at TSMC) I wonder if they will also give up on their third party use of their fabs.

Intel was the first "real" job I ever had and it was during Andy Grove's tenure as CEO and his "paranoid" attitude was really pervasive. I had been working on graphics chip which were the next big thing until the chip recession and then they weren't. And it followed a long series of Intel sending out tendrils outside its core microcomputer (eventually x86/x51 only) winners only to snap them back at the first sign of challenges.

I wonder if we can get better open source tool support from the new entity. That would be a win.
Ancient Persian Mythology
I realize this may be straightforqard for an IT admin with creds, but does this hold of the avg user? How about avg engineer?

>>>>Easily skipped .....by blocking connection to enrollment server
Here's the current thinking on how to support dynamic dispatch without boxing:
https://smallcultfollowing.com/babysteps/blog/2022/03/29/dyn...
It says does it not, social engineering. Getting access to there discord, etc..

A skill in itself but not 0day or anything.
It does seem really odd that not even credible arguments are offered in the article.

I thought nautil.us was a somewhat reputable publication.
I think it would be really great if you could compare/contrast LastLogin with Dex. Especially given they're both Go. Just curious if you evaluated dex, etc.

Also toyed with... Portier (nee Mozilla Persona). But ultimately dealing with this email normalization seemed like a losing/hard battle. And I mostly accepted that I'll likely die before a good solution is pioneered here and have refocus attention elsewhere. :/