skysight-inc/HackerNews huggingface dataset:
You know what you're doing, so you can ignore those errors. Seems like a much better alternative to endorsement of apk downloads directly from websites for non tech-literate users.
Thanks for the explanation. I'll try to be less proactive, I guess...
Of course if you want to be pedantic. But no one is writing these. 99% of all code is going to use collections from the standard library.
Reverse engineering of binary programs from unknown ISAs [pdf]
> to leverage the already existing social graph on your phone

I have little trust in an entity that "leverages the social graph" though...

Your encryption may be great, but if you act like Farmville I'm going to trust you as much as I trust those facebook games that spam your friend list.
Hey ljchi, the reason this post was dead is that you continue to spam the site with the same url.

https://news.ycombinator.com/from?site=github.com/canner
Dubai is in the UAE, not Saudi Arabia
The USDA's gardening zones shifted, this map shows you what's changed
Google Play, for all its failings, IS the safest way to get an APK right now.

F-Droid for as much as I love the open platform, does not provide any security guarantees about what you're downloading. It is a volunteer run project and does not have the extensive security policies and practices that Google has. From https://f-droid.org/en/about/

> Although every effort is made to ensure that everything in the repository is safe to install, you use it AT YOUR OWN RISK.

Likewise downloading and side-loading it from their website, requires you to disable some security guarantees by doing things like enabling developer mode.
Going from "AES is safe" to "Any protocol that uses AES is safe" is the kind of leap that will ban you from any cryptography work
There have been more CVEs for the last 5 or so years. The reason is that "number of CVEs" is used in InfoSec community as kind of performance metric, so the "researchers" are incentivized to report total non-sense as security vulnerabilities. Second reason is that the whole "InfoSec" thing is viewed as an career choice where there is shitload of money to be made, which caused many people with questionable skills and ethics to become "security researchers".
Oh wait... 2012...
> Gopher

From the University of Minnessota in California.
I think it may be the opposite.

People are mad at a culture and economy that is increasingly dehumanizing and exploitative, where they feel hopeless when contemplating basic things like ever having a permanent home for their family, and when every interaction with modern commerce seems to be designed to trick them or steal from them.

Since they feel (and to some extent, are) powerless to affect the forces acting on them directly, they lash out at anything that reminds them of this dynamic, in whatever forum will listen to them.
Many people consider it a possibility to like something. So equally, it's completely valid to dislike something.
That's a pretty cool trick.

I was not aware that we could embed CSS in SVG.
Sources please !
See it all the time.
Open source is different from copyrighted. Or free (as in beer or speech), for that matter. It can be open source, free as in beer, as in speech, and copyrighted, at the same time.
At that point you're giving the metadata to everyone. That's not a great thing if you actually care about being protected from all of them.
Part of the perk is also avoiding the question "is it worth it for me?". There's way less friction when something is free, even when compared with a somewhat negligible price.
Google needs HubSpot more than HubSpot needs Google
As generative AI matures, HubSpot’s “all-in-one” software for marketing, sales, and customer support has an opportunity to evolve into AI-powered flywheel that accelerates (and eventually automates) every aspect of a business’s relationship with its prospects and customers.

Given the mixed history of large acquisitions and the growing field of AI models that aren’t Google’s, HubSpot seems more likely to actualize its biggest opportunities if it does not accept tempting acquisition offers from Google (or anyone else).
Largest CO₂ filter plant in the world opens in Iceland
Not everyone is commenting on signal vs telegram here, it may just be an opinion that the phone number requirement is dubious from both entitites.
Shortlist Your Tasks (2019)
Fat tails make it more difficult
A Data-Centric Introduction to Computing (2023)
I can only see the first message in this thread. What does it say?
Is there some way to stop browsers (and browser extensions) from injecting JavaScript into a website? I don't think there is, but wanted to ask. I normally set script-src 'none' in my Content Security Policies (HTTP header and HTML meta tag) because I do not use JavaScript, but that does not stop an extension from removing that header/tag and injecting JS.

Does anyone know if this is possible?
Just is fine, don't get me wrong. But Make targets can take arguements too. They just have to be named, or (if you stretch the definition a bit) wildcard targets.

AFAIK, Just doesn't have any way to mark "this task is complete, so don't re-run it". It also doesn't have file-based dependendicies, which are pretty common for any kind of programming.

Why would I want to lose all of Make's flexibility and power in exchange for slightly prettier UI syntax?
There are apps that do this
These types of discussions where people are very careful to be politically correct seem to always break down.

Of course you will find some outlier situation where one gender can do the same as another. This is not helpful and not the course of discussion. We're talking about what actually happens statistically, now and for generations.

