skysight-inc/HackerNews huggingface dataset:
> I don't understand how people are discounting Safari as unused when probably about half of all web traffic comes from iphone/iPad these days, which only allows the WebKit rendering engine.

This is referring specifically to desktop Safari. Spotify already has an iOS app.
Apple does not get away with it because of force, or because of Steve Jobs' style. Apple can actually provide two different experiences, one via the UNIX cli (with a lot of knobs) and one in the Mac OS X UI (with high UX). Browsers do the same with chrome:// and about:config.

In a properly modular design, you often do not need to choose whether to upset the expert user or to make the naïve ones happy.
Differential privacy is obviously worse for privacy than absolute privacy. But the latter is simply to restrictive and would preclude Apple from applying the benefits of machine learning to their users' benefit. I think, for example, what Apple is doing in health has some awesome potential. Also animated shit emojis!

But "differential privacy" has a specific meaning that isn't just "sharing less data". It's trying to find provable methods to get the aggregate data needed for ML without exposing any single user's data. Kinda like the big data version of having one random soldier with a blank in his rifle in any firing squad.
Robots Take on Recycling
The obvious answer is of cause: we need more visas for developers
I'm sure you know this, but "Western country" doesn't strictly refer to a geographical location. https://en.wikipedia.org/wiki/Western_world
Other than integration with the rest of the Nix/NixOS ecosystem, how is NixOps different from Puppet?

Reading briefly through the examples, it seems very oriented towards provisioning machine instances rather than provisioning behavior across networks or multi-machine services, which is something that Puppet really excels at. What features does this offer in addition to ones that Puppet provides?

That said, I've been getting tired of Puppet recently for some unrelated reasons, so I'll definitely give this a try.
The thing is: I know what I think of TCL now, and I know what I thought of it at the time. They're pretty different.

I think ultimately we've come the conclusion that whole design space isn't that productive. Pervasive string expansion in an era of untrusted input probably killed it for the web before it even began.
On Android you can Sideload VPN apps, iOS on the otherhand banned them in China. Apple mounted the most successful attack on General Computing with it's walled garden. The whole Apple is good for privacy is marketing.
> Actually, there is one thing more infuriating: If that UX was also inspired by business goals and not user interests.

Like.... Facebook ? I do not use it myself but ended up checking somebody else's page for a specific comment. Took me a while !

I remember a while ago (4-5 years ?) there was some fuss about Facebook deciding not to improve UX because tests showed users would spend less time on it. But cannot find anything at the moment.
> Is its only job to save the initial 301 redirect from http > https on first load?

If there's an attacker between you and the website, you will never see the 301 redirect. The preload list was designed for that kind of scenario.
Safari is not stagnant by any means. See https://webkit.org/blog/ for instance.
In what way can IE be installed on any of the 3 platforms that Safari cannot? macOS is just as capable of running inside a VM than Windows, if that's what you mean.
Earlier discussion (4 days ago, 149 comments)

https://news.ycombinator.com/item?id=15235854
Ptexplore: Linux process page table explorer
It's along the lines of: internet plus sufficient crypto[1] makes speech free everywhere.

It seems theoretically true, but not in practice. While I have several hunches,[2] I admit I don't fully understand why it shakes out this way.

[1] Plus steg, to the extent you think that's a separate discipline.

[2] Like, we don't yet have good enough crypto[1], or it takes time, or most people don't care enough to participate in networks that enable others to speak freely, or authoritarian police forces let governments cheat at information security games (they don't actually have to prove anything to torture you), or some mix of all of those. I change my mind at least daily as to which of these is most important.
Xanadu
Author here. The point here is not the trash, I go by those bins twice a day and can affor to think a few more seconds if I am carrying something unusual. Plus it makes you feel like you are part of a bigger cause to put near-zero effort to help save the planet.

The point is software. There I should not spend a fraction of a second thinking, because that does not happen twice a day. It happens every 15 minutes if we are talking about me looking at my phone. UX thinking there makes a real, tangible difference.
Just separate your trash yourself.

