skysight-inc/HackerNews huggingface dataset:
App testing for my new discount application
Hey everyone. I am about to launch my UAE based discount app and we are doing community testing.

If you would like to help me test, it would be very much appreciated!

https://apps.apple.com/us/app/the-socials-app/id6472644638

https://play.google.com/store/apps/details?id=com.social.social_system

You can leave feedback on the app on this Google form, or just it in this thread.
https://forms.gle/o4JskXz8gzBQyReL9

NOTES
1.)When uploading your ID just use any picture. It doesn't have to be an actual ID.
2.) The pin code should be 4-6 characters long as well.
3.) No referral code is needed.

Thank you in advance for your time and support!
One of the biggest economies is going cashless
I mean, they only made a poor demo since the announcement and then vanished not providing any more info. I do think projects LIKE Devin can replace some developers that work in most popular domains (I'd guess JavaScript and such), but it won't replace devs in complex fields (e.g embedded programmers)
> At Microsoft, we believe in the value of using our own products, a practice often referred to as "dogfooding".

One would think, unfortunely that is not how it looks like in the zoo of native Windows desktop development, or Xamarin/MAUI adoption in their mobile apps.
Because your post is the repeating cliches that are under every discussion about systemd.

You're essentially saying that the month you spent is enough for you to call it bad and the creators incompetent.

What qualifies you to make a determination like that?

There is never any actual technical reasons it's always about vague things like not adhering to UNIX philosophy, lines of code or it being badly designed (without any real architectural criticism)

This is an article about why they believe sudo isn't a good system. Where's your criticism of that from a technical / security perspective?

It's been about 10 years since systemd was adopted by Debian/Ubuntu/Redhat/Fedora etc.

Millions of deployments over the years. The companies that build and are paid to support for years with SLAs the operating systems are using it without issue.
Yeah, I've also experimented with BunnyCDN and KeyCDN. I'd like to stay with an EU provider if possible.
Ain't been no country music since Hank* died; Nashville is just last decades' pop, with a twang.

(exceptions made for Waylon and Willie and Natalie and the boys and girls, but they weren't really Nashville, were they?)

Lagniappe: https://www.youtube.com/watch?v=gwti7-cEHh8

* The Williams are the opposite of Star Trek movies; the evens are weaker. (exception: https://www.youtube.com/watch?v=kzi-FcFEao8 ; even a blind pig finds an acorn now and again)

EDIT: I need to write Beyoncé to convince her to cover "Coat of Many Colours" https://www.youtube.com/watch?v=HYAdKXzGtcY
Like Avast? Or McAfee?

[0] - https://apps.apple.com/us/app/avast-security-privacy/id12765...

[1] - https://apps.apple.com/us/app/mcafee-security-privacy-vpn/id...
A look at a recently patched Microsoft Graph logging bypass
Yes, that's one possibility I was also considering, thanks!
the belief is that the ozempic is what's allows the giving up of alcohol
That backdoor was never pushed out of the testing branches for distros.
Yep, I've got one and don't use too much. Too big for scrolling, too limited (software) for work. But Apple knows iPad might cannibalize mac and limit it's uses on purpose
Because I should have that choice. Government should not make this decision for me. If it’s important to me that I have devices I fully own, I should seek that out. If I like the products and prices that result from walled-garden business models, I should be able to choose them.
I've enjoyed using flutter and deployed 4 apps using it in the last 2 years.

Goddammit.
Tell HN: Don't trust Reddit product recommendations any more
So I realised today that AI-generated 'natural' product recommendations are getting pretty scary good.

Throwaway account because I'm not entirely sure and don't want any hate from examples I mentioned. They're just examples - I'm sure everyone is doing this now.

I came across 'reply guy'[0], an 'AI that plugs your product on Reddit and Twitter', a while back. It is so blatant about its 'pay us to piss in the pond' model that I'm surprised that they are not getting more hate for something so obviously destructive to the internet commons.

