skysight-inc/HackerNews huggingface dataset:
That just means you lack imagination. "special chip specifically designed to increase cryptographic security" means nothing and says nothing. You may as well go ahead and toss in some "military grade" in there too since it's just free words, throw in as many as you want.

It doesn't show how it actually is the only or best way to attain the goal.

And since Apple's implimentation is a black box whos internal workings are not under the users control and not auditable by anyone outside of Apple, it's automatically less secure, in the sense that you should trust it less than some other equivalent that is under the users control and publicly auditable, or just some other mechanism entirely if no other such open platform enclave implimentation exists.

Signal or anything else that doesn't use the secure enclave may indeed be, or may not be less secure than something that does use the secure enclave. The simple existence and use of the enclave does not automatically define superior or inferior security. It also possible that anything else might be less secure, but only on iPhones because or limitations Apple imposes on everything on the platform except for themselves, which I don't think should count.

It's also possible to devise a mechnaism that benefits from the enclave without needing to use the enclave directly. All software on the device can rely on trusting the OS to keep one app from reading another app, because they can trust that the OS itsef can only come from Apple and the bootloader woukld refuse to boot anything else, etc.

There are infinite ways to attain any goal. The way Apple designed their secure enclave and os platform is just one way.
More like tens of thousands. The Lazarus Group alone is suspected to be comprised of ~3,500+ people.

If I had to guess, likely because the NK workers are highly motivated to succeed under threats of duress and threats involving their families/own life.

I dont think these employers are willingly hiring DPRK workers over other countries, likely more so that DPRK are more ruthless and aggressive with their application applying processes and have it dialed in pretty well using shared intel and techniques to improve their success rates. Afterall, it is a nation-state backed campaign so they have a lot of resources to put into it.
Sounds like I should stick to Signal that got this right from the get-go.
There's a lot of Uber drivers in NZ who did complain about this. It's the reason for the court case that the article is about
Best Practices for Product Managers to Collaborate with Engineering Teams
Yeah, and they claim that 80% of the applications they consider are now suspected North Koreans. Sounds like they’re putting all the applications that show go into the “barely even trying” pile into the “North Korean” pile instead.
There is no one answer to the question of whether to use LLMs for code. LLMs help with robotic transformatioms, SDK knowledge, glue code, and even with trivial algorithms, but not so well with novel algorithms. Novel algorithms are where I ignore what the LLM says, and do my own thing.
I've been running Lineage with microg for a couple years now, and for the same reasons as the author. I don't consider myself a tin-foiler, either. I think the concerns he expresses are perfectly valid. Anyway, FWIW, I have noticed a night and day difference in the targeted advertising. It's a little amusing, because my wife has an iPhone, and she'll get nearly instant targeted ads based on conversations we have, while I don't. Anecdotal, sure, but there seems to be something to it.
Maybe, but not a good litmus test. If it’s truly secure and the founder can’t provide information because they don’t have access to it it’s also possible they can’t build a case in most countries.
Differential backups are always:

Full Backup -> Differential Backup

Incremental backups are:

Full Backup -> Incremental Backup [-> Incremental Backup ...]

At least that's how it is with Macrium.
This.

I'm a former/old-school professional programmer (now a retired CIO) and I still love automating my life with an assortment of tech (e.g. python, bash, c#, c++, jscript, etc). My knowledge of these tools isn't indepth... so being able to use AI to assist with generating the base code is a godsend.

