jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
All the other js resources on the page can still backdoor the app, though, and exfiltrate your keys. SRI and no longer executing javascript served with the right content-type in an img src is helpful along these lines, but even with SRI on every script tag, the sub-scripts pulled in from the integrity-checked third party js can pull in arbitrary further resources which can then overwrite your functions to steal your keys.

Even a strict CSP doesn't totally close the hole.

It's sort of crazy how difficult (that's a euphemism—I would term it "impossible") it is to even attempt to secure browser-based crypto, over and above the normal challenges involved in crypto implementation. I wouldn't use clientside js crypto for anything more secret than a grocery list.
What gaming engines already implement or plan to implement path tracing in them in the future? Path tracing looks like the future of gaming graphics, and would do especially well with VR in a decade or so (hopefully by then path tracing will also be accelerated in hardware).
And what it thinks you want to listen to is based on what it gender it thinks you are. Gender is a strong signal about what your music tastes will be but obviously it's not absolute. If the algorithm is so pure and unbiased then why would it even want to determine your gender with this patent?

Like recommendation engines aren't magic -- they look at what people "like you" listen to where "like you" has all sorts of random demographic data as well as your personal patterns/history.
The continuation bits also allow backwards traversal and proper null byte decoding.
Is it necessarily radical liberalism that tends towards a dystopia? I was curious where this sentiment was coming from (I’ve read it elsewhere) and read some books on conservative philosophy (original post-enlightenment conservatism, not contemporary) and found it there too. It seemed like you could replace “radical liberalism” with “radical $ideology” including conservatism, the problem isn’t liberalism, it’s extremism.
Not sure how that turns into a decrease in total comp instead of flattening out, unless the initial grant put them over the limit in the first place. In which case it was a really generous recruitment bonus.
GnuCOBOL’s FAQ might be the largest FAQ in existence!

https://gnucobol.sourceforge.io/faq/index.html
Thanks for sharing, very detailed. i might use some ideas for my own SaaS https://simpleops.io/
Thiel may want to rethink the title then.
In case one is using LineageOS, what keyboard is used then? Is it the vanilla AOSP keyboard? How does the LineageOS keyboard compare to privacy conscious keyboards like this one or the AnysoftKeyboard?
This is happening. First they get surprised that communication is possible beyond WA, even exactly the same. My mother's reaction was hilarious after sending me photos from Signal, free of charge. She was thinking only WA is free, every other app will charge her. I had to explain that calling, voice or video is also possible, without any payment.
AnySoftKeyboard on the surface seems cool, however, they've overloaded it with unnecessary characters. When I tried it, I had English selected and yet somehow it has characters that are _never_ used in English. That's not necessarily an issue, but when non-English characters are easier to type than English characters, it decreases my typing speed significantly. I raised an issue about it and was quickly dismissed. I've stuck to SwiftKey since. I'll have to try OpenBoard!
if with Telegram "the privacy, security, and governance story is not great though", why would you migrate from WhatsApp to Telegram in first place? I personally have all 3 (Signal, WhatsApp and Telegram) and use all three with different groups and scenarios.

For example:

- With my mom and grandmom: WhatsApp

- Group of friends from jiu-jitsu: WhatsApp

- Work Colleagues and friends working with Network Security: Signal

- Notifications from services that I run like weather station, waves forecast, how full my gym is right now, some other batch services that I have: Telegram

There is no reason to be radical here. We have options, and that's great!
How is it possible for this answer to be first... Really HN? WhatsApp is critical infrastructure??

Excluding company ownership, what is the crucial difference between all IM listed?

There's LITTLE DIFFERENCE, they all serve the same purpose, feature parity is pretty much there.

When you add company ownership to the mix, WhatsApp is owned by fucking Facebook. Let that sear in your mind.
I am a developer too, but I haven’t noticed any of these issues on my 16GB M1 MacBook Pro. macOS has been nothing short of zippy.