Then today I saw this post[1] from Sourcegraph saying that they 'love to see feedback in the wild' , and I was suspicious that it was an occurrence of the same or something similar, so I searched for the reddit user and 'sourcegraph' and see that this 'fanboy' who is 'not affiliated' has plugged Sourcegraph 20 times in the last few days, always in a similar structure, mentioning the price and how happy he is with the product.

The same user has a pretty extensive reddit comment history, so I guess there's a small chance that it legitimately is just a 'fanboy' as it claims, but I am 99% sure that that is not the case.

So PSA to be cautious with any 'human' recommendations you see online.

[0] https://replyguy.com/

[1] https://pasteboard.co/ojRpsqgvB92i.png

[2] https://www.reddit.com/user/prolacticus/search/?q=sourcegraph&type=comment
True, was also considering this. Just thought having a CDN would be useful at some points (e.g. to compress/resize images, generate source sets of images automatically)
A factual quote and some advice. There is no context as to whether they knew the full extent of the issue or not. Anyone attributing malice to this assumes they do.

“All software has bugs”, “avoid using this button” would be a perfectly reasonable thing to say if you were still analysing a problem and the user had an alternative way of using a feature.

They eventually did acknowledge a problem and issue bumpers, just as a software issue would be acknowledged and a patch issued.
YouTube has plenty of crap, especially autogenerated crap, but it's still much more difficult to produce a video that's going to hit all the right SEO buttons than to do the same with text on the web.
Independent Tech Job Boards
1) Users win. The first alt app store didn't even launch and it pressured Apple to change it's review policies TWICE. Once to allow game streaming services, and then to allow game emulators. Hell, even developers won here.

2) How did this play out on every other platform. Sure - piracy exists, but most don't and it's pretty non-impactful AFAICT.
> Reasonable. But that's a _really_ low bar.

... one that even companies like Cisco routinely fail [1], and completely forget about chinesium "smart" devices where the extra 10 cents to provision a unique local password and print it on a label would ruin the profit margin.

> which means nothing if the manufacturer goes bankrupt.

Yep but now customers can hold the seller accountable if that is violated, which will lead sellers and importers to either demand a cash escrow from vendors to account for dealing with refunds should the vendor go bankrupt or that there will be some sort of code escrow industry formed, similar to insurance - should the vendor go bankrupt or cease support prior to the communicated date, the code escrow will release the source code to the sellers/importers so that they can do firmware updates on their own.

[1] https://www.tomshardware.com/news/cisco-backdoor-hardcoded-a...
> Otherwise it's hard to see why they create a law that basically specifically discriminates against Apple

Because pretty much no other major OS has such bizarre/stupid/choose your adjective restrictions on installing software.
There are some extra protections on credit card purchases that you don't get from buying things with cash/debit cards

https://www.moneysupermarket.com/credit-cards/guide-to-credi...
Like an animal, then?

Not sure if surrendering your free will to decide how you treat people, and all the moral implications that come from being seen as a person rather than just a creature, is the position you want to be taking.
I agree with your approach from first to last word. I use to teach kids programming and I work only with those ones who agree to do their homework and everything else on cheap Linux laptop provided by me. "Smart"phones are not helpful in learning stuff at all because their providers want us to learn their ecosystem instead of the other stuff.

Another insight is to insist learning Dvorak instead of qwerty, that will be more beneficial in the young age. 8 yo can do it in less than 2 weeks or 10 hours of training.

Electric instrumensts are great because of pedals, automatization and easy recording. What about games, try to introduce the kid to cryptocurrency trading, IMO this counts as a modern cool game.
> One everyone knew about that could not be played off as an accident or one small unit that got carried away.

Poisoning people in Britain was pretty obvious. But there have been so many others.
Are you making much money from less affluent sectors anyway? Existance of piracy doesn't mean loss of sales. I would guess that most pirated software was never going to be purchased anyway.
This is awesome work! But for someone who doesn’t have the necessary skills to pull something like this off, a Samsung Fit Plus USB flash drive might work too. I have one in my old MacBook Air and pretty much don’t notice it. The 128GB version is around $20.
> ability to install an app off an unsigned IPA file for free

I feel like the thinking is that there must be an entity — somebody running an app store — who could be held legally responsible for any damage caused by malware distributed via their channels. Regular non-tech-savvy users cannot be trusted with such delicate software as apps running on their personal phones.
I think this is the wrong way to look at it. Forget replacement, if AI just makes developers more productive, companies don't need to hire as many people to do the same work.

