skysight-inc/HackerNews huggingface dataset:
I think that you're right -- the Chinese administration is ruthless, but also pragmatic. I think when they look at the USA, they see a country at war with itself. There's no need to destroy us since we do such a good job of it ourselves.

Also, the USA has a pretty huge advantage geographically over every other country in the world: our borders consist of oceans we can easily defend with our navy and allied countries who are strong both militarily and economically. We also have access to all of the factors of production of an army (steel, oil, etc.) domestically and the industry necessary to process them. Geographically, we're very protected as well: attack from the north and you have 2000 miles of Canadian tundra too extreme to march an army across that can be littered with radar and anti-aircraft stations. Attack from the south and you have to cross rugged, mountainous terrain in Mexico. Even against a weakened USA, victory would be very difficult.

War against the US is therefore pointless from the Chinese perspective: a war of the scale a US-China war would likely just rekindle the machinery of American industry while inflicting heavy losses on China. The Chinese government (and people) have a long-term mindset: war would be an impatient choice because China's dominance is all but assured anyway.

I don't think American politicians are as pragmatic; and I expect our war hawks to turn their attention to China (likely when China eventually tries to retake Taiwan). From a realpolitik point of view, I actually think that a major war with China is probably the best chance the US has to maintain global dominance over the next 50 years. But that war would need to happen soon, while the US still has a clear technological advantage over China -- in 10 years that advantage will be all but gone.

It's looking like the US plans to use Japan as its proxy for fighting China. Japan recently authorized its military to operate in defense of its allies; a first step into removing the post-WWII restrictions placed on the Japanese military. They plan to continue that process; with US support. China sees this as unacceptable -- and is ramping up its military as a result. I think we'll see a China-Japan war in the South China Sea before we see a China-US war. But I think we'll also see China engage in the type of limited incursions / occupations like the Russians did in Georgia and Ukraine, and they won't stop until someone starts fighting back.
I noticed that it will keep the location services/GPS running even if the app is backgrounded, at least on Android. If you kill the app that helps.
A nuclear weapon can do that in seconds, at a tiny fraction of the monetary cost.
Do you not save any money when you work? If you are not saving 10% - 15% of your paycheck into an account where the money is immediately accessible, you are living above your means.
Is it supposed to help people which have a distinct set of payment instrument than the retailer?
Is it one the roadmap?

For me, one of most important problem is the inability for small payment processor to enter the field because now if amazon, eBay, steam, etc... don't include your payment scheme you're better be ready for a though (impossible?) battle.
That's one reason the payment industry stagnate so much.
> I've been deliberately avoiding talking about what should be banned.

Given that Apple's de-listing rationale is arbitrary and capricious, restricting one's comments to attempts to predict what Apple might ban provides zero value to any conversation.
X, Y, and Z were wrong! It really would be nice to get at least an abstract sense of what those problems were.
that only works on inlined scripts, not on external references.
She's probably not, but she did it anyway. I'm guessing that if you're young and without kids and have some money saved up, its definitely reasonable to go for a few months without an income. Especially in tech, you can save a lot.
It's been a while since I looked into it, but I opted to stick with MacPorts rather than Homebrew in large part because I got the impression that Homebrew wanted to own /usr/local rather than sharing it with other software. (Maybe that's inaccurate?) I still occasionally compile software by hand rather than through a package manager, and /usr/local has been the default target for a system-wide install on every Unix-style system that I've used in the past 20-ish years.

(Also, my wife and I both have active accounts on my machine, which makes me uneasy having files in a systemwide directory like /usr/local owned by one specific user. That also feels distinctly non-standard to me.)
Homebrew can be installed anywhere, and after ~2 years of having it outside of /usr/local I have not run into any problems. There is a disclaimer somewhere that states some "packages" may not work well with this setup, but that seems like an upstream bug to me. Things should not require things to live in a specific path or prefix.
And lost the money in really bad foreign investments!
I'd venture to guess you're single, a renter, and have no children or relevant financial obligations?
Trying Rust for web services
As someone who knows they wouldn't want nor enjoy the SV lifestyle, I really feel for the author. Not everyone wants to live in that culture, and we need to remind ourselves that it's OK to want to life live differently from it.
It is quite possible to live below your means and save up enough money so that if you do quit you don't have to work immediately.
There's literally no detail to any of the logic or rationale in this story. People like faffing about these fantasies, but the most important advice I've ever received in my career was from my father - "Don't quit your day job."
The "See what it does" slideshow's totally broken for me - what does it actually do?
This would be a security problem. By measuring resource timing of a script copied from another site, one could determine if the browser has visited that other site.

