skysight-inc/HackerNews huggingface dataset:
If I were a conspiracy theorist, I'd think there was something nefarious going on when I see articles like this. What if the intended result is not actually browbeating DDG but, rather, making people think that DDG is no better than Google in the privacy arena so why invest the energy in switching?

If DDG isn't any better than maybe nobody is, so we might as well get used to the lack of privacy. Why switch if you're just going to get worse results, expend more energy, and not actually get increased privacy? You might just as well give up the struggle...

Fortunately, I'm not a conspiracy theorist,
East Palo Alto experienced something similar. They voted to incorporate as their own city, then discovered they didn't have a large enough tax base to adequately fund their police department.

At one point in the 1980s they actually achieved the distinction of having the highest murder rate of any city in America.
That clearly is the assumption of the argument. That women don't have enough opportunities and thus are underrepresented in the work force. Whether that opportunity refers to discrimination, encouragement, etc. is irrelevant to what I'm saying. What if women are underrepresented because they simply don't want the jobs?
> Not some simple Flask endpoint?

I don't even know what a "Flask endpoint" is. Actually I barely know what Webpack and React are either.
This would be interesting if it wasn't just live. Eg, if I could select a time period to show the most popular stuff from. Also a better way of discovering subs to browse, rather than having to know exactly what you're looking for. Perhaps an r/all equiv, but products ?
The author seems to think that most developers think the Web sucks and needs to be killed. While this may have a sliver of truth behind it —in that a lot of us are dissatisfied with certain aspects of the platform— there's one thing the author fails to address:

If the Web (and Javascript) suck so badly, then what's up with all those Electron desktop apps? And all those react native/nativescript/ionic mobile apps?

IMHO, the author fails to address the only reason the web is popular as an application platform: its still the only reliable way to make sure your code runs everywhere with as little effort as possible.
It's different now?
C is not impossible to secure, actually. There are popular C programs which are more robust than your average high-level dynamic language program. It takes a deep commitment (hence a lack of good examples), but there is generally a clear path to a well-behaved program in C, and there's nothing about C itself which prevents you from writing secure code. On the web, you must actively mitigate pitfalls of the platform itself, in C you just have to make sure your program is itself well behaved.

You might argue either way, but a straightforward C program can be correct if it is well formulated, but a straightforward web app can not be correct unless it is fully mitigated.
If you don't mind sharing, what problem did you have before that was solved by adopting React? (I'm not referring to React Native. It's obvious to me what problem that solves.)
I wouldn't worry that much about it, the differences between Django 1.11 and Django 2.0 aren't major ones with the exception of dropping support for Python 2.x and the new simplified URL routing syntax.

Django 1.11 is a LTS (Long Term Support) release so it will have security upgrades until 2020, so you are safe sticking with it.

However I'd go ahead with 1.11 and transition to 2.0 to learn how Django handles deprecation and how to upgrade a codebase, both very useful skills as Django has a steady release process and it's often easier to track Django than to do a multi-version migration.
"To me it would be wildly inconceivable for predisposition to certain jobs to be an inherent biological trait rather than something shaped by society."

Doesn't really matter what would inconceivable to you. What matters if that's the reality of the situation. Watch the documentary it addresses it.
DHS Finally Reveals the States Russia Hacked During the Elections
It's absurd to compare ancient greek "democracy" to modern day democracies. Ancient greece was a slave state which didn't have any notion of human rights. Not only did ancient greece own slaves, they also had votes to kill their own citizens. The most notorious being socrates drinking the hemlock.

Ancient greece wasn't a democracy. It was an oligarchy of slave owners.
https://news.ycombinator.com/item?id=14687936

There's actually some work on that.
> My suspicion is that the large unwieldy-mess of the mattress suppresses ability for the customer to return

I have. I bought a Casper bedframe and I didn't like the height of the bedframe, so I opted to return it. Casper sent some guys from GOT-JUNK to pick it up from my apartment and refunded me. No haggling on the phone either
There were plenty of webapps before Gmail. There was even plenty of other webmail services before Gmail and Gmail wasn't much different from the status quo. I've been using webmail since 1997 and even my University had a web interface (SquirrelMail) for those who preferred using the web interface (almost everyone). This was pre Gmail.
It really is, especially for books and music, wow. Out of curiosity is searched /r/bitcoin...

https://thingsonreddit.com/things/r/Bitcoin?order_by=score
> Hence my conclusion: if you can’t hire web devs that understand how to write secure web apps then writing secure web apps is impossible.

Furthermore, the web devs that understand how hard it is to write secure web apps generally don't want to do it for a living.

