skysight-inc/HackerNews huggingface dataset:
The value of iphones used to be that they are more constrained but more polished than the droids.

With unnecessary UI fluff, no attention to detail, OpenAI integration, side loading and other stuff I am really not liking where Apple is headed. It starts to feel like design by committee and all users and regulators are in that committee.

Where's vision and backbone?
You guys do do read tests occasionally, and transfer the data old drives to newer drives right?
I would wait and see, society-wide changes that disagree with the mainstream dogma appear in popular press years after it happens
VPN auto-connect per SSID is also useful.
Overall it is an improvement over the old and the quirks are adapted to in a few minutes.
Even open HW/SW requirements / standards don't protect against this.

See Thompson's "Reflections on Trusting Trust": <https://dl.acm.org/doi/10.1145/358198.358210>.

More recently, and very much part of the extant cybersecurity landscape are zero-day and backdoor vulnerabilities which are prevalent in both closed and open-source software.[1] And the typical end-use buyer is not equipped to audit code or even interpret audit assurances (e.g., some level of certification on a device). That might work for large-scale organisational buyers (corporations, national governments, major NGOs, militaries), but would challenge even many of these.

TFA goes into depth on how HW characteristics already vary tremendously even within product lines and production runs, and firmware modifications could weaponise otherwise benign-seeming hardware.

Open SW/HW might help, somewhat, but not against a motivated state-level or other advanced actor (e.g., major narco syndicate, independent militant organisations, and the like). The requirement is far from sufficient however.

________________________________

Notes:

1. I'm trying hard to not open that particular religious war, though my bias is that evidence tends to suggest F/OSS is more secure than closed source in general.
so many red-flags, i don't know how someone could go beyond and click this link.
I just don't get it, how hard it could be? How expensive this could be? Because lots of times they just pay these damages to the customer, because no one knows how this very secure credit card data was compromised. This baffles me. Someone, please enlighten us, there must be a valid reason - at least from an angle.
Kubernetes doesn't break on itself. This is totally untrue. The only thing that is a timebomb are the ssl certificates it is using but they can easily be checked and renewed.
¯\_(ツ)_/¯ deciphering magic algorithms.

Very much appreciate the bug report. Thank you!
Bash namerefs for dynamic variable referencing
That is an awfully specific question. Here are a few examples of what could happen though:

- Malicious code on a webpage compromises your computer.

- You download unauthorized software to install, which possibly even comes from a known-bad source.

- Your employer could have trouble establishing that their patent is legitimate because you accessed documentation from a competitor.

Even if the worker avoids liability for costly mistakes, the company will be set back. You can also be fired for breaking rules like that even when there are no actual damages.
To prove that the car rental company has seen the driver licence, they just need to show the judge a copy of the licence which is e-sealed by its issuing authority. No need to include a non-repudiable proof-of-possession signature of the holder. Having that in addition would just introduce legal ambiguity and information asymmetry to the disadvantage of the holder.

The opponent may still claim that the car rental place is showing a copy that was obtained illegally, and not in holder presentation. To avoid such a claim, the car rental company should ask for a qualified e-signature before providing the car key. The signed data can include any relevant claims that both parties confirm as part of the transaction. To provide similar assurance to the customer, the company should counter-sign that document, or provide it pre-sealed if it is an automated process.

Note that with the EU Digital Identity, creating qualified e-signatures is just as easy as presenting digital credentials.
I wish we didn't have to sign up to use a browser in the future
SIMD.info - searchable reference tool for C intrinsics of all major SIMD engines
> The internet at large seems to have gotten pretty good at spotting AI art and LLMs posting on sites

I beg to differ. We are at a point where it's almost impossible to know both art and conversation are AI generated. New models like Flux Pro will definitely fool you easily, this is it. The latest LLMs are also very good especially in short interactions to the point it's impossible to know. The only real issue keeping these models from completely flooding the internet is that they are costly to run, but as costs come down and models improve, we have zero chance actually differentiating AI from human output.
I hope you get two at least. Backups needed.
Yeah, and no mention of if they addressed this.
Passkey Privacy Issues
Error!

