skysight-inc/HackerNews huggingface dataset:
Application Security Engineer

Location: Canada (Toronto)

Remote: Yes

Willing to relocate: No

Technologies: Go, Python, Nodejs, AWS, Azure, Linux

Email: hnappsec@gmail.com

Certs: OSWE, and CISSP

I’m very technical and hands-on, love to dive deep into the code and come up with ways to bypass controls and security mechanisms.

Have 12 years in cyber security, deep knowledge of attack methods, and defenses including tradeoffs.

I also have experience in detection engineering, red and blue teaming and incident response.

On the technical side, I’ve done deep dive in complex code bases and have found lots of vulnerabilities - many of them high and critical, have written detections that ran across thousands of customers and caught some of the famous APTs days before their news became public, also wrote a tool that won SANS Award for tool of the year.

On the leadership side, I’ve built teams and processes from the ground up, onboarded engineering teams to new security practices with minimal friction, managed vulnerabilities at scale, launched security champion programs etc.
FWIW CMG doesn't claim that this is from smartphones, and instead ambiguously refers to smart home devices (and I would be shocked if say, Google allowed a third party to access its microphones for Google Home devices). Similarly, there is no way that the FB app is doing this (for one thing, you'd see the microphone icon on your OS) — the "FB partner" here just means FB buys some rolled-up marketing info from them, probably with zero idea where the data comes from.

If I had to guess, I'd bet this is from shady smart TV manufacturers, who have a long history of spying on their users and selling that data.
"This post is for paid members only", archive.is doesn't work there.
Same with Android nowadays too. I don't understand how this can happen without the OS's knowledge, unless it's a major security exception made by apple+google on purpose (which I doubt as you do), or a major zero day vulnerability they are exploiting, of which there would probably be evidence of this.
I actually have the code written for my own payment processor (including crypto)--that's the easy part. The hard part is the money transmitter license fees, which are insane and make it impossible to bootstrap.
To be relevant to blue/green wouldn't they need to not just collect a boolean but collect the type of colorblindness?
I’m not here to convince anyone as I could care less what layout you type in, but are you really saying a few days or weeks of typing slightly slower isn’t worth a lifetime of increased ergonomics and comfort?
I'm not convinced, both android and iPhone have a feature that shows you when it's recording microphone or camera [1] [2]. Moreover, those things require app creators to request microphone and camera access.

If this happens, it's likely limited to when those indicators are lit. App creators need to get that permission from the OS and they can't override the light.

[1] https://support.google.com/android/answer/13532937?hl=en#:~:....

[2] https://www.asurion.com/connect/tech-tips/how-to-tell-what-a...
This is total rubbish.

Here's the story: in December 2023 it emerged that Cox Media Group had a rogue ad sales group who had been capitalizing on the widely believed conspiracy theory that "Facebook apps listen to your phone's microphone and target ads based on it" - by pitching that in vague, confusing terms to their potential ad customers.

The moment this started getting wider coverage they deleted all mentions of it from their site, and any media organization who contacted Cox were told words to this effect:

> CMG businesses do not listen to any conversations or have access to anything beyond a third-party aggregated, anonymized and fully encrypted data set that can be used for ad placement. We regret any confusion and we are committed to ensuring our marketing is clear and transparent.

That's from https://www.techdirt.com/2024/08/29/cox-caught-again-braggin... but there are plenty more like it if you search the web for "CMG businesses do not listen to any conversations".

My translation of the above: one of our ad sales teams was misleading potential customers and we told them to stop.

The only thing that's new this week is that 404media got hold of the pitch deck PDF that Cox Media Group had been using back when they were pulling this scam - you can see that document here: https://www.documentcloud.org/documents/25051283-cmg-pitch-d...

Read that deck and your "this is a total scam" senses should be ringing loudly.

The problem is... convincing anyone who thinks that this is happening is basically impossible.

