skysight-inc/HackerNews huggingface dataset:
I guess Snapchat isn't E2EE. There are various articles online that say it is, but if you view their privacy stuff, the have nothing about it and in this video they say they share your private messages with law enforcement when required: https://www.youtube.com/watch?v=0lj4xjCaCXU

Interesting that the British government is packet sniffing at airports. Imo they should pay the $90k to the Spanish government.
I'm at a food truck and you happen to see and memorize all my CC data and use it because it was in public so it was fair game. Or I was paying using apple pay on the most expensive iPhone available so you take that because it was out in public and if I didn't want anyone grabbing it I shouldn't have brought it out.
The feature is 'git push'. --force is the opt-in to the unsafe behavior. It should not be used lightly.
I don't feel the need for this problem but I'll support anything git related. good luck!
This sounds like the type of transaction that would be illegal or require more transparency if it was a security offering.
You claim that you want solutions for:

> - The lack of an easy way to know what all programs on your phone are exactly doing;

> - Sensible application permissions. (I just want to share 1 photo but somehow the application has access to my entire disk/folder?)

Yet when Graphene (and Flatpak etc) locks everything down and makes dangerous permissions opt-in it's also a problem:

> Projects like Grapheme seem to just lock down the software completely and make it unusable for all kinds of use cases

If you want per file permissions that can also be implemented with tools that exist today. For the photo example I usually just copy the image rather than uploading from disk, clipboard access however is another security issue.

What would a solution you can accept look like? I agree a fresh OS would be nice but there are solutions to every problem you mention. Even old hardware without binaries are possible for the truly paranoid. It's not perfect but you have to be pragmatic.

I think I've made my point that free software didn't really fail. Is it perfect? Absolutely not, but neither was electricity in the 1800s or even today. Did electricity fail?
I'm not sure if an MIT license is sustainable long term. I see most open source companies adapt AGPL, open core or source available licenses.
I'm pretty happy without builds in ecosystems that compile from source with appropriate package managers (go, rust, etc.).

I think really it's less so about builds and moreso people want easy package management.
The person, who apparently googled some command sequence and happily entered them only to find out it overwrote the team's data, could just as easily have used those google skills to search for how to undo last git operation.

Obviously this person had all the privileges required to force push the previous commit in order to save the day. The old adage of never fact-checking a good story holds true however. Not sure it's a good selling point though, by nerd sniping everyone to explain in detail what the actual problem was no one will read to the end.
It seems to me that taking down fraudulent academic researchers and barring them from ever having anything to do with research in the future would also have a significant impact on the ethics and behavior of the next generation. If technology is lowering the barriers to fraud detection, why should it be applied to one sector over another?
Because blackmail is an effective salary negotiation tactic?
Which QNX bsps were you working on? my experience has been that they're a total dumpster fire and you're better of rewriting 90%
Yeah exactly this is not just random, it’s “guided search” as commented by a sibling
>> I was in class at the time, and I remember stepping out, going into the hallway, and jumping up and down while silently screaming in excitement for around 10 minutes

a spreadsheet does not a good effort make.
Yes, zfs rules. If you are doing this regularly you should consider a fs like zfs or use other solution like Borg (which is based on git).

Though this has the convenience of being a more universal solution.
The title as written is obviously true. Obviously any project can be "open source" with or without builds. There is no requirement that "open source" even compiles! The real issue here is: "is it better for the project to provide builds?" and I think that the answer is almost certainly yes even if for nothing else other than the same reason as "should the project compile?" Now, as with all "good things" there are questions of whether its better to put effort into this good thing vs that good thing and that is a fair discussion, but having the project deliver builds is almost certainly "a good thing."
If it's reproducible binaries though, and all the various build hashes match, what's the issue?
Cool beans ! love this. I am wondering how hard it is to introduce new design system ? I am particularly interested in Lighting design system >> https://www.lightningdesignsystem.com/
I prefer builds from repositories I trust. Lots of stuff happily makes it into the Debian repos. So I guess I'm kind of the opposite.
Why does it matter if it is written in Rust or assembly code?
The article somewhat suggests that the guy used the airport's wifi. In this case and assuming that the wifi network supports government surveillance by design, end-to-end encryption does not help.
But is there any claim that Snapchat automatically filters messages and alerts the UK security services?
Why would a criminal steal your phone if they knew they couldn't sell it?
> It could be done on the client

No, that's actually too early -- if you let the client hash the password, you're vulnerable to a "pass-the-hash" attack where the client submits a hash without knowing the password.

There are protocols like SRP and other PAKEs which allow this to be done securely, but it's uncommon for them to be used in web applications.
How do you determine whether a plant or bacterium is anesthetized?
> A court in Madrid heard it was assumed the message triggered alarm bells after being picked up via Gatwick's Wi-Fi network.