My experience using chatgpt has been quite positive overall... sometimes it comes up with elegant solutions, sometimes its dog shit - but generally it's a useful starting point.
Labor board confirms Amazon drivers are employees
https://rdiff-backup.net/ explains
How Google Makes Custom Cloud Chips That Power Apple AI and Gemini [video]
I've wanted to see something like this, but as a browser add-on with a crazy amount of connectivity between sites allowing search/discovery. If you do anything "social", it either has to be useful to the 1st user or you have to bribe people onto the network. Building a search/recommendation engine is a good cheat to not have to bribe people to show up.
Element aka New Vector Ltd?
I already do this in the US.
> Uber drivers themselves never seem to complain about this

why would they? uber takes more money from the customers than taxis got in the past, pay less to the drivers and less taxes. Everybody pays for uber benefit
Those are all learned, they are not obvious pictures. There's a limit to how far one can go with this, which is why pictographic written languages evolved into phonetic ones, again and again.
Uber lost its appeal in NZ as well.
I'd actually be good with (and prefer) 5pm-1am. :)
It's not a good thing to not want rapists, thieves and terrorists entering your country? Pretty much every country has immigration restrictions that aim to stop those kinds of people and catch a lot of innocents with their broad classifications. The US has a visa-waiver program to enable easy access to people from western or developed countries. No doubt it's because those people are lower risk. It's not hate to trust Singaporeans more than Russians.
I had Medicaid when I was an adult student. Worth pointing out that it was administered by the state of Colorado and not the feds, and was post ACÁ.

It was, by far, the best insurance I have ever had in the US. It was effectively a gold insurance plan with no deductible, a $2 copay, drug and dental coverage.

It was very easy to sign up for, and the paperwork was literally the exact same as buying marketplace insurance.

I found it to be a better experience, and better administered than any other American health insurance I ever had.

If I could have paid money to stay on it when I got a job I would have.
Yes. I really good scientific explanation of this that confirms the anecdotal findings is discussed here [1](https://www.lesswrong.com/posts/X5RyaEDHNq5qutSHK/anti-socia...)

The TLDR is that ex-soviet countries experience a deep suspicion of certain pro-social behaviors that make ownership a loosing strategy.
> It's a messaging app that took in the function of a social media platform. It did so without robust security features like end-to-end encryption yet it advertised itself as heavily encrypted.

Do you want to say that social networks must implement E2E? Personally I think it is a good idea, but existing social networks and dating apps do not implement it so Telegram is not obliged to do it as well.

As for promises of security, everybody misleads users. Take Apple. They advertise that cloud backups are encrypted, but what they don't like to mention is that by default they store the encryption keys in the same cloud, and even if the user opts into "advanced" encryption, the contact list and calendar are still not E2E encrypted under silly excuse (see the table at [1]). If you care about privacy and security you probably should never use iCloud in the first place because it is not fully E2E encrypted. Also note, that Apple doesn't even mention E2E in user interface and instead uses misleading terms like "standard encryption".

This is not fair. Apple doesn't do E2E cloud backups by default and nobody cares, phone companies do not encrypt anything, Cloudflare has disabled Encrypted Client Hello [2], but every time someone mentions Telegram, they are blamed for not having E2E chats by default. It looks like the bar is set different for Telegram compared to other companies.

[1] https://support.apple.com/en-us/102651

[2] https://developers.cloudflare.com/ssl/edge-certificates/ech/
Redundancy may be the method they implied. I've seen it happen to my partner and several colleagues. It's laughable how easy it seems to tailor a redundancy to 1 or a few specific people, and the cost of fighting it is not worth it.
With differential backups there's only 2 artifacts, the full and the diff. If you make another differential backup you overwrite the previous diff so it's always the changes since the last full backup.

With incremental it's full backup + inc1 + inc2 +... forever, each backup depends on the previous.
Thanks,
It's the image props, check to generate QR in docs,
will update the docs so it's not confusing, thanks for pointing out
I wouldn't mind a platform that tries to bring back the old model - perhaps by limiting the amount of time a property can be made available, or something along those lines?
> We can be mostly confident that the compiler will generate correct machine code based on correct source code.

Recently got email about gcc 14.2, they fixed some bugs in it. Can we trust it now, these could be the last bugs. But before that it was probably a bad idea to trust. No, even compiler's output requires extensive testing. Usually it's done at once, just final result of coding and compilation.

> Their output is not deterministic

yes.