(0) It isn't hard.

(1) If the trash bins are aligned in a predictable manner, then you can even do it without thinking.
.dev is not an internal Google TLD. It is delegated but not yet launched (i.e. made available for registration). We don't use it for anything internally.

You should not be using globally delegated TLDs for local testing. See RFC 2606. I don't see how using .localhost or .test is any more of an inconvenience than using .dev. Indeed it is less of an inconvenience because it will work without DNS shenanigans.

The last round of gTLD expansion occurred in 2012 and there's still many years left until a potential future round. Additionally, .vm is not a valid gTLD because all two letter combinations are reserved for ccTLDs (countries).

And I would love to have some plans to announce. Maybe soon.
Ted Nelson in Herzog's “Lo and Behold”
Right now the problem is that the horse doesn't even know that water even exists so unless it happens to find it through dumb luck or talks to someone other horse about it's problem it won't ever find water to even consider drinking it.

The idea is that the AI takes over the role of the other horse.
The Debate Over Neighborhood Zoning Could Hold Up Fast 5G Wireless for Years
Monetize your Gmail inbox with 21.co
It's not impossible to fake and I don't think that'll ever be the point.

Rather, it's just very difficult compared to faking an SSN number on the internet.

The address in this case would be difficult since a lot of institutions pull your address from the local registry, so you can't convince them to not sent stuff to any victims address unless you manage to change their address in the registry too.
Because banks think that if they inconvenience people, they'll lose customers.

Convenience trumps security in the US.
Debugging and Tracing Elixir applications
True, but ".no-hsts" is unlikely to get HSTS enabled.
This is simply brilliant. Thanks!
Then allow people to automate it themselves according to what they think is best.

Who put “UX designers” in the business of deciding what my habits should be?

From one of the pictures on your post:

> We guide every interaction.

This is as fascist as it gets.
Not the only way Stevens compares unfavourably with Richard Thompson, but RT does a good line in non-joyful, as generally appreciated by English folkies even if it isn't a murder ballad.
The Spooky Men, who he may have encountered, certainly maintained their humour after going Sufi <https://www.youtube.com/watch?v=RqBQFce1I7o>
I’ve never used .dev - but going back five or six years we set up a .dev sub domain of our domain and use that exclusively for development.

dev.ourdomain.net is a web-accessible server on our local network, configured as the dns server for that sub domain and is our internal CA trusted to issue the certs we use for development.
What makes you think Safari has gone stagnant?

Apple, Microsoft, and Google all have different approaches to the consumer software that they put out. Microsoft values backwards-compatibility above all else, and Google values the bleeding edge and experimentation. Apple values predictability and ease of use. For example, Google created and deployed SPDY because they thought they had a better way to do HTTP. Eventually this turned into HTTP/2, but in the meantime Google is now faced with supporting both SPDY and HTTP/2, or deprecating and removing SPDY from Chrome. Apple, on the other hand, waited for the HTTP/2 standard to be debated and ratified before implementing and distributing it to end users.

Safari is released infrequently, but when it is it only contains (mostly) solid features. However, if you value the bleeding edge and are willing to tolerate some amount of breakage, you can always install the Safari Technology Preview, which releases much more frequently.
Those 1980's were quite messy too. Larry picked a robust solution (SQL) to build upon, something the market desperately needed and he somehow grasped it better in the smoke and noise of the day. Of course this is not the only ingredient for them to rise above the heap. The company I worked at that time was a Sybase shop and Sybase SQL performed so much better than Oracle then. An ability to sell aggressively, staying power in improving a good technical vision, etc. is also needed just as it is today.
I think physical properties are already being used in the sorting process.
Depends on the windings. Synchronous motors have had windings designed for sq. wave drive for many years now, prominently for stepper, servo and BLDC motors. These still use some filtering to reduce the insulation stresses.
Did you do this trades in cash?
I use it as a system level configuration tool, and then use Docker for the application level. This is not how the NixOS sees itself ideally, but in my experience their ideology does not map well to the reality of application deployment.