Sent a message to the friend he's traveling with openly over the airport's public wifi = public nuisance?
https://github.com/Andre0512/hon/blob/main/takedown_faq.md

China doesn't rate a mention.

What does rate a mention is Haier's own people being on the record that their HON app is such a failure that the bulk of the traffic is generated by the HA plugin, which actually is more economical network wise than Haier's app. Also notable is the fact that they are talking out of both sides of their mouth, they claim they love 'open' and 'API' use but at the same time would like everybody to use their app, but since it is (1) crappy and (2) closed source and so not easily integrated it is logical that the people that need it chose to roll their own.

It's remotely possible that there is an instruction from China to Haier Italy that they needed to take action but you'd expect there to be some mention of this. Finally, from a security perspective you really don't want your appliances to send data to the rest of the world, China or otherwise.

edit: And finally: if they didn't make their appliances cloud connected but instead allowed for a local only version then I'm very sure the HA people would be ecstatic and the whole problem would go away. Why anybody would buy an appliance that requires a cloud connection is beyond me.
This feature is not really about protecting your device from being stolen. It's about protecting your iCloud account and everything on your device from being compromised when somebody has stolen your device and also has your phone's passcode.

It's an attempt to resolve the fairly widespread iPhone / iCloud social engineering takeover attacks that were documented in great detail by Joanna Stern last year:

https://www.wsj.com/articles/apple-iphone-security-theft-pas...

https://www.wsj.com/video/series/joanna-stern-personal-techn...
I think if you do write something in Rust it is customary to mention it to avoid getting tons of suggestions to rewrite it in Rust.
...which would be fine, if builds were trivially reproducible (a la Nix). Many projects are quite a pain to build, to the point where I and probably many others have given up on trying to contribute to them.
The first "benchmark" shows dict() being twice as fast, but the rest of the article concludes "The {} is always faster than dict."
Why would you think he can ignore the courts?

Britain and Spain have an extradition treaty.
Probably a root certificate that you need to install to browse on the airport wifi.
I'm very interested in the latest AI wave round LLM and image generation/augmentation, but the 417th pay web front end for open source tools like Roop/FaceFusion/Stable Diffusion isn't HN-worthy. More tools in this vein: https://theresanaiforthat.com/s/ai+face+swap/
Are you confusing them with another group? The Navajo/Diné haven't ever been known for Bison hunting. Some of their eastern cousins were early in the Spanish colonial period, but that's not super relevant. They did some trade in the skins and occasional hunting like everyone else in the area, but they were never specialized Buffalo hunters like the Blackfoot.
It can be minor but still cause a cancellation. It may be non-obvious to the immediate ground crew that it's trivial, and an abundance of caution is obviously ideal when it comes to flight safety.
Right, so either the airport is running something that can break TLS, or snapchat is feeding a stream of private messages to the government with location information provided.
Perhaps because the high sugar foods that occur in nature contain nutrients we don't get elsewhere and help us fight disease. These sugars are also naturally packaged in a way that makes them behave quite unlike added sugars, they don't lead to the same insulin spikes or high blood pressure, and consuming fruits like berries alongside more processed, artificially sweetened foods can even reduce the insulin spikes of those foods.

https://nutritionfacts.org/blog/what-about-all-the-sugar-in-...
LTS support lasts for 5 years so this works out to be a problem that happens twice a decade so I'm willing to put up with it.
No aircraft would ever fly then. You'd be surprised how much equipment on every single flight is inoperative or scheduled for deferred maintenance.

There's an engineered threshold at which an aircraft is deemed not airworthy. On airliners, this is managed through a Minimum Equipment List (MEL), which is a formal checklist that tells the crew which equipment is allowed to be broken (and for how long).

This threshold is less than 100% by design, because little things break all the time. It can take days/weeks in the shop to fix issues, so you need to batch up all the maintenance. (Can you imagine if you had to take every aircraft offline for several days after every flight?) And that's okay, because there's still a large safety margin built in as long as the MEL is followed.
I'm sorry. I didn't know that anesthesia could do that kind of thing
Because Earth is currently a single point of failure. If we want humanity to survive planet-wide catastrophe, we need to send human civilization to other planets.
That makes sense but how does liability insurance help when your car gets stolen?
Jack Dorsey. Isn't that when they were censoring news stories?
Because 'in Rust' is good for at least 30 upvotes.
Ask HN: Recruiters missing/ghosting intro calls
Is anyone else experiencing this? I've had a number of recruiters reach out to me (from known companies) and miss/ghost initial calls. That seems like a pretty flagrant disrespect to the time of the applicant. What is going on?
I know at least three people who are nuts, skilled and moneyed enough to actually build a legit radar system - they're all hams. Only problem I think would be getting a license to transmit on radar frequencies...
Show HN: I made a site that uses AI to turn your study notes into quizzes
Hi HN my name Darragh,

I had the idea to build this site when I was studying for exams. It turns PDF notes into quizzes, I learnt while studying that the best way to test your knowledge is to quiz yourself.
> It never occurred to me that end to end encryption would eventually have the use case of preventing security services from scaring themselves and then blaming you for a false alarm...