> Their weights and the sources thereof are mostly unknown to us

Some of them are known. Does it make you feel better. There are too many weights, so you are not able to track its 'thinking' anyway. There are some tools which sort of show something. Still doesn't help much.

> We cannot really be confident that an LLM will produce correct output based on correct input

No, we can't. But it's so useful when it works. I'm using it regularly for small utilities and fun pictures. Even though it can give outright wrong answers for relatively simple math questions. With explanations and full confidence.
A long distance function call, that invalidates everything on your cache.
Do these companies simply sell verilog source trees? Or do they deliver fully packaged wafers?
It must be like a lottery for North Korean devs. Get a job somewhere, you earn dollars for the regime. Get a job with a US cybersecurity firm and pull off a Jia Tan? Now that would be worth a medal from Kim Jong Un himself.
Anyone else noticing the volume on North Korean reporting and headlines creeping up lately? I do not, in the current political climate, consider any of this a good sign.
i see that kind of thing in job ads all the time too.
You missed the key word....

> Actually suspected

I actually suspected my grand kid ate my icecream.
The icecream was in the fridge, grandkids use the fridge. The icecream was not in the fridge, grandkids take things out of the fridge. The icecream was likely eaten. Grandkids eat icecream. I actually suspect the grandkids ate the icecream. (Turns out grandma ate it with her friends on top of some apple pie.)
The main expense is the testing needed to bring the drug to market, the cost of initial research is peanuts compared to that
(Author here)

> Does it also mean that in real world usage, one slight misinterpretation or misevaluation of your metrics and you're liable to 1000x more than you planned to?

Unlikely. You can see why in these two examples that really happened:

One user I spoke with said they assumed "queries per second" is calculated by (number of searches) x (top-k for each search), where "top-k" is the number of results they want back. I don't remember their top-k but let's say it's 10 -- so they were entering a value for "queries per second" that was 10x higher than it should be and they'd see an estimate around 10x higher than they'd really be charged.

Another user thought you get "number of vectors" by multiplying the number of embeddings by the embedding dimensionality (1,536 is a common one). So they were entering a value literally 1,536x higher than they should've. Their actual usage would be calculated (by Pinecone) correctly and not be that high.

Vector dimensionality is a basic concept for AI engineers and QPS is a basic metric for DB admins, but Pinecone sees lots of users who are either new to AI or new to managing DBs or both.
Certainly someone of obvious Asian descent and accent who introduces themselves as “Simon” is not a red flag. As you say, some people understandably prefer not to hear their real name mangled every day.

But someone of obvious Asian descent and accent who introduces themselves as “Simon Cartwright” and has vague tales of growing up in London… again, it’s possible, and we should treat each individual with respect and assumption of good intent, but that might make me dig a little deeper.
OP said > The people we drop bombs on are citizens of somewhere too.

Nowhere in that sentence did I see an insinuation that we were talking about civilians (and I was specifically talking about Russian soldiers). But when we discuss collateral damage, yes that happens sometimes and its awful. However, take how much collateral damage Ukraine causes in Russia when fighting back and how much Russia causes in terms of civilian lives, infrastructure, etc. and it feels pretty clear to me that democratic nations are probably net better at minimizing collateral damage (and generally following international norms and treaties for human rights) than authoritarian regimes.
> I’d guess that there’s a chance that they specifically targeted this company

There's even a chance this never actually happened as presented.
Prime example of Betteridge's law of headlines.
Even in WhatsApp which has E2EE they have reporting mechanisms so if someone starts a broadcast channel with the explicit intention of promoting illegal behaviour, it can at least be taken down by reporting. Personal experience and second hand accounts tell us that Telegram was known to mismanage these things in ways that a company of its size and impact cannot ignore.