(Resource timing is disallowed for cross-domain resources for exactly this reason).
> unless you're a student and your parents bought you your phone

It's a bit tangential, but speaking for myself this actually matters. I was a student until recently, I bought my own phone, but I couldn't afford the developer programme (especially when it was two separate programmes, one for OS X and one for iOS). Now, I can build apps and only need to buy the developer programme when I want to deploy them, and then I only have to subscribe to the one programme for both OS X and iOS too. So honestly it does matter to some people.

I hear you about your concerns though. I'm hopeful, with the iPad Pro, that they're actually going to open up iOS more in future, not less. It'd be nice to do proper development on an iOS device. A BSD-like jail environment (e.g. a full sandboxed unix environment with shell access, with maybe iCloud Drive mounted in the filesystem) would be lovely. If they want to sell 'pro' iOS devices, they must be thinking about these sorts of problems.
All kinds being two? Or is there a Linux version as well?
I was thinking the same thing. For this to work you'd have to not use a CDN to host the static HTML (or maybe a different CDN?) Otherwise, it would be trivial for someone already sophisticated enough to inject a malicious script to also change the hash.

Incidentally, I always wonder about this for non-HTTPS sites that offer binary downloads and crypto hashes to verify the files. How can you be sure someone isn't MitM'ing you?
Just download directly from https://download.osmand.net/rawindexes/
I'm a big fan of CSP, but even I have to admit that the CSP is quite large/expensive for a HTTP header field.

It might be different for other sites/stacks but on ours we deliver CSP at the whole site level, meaning it is delivered with every response we send.

Script integrity is only sent when that specific script is used, and it means our workflow doesn't have to change to rewrite a HTTP header dynamically with each page (based on which scripts are or aren't on that specific page).

I legitimately have no idea how I would implement CSP with hashes for the scripts on that specific page. It would require me to actually patch the software stack upstream. I do however know exactly how I'd use the integrity field on a script block and could implement it with just raw HTML.

PS - Not to mention that few browsers support level 2: http://caniuse.com/#feat=contentsecuritypolicy2
Set a schedule and force yourself to spend, say, forty hours a week worrkimg on schoolwork. And be honest with yourself and don't allow cheating. Once I forced myself to spend a lot of time studying, the easiest thing to do was to simply spend lots of time reading the textbooks, getting assignments perfect before turning them in, and handling all of the optional/extra credit portions of the programming assignments.
You and me both. We must be doing something wrong. :)
I've never been in this position either but I wasn't going to assume "trust fund". A lot of people in the bay ended up working somewhere that got acquired and maybe have some cash in the bank. Or they are just better than me with money. I would never actually quit a job, even if I hated it, without another job lined up.
Table 1.5 line "Mortgage equity withdrawal" is particularly revealing: in the other countries it's negative, indicating that people are building up home equity, whereas in the UK it's positive, indicating that people are turning house price rises into spending money through financialisation.
An extra header.
Not quite evil, just a hypocrite.
A LaTeX template for academics to take notes on a publication
Do you spend all the money you earn ?

My very first objective in my very first job was to save enough money to have a buffer so that I could be autonomous for a few months/year.
I don't understand, index follows basically the whole market by a representation of it like SP500 or Dow 100, how investing in whole market compromises it or it's based on sentiment versus investing in stock of particular companies?
You don't need to be single or a renter to save. You just need to make it a priority.

I'm the sole breadwinner with a wife and two kids, and we pack away 20% out of every paycheck. We own our home and both cars.

Do we live a garish lifestyle? Certainly not, but we travel a lot and adhere to our budget (thank goodness for remote jobs).
TIL I live beyond my means. Welcome to America. Having 10-15% cushion to save is a luxury for a lot of people. Probably not most people on HN but still.
Some sites host their static HTML on a CDN too. Example: anyone who uses Cloudflare.
Here's the recipe: have no dependents, avoid debt like the plague, be young and lucky so healthcare costs never get you. It helps to live frugally, too - especially avoiding expensive housing.

It's not a long-term plan but it can work for months, even a few years if you really pare down and live somewhere cheap.

> Are you all trust fund kids?

That's pretty condescending.
An additional layer of security does not hurt. Forging a hash.collision at the exact same filesize is harder than an arbitrary size.
> An important side note is that for Subresource Integrity to work, the CDN must support Cross-Origin Resource Sharing (CORS).

If the CDN doesn't support CORS and the browser does support subresource integrity, subresource integrity is ignored (bad, since an attacker can disable CORS before changing the js) or enforced, thus refusing to execute the js (good)?
Lukas also gave a talk about security at the conf: https://www.youtube.com/watch?v=iUMsPppwIH4
"A ship in harbor is safe, but that is not what ships are built for." -John A. Shedd

Good for her.

Or maybe I'm just empathetic since I walk away from my full time job tomorrow...
6 Rules to Help Improve the End User Experience of Your Web Development Projects
doesn't have the capital

It's weird how capital is localised to particular cities in an era of air travel and Skype.
The sane interface and friendly search are pretty direct contrasts with OSMAnd.