I wonder why you believe that everyone’s ignoring the issues you experience? Could it be some local phenomenon, instead?
Does anyone any numbers for turning these mitigations off on GCP instances? Especially for machines running Apache or nginx
The Signal desktop clients are rather disappointing, but it's my first choice now.
Getting shot by security a while trying to climb through a smashed window can hardly be called a execution.

These are the guys who called the killings of Rittenhouse self defense.
The teamcity application is a java application that can be easily analyzed for security threats. Nothing stops you from decompiling it and check the code. This story looks very much like a scapegoat for SolarWinds' poor security practices.
Yes. Yes. Yes. To the point where I've almost tried to copy some HackerNews source code and complete a POC myself.

Others have commented that this feature already exists. And yes "technically" it may exist, but I'm guessing that you mean "by default". I absolutely agree that I should be able to set collapsible threads as the default.

It never fails on HN, that on some topic, the first/top comment and its replies span the _entire_ page! That's terrible UX! We want to see what other people have to say.

As a user/reader, let me dig into conversations/threads that I find interesting without having to scroll through pages and pages. Who's to say there aren't more interesting discussions buried underneath the top comment thread? Dang always has to post reminders saying to "not forget these pages of comments". If we had a collapsible thread, I believe he wouldn't have to do that as much.

This could be implemented with little-to-no fancy JS/whatever -- so that HackerNews remains as barebones as it is. Even better - if you let users choose whether or not they want the collapsible comments feature by using a setting on the user profile view. Everyone wins :)
> Even my dentist at one point, when he was doing my teeth, told me about a script he’d written.

Define: captive audience.
I've generally stopped using percentages to communicate these days because it's apparent people don't understand them. Someone will say 80% like it's a sure thing - until you point out the failure rate is 1 in 5.
Indeed, when one side argues for dialogue, human rights, cooperation, peace and maybe a bit of socialism, and the other side argues for kicking immigrants, building an ethno-state where anything manufactured on foreign soil is heavily taxed, and the poor are left to starve to death, the middle ground really isn't the right answer. Middle grounds are rarely conducive to any intellectually honest discussion and this can clearly be seen in American politics: where the GOP has been sliding more and more into the right, the Democrats have followed, trying to capture the moderate Republicans that don't agree with the new "extreme" GOP.

Middle grounds are a slippery slope.
We're talking about metrics with objective definitions that are taught in schools around the country, not headlines like "The President is cancelling his trip to Africa because he hates black people". I don't know, seems like a huge difference to me...
That image doesn't emphasize any of the stuff that the people that will have to work with the vehicle and will be responsible for fleet performance want to know (and by proxy, their bosses, who are authorizing the expense).

What's my maintenance costs and times gonna look like?

Will it be ergonomic to get in and out all the time?

Can this vehicle pull out into traffic easily?

Is this vehicle gonna be a fatiguing pain to drive?

The features list almost raises more questions than answers. Half the tech they highlighted comes with a very high risk of being worse than the manual solution it's replacing if the tech is not up to par. Nobody wants to wait for the automatic door to close to put it in gear.

Edit: So why is this opinion so unwelcome here, because I'm not on the "more tech more better" bandwagon or something of actual substance?
> Now both firefox and chrome dont allow you to change the adress easily to manually remove amp.

I don't see what the single-click functionality has to do with removing something from a URL (as almost all users would perform selection with click-and-drag or a double-click). The primary use case would be for adding text.
You don't need a tesla service center to service a tesla. Neither would we want one else tesla vehicles will become entirely unownable by those making less than 70-100K a year. Affordable repair is the lifeblood of lower income people. Without it work will cease.
The Astrobe Oberon for ARM Cortex-M compiler is used to develop software which controls the electronics that operates one of the largest pipe organs in the world:

https://www.opustwoics.com/atlantic-city-midmer-losh
> generally look for quality items with lifetime warranties, 1 coat that costs $1000 but lasts 30 years has better ROI than buying a $100 coat every other year. Plus it's less mental strain since you don't have to think about replacing it and you'll get to use something you actually like.