There’s a lot of false dichotomy in the ongoing discussions here which assumes there’s a binary “control to the gov” or “freedom for all” choice. It’s a spectrum where at the most basic level, a robust process to handle reports of illegal activity should be accepted.
Faux redundancy is indeed a tool that can be used by smaller NZ employers. It's risky though for bigger companies to try it and it would never work for the homogeneous group that is Uber drivers, since they all effectively fill a single identical role, and redundancy must be about the role, not the person(s) filling it.
SpaceX's Polaris Dawn Is Sending Astronauts to a Literal Radiation Belt
Yeah, it's hard to know exactly what they meant by that comment, but it seems pretty presumptuous to judge whether someone's name "matches" their ethnicity for so many reasons, not the least of which is that there really isn't any way you should know for certain someone's ethnicity when they're applying at all! Asking about it in an interview is certainly illegal, and even in countries that are mostly homogeneous, there are going to be at least _some_ immigrants (maybe not for North Korea, but the entire premise of the article is that the applicants aren't claiming to be from North Korea in the first place)
I'd switch to Userify if you have a team to distribute keys for, because it's ultra-lightweight and also keeps you from messing up permissions on the ssh key/directory, which I've done too many times! (also it does sudo which is quite nice)

Also, restarting ssh will not boot you out of the session (your session has already been forked as a different process), so leave your terminal window open (to fix any screwups) and then log in on a separate window on the new port and just make sure you can get in.

For backups, don't set up logins from your main server(s) to your backup server; log in from your backup server to your main server. That way, if someone breaks into your main server, they can't get into your backup server.
Hermeto Pascoal is a fantastic Brazilian musician and composer. Maybe this Youtube video will serve as an introduction for English speakers: https://www.youtube.com/watch?v=461qtZqpOtc

(I have no affiliation with the above channel)
Stripe's MRR number is NOT correct for my application (shows as higher by 1-2%).

I have an external script over their API that calculates MRR, and every single tool that calculates MRR has had a different number.

It's actually a huge PITA, although my custom script works well enough.
> I don't follow. If your system requires a central node that can reliably generate unique auto-incrementing integer IDs, why bother with UUIDs at all?

I also don’t follow. I thought your initial assertion was that auto-incrementing integer IDs weren’t always possible, thus the need for UUIDs.

Monotonic ints, or more broadly anything k-sortable, are generally optimal for RDBMS indices due to most indices being B+trees. That’s why there’s such enormous effort towards NOT using UUIDv4.

> just use UUIDv7

Indeed; this is my recommendation when devs insist they can’t possibly use integers. Personally, I maintain that most places can use ints, it’s just that they’ve hideously over-complicated things to the point that it would be far too much work.
Someone on the inside being obsessed with the product. As a user.

There's a night and day difference between products that get used by the people who make it and those who ship it off to the user and wait for the response.

This is primarily aimed at B2C but there's plenty of cases where it applies in B2B as well (if you can somehow use your own product).

Dogfooding is one attempt to mimic this, and it can work. But what I really mean is someone inside the company actually cares enough, is interested enough, to use the product for themselves. Without being told to.
Yes, although unfortunately sometimes they are soldiers of fortune from around the world lured through false promises to serve. https://www.dw.com/en/how-russia-is-recruiting-foreigners-to...
Awesome, thanks for trying it out! This is great feedback.

I'd love to connect this up to Flux.1 and have auto-generated hero images at the top! And getting the sound right will be a huge part of it, since it's basically an audio-first experience. I'm wondering if it would work to change voices for the dialogue when you speak to different people in the world...

I've noted that save games are essential! Thanks for playing it through long enough to think about that :) I'm glad you enjoyed it enough to keep going!
Isn’t it already happening?
>If not, why?

Because that's the trade-off you make when you want high entropy unique usernames to prevent enumeration attacks. They become long and random. There's still a "phone number". It just looks something like 4sci35xrhp2d45gbm3qpta7ogfedonuw2mucmc36jxemucd7fmgzj3ad. You know that string and you can make a computer somewhere in the world accept some GET requests. Who knows if Flask, or whatever is part of the stack, has zero-click vulnerabilities.