I do think the new interface in OSMAnd is headed in the right direction though.
> in ~/.homebrew

Not sure about OS X but common corporate Unix protocol is to make /home/ noexec.

Non-core ( i.e. outside central package management ) installations go to /opt/
China has made a huge about-face in the last 2 years on energy. Their policy is currently to invest heavily in green energy for domestic use, and to become the global green energy technology leader. I think they will be successful - advances in energy tech take superpower-level resources, but they also tend to sustain those superpowers for a long time.

China will build their dominance on 'clean' energy. No doubt about it.
Travel agents in 1980 did less physical work than ER nurses do in 2015 whether measured in micro-tasks, macro-tasks, steps per day or anything else. But, secretaries from the 1980s were (I'm guessing, but this is probably true) less fat than ER Nurses today.
This looks more like a report generator than a note taking app. Yeah, I get they mentioned "structured", but I can't see this as an Evernote replacement.
I am by no means a trust fund kid, but I do work in technology which usually offers a higher than average salary. While I'm not making a lot of money, I am making a decent amount given where I live. I always try to keep up a liquid emergency fund that I'm capable of living off of for 6-8 months. I built this pretty early on by living below my means, because I feel like an emergency fund is one of the most important things you can do to set up financially (followed by paying off high interest debts, then contributing towards retirement accounts). That way if a situation like this arrives, I don't have to constantly fear what will happen to me.
If you consider something foolish or brave is really just a reflection of your own biases not the person you're judging scenario.
I think the model is: You can (A) get financial advice that is paid for through nontransparent kickbacks that are paid out of overpriced mutual fund fees, or (B) get financial advice that is transparently paid for by you. When I put it like that, you, the sophisticated reader, would probably choose option B. (Or you'd self-advise and buy index funds, like I do, though I certainly do not recommend that you take financial advice from me.) But it does seem possible that transparent fees would turn some people off to retirement advice -- and, perhaps, to retirement saving -- entirely, since people are more likely to consume free ("free") products than expensive ones. It's also possible that saving an adequate amount in an overpriced underperforming mutual fund is a better outcome than saving an inadequate amount, or nothing, in a low-priced index fund. Both of these are distinctly sub-optimal, of course, and I tend to sympathize with the idea that retirement brokers should be fiduciaries, but I don't think it's quite as easy as Batchelder and Bernstein make it out to be.

(From http://www.bloombergview.com/articles/2015-09-30/spinoffs-ki...)
Pools are great. They work really well with servers of all kinds. Even better are pool allocators that support subpools, and adding arbitrary objects that can be closed/deleted with the pool (like files). Eons ago I wrote a nice little C pool allocator: http://git.annexia.org/?p=c2lib.git;a=blob;f=pool.h;h=f8ed4c...
Does it have easy direct download of maps from within the app?

The official Osmand can sideload any number of maps too, the limit is only for direct downloads; but common users won't know how to get their own maps without support from the app.
Wouldn't it be faster (browser being able to use resource) to just skip the CDN and host the resources yourself?
Remoot iOS Beta is Ready
This kinda stuff just drives me nuts. No, they're not all trust fund kids. The OP quit her job at Dropbox(!), and it looks like her previous jobs were at Squarespace(!) and MailChimp(!). I can only assume that she is highly skilled and productive and has been well compensated for it for years. Perhaps she saved up? Some people have good jobs and save money. Is that hard to understand?
Only "a renter" is true. I have one kid. We have one family car instead of two. The three of us live in a one bedroom apartment. I carry no credit card debt, but I don't buy any toys. I paid off my college loans in the first two years out of college because I worked like a dog and lived with my parents.
A. There is no real standard here
B. Apple doesn't bend, period. They don't actually care whether the use is appropriate or inappropriate.
C. Blaming this on homebrew is hilarious

Remind me again why i should need to reboot into recovery mode to create a directory?
Pillar Michigan is hiring
> We own our home and both cars.

Whether that is possible depends a lot on where you live - from what I can tell, outside of a few major cities there are plenty of places in the US where you can buy a house for <$200k in the US, good luck with that anywhere in Canada.
I've done it before. I used to just hang onto my bonuses until the clawback period was up before considering them spendable. At the time, I was being paid ~2 months' salary as an annual bonus.
>Why would they run as root, just because they were owned by root?

Because "sudo" (that OP wants to run them with) runs them as root by default?
We're hard a work developing North Face jackets and water wings to make this a reality.
dupe: https://news.ycombinator.com/item?id=10283477
If you wanted to call their app removal criteria arbitrary or capricious, you sure picked some bad examples.