It never occurred to you that incompetence/stupidity is rampant?

Allow me to introduce you to Mr. Hanlon:

https://en.wikipedia.org/wiki/Hanlon%27s_razor

and his close friend, Peter:

https://en.wikipedia.org/wiki/Peter_principle
i have several hobbies and there are countless places all over the world that i'd love to see if i could afford to
Undergraduates' average IQ has fallen 17 points since 1939. Here's why
Joining a Gym? Here's Why You Should Open a New Bank Account
Yeah, the ability to detect toxins likely to appear in the food supply seems evolutionarily important.
Not a whole lot different than what I do as a human. I can do it a lot faster, though, allowing more exploration into the second, third, and fourth most likely word at the same time. Nobody wants to wait years for ChatGPT to finally reply, so shortcuts have to be taken.

I have never discovered any new insights, but it is apparent that the single most important attribute in discovering a new insight is time spent focused on finding a new insight. Undoubtedly, insight simply comes from executing on even more permutations than regular Joes like me take the time for until the right combination finally lands.
Back in the day people made tea out of anything they could get their hands on that wasn't outright poisonous. https://en.wikipedia.org/wiki/Herbal_tea#Varieties

Also, if you're in constant pain you'll try all kinds of random stuff to make the pain go away. If necessity is the mother of invention then desperation is its father.
There's no way it was Szabo, although Szabo likes people to think it was him. Szabo's ideas for p2p currency were directly opposed to the structure of bitcoin, and he continued professing these views and critiques of bitcoin long after bitcoin was launched and achieved some measure of success.
I have long thought that what the broader zeitgeist considers "open source" has diverged significantly from the OSI definition. Many don't even really know it exists, much less consider it. This aspect is one of them. The author is absolutely right that it does not, but I think many people's expectation of a modern open source project is that it provides them.
In the US, it’s going to vary wildly, with some places solving old cases, and some places with such a huge backlog that they just stick the DNA sample in a freezer and ignore it.
I don't have full history so hard to know which plane it was exactly, but all the planes listed for VS127 at https://planefinder.net/data/flight/VS127 were delivered between 2011 and 2012, seems somewhat unlikely that it'd be an issue from back then even assuming Spirit was involved.
A few points:

1. GPUs are good at matrix multiplication!

2. GPUs are programmable, so you can do software updates, which seems like it would be useful if they're also using the R1 to do object recognition and other machine vision tasks.

3. GPUs would be useful in other parts of their product lineup.
Ask HN: Radio direction finding lost credit card?
Any experience with radio direction finding a lost credit card?
But it kind of does in a statistical measure.

If you think in the systems of how criminals work, they tend to spend more time stealing things they think will pay off. Taking something that will cost them time and not gain them money will over time bias thieves to not taking iphones.

For example it may prevent this

a) iphone is left on a table in the open.

but would not prevent

b) iphone is in a bag, bag gets stolen.
What I learned from this is never eat at a pot luck full of chemists.
We are only talking about organizations that are participating in self regulation.

Those that self-regulation have a greater duty to be truthful and in good faith, attempt to remain in compliance. If they cheat, not only should they lose the right to self regulate, but they should face stiffer penalties for breaking that trust.
Seems like that will simply lead to a huge glut of noise, more quickly and thoroughly desensitizing current and subsequent generations to fakes.

The reason I mention Photoshop is because it is many orders of magnitude more automated than photo editing using previous tools. The social perception of truth wasn't effected despite this new efficiency, because a faster to make lie isn't significantly different from the absolute deluge of lies people deal with every day.
without walls, where does one hide the comings and goings of the help?
Fine tuning is better than RAG when the additional data isn't concise, or requires context. This is because too much context (or "unfocused" context) can dilute prompt following behavior, and RAG doesn't help the model with higher order token associations so you have to get lucky and pull what you need from the augmentation material, at which point it's not much better than a fancy search engine. Of course this is mostly an issue when you're dealing with a specialized corpus with its own micro-dialect that isn't well represented in public data sets, such as with government/big corporation internal documents.
for the rest of his days probably
I have an Android phone, and a few months ago I left it behind in a Waymo autonomous vehicle.

