skysight-inc/HackerNews huggingface dataset:
I always wonder why people not working or planning to work in infosec do this. I get giving up your free time to build open source functionality used by rich for-profit companies that will just make them rich because that's the nature of open source. But literally giving your free time to help a rich company get richer that I do not get. My only explanation is that they enjoy the process. It's like people spending their free time giving information and resources when they would not do that if that person was in front of them.
> Rose tinted glasses, and bias. You seem to have worked only with good developer practices (or forgotten about the bad), and bad DevOps ones. Every developer fully understands React or the JS framework du jour they're using because it's cool? You've never seen some weird legacy code with no documentation?

Not really. I'm mainly in code maintenance so good practices are usually those the team I join can add to old legacy projects. Right now trying to modernize a web of 10-20 old add-hoc apps. But good practices are known to exist and widely shared even between dev ecosystems.

For everything ops and devops it looks like there are like islands of knowledge which are not shared at all. At least when coming with a newbie point of view. Like for example with telemetry: people who worked at Google or Meta all rave about the mythical tools they got to use in-house and how they cannot find anything equivalent outside... and yes when you check what is available "outside" it looks less powerful and all those solutions feel like the same. So you got the FAANG islands of tools and way to do things, the big box commercial offering and their armies of consultants and then the OpenSource and Freemium way of doing telemetry.
I live in Stockholm. Dwells on the commuter rail system here -- formerly at Stockholm Central, now at the new (2017) Stockholm City underground commuter station -- are scheduled for 3 minutes and have been for decades.

The commuter rail service here is a bit of a basket case, but that has nothing to do with through-running practices, which make the system much better than it otherwise would be.
More or less all tariffs and sales tax systems are like this; the rules are _always_ kind of all over the place.

My personal favourite example is when the Irish Supreme Court determined that Subway bread was not bread: https://www.theguardian.com/world/2020/oct/01/irish-court-ru... (Bread had advantageous treatment for VAT purposes, but Subway's 'bread' has too much sugar to qualify.)

There's also the famous Jaffa Cake case, of course: https://en.wikipedia.org/wiki/Jaffa_Cakes#Legal_status , but I think the Subway one has an extra element of absurdity because it went all the way to the _Supreme Court_.
No professional wants to deal with wifi, maybe ethernet.

So it's at most a prosumer feature for which the wifi they have is fine.

For professional use we want SDI which can transmit uncompressed video at whatever frame rate the camera supports, and we pay for that... Maybe HDMI but that has it's own headaches...

And the moment you want Android with apps on it you run into all the problems that comes with Android with apps on it...

You are then also responsible for keeping said app up to date. If you think android solves that problem you purely need to look at the custom modding community for how annoying firmware support is, and these cameras won't have generic phone camera chips, they have custom processors which would then require custom firmware.

But my usual argument, if it's so easy go and do it. Many successful projects/companies has started exactly like that, why don't we have X? Go build it.
What the Fuzz?
- Western media wants to focus on negatives of Japan because the idea of an alternative functioning system is narrative breaking.
- now that UK is out of EU, negative EU messaging about Greece, Spain, and Italy is unlikely to reach US.
- the media doesn’t want to promote a “declining white birth rate” narrative
- there are a lot of nerds on the internet interested in Japanese culture.
- neighboring Asian countries do not tend to love Japan
> If you have 10,000 customers in Los Angeles, and 5 million elsewhere, you can either isolate the LA customers and charge them the "real" price

That's the only way.

> which will be unviable as a business and probably politically touchy too

Why would it be? If you live in Los Angeles - doesn't mean you don't need insurance (even if it several times the cost of insurance in the safer areas).

> or you can include them in the broad pool

No, you can't. Your competitor who doesn't do this will offer cheaper insurance - because they doesn't distribute high risk of small group to everybody else.

> the people with a full-cinderblock home in a non-flammable state pay $20 more a year so the entire endeavour can work.