"Facebook spied on my through my microphone and showed me ads, I know they did because I talked about a holiday in Croatia out loud and saw an advert for a hotel in Crotia few minutes later"

This doesn't account for the thousands of times they had a conversation about a holiday and did NOT see an advert for a relevant product a few minutes later. It only takes one coincidence for people to be convinced this is happening, and no amount of denials or appeal to rationality (battery life, too-many-people-in-on-the-conspiracy, phones don't let apps just listen without showing a visual indicator, etc etc etc) will convince them otherwise.

There's a great podcast episode about how hard it is to talk people out of this from 2017! https://gimletmedia.com/shows/reply-all/z3hlwr
Exactly. So the chronic effects that the study found are not linked to the lack of a job, but the lack of income that a job brings. Because people without a job but with money don't suffer those effects.
This article, nor any other article about this subject actually identifies which devices are supposedly always-on listening to you.
How can mimicry fail if the mimicry wasn't attempted? Mimicry again leads to mastery.

Additionally not all learning requires some deeper understanding. Sometimes the attempt to mimic is all that there is.
Great site.

I wish they had a Turquoise option.
The iOS orange dot factor needs to be explained. Maybe Meta exploits a zero day to get access w/o orange dot? I would be extremely surprised if they were granted a hidden API by Apple that allows this. Zero upside for Apple.
I was about to write a similar comment, but I think they're referring to other people's keyboards.
There's absolutely no evidence presented here
Swedish tactile crossing map design [video]
Neat website, and lovely to use. I wonder if the test needs to be slightly more sophisticated?

My results seem to depend on whether the starting colour is blue or green. If it starts with blue I will categorise more of the turquoise as blue, and if it starts as green I will categorise more of it as green.
You mean the glorious revolution that is also called the Bloodless Revolution?
I have that experience. Like every other experience the novelty wears off and I find myself keeping the vibe to a room because it’s distracting; lizard brain stays connected to music and I forget why I went across the house.

In the end I use it so sparingly (social gatherings) owners of detached homes without shared walls, could save the money and time and just turn up the volume.

That said, as always, YMMV
This feels like the kind of article that will confuse folks into more confirmation bias. The claim doesn't even seem to be that Meta/Alphabet are the ones doing it, but a totally separate advertising company who would have no control over the apps from those companies.

I hate how so many people think this is how this stuff works when the actual methods are almost scarier because they don't rely on something as clear as our conversations.
Twelve years later:

https://en.wikipedia.org/wiki/Days_of_May

> The BPU had made its reputation amid the spontaneous rioting that had accompanied the fall of the First Reform Bill in 1831, assembling 150,000 protesters at Newhall Hill in the largest political assembly the country had ever seen.[15] Its threat to reorganise itself along semi-military lines in November 1831 had led to suggestions that it was trying to usurp the civil authority, and made a deliberate, if implicit, threat of the possibility of armed revolt in the event of the formation of an anti-reform government.

Ultimately led to https://en.wikipedia.org/wiki/Reform_Act_1832 which dramatically expanded the voting franchise.

The French Revolution, and the almost total destruction of an aristocratic/noble/royal system, was the subtext of every bottom-up political movement in Europe in this era.
Oh that was fascinating! Thank you for bringing those standards up—it seems like the US legal system landed in a similar place as my intuition. “Imminent Lawless Action” is where I’d also draw the line.
He's moved the URL here - the site continues to be updated - https://digdeeper.club/articles/mozilla.xhtml
True, no mention of Mr. Robot though I'd say that was minor compared to whatever else they've been pulling off.
Disgust aside, what would give them the legal right to do this? Is this covered by the TOS of the Facebook android app?

If this is just plainly legal without even the fig-leaf of a TOS, why do we even have the 4th and 5th amendment at all? It's routine for intel/police agencies to purchase ad profiles of citizens, why bother with any fancy NSA super-surveillance when you can just buy an entire history of private conversations and behavioral data from CMG or any other advertiser.
You draw the 2D projection of 3D objects manually instead of drawing 3D geometry and the hardware draws the 2D projection to the screen. The other is the gameplay is a video of a 3D scene that has been prerendered on a more powerful machine.
signed up here just to let you know the mail isn't going through. Do you have any other socials I could reach out to you on? discord/linkedin/twitter?