Maybe the pool of work for developers will increase proportionally to the productivity increase, so there's no layoffs, but there's no guarantee of that.
I'm a Tenured College Professor. I'm Quitting. Here's Why
Lately I have been using it to write print and logger statements. I type what I want as a sentence in a comment and then it handles all the special syntax characters. Given the error rate I’m not certain it saves time, but it is fun to play with.
Wow. That writeup is insane.

>> Supporting the specific manually-selectable encodings caused significant complexity in the HTML parser when trying to support the feature securely (i.e. not allowing certain encodings to be overridden).

There's no explanation of why you'd want this, or why it's security-relevant.

(Farther down, there's a mention of self-XSS, which definitely isn't relevant.)

>> Elaborate UI surface for a niche feature risks the whole feature getting removed

They've already removed the whole feature. That was easier to do after they mostly disabled it, not harder.

>> Telemetry showed users making a selection from the menu when the encoding of the page being overridden had come from a previous selection from the menu.

That would be an example of "working as expected". The removal of the ability to do this is the problem that disabling the encoding menu causes! Under the old, correct approach, you'd guess what the encoding was until you got it right. Under the new approach, the browser guesses for you, and if the first guess is wrong, screw you.
With the current trends in the economics of energy, the thermodynamics is not really a limit: the electricity you need is generally available cheaply (or even at negative prices) at certain times of day. The biggest issue is getting anywhere close to that thermodynamic limit, and the cost of building the equipment in the first place. Capturing CO2 from air takes a lot of surface area and a lot of energy before you even do the 'turn into methane' step, and because the energy is only available at certain times, you can't run your plant continuously so the initial costs amortise badly. Those are the areas that need solving to make this concept work.
By broken implementations I meant incorrect usage of cryptographic APIs - padding errors, nonce reuse, using weak hash functions, etc.
I'm only using ChatGPT 4 and cannot reproduce your good results. I definitely get valuable inputs from it, but also definitely (almost) nothing usable in that form. Might be I'm still bad at prompting, but if I request the code to do say 5 things (like a complex SQL) it will always forget at least one or the other of the points. Or suggest useless things. Or reformat instead of rewrite. So again: helpful, increasing my productivity, but very very very far from being trusted with anything real. Edit: I don't agree with others saying it doesn't help seniors: it does help, because I can recognize its idea and build quicker on it. If I was a junior I'd navigate blindly (sometimes okay too).
https://archive.is/LpNs2
not only is it complex, there's a dearth of training data for embedded programming compared to the web
Otherness and Control in the Age of AGI
Like you, I have noticed this type of material to be always Linux focused as well and wondered why. I'd love to see something like an Over The Wire security challenge game that is based on Windows or manOS if anyone knows of them.
The tie section is interesting. When you think of it, RMS might be right about certain scenarios, especially in companies that have dress code. But many men wear ties just to look more elegant, and there might be other reasons.
Only if and when fusion reactors using He3 become possible, which for now is unpredictable.
You can also parse the code into an augmented syntax tree or code DOM and then directly interpret that. This approach eliminates the intermediate code and bytecode machine at the cost of slower interpretation. It's slower due to memory cache and branch prediction issues rather than algorithmic ones.
A NASA Probe Solved a Scorching Solar Mystery
I'd add lithium batteries to the list. There's no way short of a teardown you can verify what battery vendor, which quality grade and especially which kind of protection circuitry was used - and even if there's analysis videos from youtubers available, there is no guarantee that the manufacturers haven't swapped stuff around during production runs to account for price and availability changes, or that the manufacturer doesn't suffer from supply chain issues.