So what I do is have all system level tools installed using NixOS: the OS, logging, systemd, Docker, sshd and so on. Then I have my applications built as Docker containers and provision them as systemd units also configured by NixOS files.
Input: Fonts for Code
Sorry for the silly question. I don't own a mac or an iPhone anymore. My understanding is you can sideload apps on your own iPhone from your own mac running xcode. Are there limitations to what kind of apps you can side load using xcode?
https://hardwareisboring.blogspot.com/2016/06/hp-z440.html
I think it's great, it's a blow to DRM :)
> does anyone know WHY Apple has let its browser go stagnant?

First, prove Apple has let it stagnate. Safari continues to improve with every release. The latest tech preview scores a 459 on the html5 test. The last released version scored a 419. It's still behind the other major browsers, but stagnating implies not improving which is clearly not the case.

It might be a better question to ask why hasn't Safari implemented whatever certain feature you want to use, i.e. service workers.
You really shouldn't do this.

https://tools.ietf.org/html/rfc6762
Help us save a student life. Please donate as much as you can #FightCancer
That sounds like a costal issue?

I hear things like this from my friends in Seattle and various parts of California.

Less dual earners and higher rental prices = major issues.

I know by contrast friends in Atlanta say that you can afford great housing on a minimum wage. I'm not sure if there is a commute...I never asked.

As an example, the Cost of living calulator says that you need 28% more money for housing to live in San Diego compared to Atlanta.

https://www.expatistan.com/cost-of-living/comparison/atlanta...?

I'm curious if anyone has spent time on this issue could explain if there are good solutions and why cities have not implemented them?

I do think this is a serious issue in certain areas.
Computers for Cynics
Please respect HN’s rules for on-topic discussion.
You have to buy macOS, and you can't legally run macOS in a VM on non-Apple hardware.
Microsoft on the other hand provides VM images with various IEs and Edge for free, regardless of you being a customer or not.
The debt tokens of the exchange sell well: https://cointradeanalysis.com/dashboard/db/wex-tokens
Spray fly with water.

The spray is likely to hit it. Wet flies don't.
> I don't know why people thought they could start using random TLD's on their own, there was always the risk they could be delegated officially.

If a company has its own internal network with its own DNS, does it still need to conform to ICANN's name assignments? I thought it doesn't...?
> What is going on in the Java Land

Could. Oracle and IBM are realising that WebLogic and WebSphere licensing revenue isn't going anywhere and if they want to grow revenue and achieve lock-in they have to find a new way.
Any names, journals or textbooks about the subject ?
Can you provide examples of "weird behaviour"?

Im also a Safari user, and in the majority of cases the reason it is not supported is because the page/app uses some custom Chrome-only, non-standard feature. Like this one.
and this formula is simply an expression of the fact that given a circle:

x = sin t , y = cos t

the derivative is

d(sin t) = (cos t) dt , d(cos t) = -(sin t) st

so it's interesting that it was "stumbled" upon.
You are required to respond to questions from them and verbally verify a) what you're are applying for b) read out the data written on the ID (passport or national ID) and c) move and wiggle the card around and occlude it with your finger so the agent can verify certain security features (holograms, picture, "shiny stripes" on the card). In my opinion, it would be quite hard to prerecord the whole process and/or reuse such recordings for multiple applications.

All in all this process makes it much much harder to steal an identity. Also, once you report your ID card stolen, its serial number will be blacklisted preventing it from being used. Add to this that there is a snail mail address on your cards which will typically be used to send login information such as passwords and PINS
"See, if you don't buy a good mattress, you will resist the temptation to oversleep. Win !"
Great pointer on the ServiceWorkers, thanks!
> So yeah, this is not a question that needs asking anymore.

Clearly it is a question that needs to be asked, because... it was asked. That's how questions work.

> Build your thing on the web.