550 "The mail server detected your message as spam and has prevented delivery."
Specifically for those companies, probably not.

But it could also be an obscure feature, or simply a bug that FB's famously clever and eager-to-help engineers found a way to exploit.

It wouldn't surprise me at all. Recall that Mark himself has acknowledged that he tapes over his laptops' camera holes when they're theoretically not in use.

Why? Because he knows what's up.
Yes, it is strange, reverse engineers/debuggers could detect this for years and publish it on conferences such as Black Hat, CCC, etc.
What makes you think it’s collecting any information at all?
Interesting. My wife and I both took this. We used the same laptop at the same screen settings. I'm slightly more bluer than she is, but we are both pretty squarely less green.
Does it depend on the monitor's color setting?
I think this is flawed. You quickly end up on a color that's clearly not "blue" or "green" and you're unlikely to keep hitting "this is green" several times in a row, conceding that ok, fine, maybe this is blue, whatever. You're basically measuring how many times people are willing to click the same button in a row.

Edit: Possible improvements: changing the wording to "this is MORE green" and "this is MORE blue" and randomizing the order in which they are shown, somehow. I realize you're just doing some kind of binary search, narrowing the color range.

This is not to mention color calibration of your monitor, or your eyes adjusting / fatiguing to the bold color over time...
I got "Your boundary is at hue 167, greener than 86% of the population. For you, turquoise is blue". I think I consider darker and yellower colours as green - for instance tennis balls are firmly green to me, but a lot of people say they're yellow.

I wonder if this has anything to do with your upbringing. I grew up on a farm in a dry part of Australia, where the grass didn't often get very green. Most of the year it was yellow. If you associate green with grass and the grass is yellow, maybe you associate green with a yellower colour?
Am I missing something? The ambiguous ones are neither blue nor green, they're just cyan.
As someone who has occasional wrist pain and is fluent in both QWERTY and Dvorak, the latter is significantly less painful to type with when my pain is present. I believe that that indicates that it is less strenuous.
I wrote one for a project that captures a portion of the DOM and sends it to an LLM.

It’s strips all JS/event handlers, most attributes and most CSS, and only keeps important text nodes

I needed this because I was using LLM to reimplement portions of a page using just tailwind, so needed to minimise input tokens
Which one? Do you have a link, I'd like to try setting it up for myself
ya maybe you have a point here. i did a lot of work on modafinil back in the day.
I just had a go at that here: https://news.ycombinator.com/item?id=41430448
But do people still steal copper to sell for recycling? (I suppose I should ask whether they ever did, but I think it's been documented.)
Hey I got 179, which the site says is 1 away from exactly halfway.

Being good at the difference between green and blue is normal to want and possible to achieve!
The daily mean pretty much everywhere sits around low 30s because the night temperatures bring it down. That's intense though!
I suspect it tests your monitor and monitor calibration as much as your color perception. In particular, sRGB displays have a pretty severely limited green gamut. If you have a wide-gamut display, the test is probably gonna appear different.

But another problem is with displaying the colors essentially full-window, which is going to be nearly-full-screen for many users. When we're staring at a screen with a particular tint, our eyes quickly do "auto white balance" that skews the results. It's the mechanism behind a bunch of optical illusions.

To address that last problem, I think the color display area should be much smaller, or you should be shown all hues at once and asked to position a cut-off point.
Guess you ran out of arguments? Hahaha
The author of the site says that he made it using claude. It would be interesting to find out what, exactly, Claude generated.
I also don’t understand the appeal. I never wrote boilerplate code in my life.

I recently spent the whole day debugging open source third parties on multiple OSes while using Wireshark to understand how the whole thing worked. Then I typed 5 lines for a fix in less than 30 seconds. How would an LLM help me here?
Your boundary is at hue 187, bluer than 98% of the population. For you, turquoise is green.
I assume that would defeat the purpose, since turquoise is blue and green. And while for most the more initial more obvious blue or greens are easier, when close to the middle of in between blue and green (aka turquoise), that's where it can get confusing, and this test helps to show if your perception leans more towards blue or green and by how much.
You and I have the same name for things that are blue (mostly). That's what this test examines. But what if what I see as blue is actually your red?