Why would they do that? 20 bucks is 20 bucks.

> The concept probably works better if you have some concept of social cohesion to lean on

You mean if you with totalitarian governance deprive people of the ability to choose? Yeah, that could work. I mean, that's how the gulags were justified.
> I couldn't use my Canon SLR to record more than 30 minutes of video continuously

Large sensors optimized for still photography overheat when operating continuously for video, so they feature safety limits. Sensor heat dissipation is a big problem and a major differentiating feature of top end cinema cameras.
Which is fucking hilarious when you think that a lot of xmen storyline is about them wanting to be perceived as humans
It runs in a single job, where single job = single runner. To use two runners/jobs to build multiplatform, each will need to push an untagged image and the shas are aggregated into a manifest in a third job. Definitely doable and the recipes will come out.

Personally prefer just using Go/ko whenever possible ;)
The largest AI safety hackathon ever with $500k in prizes
No offense, but this sounds like a terrible camera for your use case. It sounds like you know that.

My Sony that I've been using as a webcam since COVID can do that, and it was 6 years old when I bought it. Upgrade when you can!
You're not alone. https://xkcd.com/1597/
>Which is likely to happen never.

Correct. Because it would change the dynamic with enterprise customers.

Right now CEO/CFO is forced to accept unlimited open ended billing. If there was a way to set a hard limit companies would utilize it as part of their annual budgeting, not just hobbyists. That would be bad for big cloud's profits.
Unlikely. If the process abandons your site because it takes too long to get any data, it'll not associate the data it did get with the failure, just your site. The information about your competitor it did manage to read before giving up will still go in the training pile, and even if it doesn't the process would likely pick up the same information from elsewhere too.

The only affect tar-pitting might have is to reduce the chance of information unique to your site getting into the training pool, and that stops if other sites quote chunks of your work (much like avoiding github because you don't want your f/oss code going into their training models has no effect if someone else forks your work and pushes their variant to github).
To add, one somewhat neglected area of security is usability. So you may be able to leverage your existing experience there.
In Sweden it is also a crime, dataintrång.

If data is entered into a system, and you do not have not received permission to read it, then obtaining access to it is the crime of dataintrång, which can lead to two years imprisonment. So if you make a device and sell it to a customer and it phones home without permission and in phoning home provides you with information he has entered into it, then you've committed dataintrång and can go to prison for up to two years.

I see no reason why GPS data and other automatically entered data would not be regarded as having been entered into the device.
Go's error handling is awesome (2020)
I think I disagree on every point you've raised here.

First, my sony camera (and all sony cameras released in the last ~3+ years) support USB video streaming out of the box, with no drivers. I suspect other brands are the same. It looks like canon is just stuck in the dark ages on this one. They also support remote camera control over USB, and all sorts of other things. Mostly - but not entirely - in an open ecosystem. I have several devices which can control the camera over the USB connection - so it can't be that hard.

Second, are you sure your android phone takes better photos? What camera & lens do you have on your digital camera? Have you upgraded from the kit lens it came with?

I got a sony a7iv last year. If I take the same photo with my a7 and my iphone, the photos are wildly different. The iphone's photos are lovely, but they have this very slightly AI generated gloss about them. Everything is slightly too clean somehow. Its like I'm looking at reality plus. In comparison, The photos from my sony camera feel like real photos. Dark things are dark. Light things are light. If I crank the ISO at night, the photos are noisy. If I blow out the aperature, the depth of field hits you like a truck made of clouds. The photos look like what I pointed my camera at.

In short, I massively prefer the photos I get from my dedicated camera. I suspect if I showed you, you'd prefer them too.
This is a good point.

You also have insurance companies that will incentivize risk reduction by subsidizing alterations - if you clear any trees within X ft of home, they will give you $1000 towards it.