Bless your heart.
Funny how they don’t mention the time your employer doesn’t get from you while you commute.

I returned to the office mid-Covid in part because, when remote, I was working too hard at home. At the office, I was able to waste time during the day shooting the breeze with the few other folks there, and closing my laptop for my drive home reduced the chance of it being open at 10 pm.

Whenever I hear executives go off about return to office, I know they’re probably lazy and don’t understand what makes their companies tick: self-driven work.
Also setting up code tunnels on the workstations I use regularly saves me a lot of headaches.

Sure it's a crutch, ugly and probably unsafe but I'm not a networking guy and need to get my actual stuff done.
"Responding in time" here means meeting a hard deadline under any circumstances, no matter what else may be going on simultaneously. The counterintuitive part is that this about worst case, not best case or average case. So you might not want a fancy algorithm in that code path that has insanely good average runtime, but a tiny chance to blow up, but rather one that is slower on average, but has tight bounded worst case performance.

Example: you'd probably want the airbags in your car to fire precisely at the right time to catch you and keep you safe rather than blow up in your face too late and give you a nasty neck injury in addition to the other injuries you'll likely get in a hard enough crash.
The new Control Center reminds me of the one my Xiaomi had in 2019, which was a weird cheap copy of the latest iOS design at the time.

But the main thing that I personally dislike is the whole customization aspect. The control center always felt to me like a under the hood kinda overlay that you just pulled over your personal phone for a moment. Like it didn’t belong to the OS, but to the device itself. Like the bottom bar that you use for switching apps, or like the volume and sleep buttons, or like the Settings app, or like the menu bar in macOS. It was always there, always the same, no matter what app you were in or whose phone it was. I liked that.
OPEC still sets the price of oil, albeit their control seems to be faltering. It’s a global market of a fungible raw material, so everywhere it is produced matters to domestic interests…
Smart wife. My take on the whole thing is that it's not wise to reason from non-technical metaphors around packages or lawn mowing when the reality is electronic systems. I don't know if it's any wiser but what I like to do is work my way up from the basics. What does delivery mean? Start with two wires, one for signal and one for common ground. (Or just one wire, and pretend you can use earth-return reliably.) If that isn't enough to resolve what terms should mean, consider them with differential signaling. If that still isn't enough to get it, consider them with relay nodes. If at some point "delivery" has changed definitions to suddenly forbid something that previously wasn't forbidden, maybe you've made a mistake.
I think that statement is pretty short-sighted.

Bypassing corporate policy at work is risky. You might bring down negative consequences on yourself or your workplace. You have to understand what you are doing. You have to understand likely reactions.

But also, bypassing corporate policy can have benefits. If I'm more productive or get a reputation as the guy who gets things done or don't get seen as a complainer or just generally produce results because I bypassed a policy, those are all benefits. If I can transform "hey boss, it's gonna be another week on this project because I'm waiting on a policy exemption" to "here it is", that's a benefit.

You have to weigh whether the benefits outweigh the risks for you.
I am not saying docker is the best way to run any app, but could you share a kind of app can't you host in a docker?

I mean on rootless containers, yes, a lot of apps that need access to the underlying system might not work, but they are usually system stuff, not the kind you want to host on a VPS anyway. But when running as root I can't think of many.
People think they can recognize an LLM, but what they're actually recognizing is the ChatGPT default prompt.
Not to mention, armed police raiding your home, especially if you live in Germany.
Fermat's Last Theorem – BBC Documentary
> while sorting this out for your personal edification.

I wasn't rude to you, and rudeness won't bolster your case.

> Just because there are a lot of terrible liberal arts programs doesn't mean it can't be done well.