Is this even knowable? Like if you were to see through my eyes and you looked at the sky would it be what you called red?
This one incident in English political history appears more violent than, say, the US Kent State massacre:

The Kent State shootings were the killing of four and wounding of nine unarmed college students by the Ohio National Guard

Is it your position that the US state has been more violent toward citizens than the "liberal constitutional monarchy" in the UK, less violent, or about the same.

Modern English monarchy history easily traces back to 1066 and the political history to the issue of the Magna Carta in 1215.

It's selective to limit political violence to last Civil War (of many wars | rebellions of the last 800 years) and blinkered to claim that the modern UK doesn't put the boot in (eg: Thatcher during the miners strikes .. instigated by the Thatcher government in a deliberate ploy to break trade unions across all industries).

https://en.wikipedia.org/wiki/Ridley_Plan

https://en.wikipedia.org/wiki/Battle_of_Orgreave
Your boundary is at hue 189, bluer than 98% of the population. For you, turquoise is green.

That is interesting, I usually address my monitor to make it look darker and more lean toward warm color, guess this will affect the result
>If your child is depressed then you'd better consider their environment and social networks to be suspect. If you can't identify problems, then YOU ARE the problem

I don't know your personal story in detail, but with this, you seem to focus way too definitively on external causes for depression. There's ample clinical and other evidence that many cases of chronic depression are largely internal, chemical and won't be fixed by changes in environment, surrounding people etc.
Why don't you modify the keyboard firmware so the layout switching and such happens on the keyboard, instead of intercepting things on the OS?
It's probably simpler to ask what claude didn't make at this point.
hah! certainly respect to Terence Tao and his Fields Medal (!!!!) .. probably not worth beating into the ground .. '-)
I’m still confused. The letters being in the wrong location doesn’t affect me in the slightest. My laptop is printed with QWERTY keys, and I type on it with DVORAK. What’s the issue?

And if I need to use someone else’s computer I just type in QWERTY. It’s not like I forgot how.
> increased social services and poverty interventions

In the US this is the job of local government, though the federal DoE does it's part (eg. Special Ed faculty salaries are underwritten by the Federal DoE).

There is increased support for these kinds of policies across the aisles through a mix of "early childhood equity" (D leaning) and "increased fertility" (R leaning) policies and talking points.
But there’s the constant switching cost any time you encounter a keyboard that is t yours
Give it a little time.
this phenomenon is easily experienced while fighting an Elden Ring boss... very often players will spend 2-3 hours fighting a boss, learning the patterns and trying their best... and sometimes its just impossible. but then you sleep and boot up the game the next day and you get it first or second try. Its a really well known thing in the DarkSouls community and it is common advice.
That’s the whole point I was trying to make, of course. Physical objects are easier to complete. Software never becomes complete, in many cases.
Location: Denver, CO & Sterling, VA
Remote: Yes
Willing to relocate: No
Technologies: iOS, Swift, Mvc .Net, C#, Sql
Email: markamaro1@yahoo.com
Social Networking apps mostly.
I think https://doi.org/10.1017/9781009159418 has a different framing of the issue. There's a fundamental conflicts between policy implementation and policy effectiveness.

If policy is designed locally or at least allowed to be adapted to the local context, it could be more effective but with the possibility of inconsistency; Otherwise the policy is implemented flawlessly but with the cost of effectiveness because of lacking local context.

Any attempt of increasing legibility means a policy being implemented consistently across different contexts so everyone can assume the same thing regardless of the context, and, as expected, not able to incorporate the complexity of local social orders.
I got a very high "green" threshold too - 95% averaged across three runs, since my first result seemed surprisingly high.

It's funny though - I feel like I'm less likely to go green on the other direction too. I'd probably say a tennis ball is right on the line, and seems more yellow than green to me too.