Men are not the same as Woman, they aren't now, never have been and never will be.
Ask HN: Impressive Undergrad Thesises in CS
Do you know any? Please share it here.
This seems organic to me. I was a security researcher, and for years I've been telling anyone who would listen that Telegram is not as secure as their marketing says it is, while Signal is.

The reasons why are already pretty well listed in the thread above. Telegram's E2EE is hand-rolled and not the default. Signal's E2EE is always on, and it's _the_ industry standard protocol. (Outside of iMessage, I believe the Signal protocol is used on every well-adopted messaging service which offers E2EE chats.)

People also aren't aware that phone numbers and usernames are tied on Telegram. When a former friend of mine joined Telegram, I searched up his username, and found his _very_ explicit Reddit account. This identity compromise issue isn't mentioned more often.

You can add me to the list. There is no good reason to pick Telegram over Signal, unless you don't care about security. It DOES have more sticker packs.
I do not think Google should be allowed to acquire HubSpot. The market dominator should not be able to acquire companies that are in that core market dominating domain.
Agreed, found this to be a cute distillation. Give Utah some credit too…
Are you pointing out that Mr. Durov is in conspiracy with... Jack Dorsey and Elon Musk?
Same goes for Signal devs, or any devs really. You're only stating the obvious: humans can be forced and coerced given enough motivation and resources.

Singling out Telegram, or Signal, or any other service's devs is not advancing any argument forward.
I use both discord and irc, I vastly prefer irc for project discussion, but haven't exactly been able to pinpoint why. I think perhaps, for me, it's that topics tend to stay much more focused, but I understand this probably has to do with discord having servers>channels>threads and boards, where projects use some, but not all of them in the same way.

Irc pretty simple, one project, one channel.
I suspect a lot of people are actually kind of angry at themselves, but want to blame the ad for making them angry at themselves.

How many people have a painting set, or a musical instrument, and dream of getting good at it but just can't be bothered because they'd rather watch ads online?
Or a Polish one. (I guess the expression will be popular across Eastern Europe)

It's funny to see the basic cultural stuff float to the surface in comments like that. Like when there was a large number of "American" accounts some time ago on Twitter responding to financial news, but putting USD after the numbers... (To be clear, I'm not suggesting anything specific about the author here, just that sometimes you see enough opinions about something with the origin "leaking" through the side channel and wonder how organic it is)
Llama 3 8B provides this answer:

> Let's break down the information:

1. The car started with 50L (liters) of fuel in the tank.
2. The car drove 10km.
3. The car uses 2L per km.

To find inconsistencies, let's calculate how much fuel was consumed during the drive:

Distance driven = 10km
Fuel consumption per km = 2L/km

Total fuel consumed = Distance driven x Fuel consumption per km
= 10km x 2L/km
= 20L

Now, let's compare this with the initial amount of fuel in the tank (50L) and the remaining fuel after driving (10L):

Initial fuel = 50L
Fuel consumed = 20L
Remaining fuel = 10L

The inconsistency is that the car cannot have 10L of fuel left if it started with 50L and used 20L during the drive. The correct calculation would be:

Remaining fuel = Initial fuel - Fuel consumed
= 50L - 20L
= 30L

So, the car should have 30L of fuel left, not 10L.
It guaranteed can't have all of your code in the LLM context, or even all of your file (in case of longer, through not even quite long files).

Through it could do stuff like go through your repository(ies) and generate embedding for sections of it and then have a vector database + retrieval argumented generation (RAG) system.
Even if hydro is a viable option, it's still terrible for the environment.
Ah yes, Dubai the bastion of integrity, equality and human rights.
The strapline seems to suggest it is an ORM (I've not used Diesel yet):

>Diesel: A safe, extensible ORM and Query Builder for Rust

https://github.com/diesel-rs/diesel
You're moving the goalposts now. Your comment was factually incorrect on a very basic point, own it and move on.
That the chair of the board believes truth is an inconvenience that stands in the way of getting things done, among other things.

Edit to add: The fact my post got flagged and not merely downvoted is because it hits the nerve way too strongly.
They're better as a cooking apple rather than directly eating them. Try making an apple crumble with granny smith apples next time and you'll notice that the sourness of the apple naturally offsets the sugar in the dessert.
Note that the 15-20% of people who are "disabled" are not defined as needing around-the-clock caregivers. Disability is a spectrum.

I would indeed dismiss that particular statistic about the number of kids spending 50+ hours looking after family members, because it is likely wrong by an order of magnitude.
Did you hear about a russian pilot who defected to Ukraine and then was killed in Spain?

https://www.nytimes.com/2024/02/20/world/europe/russian-pilo...