You literally side-stepped all the maintenance bullshittery that is required for a reliable SaaS app with "but you need a website anyway", as if desktop app developers don't use GitHub Pages, SquareSpace, static HTML served from S3, or any number of other "zero maintenance" web SITE hosting solutions that will not in any way support running a web APP.
They also have a desktop app, so same reasoning applies.
Which is effectively the real world range it had when it was new.
When I do that I constantly think why is it so difficult to learn things? Why do I need to look at least 3 different sources just to confirm that they are not bullshitting me?

After learning one thing related to the topic I want to learn I still have 99 to learn but I don't even know what those 99 things are. So basically I'm learning through dumb luck. Yes the reason is that I haven't reached the magical "bootstrap knowledge" where you have enough information in your head to just look up the things I don't know.

Those youtube videos are nice and all but they will barely teach you anything, they are easy to consume low quality crap for lazy people. I know that because I'm one of them.

The fundamental problem is still the same. Discoverability sucks. I still have to ask someone who is more knowledgeable than me. So why not let the AI do that task?
Anecdote: I find that towel snapping works well.
> Nothing in Rust is an "experimental construct", so I'm not sure why you keep using that phrase.

I don't do Rust (but I did some Haskell), and apart from the fact that both are very small elitist communities, some idioms are definitely evolving or changing as people try to find out what actually works in practice. So, from this practical standpoint, yes, experimental.

What's lightweight lies in the eyes of the beholder. I certainly don't think of the line noise that is Rust code in the wild (again, to an outsider) as "lightweight".

Nor do I think of the bazillions of ways you can obfuscate the simplest things in Haskell (moving 10, 20, or 90 percent of the perceived required invariants from value to type level), requiring large and possibly incompatible sets of language extensions, as lightweight. It's a burden of choice, and changing choices has huge ramifications on the rest of the code (these decisions are inherently unmodular, which is BAD).

> No, languages that let you "iterate" and don't provide any sort of formal guarantees don't help you make correct code. They help you pump out a lot of mediocre code that probably works acceptably enough to satisfy a business with a medium-low focus on correctness.

I'm sorry, but that's a very one-sided view. You can absolutely write correct code in them, and something that helps you to do it faster does help you write correct code. Simple as that.

You seem to think that there is exactly one reasonable, justified level of formal correctness. And that is the level where you stand, Rust in this case.

But that's wrong. Everything has a cost. And formalisms like Rust are still pityful attempts at constructing "formally correct" software. There might be some software that is "completely" verified, but at a cost that is simply not justifiable for the vast number of applications. Ignoring the fact that most real-world problems are ill-specified from the start.

There is more than one valid approach to do things, and more so, to do many different things. It's cool what you're doing, but there are other valid approaches to find things to do and make them work.

Get out of your little corner mate.
Useful GCC warning options not enabled by -Wall -Wextra
Done. I opened 2 issues:

Auto-responders: https://github.com/freeCodeCamp/mail-for-good/issues/196

Tagging: https://github.com/freeCodeCamp/mail-for-good/issues/197
Didn't it make it into HotSpot?
Funny. "Safari is the new IE", but on the other hand, "<<Best viewed with Google Chrome>> is the new <<Best viewed with IE>>". At least there isn't an obvious monopoly here...
> I don't understand how people are discounting Safari as unused when probably about half of all web traffic comes from iphone/iPad these days, which only allows the WebKit rendering engine.

In the US. In the EU, iOS has a marketshare between 15 and 20% at best, which is closer to Windows Phone’s best times than to any other mobile OS.
If you go to that link, it lists both Safari and iOS Safari versions - it looks like neither of the next versions (v11) will have service worker support yet
Well, that's how cookies in iframes have always worked. The only difference is that these changes explained in the blog post you mentioned means that since you never interact with the domain in a first-party context, you won't be able to read the cookies while in a third-party context. See the heading "Actions Taken After Classification" in https://webkit.org/blog/7675/intelligent-tracking-prevention...
Compared to our Data Growth, HDD capacity growth has been rather slow in recent years. ( In terms of TB/Plate ) I thought DC were suppose to drive the HAMR ( Heat Assisted Magnetic Recording )tech forward when the consumer space is now in decline.