This is a common thing I hear, e.g. the rich man/poor man parable about boots, but I have never been able to give it real credence. It just isn't a realistic choice, whether we're talking about coats, boots, beds, knives, or whatever.

First, I cannot assess the value of a good I do not yet possess to a sufficient degree to determine if it will really last, and will be something I'll 'love' for >5 years, and I wouldn't trust any company to actually honour a "lifetime guarantee" on a meaningfully expensive purchase. Very few of those are even advertised.

Second, trying to make that sort of assessment for most purchases sounds extremely stressful. What if I go wrong? A lot of business depends on tricking un-knowledgeable consumers into spending big money on perceived-but-false "quality". One mistake puts you way in the hole overall in this cost/benefit analysis, and the internet is full of shills.

So rather than trying to find the coat that's "really worth" $1000, and hoping beyond hope it'll last 30 years without any way to tell, I will spend ~$150 on a coat, and it should last ~2-3 years.

I learned how to mend buttons and sew small tears, and my actual coat that I bought for ~$150 lasted almost a decade before it was done. I spent 5 minutes at the first store I found in the mall, way back in college, and just asked for something warm. Last year, I did a lot of research and I spent $700 on a new coat, and it had lost a button and gained a hole in its pocket within a month.

I have a more controversial take overall:

Wealth is, unfortunately, only really available to the lucky, so most of this just doesn't matter.

I'm comparatively lucky, (I was born in North America! I have a ton of majority privilege! I liked computers!) but I don't have connections to anyone from any top 10 schools, and I am unlikely to even ever work for a FAANG.

Living frugally and intelligently investing will likely make the difference between whether or not I can take vacations during retirement, and maybe move the retirement date around by 5-7 years, provided I don't actively throw my money away on things (like GME).

But becoming "wealthy"? That would require a lottery-type win. The literal lottery, or the startup lottery, or similar. As a ~30-something, (hopefully) competent, privileged urban software engineer, with a decent scholastic and vocational pedigree, actual wealth just probably is not in the cards, no matter what actions I take.

So (again excepting learning not to throw all my money away), I just can't make myself feel like personal financial advice really matters overall. Either I win the lottery someday, or I don't.

I'm curious though, to anyone still reading, what makes it matter to you?
Yeah my experience was that it could be a bit of a pain with cancellations but there were enough cars on the road that I would always eventually get a ride.
I seem to recall reading it was around $500 million to do in the US, but can’t find where I read that. If true, that seems like a tiny amount for insurance against something like this.
> I don't have the data but

I gave you data by showing links where other companies like Blackberry, Lenovo, Microsoft, and Asus use the word "trackpad" themselves for their own devices. Lenovo even cutely capitalizes the P to fit their ThinkPad branding. You could also google around and see random people on reddit and elsewhere talking about the "trackpads" on their dells, hps, vaios, matebooks, and so on.

I'm not saying that "touchpad" isn't more common, but the evidence _clearly_ shows that "trackpad" isn't exclusive to Apple devices.
If I recall correctly, Bakuman is a manga / anime about aspiring manga artists and this post is instead about animators who animate the anime.
Typically it’s as simple as saving cash enough to cover 3-6 months or unexpected expenses. Fixed income investments are almost so low as to be ignorable but you can put it in a high yield online savings account. The key is for it to be liquid.
s/can be inaccurate/are a complete fabrication

I think that puppeteering the dead is actually quite a disturbing thing to do in general, and find endeavors such as the "resurrection" of Tupac to be in very poor taste.
It gives much more detailed data like how long a user keeps a page open, and browser fingerprinting data that's not available server-side like querying fonts or viewport size.
You can't double-spend the outputs unless you get rid of the blocks they were originally spent in, i.e. rewinding and re-mining all of them.
Interesting article. Reminds me of my time in grad school :-)

Looks like jasper's recommended way is to improve or find a way to bypass the memory managment (slab allocation) subsystem.