The difference is that, with a STEM degree, if you design an airplane and it doesn't fly then you're wrong. There's no way to delude oneself into thinking one's design works.

There's no such corrective force with liberal arts.
I tell you even worse group. Stock owners. Those people put some money to fancy ETF or investment fund. They do absolutely zero work and some how expect that money to appreciate or even give out dividends. While the poor workers of these companies get pittance or sub-standard wages with which they can barely afford nothing. And then those same companies exploit their customers while always pumping up the prices and extracting maximal margins...

Really if these people just died and the companies moved to their workers or customers what would change?

Landlords provide one thing capital. And capital expects returns. Maybe at times there is not enough competition in where capital is spend, but in general it is not that great place to put capital.
Hetzner S3 Storage coming next Thursday
> On the other hand, with security rules you are trying to imagine every possible misuse of the system regardless of what its programmed use actually is.

Tbh you're doing it wrong if you go that way.

Default deny, and then you only have to imagine the legitimate uses.
Which cloud is $30K/month for 200K IOPS? GCE looks like it should be under $200/month for local SSD exceeding 200K IOPS for reads and writes. EC2 i3.xlarge looks about the same price and performance.
>> and people are ok with that

> I've seen no evidence of this. People mostly either don't understand it for feel powerless against it.

Isn't feeling powerless and being ok with it, ultimately the same thing: Complacency
It might be a standard, but for a long time the licensing costs were exorbitant, and that likely stifled adoption. While licensing costs have come down, the pushback against HEIC’s pricing led to the development of better, royalty-free alternatives—including JPEG XL. Thank god they went with an unencumbered standard this time.
Just to let you know, even github themselves use multiple domains instead of just subdomains of github.com (see githubnext.com).

So, I wouldn't blame the victims here if the service itself does not realize why that is not such a good idea.
As someone allergic to grass, I'm in the same boat. Would love an explanation as to why "touch grass" has positive meaning.
> I'm not sure I can exactly describe what it is about the GPTbots, but they remain fairly obvious.

What makes you so confident? This sentence, on its own, sounds pretty toupee fallacy.
> On the other hand, in real life there aren't unlimited numbers of messages and you rarely want to accept infinitely stale messages either, so it's a bit moot.

My understanding is that these happen IRL all the time in the guise of healing a network split or rebooting crashed nodes or bring new uninitialized servers into the system. Of course, IRL you usually translate the result to needing a different strategy to bring these systems up to speed beyond a certain threshold. But these thresholds and strategies and changing the number of nodes in the system are application-dependent, so the fiction of unbounded messages/memory/time helps focus the formal analysis and result.

In the context of, say, a distributed KV store, it cautions you that unless you have said other strategy, you will end up with an inconsistent system or failure state if your message buffers are more space-constrained than required.
cameras usually aren't for the neighbors
Nice! I tried to achieve a similar design with my plain text accounting tool Transity: https://github.com/ad-si/Transity

But this seems to have more programming language like features if I understand correctly. What else is different?
Hard statistics aren't dogma. Church isn't counterculture either.
Copy/paste an HN comment thread into chatgpt and ask it to generate a comment that 50% will agree with and 50% will disagree with. And then observe the engagement.
Is this remote specific? I've seen plenty do online shopping in the office. What's the difference?
Archive / paywall: <https://archive.is/4LlDd>
This article is rage bait. Nothing more, or less.

USA today really should be ashamed of publishing such complete crap.
the developers working with firebase should enforce common-sense document crud restrictions in the rules. that's just how firebase is. everyone knows it.

now, when talking about ARC BROWSER, i am seriously starting to doubt the competence of the team. I mean, if the rules are broken (no tests? no rules whatsoever?), what else is broken with ARC? are we to await a data leak from ARC?

any browser recommendations with proper vertical tabs and basically everything working like it does in ARC?
tl;dr: they aim to hire great people. But doesn’t really explain how to build a great team.
Same for me, on FF you can override it with:

about:config
ui.prefersReducedMotion = 0

https://developer.mozilla.org/en-US/docs/Web/CSS/@media/pref...
Dead Internet Souls
> In a finding that may shock some, 4% admit they fall asleep and 3% take a shower.