Their offensiveness meter seems pretty obvious to me. The only thing I'd really worry about is "apps that duplicate OS features" since you really can't predict that without insider knowledge.
s/peek/peak/
I can't believe we didn't use this. Would you like a job in our puns department?
You do. Either that, or (if you are in tech) you are massively underpaid at your job.
I'm curious about this too. Did she have conflicts with coworkers? Bad management? Did her projects feel like chores?

Often if you're in an unhappy situation you can speak up and articulate what's wrong and others will adapt.

I suppose if you're young and single you can afford to be impulsive. A pattern of doing that repeatedly can't look too good..
The real question is how much VC will you need to make it a reality?
I really have no idea why you're getting such bad feedback on your comment. It's kind of terrifying to see such negative responses to the idea that people should save money.
No. The official installers are signed, and are thus not prevented.
Thanks, but that's not something I can recommend to my family and friends :-)

I could do it for them myself, but then they wouldn't be able to recommend the tool to their friends in turn - which is my litmus test for any open source software intended for end users.
Fairphone scores €9M in crowdfunding for its ‘ethical smartphone’
It would not be necessary at all technically, but some people might be more reassured by the extra check.
Half of U.S. Freelancers Wouldn’t Take a Job No Matter What
You are right that it would not be necessary at all technically, but some people might be more reassured by the extra check.
The Definitive Headline Guide – For Awesome Content Marketers
A Twitter Spam Filter (attempt number 1)
Seems like she left a LOT out of the story. She never mentioned what specifically caused her to burn out. Maybe she felt she wasn't good enough as a designer, maybe the work was too demanding, maybe it was too many hours. Maybe this is another cautionary tale about being a woman in tech.

The fact she conveniently leaves out huge parts of the story makes me wonder what the real reason was she left. As such, I can't comment other than to point out people quit jobs all the time these days, and the way her story is written, she hints at something, but never fills in the details - so the only conclusion we can make is:

She quit her job and is looking for a new job.
I'm indifferent about name, but size has been shown to provide additional security.

Generating two files where their hashes collide is extremely difficult. Generating two files where their hashes collide at the same size is near impossible, even after you break the hash function itself (e.g. with MD5 it requires much more compute power to generate two files with matching hashes and sizes than just hashes alone, since you're effectively looking for a subset of all collisions).
Seriously, you can't just quit your job without having any other plans laid out beforehand. This is just incredibly dumb and irresponsible...
I run my Mac with a non-admin account. When I want to install or update Homebrew applications, I su to my admin account and use sudo. Just checked my /usr/local and it's owned by root. I've never had a problem running Homebrew apps from my non-admin account.
It's very common for linux applications to store stuff in $XDG_DATA_HOME (~/.local/share by default) (config files and caches go somewhere else)

In my ~/.local I also have a bin/ directory (created by some Haskell tool), so rather than putting stuff in /Users/username/usr/local, I think it might make more sense to recreate the (needed parts of) a unix fs hierarchy in /Users/username/.local

There's also ~/LibrarySupport on Macosx, if I remember correctly... but I think that contains user editable configuration files as well
The integrity of the installed system could be violated by creating a directory?

My system was plenty protected already - it had a root account with a password only I knew. This is just more annoying Apple gatekeeping.
I've done it. Quit a pretty good job at a startup because of burnout and lack of enthusiasm. Spent a lot of time going to bookstores and coffee shops and motorcycling. I don't think I wrote a single line of code.

After about nine months, because I was kind of bored, on a whim I went to a "Brass Ring" job fair in Santa Clara. Found myself interviewing and got a job at another startup (which turned out to be an utter train wreck, ugh).
They are consistent enough that I and most other developers have no trouble telling whether something is likely to get removed for being too offensive. The people that find their criteria capricious and unprofessional do things like ask "what about the New York Times app? They report on bad stuff!"
A lot of the comments are very harsh. I think the underlying message is getting lost: Sometimes when you know something is wrong, it is easy to focus on all of the prerequisites and peripheral problems and never solve the big problem. This type of mistake is even easier with big problems where the difficulty gap between addressing the big problem and the related little problems is widest.

Maybe just abruptly quitting was the only way she could see to resolve a knot of dependencies that seemed impenetrable. If she has the resources to attack the knot from that angle, then there is no shame in it.
It's called taking risks.

I've been homeless, frequently broke, and have started companies, quit jobs, and all manner of things with no safety net whatsoever.

It's risky for sure, but meh, avoiding risks appears to equate to living an unhappy life being a slave to wage and not doing something you love.

Life is too short.

Stop doing the things you dislike, go do something you love. If that means quitting when you barely have 1 month of cash left (or less)... then do it. But don't do it and go hide in your bedroom, do it and make noise and tell the world you're free, approach the people doing the things you want to be doing, just go for it.