If russia wants to find and kill you they will.
> an increased willingness to defer my thought-organising process to the AI by just jotting down some random ideas and asking it to make it coherent

...and then accepting that outcoming as sufficient, and moving on, right? Is the alternative that without the AI, you would spend more time researching and thinking about your ideas, pursuing (or stumbling upon) related ideas, and maybe ending up with a more broad understanding at the end of the endeavor?

If so, working with a chatbot is good to extent that you value economy. That is a worthy outcome in many circumstances. But the "inflated" alternative sounds valuable in its way too.

From a broad social/behavioral perspective, I wonder the extent to which the "inflated" way will die off (or perhaps adapt and become something new?) given these new tools.
Please don't joke about that. People who come from abusive homes have higher chances of dying by suicide. It's not wise to suggest to people on the edge to jump
Right, the classic issue of not being a single country.

AFAIK EU is pushing to fix this through Eurozone and tax harmonisation but some European countries don't feel like it. Probably they have an advantageous position or an industry they would like to protect.

Like the whole idea behind EU is basically fixing this. It started as a single market and through the years Europe is trying to bring the continent together and how stuff should be done(all the EU standardizations are essentially about ironing out the legal differences between ~30 countries so that it function like one single country). Not there yet, unfortunately.
Do you disagree? The main issue I see with sideloads is that you don’t get automatic updates. I’d do that for an app I built myself, but not if the app is in the Play Store.
In general the problem with analog is that every sequential operation introduces noise. If you're just doing a couple of multiplications to frequency shift a signal up and down that's fine. But if you've got hundreds of steps and you're also trying to pack huge numbers of parallel steps into a very small physical area.
My hunch is that either:

Somewhere an "up to 50 hours" has become "over 50 hours". If written as "up to 50 hours" it would be much less surprising.

Or

It should read "Over 5 hours". A million spending 5+ hours a week would also be much less surprising.

A million spending over 50 hours would imply perhaps another million spending say, 20-50 hours, still a huge burden.
Facebook actually has had optional E2EE with the Signal protocol since at least 2016 (in my experience), as "secret chats". This puts it on a better security standing than Telegram.
A User Interface Framework for Supporting Information Management Tasks in Haystack (2003) David Huynh [Masters thesis]

https://dspace.mit.edu/handle/1721.1/87355
They always exist. Sometimes they're a minor problem, the steepness of the expected change makes them a major problem in some areas.

But this kind of thing always exists. For example, logistics companies have problems hiring in some countries right now because young people don't see driving trucks as a viable career for forty years, but the logistics companies need drivers for the next ten years or more.
This 'simply use century-old manufacturing tech and make millions of units fast' skips multiple problems. Any large manufacturing effort will require moving the inluts to the mfg locations - difficult with extremely limited ability to move fuel. Also needs power transported, oh right, the power transport system is down which is why we need all the transformers yesterday). And, what assurance is there that these century-old tech transformers will even fit & work in the modern system?

I'm all for MacGyver-ing solutions quickly, but thus seems like an incredibly bad plan
The Smalltalk special of Byte Magazine infamously has a hot air balloon floating away from an island with ivory towers on it. Flying things measure their altitude in feet, but the low level is low. Furthermore, according to Tubeway Army, bombers fly at zero feet <https://www.youtube.com/watch?v=GAj89NEqX-M>.
> I'd personally argue that's a security dark pattern - make privacy a big selling point, but then don't activate the security by default

I think it's a great approach instead: the secure, end to end encryption is there and it's ready to be used.

You can easily activated it but you aren't burdened by it for 99% of the time when e2e encryption is not needed.
Go-SSH-to-WebSocket: Super simple SSH to WebSocket written in GO
The issue is not so much destroying some hardware. It's more the lack of knowledge about the use of these tools.

When does Apple expect a Vivaldi concert to feature the pianist only turning up with an iPad instead of a Grand? Same for all the tools on display in the add.
His point is that when it's only halfway working you're not sure how much more effort to put in because you're not sure how it's going to pay off.
That's just completely delusional. There is no amount of money that can create conflict-resilient infrastructure. If billionaires want to donate money to hunger relief then great, it will likely do some good. But the reality is that in conflict zones and failed states, most of the money and food aid gets stolen by corrupt local officials or armed groups. Aid workers can't directly distribute food to the hungry because they literally get shot for trying.

World hunger is not a solvable problem. The best we can manage is disaster relief in countries that are still mostly functional.
MS-DOS 4.0 (Multitasking)
Totally agree with you.

The essay is less about the regulation and more about why Google needs HubSpot more than HubSpot needs Google.
Here is an example of creating release notes:

1. Call github api via running js code (which i generated in earlier convo..then deleted so i can have a nice template)
2. Asking llm to now summarize that
3. https://chatcraft.org/api/share/tarasglek/yxXY0wti4lbvrPP34C...