But yes on the inspections. I’ve had home insurance inspections around electrical and plumbing. They wanted to make sure it was at code as it was an older home.
Because personally, even if I were a minor cog in a giant organization like that, I'd like to know that something was broken so I could fix it. As far as I'm concerned, ever organization has at least some people who actually care about doing their job.
Wonder if this is a one-time title or the start of a new iteration.

Some of the "collection" series include From Scratch, Grokking, In Action, Month of Lunches, Quickly, Tiny projects, and Well-Grounded.
Does it really matter if my house burns because of pole drift or because of climate change? I don't like it burning either way. So if there is something I can do against my house burning, (and I know there are things I can do against that) I will definitely try that. And I believe we agree that we could do things, right?
Thanks, amazing story! I found this nice coverage of the events: https://www.mentalfloss.com/article/92007/why-us-federal-cou...
Thank you for the confirmation!
Given the size of the training data - I don’t think it would economical to validate all training data with high-end LLM models.
JS would not be my weapon of choice. Your FW can be standards-first, but I never get to move my code away from the language it is written in.
It was just a outdated import fee from a time when it made sense to protect the domestic industry - due to technological developments the import duty was removed. In fact it was removed almost 10 years ago.

https://www.europarl.europa.eu/doceo/document/E-8-2016-00127...
Lol the result I got from your search was "rss readers on ebay" ad followed by links all with N top RSS readers for varying N, often 7 or 10.
FWIW, many countries no longer allow denaturing via poisonous agents, just via extremely unpleasant tasting ones (eg https://en.wikipedia.org/wiki/Denatonium).
It's not just expensive. Steel and concrete are some of the largest drivers of CO2 emissions and toxic waste, in the ballpark of 15%! So really the only sane choice is to avoid building new homes whenever possible and try to keep old houses in use as long as possible.
No-one's saying everything is simple to fix.
It used to let you use it with a full-on rooted phone, it just popped up a message saying 'it's not our problem if you get robbed'

i wonder what caused the change

as others have said, you can ring them up and get a physical security key, it works for the website
So you justify the ban of TikTok, Huawei and DJI for strong national security reasons, but when we talk about the US spying on the government of allies, you say "spying on a government is okay, the problem is corporate espionage"?

Can you tell me - in your logic - why the hell there is a need to ban DJI if it's okay for the CCP to spy on the US government? Or will you now say "It's not okay because it's not the US"? Or maybe "It's okay to spy on allies, but not on adversaries, except if you are the US because then it's okay to do both"?
Just probably? Do we still need articles to point that out in ... 2025?

The main problem is not that mcdonald's app, it's what else has the same team worked on...
Sounds like Ford putting seats in the back of their vans so they could pay less tax when importing them from Mexico, then removing them before they're sold. Looks like they've now been fined, but they got away with it for a while.
> [the extensive anti-reverse engineering measures are] more annoying than any financial app I've had, and I have 5 of them on my phone

Ah, this reminds me of the Tuya app.

I've done some ssl unpinning and mitm to see requests going in and out of my phone, it's pretty fun and there's often really nice and easy to use restful APIs underneath. Among them I've also done a couple of banking apps and they weren't particularly defensive either. That's great; as a user I'm empowered by it and like TFA says, it's totally fine from a security standpoint if you just don't trust the client to do anything they shouldn't be able to do. It shouldn't be your form validation that stops me from transferring a trillion dollars, and though I haven't tried, I'm sure that's not the case for those apps. All it does is allow me to get my monthly statements with a for loop rather than waiting for a laggy UI and clicking through each month.

Now, Tuya is a Chinese company offering a bunch of cheap IoT devices like smart power switches and IR motion detectors. You can interact with everything through their app. That app for some reason has spent by far the most resources on anti-RE of any apps I've seen. I already bought your hardware, mate. Please let me use it on my local network. My smart home infrared motion sensors were meant to turn lights on when I enter a room. But they don't feel very smart when I'm standing in the dark for 4 seconds while they check with a server in China. I don't even need a clean API; just let me see what you do, and I'll do something similar, no support or documentation necessary. But they go through extensive measures to prevent you from interacting with the hardware you bought and which is sitting in your home.