I've found that the most straightforward way of avoiding problems on the web is to sidestep them as much as possible. Draw UI with canvas or WebGL, overlay native widgets, use RPC over a WebSocket for everything except for public assets.
Google Scholar isn't the worst case of it, but Material Design is making a lot of the Web very unpleasant. Over-saturated, garish colors, low-contrast text, and too much animation (not accessible to people who have trouble with visual motion). Round profile pictures are also not a good trend -- users' images should never be edited without their permission, because some of them depend on being square. MD could be fixed by toning it down a little. (Ask "how can I minimize the animation and colors as much as possible?" No delays, sudden fast movement, or movement from areas of the page that don't need immediate attention.)
Windows 95-era Word didn’t have to handle real-time collaboration over the Web between an arbitrary number of users.
> a meaningful number of developers are openly questioning the web platform.

And then going back to building their products. On GitHub.

Oh, wait.
It provides fallback connection methods if WS connection fails, as it can do if you have, for example, a HTTP/1.0 only proxy between you and the client. For example it was not that long ago that nginx did not support proxying HTTP/1.1. It is getting less and less relevant but at least for me the socket.io code has worked for a long time and there hasn't been a need to rewrite it.
I don't find such predictions at all utopian, and I'm surprised this thread of argument has persisted in culture so long.

Sex is associated with pain and suffering, and that's why taboos exist. Whether it's unwanted children, unwanted contact, diseases, or unfulfillable desires, there's plenty of downside to sexual behavior. Violence is easier to understand correctly than sex: violence is always bad unless it's necessary, while the conditions which make sex good or bad are more complicated, and thus, less comprehensible to children. Every four-year-old knows you shouldn't actually drop anvils on people. Inappropriateness is an ingredient of slapstick comedy which is (partially) why characters in children's shows do bad things to each other. Note that Pepe le Pew nonetheless appears in children's shows; his attempts at romance are also obviously wrong and thus funny.

On the other hand I do notice a positive correlation between people thinking the solutions to social problems are easy and people becoming angry about politics. This makes sense because it's natural to feel aggrieved when someone fails to solve an easy problem. But in reality the solutions to social problems are not so easy.
Imagine? With wasm, I'm afraid you won't have to imagine in a few years...
It makes sure that all your code is yours and that no matter what stuff makes it into the data stream it will never be able to do anything because it is just meant to be rendered.

So <html>abc</html> would go as

<html><datum 1></html> where datum 1 would refer to the first datum in the data stream, being 'abc' and no matter what trickery you'd pull to try to put another tag or executable bit or other such nonsense in the datum it would never be interpreted. This blocks any and all attacks based on being able to trick the server or eventual recipient browser of the two streams to do something active with the datum, it can only be passive data by definition.

For comparison take DTMF, which is inband signalling and so easily spoofed (and with the 'bluebox' additional tones may be generated that unlock interesting capabilities in systems on the line) and compare with GSM which does all its signaling out-of-band, and so is much harder to spoof.

The web is basically like DTMF, if you can enter data into a form and that data is spit back out again in some web page to be rendered by the browser later on you have a vector to inject something malicious and it will take a very well thought out sanitation process to get rid of all the possibilities in which you might do that.

If the web were more like GSM you could sit there and inject data in to the data channel until the cows came home but it would never ever lead to a security issue.

No amount of extra encoding and checks will ever close these holes completely as long as the data stays 'in band' with the control information.
It should be possible to sell the same goods for roughly the same prices anywhere in the EU. My guess is the problem here is a lack of a demand for higher quality foodstuffs.
Is it? For who?

For HN readers. And probably in general.

As for your questions, I would definitely like to first use software which doesn't compromise my privacy and security and only as a very distant second have some bureaucrat who would maybe in the best case scenario fine a company which leaks my data.

The vote I cast by running a Tor relay is much more meaningful and valuable defence of privacy than a vote in the general elections. By orders of magnitude.
Spain's Crackdown on Catalonia Includes Internet Censorship
I wonder if there's a market for a WebApp store. Like a curated WebApp library - centralized billing, some form of vetting before apps can be listed, maybe even some apis for notifications or whatever. WebApps tested on a few major browsers and platforms before they're allowed to be listed. I'd probably be more willing to pay for WebApps if they were delivered that way.
Along that same line is YaCy.

https://yacy.net/en/index.html
Don't get me wrong, it was the good kind of struggle where you grow and push yourself. Like going to the gym.

It was the same as any other programming language, framework, or ecosystem. Exactly the same as my experience with Ruby on Rails when I first started doing web development.
Tor offers a layer of protection. It is possible to stay anon on Tor.
I've extracted the relevant bits below, the rest is the usual SMTP setup everybody uses. I didn't just copy and paste because it's intertwined with the rest of my config that I'd have to publish all of it [1]and also I removed some private stuff. I suggest you pick what you like but reading the documentation carefully. With Gmane, when you first run Gnus you should pick the newsgroups you want to follow, hit ^ on Group buffer to get the server buffer and subscribe with `u' to any group you like on the server.