There should be a way to tack on a more network optimized memory management layer or allocator onto the regular one.

Could turn out be a good research project.
I got a “old flash player” message. The fallback (download) link was a .docx. Not much better… considering it’s all text, I can’t see the reason it’s not, you know, HTML!
Good catch. It was indeed a nod to Zed's post.
This is exactly why Apple don't lease their software to device makers. If you want to be known for quality you _have_ to curate the whole experience.

Android is certainly achieving an amount of ubiquity but that also means they will be associated with these horror stories. Obviously, not true of Apple.
Does this work for renewals?
I imagine a solid base starting with the right kind of "knowledge". From what I observed, and this is very subjective, but people who clump around MS technologies tend to produce lousy communities where not much innovation happens.

I would start with attempting to produce (or translate) good material that has the potential to produce programmers who understand their craft really well and have a really good understanding about systems (to the extent that they can manage a web server, for example, and ssh into it, and edit files with vim, and all that stuff).

Maybe also having a few projects that people can clump around, something that's open source, interesting enough for people to want to use it and contribute to it.

Again I don't really want to clone Silicon Valley per se, what I want to clone is online open source communities. And again, it's not really about cloning, but about using that model as something to aim for, at least initially.
They are not requiring a PayPal account. I just signed up and didn't use it at all, just credit card.
"Learn Objective-C" just fell about 5 spots in my to-do list.
I don't know, but I doubt it. I've noticed a lot of their coupons don't work for renewing domains.
I don't think that's a given. China is big, but that doesnt necessarily equate to power. Besides that, who says America's decline has to come right now? It's easy to be all doom and gloom in economic times like these, but the grass isn't greener on the other side. Other countries are in this as deep if not deeper than we are.
My bit about rural truck owners was more about demographic than power source. I have lived much of my life in rural areas of Idaho and Montana. The looks of this thing is NO problem. People will love it. But as a big life change, going electric is a big leap when throwing down that 50K for the family truck. I guess we'll see.
That’s true of most trucks sold these days. The question is whether it’s 4’ between the wheel wells.
No side-view mirrors, you mean? Or is this lacking a rear-view mirror?
Well, trucks aren't usually meant to look curved nor sleek. Those who drive trucks probably wouldn't want one that looked that way.
Or practical. That bed is insanely bad.
It is _literally_ bulletproof, according to the demonstration video they showed during the presentation. Well, not the windows; but the truck body is.
I've been using BlueMail for a while, but search is poor and it's quite slow. I imagine my frustrations will be similar to yours with Aquamail.

I honestly haven't been able to find an e-mail client for Android that's any good yet. I paid for TouchDown (https://support.symantec.com/us/en/article.doc7488.html) but, they were bought out by Symantec. TouchDown wasn't cheap either it was like $30 if I recall and it had the same problems. Terrible indexing, poor search, sluggish.

I'm thinking I should remove them all and just go with the web UI but. Yeah. I don't know. E-mail clients on mobile phones suck. :(
we were talking about the android app, not the web service.

said android app supports generic IMAP accounts and doesnt need to be paired to a google account to work with them.
I like to imagine the name is a homage to Cyberduck.
> not dressing appropriately for an interview

What is "dressing appropriately". I wore a suit to my very first interview for a dev position and very nearly didn't get the job because they were worried I wouldn't fit in (luckily I was able to explain that I don't usually wear a suit). The other ones in your list, sure. But I don't think those are what people typically means when they talk about quirks.
Counterpoint: If money doesn't make you happy, then you probably aren't spending it right http://www.wjh.harvard.edu/~dtg/DUNN%20GILBERT%20%26%20WILSO... (PDF)
Does not work on Firefox Developer Edition at all.
GIF, EPS, and ZIP do the same thing as they did decades ago. PSD does radically different things. Things that were, as I said, completely unpredictable at the time the format was started.
http://www.nature.com/nature/journal/v457/n7232/full/nature0...
I don't understand.