Granted, established brands can be similarly impacted, but unlike some alphabet-soup dropshipper from Amazon, brands like Anker, Samsung, Apple or the likes have an actual reputation to lose so their incentive to keep safety in mind is way higher (and yes, even they can fail, both Samsung and Apple had their bad battery issues in the past).
The network effect really is important if you don't use email for patches and want to capture an audience greater than your typical zealot coder (of which I am one).

Github makes it easy for non-coders to submit documentation, test their changes, and genuinely be part of something that they are not an expert in. Sure there are disadvantages there too in terms of the quality of the submissions, but the benefits of a busy community outweigh the drawbacks of too many PRs in my opinion
Interestingly, all but one of the descriptions on the front page start with the word "In".
It will pay less without copyright.
I don't think the efficiency can be partitioned like that. An L3 charger is supposed to output the same electricity that goes directly into the car's battery, with no additional conversion. An L1 or L2 charger has no conversion inside the charger - it's just a wire and a little electronic tag that says what the amperage is.
> given they hadn't just had to implement the same thing for iOS

You've kind of answered this for yourself; iPadOS _is_ iOS.

Apple has, in any case, presumably more or less known this was coming for a year or so; they kind of had to make the argument that iPadOS and iOS were not the same thing, I suppose, but it was always a bit far-fetched that the EC would buy that.
"What's the alternative to, if someone fails to open a business, taking them out back and shooting them in the head?"

I am unable to rightly comprehend the confusion of ideas that would provoke such a question.
>There is never any actual technical reasons it's always about vague things like not adhering to UNIX philosophy, lines of code or it being badly designed (without any real architectural criticism)

I did not mention the first two, so please do not pretend I argued that. For bad design look at transactions. That is really dumb and makes the system near incomprehensible. The documentation is bad, dbus is literally so bad they tell you not to use it without a wrapper. The terminology is very questionable and makes it hard to explain what a unit actually does.

But I don't even see that as the worst part. The worst part is that they fundamentally can't do basic software engineering, in the sense that they do not have a defined project scope. Everything is potentially a systemd issue and not once does anyone take a step back and say "maybe systemd" isn't the right place to fix that problem.

>This is an article about why they believe sudo isn't a good system. Where's your criticism of that from a technical / security perspective?

If you don't read my posts please do not respond to me. Look at the first post I made and carefully read it.
It's wild how low-empathy humans can get simultaneously offended and unironically self-righteous when you basically tell them something as simple as "Be nice" or "Try not to hurt people".

…I see that the top-level comment has been edited to be less aggressive, though. Previously it said something to the effect of "If you can't handle that, you have no business being on today's Internet".
The emulator is not named nintendo, this is the common manpage for the gb, gba, nes and snes commands. Having said that, some if not all of them are also trademarks but since the 9front system is not sold, I am not sure trademark protection really apply. I believe the point of trademark is to prevent a product to have a same name as a competing one which is not really the case here.
This was also a concern of mine. Not knowing too much about aerodynamics I can't be certain but I think some airflow should be going through the hole. You may also have noticed that the screw standoff for the SSD is pushed as far out to the left of the PCB to allow for more air to pass on the right side. But I have at least not noticed any negative cooling performance :)

Thanks for your comment!
Understanding Software Optimization Techniques
They didn't along with iOS? Oh come on! Apple... sigh

I think this might honestly make iPad more appealing, and serve Apple more than they might think. The room for improvement on iPadOS seems greater than iOS due to iPadOS underutilizing the device.
except nobody is willing to pay subscription fees for newspapers like we used to.

including myself, which im kind of ashamed of
interestingly enough, your can ask ChatGPT is a function that calculates all the Fibonacci numbers will ever complete, and it'll say no, so it seems we've solved the halting problem, for cases where the problem's been discussed in the training data.
The best thing would be to convert to C and use tcc.
Other options would be dlang or go.

Cfront with tcc would sound nice enough to try
Ask HN: Need some Insights about self branding
I'm creating an AI based marketing tool, should I self brand myself as a Marketer or AI Developer?
I agree. I've been using Copilot for several months now, and the only thing it (almost) consistently helps me with is predicting relatively trivial snippets.