This was a while ago, but I think for the motion sensing in particular, I managed to just put them in a subnetwork with blocked internet access, and snooped on the network to catch their DHCP requests when they tried to call home. This would happen every once in a while presumably for settings/update checks, but crucially also when there was motion detected, and I didn't mind a few false positives. So in the end they were very quick, locally functioning, privacy-friendly little devices!
To be fair, I also have the dummy battery + HDMI capture + desktop clamp mount + live view faff for my D7500, but once you set it up it's just... there. I don't need to fiddle with it much further. It's a bit of a cable mess but I intend to upgrade to the Z6iii together with an upgrade to a desktop (so I can have a PCIe capture card), which will cut down the number of dongles all over.
> sign every kernel/initrd update

If you believe that the those SecureBoot private keys were leaked, why not also believe that the linux kernel signing keys were also leaked and that you are downloading a backdoored one.
Didn't expect it to disintegrate completely. At least they figured out what happened. Well, one step at a time. But that means no orbital flight for next couple of missions.
It seems some houses that focused on fire safety survived the fire with minimal damage.

https://nypost.com/2025/01/15/real-estate/passive-house-surv...

Metal roof, passive house so embers don’t get sucked in. Concrete walls around the property and plants that don’t contribute to the fire.

The house might cost an additional $100k to build compared to conventional. But it would make all that back on energy, roofing, and insurance costs- probably at the point the conventional home would need a roof replacement.

Builders don’t build such houses unless a client or building code mandates it.
Imagine a big corporate workplace, where the infosec team wasn't comprised of freewheeling anarchic hacker types who've dedicated their career to mastering the intricacies of the Linux boot process, but instead by compliance folks who've dedicated their career to mastering the intricacies of global privacy laws and passing SOC2 compliance audits.

From their perspective, "Secure Boot" has the word "Secure" right in the name. And they've looked up details about the TPM - Microsoft says the TPM avoids systems being tampered with, and addresses the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned devices.

If you don't know the intricacies involved, that stuff all sounds great! So they put a line into the corporate IT policy that TPM use is mandatory.
was that understanding formed by Fox News, perhaps?
I seem to recall that there is a special button sequence you can use on Canon cameras that disabled the restriction. It’s. Been many years, but Google should have something for your model.
> I'm buying AI tech stocks

I'm not sure that's really hedging your bets, since there are a bunch of potential futures where you might lose your job and those stocks lose value.
the julia solution was bad
This page was interresting and demonstrates some problems with CIELabls hue perception: https://raphlinus.github.io/color/2021/01/18/oklab-critique....
Why should the manufacturer raise the price of the camera for you and me just to implement something extra OP wants that they can already do through HDMI?
I found this article to be very helpful

https://keithjgrant.com/posts/2023/04/its-time-to-learn-oklc...
You solve this by opt in, not fancy engineering. There are two classes of customers - those that absolutely can't afford services be cut, and those that absolutely can't afford a 50k bill.

So you deploy an advanced technology known as a radio button to toggle which they want, throw a bunch of ToS & consent agreements about data loss / deletion at the ones opting for hardcaps....and done.

Also reminder that Azure has hard caps for certain account types. This is not a technical problem. They can do this, they just don't want to.
"Productivity isn’t about shiny tools. It is about getting things done."

Earlier in my career I went on all sorts of productivity boosting courses and read loads of books...in the end only one thing has stuck and that's the 2 minute rule from David Allen.

In short, if a tasks hits you and you can get it done in 2mins or less just do it there and then.

Explained in his voice here for those interested - https://www.youtube.com/watch?v=5_-YOdwUDsg&t=37s
Randline: Get a random selection of lines in a file using reservoir sampling
This is what Bitlocker does. There was a recent article about it.
> This completely ignores incentives.