Yes I'm shocked how low all these numbers are.
And some places get big downgrades. Look at Detroit for example. Or commercial real estate at this moment... Line does not always cost up so there is also risk involved.
When you tell somebody to touch grass, you're basically telling them that they're becoming overly swept up in something on their screen to the detriment of their mental health and social wellbeing. It might as well be "go call your dad", because the gist is just for you to remove yourself from a situation that's clearly causing you to disconnect from reality, either to your detriment or the annoyance of people around you.

Like that's the baseline that's relevant whether you're saying it to some kid screaming in a video game lobby or some middle aged dude who's going off his rocker in the facebook comment section of his local newspaper. 'You're embarrassing yourself and you need to get some perspective, because the things you're saying don't make sense, and you'll see that if you walk away from the machine for a bit.'
It means leave your gloomy room where the only light soures are screens and your only (social) activity is on the internet.
I feel like everyone takes statements at 100% truth without ever considering the context or the source.

A single reply with nothing but a quote from the person under investigation is apparently enough to squash all wrongdoing.
Article is undated but is from 2021.

The fact it is undated just reinforces my first reaction that this is vapid SEO spam. Plus it's pretty horrid advice beyond say 25 employees. I believe the intended audience is first-time employers, who haven't any HR experience.
It's quite sad that in 2024 we still have people falling for the simplest tricks.

This is almost as easy as it was to call someone and asking them for the number of the modem on their desk and their logins back in the bad old days.

Considering the target platform I'm not overly surprised though.
Mike Valentine, the patron saint of radar detectors, has died
Wow this looks clean (no pun intended). Great speedups as well!
Then you know every time that IP was accessed, the same operative was there.
Fully agree.

I'm pretty sure that even specialists in the matter can be fooled. Not fooled most of the time, but a few times because their attention would be lowered by other things.

My natural reaction is to consider now everything likely-fake unless proven genuine.
Looks like someone already added it to uBlock Origin since I see no cat.

Or maybe the cat doesn't support Firefox...
Whenever you think "not easy" remember that whatever it is, its far easier then what your disabled child has to manage. Whenever you, as a parent of a disabled child, think you have it hard, rememeber that that is just not true and you are exaggregating. YOU have it pretty easy, compared to your child. So please, dont pity yourself, its laughable and sad at the same time.

How do you know? If you ask yourself, is this perhaps too much? The answer is almost always "yes".
This whataboutism we are hearing now about "the energy needed to store your pictures" is just corporate whataboutism, trying to push blame onto consumers.

Let's say you have 2 TB of photos stored. If that's consuming more than 2 watts of electricity on average, the cloud providers have to be quite incompetent (they are mostly not).

2 watts is 1 kWh in 20 days, so 18 kWh in one year. The emissions from 18 kWh in the US is around 6 kg of CO2. This is the equivalent of driving a car for about 20 minutes on the highway, one time per year. Or spending 5 minutes longer in the shower 4 times per year.
Allowing that to be automated outside of users control is just another security problem to solve. Why not go all in on this and let the apps approve all privileges for themselves, right? So convenient for the user... That just contradicts the very idea of any approvals from user.

I actually think UAC on Windows has this done more clearly and is harder to go around. Wonder how that would work if it was extended for more granular permissions that apps can trigger on demand.
For one you can't use Chrome to view those photos.

note: the format was co-developed by Google who also makes Chome.
Weirdly enough, JPEG-XL support is actually fairly decent in Firefox already and there were patches developed by the community that work well for things such as color profiles, animation support etc. I’ve had them in Waterfox for a few years now - it was a purely “political” decision, if you want to call it that, to stop any more progress until recently.
hasbara out in force on hn today
Gosh, only after this comment I understood why so many programmers litter the code with retries, even though they seem superfluous.
It wasn't on accident.
Another fun thing I've noticed is that the volume and brightness bars now have a lot of input latency
Hetzner S3 Coming soon.