Anecdotally, I've had it mispredict from very simple contexts, such as skipping numbers in series' where the pattern should've been extremely obvious.

I've had it sneak in sublte and obvious bugs on a regular basis, to an extent where I don't have much confidence beyond any code I can grasp in a single look and be confident it's correct. Sorry bros, I'm not on the hype train this time. Feels like crypto all over again.
> combined with Apple's efforts to distinguish between 'iPadOS' and 'iOS', would be enough to get them a win on this point

I mean, regulators aren't stupid; just because Apple rebranded iOS on iPads to 'iPadOS' a few years ago, presumably seeing the writing on the wall, you shouldn't expect the EC to go "oh, well, the company we're regulating _says_ it's a different thing, so it must be a different thing".
You should watch this video that shows that some of the Devin demos are fake.
https://www.youtube.com/watch?v=tNmgmwEtoWE&feature=youtu.be
Nobody on the dark side of the moon but the Nazis: https://www.youtube.com/watch?v=Jth4yATniS4
A linux distro produce different deliverable medias for server, desktop and mobile use, as well as for different architectures. That doesn't mean the OS is not the same.
Show HN: Roast my SQLite encryption at-rest
SQLite encryption at-rest is a hot requested feature of both the “default” CGo driver [1] and the transpiled alternative driver [2]. So, this is a feature I wanted to bring to my own Wasm based Go driver/bindings [3].

Open-source SQLite encryption extensions have had a troubled last few years. For whatever reason, in 2020 the (undocumented) feature that made it easy to offer page-level encryption was removed [4]. Some solutions are stuck with SQLite 3.31.1, but Ulrich Telle stepped up with a VFS approach [5].

Still, their solution seemed harder than something I'd want to maintain, as it requires understanding the structure of what's being written to disk at the VFS layer. So, I looked at full disk encryption for something with less of an impedance mismatch.

Specifically, I'm using the Adiantum tweakable and length-preserving encryption (with 4K blocks, matching the default SQLite page size), and encrypting whole files (rather than page content).

I'm not a cryptographer, so I'd really appreciate some roasting before release.

There is nothing very Go specific about this (apart from the implementation) so if there are no obvious flaws, it may make sense to port it to C/Rust/etc and make it a loadable extension.

[1] https://github.com/mattn/go-sqlite3/pull/1109

[2] https://gitlab.com/cznic/sqlite/-/issues/105

[3] https://github.com/ncruces/go-sqlite3/issues/55

[4] https://github.com/sqlite/sqlite/commit/b48c0d59

[5] https://github.com/utelle/SQLite3MultipleCiphers
I am the Sourcegraph CEO. I don't know who this person is, and he is not affiliated with Sourcegraph, although I am grateful for his kind words! This is not an instance of what you're talking about.

I do agree with you that we'll all see see a lot more of this nefarious stuff going on and should be on guard.
A project like this is going to rely on using energy when it's so over-supplied to the grid that prices drop to near zero. Which does cause some financial challenges, as your expensive machinery isn't running all the time, but it's different to just the energy being worth something.
It's like give vodka to someone who suffers from thirst because it has 60% of water. I even know some persons who prefer vodka to any other water or meal. They claim that vodka "works better for them".
The holy grail would be generating TL;DRs with a model trained on the best human-written abstracts. Although - there should be a way to hide machine-generated content, for your convenience, since not everyone might be interested in this content
> Also, with a 90-minute commute each way, in 2023, he apparently started sleeping in his car, showering at the factory and microwaving his dinners on days that he was working.

If you are going to be that desperate, at least buy a van so that you can sleep properly..

> 5:00am I usually check my emails while on my autopilot commute to work (1hr 30min drive)

Great. Another danger on the road.
X-Plane's mostly made by one guy too, isn't it?

The computational modeling of airfoils they do in it always sounded amazing.
Just use:

> git pull --rebase
I think they mean "Some broken links in the usesthis.com interview". Some of the commercial product links are broken, which is hardly surprising in an interview from 2011 about technology.