For socialists this is a goal, not an obstacle.
And considering most of Europe is basically low risk territory, it makes sense?

Afaik, only Turkey and a small part of the Balkans is considered earthquake territory. And there's no fracking in Europe to induce minor manmade earthquakes either.
I've sometimes done the same in python. I do quite like the ergonomics.
I love that learning how to hack and write demos has been replaced by writing snarky prompts. Humans, kill yourselves now. We don't even need a real AI to take over to prove how stupid we are.
I've been using a Sony mirrorless (anything above a5100 will work) for over 6 years now; it needed a "dummy battery", and an HDMI capture card (about $25 for noname brands, or $80+ for Elgato, BlackMagic etc). It auto-focuses, doesn't write to microsd, and works flawlessly.

Even if you aren't buying Elgato, you can use Elgato's compatibility page to know which cameras work well: https://www.elgato.com/us/en/s/cam-link-camera-check
What is a closed formula?
How do I downvote this.
And it hijacks my back button. It took two clicks to get back to HN. (Fennec/Android)
> This is the entire purpose of LLCs.

It’s not. A lot of weight should be put on the concept of “legitimate business”.
Let’s say you decide to open up a car dealership and you use an LLC to buy cars then transfer them to another LLC and sell them. Then declare bankruptcy on the one containing the bills. You won’t be shielded, and you’ll likely go to jail for fraud.

The construction is to allow a business to go bankrupt with limited liability not to allow the expense account of a business to go bankrupt.
envsubst
> unauthorized third-party software will be prohibited from executing critical operations

"Unauthorized" of course means unauthorized by Bambu, not by the actual owner of the printer.
big claims small evidence
If you want to go into cybersecurity here's an idea (I haven't tried it, so ymmv)

1) look up people who claim to be in cybersecurity on some site like LinkedIn - see what their titles are, where they work, and so on.

2) see if you can find their resumes or any detailed cybersecurity resume - you are looking for keywords, application software, languages they claim to know, etc

3) look up job interview questions that relate to those skills, e.g. glassdoor has a fun feature where people have shared the actual questions they were asked during an interview

4) find free or cheap online resources, classes, demo/free versions of apps, set up a home lab, so you can become familiar with those skills, languages, tools. etc as much as possible and for as little as possible.

5) read a site like "stack overflow" with a focus on the skills/apps that cyber security researchers are likely to use, and see what questions the tend to ask, etc.

6) Develop some study cards on Anki with the interview questions you are likely to get and answers that might fly. Don't be complacent, expand on this as you go along, adding more and improving what you have.

7) See if you can find one-off "cybersecurity" gigs on craigslist or fiverr, etc. where you can be paid something - anything - to do something security related. Not only might this improve your confidence, it will generate a little bit of money instead of you paying money. You can also check out the competition and see what they are doing, for how much, etc.

8) Read up on "cybersecurity" related topics, people, trends, books, movies, etc. Get a feel for things as they are, were, or might be.

Good luck.
> That's all I actually need.

This is key; understand what works for you personally. There's plenty of workflows and frameworks out there that would rather tell you what they think you need, which is the trap most of us end up falling into.

Good on you for listening to yourself.
The Dragon spacecraft uses Electron as well.
Wait until you hear about Canon printers.
The confusion in this article about what TDD is demonstrates how far everything has drifted. It's interesting in terms of what it achieves, but I don't think it's useful as a comment on TDD (or, for that matter, testing).
> The Space Industry to date has killed many fewer people than planes, trains, or automobiles.

Except as a proportion of passengers. In which case it's killed several of orders of magnitude more.
Ask HN: Did Google just enable Gemini for everyone without asking?
I noticed in my Google Workspace account Gemini. I read the blog post at https://workspace.google.com/blog/product-announcements/empowering-businesses-with-AI.

Did I get it right that Google has enabled Gemini and will start to charge it on March 17th unless you disable it?
This is a rate limiting problem