And yes obviously I would recommend Signal to anyone who wants content privacy.
Since Signal offers only narrow by-policy metadata privacy (unless you're on burner hardware), I'd ask them if they wanted metadata privacy, and if so, I'd point them to the direction of Cwtch https://cwtch.im/. I wouldn't recommend TFC unless endpoint compromise was part of their threat model. It's complicated and nuanced in the deep end of the pool.
> Before long, a dedicated Slack channel was created, which accrued over 550+ messages representing opinions from every corner of the company. Another few thousand words and dozens of hours were spent in meetings discussing what we should add to the calculator to fix it.

This is a symptom of over hiring. Too many people removes agency.

When people lose sight of what's actually important and feel that they must reach consensus by committee then there are too many people.
Also, the solid rocket boosters (the 2 things next to the big orange thing) were jettisoned into the ocean, then collected, refurbished, and reused.
I didnt attend this year but was super impressed at how DEF CON and Raspberry Pi worked together on this years badge + announced the release of RP2350 on the same day DC32 started!

I immediately put an order in for one and should get it pretty soon.
So... about docker, did they backtrack on their licensing landgrab?

About a year ago I swear everyone was going to podman, but in the last few months I see nothing but docker references.

Podman is supposed to be drop-in. Well, it was advertised. I haven't touched anything in six months.
if it is smaller, doesn't it mean that it has less code to execute hence should it be faster? Trying to understand better -- this is something completely new for me
> In an internal poll, 7 of every 10 people in the company thought the version with the calculator would do better.

An interesting and pretty classic dynamic - I liked the article overall but I think this point didn't get the highlighting it deserved. If 30% of the people involved think that the calculator is a bad idea that signals a potentially huge problem even if the majority think it is fine.

Be alert to the politics here. Although it seems otherwise, people generally don't like to criticise other teams in the business unless there is a political gain to be had. By extension, if I polled the company and asked "is this thing my team did a net positive?" I'd expect the default position to be "yes" as people wouldn't want to stir the pot for no reason. 30% of people signalling that it might be value-destructive is much more significant than it seems because of that. It should trigger some fairly thoughtful consideration of why exactly they thought that.

In this case they seem to have indeed been alert to all that and the story has a happy ending, which is nice. But this poll result was always evidence of a serious problem.
> more than 30 hours a week for Uber, they're effectively Uber Drivers

Every Uber driver I've ever had also did Lyft and would go with whichever was paying better or more active or would get them where they needed to be at the time. So even if they're driving 30 hours a week, that time is split between two companies.
Moderate disagree. It connects drives with riders much better than before, making taxis viable outside urban cores. There are numerous stories of "try hailing/calling a cab in X scenario" where cabs just wouldn't show up.

The innovation you mention also varies by jurisdiction. In some places, Uber's are licensed taxis, so clearly there's more than just breaking the medallion monopoly.
One of my Uber drivers just drove during school hours as he dropped his grandchildren off at school and then picked them up at the end of the day.

But nearly all my Uber drivers have been immigrants working full time or more.
It doesn't look like she will be the Swedish government's pick:
https://www.politico.eu/article/sweden-picks-next-eu-commiss...
Telegram has also absolutely no filters, so it can be filled with lies and propaganda without any response from the platform, except, only if it is russian government making requests. Your responses remind me of russian bot playbooks, tbh. Are you one?
You might not know traffic laws out there. In Southern California you can get ticketed for not going with the flow of traffic, even if the posted speed is 65 but everyone is driving 80.
UUID v7's timestamp is a game-changer for Databend. We're using it to quickly locate metadata files on AWS S3 by timestamp, making operations like vacuuming much faster.

PR: https://github.com/datafuselabs/databend/pull/16049
No one told Jack Welch
Intel can just buy back their startup in three years if it worked and they need it. Probably cheaper than trying to develop whatever in-house and with better chance of success.