"We charge a base price of €0.0096/hour for every hour of Object Storage runtime, up to a maximum of €5.95/month. You receive 1 TB of storage and 1.5 GB of traffic included per hour of Object Storage runtime. If the included quotas are exceeded, additional storage is charged at €0.0096 per TB hour and additional traffic at €1.19 per TB."

This includes 19% VAT.

Cloudflare R2 is priced differently. It will be hard to beat R2, but at least the Hetzner option is nice for users who want to storage everything within the EU / close to their Hetzner servers.
What kind of sexist drivel is this?
On Android, Civ VI has pretty horrible reviews, largely around stability; I think the devices are fine, but I'm not sure I'd cite Civ VI as support for it.
Despite the clickbait title, this is a pretty good example of investigative journalism. The subject of this article was labeled as a nazi online, but IRL he was a "Bernie Sanders democratic socialist" that looked like this: https://x.com/tracewoodgrains/status/1699961106763055176
A problem with numbers is that they are very prone to manipulation. Who gets to decide who is a combatant and who is a civilian? The IDF's computer algorithms like Lavender system categorise large numbers of people as enemy combatants without any evidence or visible reasoning. Who's numbers do you use? Do you include indirect deaths as a result of of IDF action? And on and on. Lies damn lies and statistics.

Regardless of number I think people can be judged on their intent, actions & policies they put in place and enforce. That's what we judge people on in courts of law.
C is compiled to machine code.
If it's your personal assassinate and is helping you for months it means pretty fast it will start forget the details and only have a vogue view of you and your preferences. So instead of being you personal assassinate it practically cluster your personality and give you general help with no reliance on real historical data.
Can you prove you are not a bot? Your pseudo is SUS.
The person saying it is discrediting what you're talking about as non important.

What they really mean is:

"your problem is not important to me"

Because they dont understand your problem, different people have different problems, the people saying it usually have a very narrow/priviledged life.
Do you really want to defend this?
Classic HN reply that’s very disconnected from reality. Most people don’t run ZFS, most people using these tools are using this to self host their apps as it’s cheaper than managed cloud server. Usually on a dedicated or VPS server where by default you run stock Ubuntu and no niche file system.
Windows showing you a popup saying you need to buy a £0.79 windows add on to just open photos taken with an iPhone was always unbelievable. Like some kind of malware or something.
It's quite sad that in 2024 that HN commenters still blame the victim, especially when the original author does a great job suggesting small changes that Microsoft can make to make their products safer for their users.
Yeah let's redirect the conversation again before we can blame israel!
Interesting trends, and a nice read certainly.
Because WebGPU is a API designed for browsers, targeting hardware designs from 2016.
"The only way to control wifi is to include your stupid connectivity group [..]"

Not to defend Apple too
much, but I think the reason is that the toggles in the control group are interdependent. It would be very confusing if you toggle a button and it causes other toggle buttons to switch state that are either far away on the screen or worse - not visible at all.

Take airplane mode for example. The way it works on iOS[1] is that the act of turning it on toggles the other icons in the group off - once in that moment.

It does not prevent you from switching back on WiFi or Bluetooth. So you can end up with WiFi enabled despite being in airplane mode. To complicate matters, this is not true for mobile data.

A cleaner and more intuitive design in my opinion would have been if the toggles were all independent, with airplane mode overruling all. Of course this would prevent WiFi in airplane mode, which might be a desirable use case, and worse: make people avoid airplane mode when they are mandated to use it.

[1] I am curious how Android solved this. If anyone knows, I'd like to know.
Yes but if they had to fix the boiler themselves or they get no hot water - then they would, don't you think?