Maybe I'm some sort of green gatekeeper, and I don't want to dilute my personal definition with lesser greens. Green is my favorite color, I'd say, so maybe that's something to do with it.
Location: New York City, NY
Remote: Yes, hybrid & in-person okay too.
Willing to relocate: No.
Technologies: Python + Power BI for Big Data, VBA for Excel, Apps Script for Google Sheets, SQL
Résumé/CV: Please email for full resume. https://www.linkedin.com/in/vsigler
Email: mssigler -at- gmail.com

Financial Controller with 10 years experience, including strong FP&A background (scenario modeling, DCF/ NPV/ 3-linked-statement business valuations, budgeting, forecasting, cash flow planning, recently getting into predictive analytics, etc.), and healthcare medical billing revenue cycle management. Excels at process automation, technical accounting, documentation, compliance (GAAP, etc.), risk management, audit readiness, revenue optimization. Experienced in ASC 606 Revenue Recognition, tech enthusiast, finance and private equity experience as well.
How often is that? And, what cost exactly? Just type in QWERTY. It’s just not a big deal.
Location: East Java, Indonesia
Remote: Remote, Hybrid or On-Site
Willing to relocate: Yes
Technologies: Professionally, TypeScript, Kotlin, Flutter, Go, PHP
Résumé/CV: gemini://bentinata.srht.site/resume or https://bentinata.com/resume
Email: underscore at bentinata dot com

Hi. I'm Ben. Been looking to work on environment projects, and/or project that is using rust. Something that can either make a positive impact for a lot of people (too naive, I know), or something that hone my technical skill. But since I'm a parent now, my primary focus been stability. I have accepted the fact that dream job is called dream job for a reason.
Complaining about one’s own failure to read the title of a document seems like an own goal.

It’s an obvious detail, and it’s right there in the header.
I mean, it obviously does, to some extent. I can certainly manipulate my settings to make colors very different than the "default."
It's very cultural. For example, Japan used the same word for green and blue, so their green light on traffic lights is as blue as possible while conforming to international standards for the light to be "green".

Also, there is a pretty well done video by Vox on how color names are influenced by culture https://www.youtube.com/watch?v=gMqZR3pqMjg
It’s true that we currently have few languages in our dataset, but by supporting Nufi, we are supporting all Cameroonian languages since their alphabets have been standardized under the General Alphabet of Cameroonian Languages (GACL). Additionally, we support the CLAFRICA code, which allows for typing in GACL. This GACL indirectly supports other African languages as well.

Regarding Geez and Amharic, the objective was to support a language distinct from Latin. Its implementation allows us to avoid being limited to Latin-based languages.
Company provides a way for Facebook, etc. to state, truthfully, "We do not listen in on conversations". The Facebook marketing partner does that for them.
Big Tech representatives have been jailed for failing to comply with judge orders. I remember those news... They were told to do things like wipe out a woman's nude pictures off of search results if not the entire internet. Judges even used their success against them. What do you mean it's hard? You're Google right? Maybe use your smart people and your trillions to figure out a way to comply?

In Brazil, Judges = Gods.
The Yubikey Is the Digital Seatbelt We Need
> paranoia

because you are smoking pure thc strains - ones with cbd do not do this (i.e. indica)
Location: Toronto

Remote: Yes

Willing to relocate: Yes

Technologies: Python, Elixir, Ghidra, Frida

Email: liartur19@gmail.com

If someone is looking to hire a young, moldable, and motivated individual... im the guy your looking for.
If you had to say that cyan was more blue or green, which would you pick?
Yes, that's the point of the test, to see how you perceive the ambiguous ones. That is, at the end it shows the chart with the left 50% is green and right 50% is blue. The turquoise in the middle is what is hard to tell if green (aka on the left 50% or blue aka on the right 50%). For many the result line isn't down the middle but more to the left or right, and thus shows if you see turquoise (the ambiguous colors) more as blue or green. The text at the bottom of the test should put the answer in words/numbers.
God I miss tango. 2 kids put our 2 years of lessons to a screeching halt.