It's "single sign-on", but each individual website stores its own secrets, there's no centralised website, when I want to change my password I have to change it on each website.

OR

It's "single sign-on", but I have to enter my password directly into each website I log in to, and trust that they process it in javascript instead of surreptitiously logging it on their server.
> Favouring downloads over uploads for technical reasons - that is not really within the scope of network neutrality.

Why not? It blatantly discriminates against uploading services to the direct cash benefit of downloading services.

And that is the heart of the argument against network "neutrality": discrimination laws are always and everywhere a full-employment act for lawyers and bureaucrats. And AT&T will buy those lawyers and bureaucrats and use them to shut down competition.

> The market can't sort it out, because there are high barriers to entry, it is a finite market, and so the market is not infinitely efficient (and in some areas approaches a monopoly), and in practice there is little room for consumer choice influencing Internet markets except with regards to price, advertising, and to some extent reliability.

What market? The Internet industry is still in the wildcat stage, with most of the physical plant becoming obsolete and being discarded on a ~15 year schedule. They are trying to rigidly control a market that we all hope will be burned to the ground in ten years because the technology just isn't good enough.

> The reality is that 'freedom of contract' is not fair when there is a huge difference in bargaining power, the markets can't sort it out for the reasons discussed above, and government intervention is appropriate.

Indeed, which is why the government needs to keep competitive markets open and let them sort out the winners and losers. At this point, nobody knows what services are useful or valuable, so mandating some sort of ideological bandwidth management is pointless.

For example, Amazon might start renting space for a mini hard drive cluster in the telco neighborhood boxes, so that we get TV on demand from speedy local data farms. As surely as the sun rises in the east, Akamai would promptly get a restraining order preventing such a barbaric infringement of network "neutrality".
> We use your typical web app SHA1 hash with generated salt.

Oh, no! casts summon tptacek

Actually, in his absence, I'll link to this recent topic on HN: http://news.ycombinator.com/item?id=2004833

This is particularly relevant given the recent complete and utter ownage of Gawker and friends. Had they been using SHA1 (whether or not they had a fancy, home-grown salting/obscurity system to use with it) instead of DES, the result would have been basically the same.

tl; dr: SHA1 is FAST. Do NOT use it. Use bcrypt. Please.
Code in a more productive (i.e. higher level) language is concise because it hides extra complexity you don't need to think about at the time, and is therefore simpler, not more complex (in the second sense).

Another example of where this is true is automatic memory management. A line of Java code can do all the memory management that would take many lines in C. This is a mostly good thing. In this case, less lines = better.
I still try to optimise for readability, simplicity and elegance in my code.

That's a good goal. One advantage of Python is that indentation etc. are required. You can't take a 'short cut' and write messy code, cause your code won't run.
because a 200 line kernel change is not the same as 4 line shell-script change. fwiw, i had posted that many a moons ago here : http://lwn.net/Articles/414817/.
I find that Tolkein is far better than most fantasy authors at handling the minutiae. Rather than frontload a hundred new proper nouns into the first two chapters as many do, Tolkein manages to weave it naturally into the story, expanding on it and exploring the world through the protagonists. A poem or song here, a brief mention by another character there, without any massive infodumps.

Sure, there's the infamous appendices and the Silmarillion for even more backstory, but they're not required reading, just fun additions to the world.

> casually racist undertones

This is the first I've heard of such a thing. There's plenty of that in Lewis, Lovecraft, and many other writers, but unless you're referring to the general "elves are better everythings" meme (http://tvtropes.org/pmwiki/pmwiki.php/Main/OurElvesAreBetter http://tvtropes.org/pmwiki/pmwiki.php/Main/FantasticRacism) (which is commonly imputed and used in descendant works, but in Tolkein's own work frequently counterpointed by wistful musings about the future promise of Men with their much-vaunted mortality), I don't see any sensible basis for that in Tolkein. As much as Tolkein liked to create strong good/evil distinctions for the reader, those lines were not drawn between any analogue to human races; there were many sources of evil on many fronts.