This is the feature I use most. chatcraft.org as text interface to github events and hackernews datasets hosted in clickhouse: https://chatcraft.org/c/tarasglek/pdAz4BRaYHib7jbFiYFFl
<raises hand>

If you haven’t used telnet on a Gandalf PAX via RAL SPAN gateway to get to a talker then you haven’t lived.
I have an example of using Kubernetes in my example on GitHub, if you are interested: https://github.com/jesperancinha/wild-life-safety-monitor
Yes but I purposefully used "a single point" in my phrase; since this phenomena doesn't happen in discrete steps, but in a continuum.
The world is not the US and US divorce rates are anomalous globally. You cannot generalise from such outliers.

You have an extremely warped view of relationships.
The winning in this case was they had to fight to be allowed to release what they provided.

As nice as it would be to not have to provide that information, Signal proved that the only information they have to give is largely useless to law enforcement.
If Just grew to have a large enough feature-set that it could replace GNU Make, it would collect an equal amount of warts and sharp-edges along the way.

It's a little more user-friendly, but not enough to justify how much power you lose.

I spent the last 20 minutes reading Just's documentation, and it seems like the only real wins are nicer argument parsing and && dependencies, and the --list argument. And in exchange for that, you lose file-based dependendicies and Make's powerful templating engine. Did I miss some other features that make the trade worth it?
What I suspect the parent is referring to is that if someone pretends they practice CBT but have no experience they may create more problems instead of solving the existing ones.

But personally, I'd attribute that to therapists in general, especially the ones who tend to shift the blame towards the parents (even if they don't spell it out explicitly), not really to CBT where you actually verify very quickly if the method works or not.
> where the maintainers of F-Droid can intervene and prevent an update to an app from reaching users if it's deemed to be malicious

That sounds like a feature you want when using FOSS.

Imagine distros wouldn't have been able to intervene quickly and malicious xz would be still deployed through their channels just because the authors want to.
I believe the only effective protection against these fresh domain spammers is what you did:-some pretty good anti-spam mechanism such as Gmail.
How does that show he wants to use Telegram in a "psy-op"?
There are multiple layers where interception can happen:

1) On-screen keyboard - by default most phones do send what is being typed - a lot of phones also have 3rd party keyboards of doubtful origin preinstalled

2) "Enable backup" scam - on starting an app (like Google Photos or WhatsApp) chances you or your wife accidentally press "ok" on a pop up message

3) Hardware drivers - non open source binary blobs with back doors

4) Operating system - you basically don't know what information is logged and sent back to phone's vendor
Permira to take website-design firm Squarespace private in $6.9B deal
You can do a lot of dark magic with CSS or SVG too. Specifically, CSS has calc too. Website haven't just been documents for a long long time and basically nobody is going to bother keeping any computation in the JS space only.
Hardy har har har. How quaint.

Guess you never heard of polonium either.

https://www.theguardian.com/world/2016/mar/06/alexander-litv...
Edit: apparently "load" is used to deserialize some data. Ya, this is bad, nevermind. I guess treat data stored in this format as code (effectively: don't use this format) unless it can be guaranteed safe.

I'm not an R programmer, but aren't you downloading a file from the Internet and executing it?

You could do the same thing with python/JavaScript/lua. Heck, you could do it with C - download, compile and then dynamically link.

If you want security don't download files from the internet and execute them.
Perhaps you're right, and all of them have the "greater good" intentions, but it's ridiculous how their "regular reminders" popped up in the same 24h interval
I just have a simple contact page that sends message to discord webhook
I don't think gp was suggesting you should forgive all and love. Just, don't judge those that do (or don't), but maybe I'm reading it differently.
I didn't consider it offensive but I did not like it at all. My initial reaction was that Apple come across as bunch of ignorant wankers. That's just a visceral reaction but the more I thought about it the more I thought that it explains their behavior. They have become so lost in their own world that even though they are clearly intelligent they completely missed that people would have this reaction. (Even if they meant it to be arch or ironic it still shows they are out of touch. You know you are out of touch when you thought you were being clever if someone says: "I don't find that funny")

As Alan Kay said "A change in perspective is worth 80 IQ points." Apple lost their perspective. The worst thing about it is that it plays into a very old caricature of tech geeks - giving everyone a bad name.
Automated Detection and Counting of Wild Boar in Camera Trap Images
Telegram has done and may still (I don't know personally) do the exact same thing. Stated noncombatively and without assumption about what argument you may or may not be making, but seems relevant to mention in this context. Astonishingly bad behaviour no matter which app!