Or has the tech matured to the point, where even small and medium size company are happy with these 12TB HDD, and larger HDD only mattered to a few such as Google, Netflix, Amazon, Blackblaze, OVH, Microsoft and Apple etc.
Mars research subjects to emerge after 8 months of isolation
I would love to be able to answer that first question for you. Unfortunately I have nothing to share yet.

My understanding is that HSTS carveouts are supported by Chrome but not yet other browsers. There's more standardization work to be done there. That said, you can only request entries on the HSTS list for domains that you own, and since no one (yet?) owns any .dev domain names, no one could request such changes. It goes without saying why you can only change security settings for domain names that you own.

And for the last question: Again, there are no .dev domain names. There never have been. It's never been available for registration. The recommendation for a long time has been to only use either (a) domain names that you actually own, or (b) domain names that are reserved for testing and are guaranteed never to exist a la RFC 2606. Using domain names for testing that don't yet exist but could in the future is a huge security hole that you must fix now. Do it now while the domain names still fail to resolve. Once they resolve, and you don't own them, then your security situation gets a lot worse.
Without knowing what functionality you intend (i.e. if it's even practical/reasonable for a web app - lets skip that and assume it could work for either environment), if you can see people in your segment will pay for desktop apps on whichever platform(s) you intend to support, I'd say try that approach.

Given your specific goals, a desktop app seems like the obvious choice to me - the only difference might be, if it's a multi-user app (let's say its an app to vote on the colour scheme for an office renovation), you could also go the 'appliance' route, and build it as a web app, but distribute it as a VM image that customers run on their own hardware.
As another web developer, I would say that browser support is driven by what browsers people use that actually visit your site, and is decoupled from the what the developer wants/chooses. I have several sites that get 100k+ visits a month from Safari users, so I won't be dropping support for them anytime soon.
Do you plan on DNSSEC signing subdomains of Google's TLDs?

For example, I see that .dev has a DS record in the root. But nic.dev is not signed.
Here's my guess as to what happened.

A couple months ago, Spotify switched their web player from using Flash to using HTML5 + DRM (the "standardized" web DRM).

At least, that was the case for Chrome and Firefox, which I noticed because I exclusively use the Spotify web player.

But I guess Safari doesn't support web DRM via the Widevine CDM. So they must have kept the Flash based web player around for Safari.

And, indeed, Flash would only be needed for Safari. Chrome and Firefox support web DRM on Windows, Linux, and AFAIK MacOS too.

Now, supporting both a Flash based web player and an HTML5 based web player is a lot of engineering. I'll bet at some point they decided they didn't want to do that. The only reason they still had the Flash player was to support Safari and Safari only has 2% market share. On top of that, I'll bet most of their customers use the desktop app. So of the 2% of Safari users, how many are using the Spotify web player?

So they dropped their Flash based player, and thus had to also drop support for Safari.

I think it's a fairly reasonable move. Flash is dying; they couldn't keep their player on it, so they _had_ to move to HTML5. Since they have to use DRM at the behest of the RIAA, web DRM thus becomes their only choice.

I doubt the story is much better for alternatives. Even if any of the other music subscription platforms are still using Flash, that's unlikely to continue for long.

I don't blame Safari for not implementing web DRM. That leaves only one party left to point the finger at; the RIAA. If you need someone to blame, blame them.
Good luck to you man
Best course for applied deep learning in 2017?
I'm currently looking for some good resources to get into neural networks (or as most people call it nowadays "deep learning"). Preferably some course with lectures, assignments and stuff available on the web. Although the theory part is important, I'm more interested in applying these things.

I have a solid programming background and know some machine learning stuff. I don't need someone to tell me the difference between supervised and unsupervised methods..

Does anyone have experience with the new course by Andrew Ng [1] or the Fast AI [2] course?

[1] https://www.deeplearning.ai/

[2] http://course.fast.ai/
Switching the default encoding from ASCII to utf-8 sounds like a pretty big change.
Safari is the new ie