Awhile ago, I added the "Find My Device" site to my bookmarks and I'd tested it out a few times. So I started there. And I also used Google Voice to place a voice call, so when it didn't ring in my home, I knew it wasn't here.

The Waymo passenger answered and there was much giggling. She kept saying she didn't know what to do. I said just leave it in the car.

So, knowing it was out of my control, I sent the remote wipe command, and hoped for the best. It turned out, the passenger also used the "Emergency Call" to send a text to my emergency contact. She offered to leave the phone in a pharmacy across town! I don't know how that would've helped.

Anyway, I did recover the phone at the Waymo Depot. It had obeyed the remote-wipe command and it was factory reset, with a full battery. It actually came out better-than-new, as the subsequent updates applied a few nice features.
This would discourage thieves from targeting iPhones long term so there is a definite network benefit.
Then Javascript inside SVG should not have any power over the HTML page it's contained in.
If I get a piece with big globs of decorative frosting I'm just gonna scrape most of it off anyways. Way too sweet
I wonder if they swapped the benchmark results somehow. Because on my computer, I get roughly the same times but with {} twice as fast as dict().
Everything talks over TLS these days. They aren't packet sniffing in airports, they probably have a closet of servers in the Snapchat datacenter.
If you consider it a red flag, leave the process yourself in place of thinking you are entitled to talk to the CEO. You are not who they are looking for.
This looks nice! I like TUI programs for this purpose.

Previously, I've used Beyond Compare 4 by Scooter Software (GUI, free to try), it's nice to have more options because diff -r doesn't get you very far.

I also like the ability to find duplicate images or any files regardless of location with Czkawka (Github qarmin/czkawka).
Awesome!

Side note, I'm tempted to place a !remindme in 18 years to check if your daughter managed to pass her flight control exams ;)
The more pertinent question, for me, is where are those screws?

Are they on the ramp waiting to get ingested into an engine?

Are they jammed in the flap tracks?

Are they embedded into the leading edge of tail surface after flying off in flight at cruise speed?

Its one thing to say that you can fly without those screws on the MEL. Its a whole other thing for parts to be falling off of an airplane in operation, even if they aren't required.

A single piece of metal that fell off of a different airplane is what caused Concorde to crash.
Will they also be paying what they owe on the added costs that could have been noticed earlier with due diligence? I'm imagining that what they'll receive instead is the compensation expected and agreed upon by both parties negotiated during either initial hiring or the multiple points in the year that allow for easy communication about changing payroll expectations, instead of hawking for dimes at first sight.
The difference is 20ns, and if that's enough for you to care about you've got much bigger worries (like "using python").
I think it can be very worthwhile, but I would wait until something internal calls you to use it. If you don't feel a draw to it, I would suggest not ever trying it. If you decide to use LSD, I would make sure to take it with others that have experience using it, and that you deeply trust. It's very easy to let go of your ego and spill every secret in your head, and you'll want to make sure you're around people that won't be judgmental of that. Personally, I think moderation is definitely key, and this is coming from someone that did not use moderation and ended up in a bad place because of abuse. I was psychologically addicted, and I believe it helped exacerbate latent anxiety. I was always somewhat anxious, but it made my anxiety clinical and negatively life affecting. I still think that it has its place, and can be extremely profound and positively life changing. Make sure you are in a good head space with people you trust, in surroundings that won't drastically change for the length of your experience.
I think we need an investigation into why the British Pound isn't allowed to float.

The fixed exchange rate between pounds and kg is obsolete and inappropriate for a modern economy and is the kind of thing BREXIT was supposed to free us from.
Compare https://en.wikipedia.org/wiki/Blindsight_(Watts_novel)
This new world of "maybe AI made it"-everything affords politicians plausible deniability for every statement they make. People would probably start to notice when the "we actually want you to believe this" statements are signed but others are not.
Yeah, I need to digest this more.

However I find myself in similar shoes, if only for the fact that almost person I can count as a friend (e.g. beyond the level of an acquaintance) is "normal" and "successful" (for some reasonable definition) and also taking SSRI or similar type medications in order to function. Those that aren't are very obviously self-medicating in some way. Is this the price of normal?

It is downright chilling. It may be that depression is an affliction of wealth, but I've had it long enough to see it as a curse you never rid yourself of.

PS: please don't go full Internet pedant and tell me about all my biases and sampling errors. That goes without saying: it's self-reported data!
>Mr Verma's message was picked up by the UK security services who flagged it to Spanish authorities while the easyJet plane was still in the air.

It sounds like the UK government is spying on citizens’ private messages to each other. The article says it was sent only to people he was traveling with on the day of his flight.

This strikes me as extremely authoritarian and scary.

Europeans: why are there not mass protests about this? Is this the kind of world that you actually want to live in? Is it just apathy? Or is this seen as a good thing?