[1] I'd have to kill the mercurial repo and start brand new if I wanted to publish my emacs.d, thus I don't publish it. Maybe one day I'll get around to figure out if I ever had any really confidential stuff in there and publish it if not.

(require 'rx)
(require 'mail-source)
(require 'spam)
(require 'gnus)
(require 'message)

(setf
;; Gmail does not like parens.
message-from-style 'angles)

;;; Mail sources:
(setf
mail-sources
`((pop :server "some server" :user "user name" :port 995)
,(let ((f (expand-file-name (user-login-name) "/var/mail"))) ;system mailbox
(list 'file :path f))))

;;; Spam:
(spam-initialize)

(setf
spam-use-BBDB t ; whitelist from BBDB contacts
spam-use-spamassassin t
spam-assassin-program (gk-executable-ensure "spamc")
gnus-spam-newsgroup-contents '(("spam" gnus-group-spam-classification-spam))

;;; Splitting mail:
nnmail-split-methods 'nnmail-split-fancy
nnmail-split-fancy-match-partial-words t
nnmail-split-fancy
`(| (: spam-split)
;; Github:
("List-Id" "cadadr/" "inbox") ; Github issues on my github repos.
("From" "notifications@github.com" "github") ; other
;; News:
(| ("From" "newsletter@newspaper.com" "news"))
;; Announcements:
(| ("To" "info-gnu@gnu.org" "announcements"))
;; Links:
("Subject" "_link_" "link")
;; Files:
("Subject" "_file_" "file")
;; Self mail:
("From" ,(macroexpand `(rx ,user-mail-address)) "self")
("From" ,(rx "my other email address") "self")
("From" ,(rx "another address of mine") "self")
;; Rest goes to the inbox:
"inbox"))

;;; Gnus:
(setf
;;;; Mail sources:
gnus-select-method '(nnml "") ;uses mail-sources
gnus-secondary-select-methods
'((nntp "gmane"
(nntp-address "news.gmane.org")))
;;;; Mime:
gnus-buttonized-mime-types
'("multipart/signed" "multipart/alternative" "text/html" "text/x-diff"
"text/x-patch" "text/vcard" "text/x-org"))

;;;; Keys:
;; Render article in browser.
(define-key gnus-article-mode-map "\C-cw" 'gnus-article-browse-html-article)

;;;; Gnus ui:
(require 'gnus-sum)

(setf
;; U: read status
;; R: A if replied to,‘ ’ if not
;; z: zscore (char)
;; B: trn-style indentation based on thread level
;; f: contents of the from or to headers.
;; s: subject or empty str if not thread root
gnus-summary-line-format "%U%R%z %B%(%-23,23f%) %s \n")

;; Switch topics on and collapse all threads. Collapsed threads
;; expand automatically when you hit RET on them, and there's a
;; threads menu for the summary buffer where many commands are listed.
;; I suggest you keep menu-bar-mode on for at least Gnus as it is very
;; helpful when discovering new commands.
(add-hook 'gnus-group-mode-hook 'gnus-topic-mode)
(add-hook 'gnus-summary-prepared-hook 'gnus-summary-hide-all-threads)
Is it true that the number of Bitcoins in existence is limited?
The main thing is having the state flow top-down through your app, so you never have to worry about manually keeping things in sync in the UI. Redux and redux saga have really taught me a lot about programming, and then RxJS and redux-observable completely blew my mind.
I bet there are plenty of people Googling specifically for coupon codes and then lifting them off of review sites like Sleepopolis without even reading the review. In that situation it does not even matter how favourable the review is, just that the site has good SEO.

If you find a substantial seeming coupon that's valid then that's a major positive feeling that encourages completing the purchase.
Gmail was first massively used single page web application. Somewhat ironically it was built on top of technology meant for Outlook Web Access (ie. XMLHttpRequest as ActiveX component in IE and as an DOM extension in Gecko). AJAX is name that was conceived to describe that approach to webapps, with the somewhat funny fact, that google at the time described it as javascript (from time to time with the addendum: "done right")
Sophie Wilson[1], designer of the ARM instruction set -among other things- comes to mind too.

[1] https://en.wikipedia.org/wiki/Sophie_Wilson
Buddy Lindsey's Godjango.com has some good short videos that take you through the site building process (both topic based and a few project based ones)
Most consumers don't know the difference between a web app and a native app, so no one would care
The web app is the best we have. Please give us an alternative or else it's not actually time to kill it.
In a society where women are not treated equally, you're dodging the real issue to argue about something that's not relevant.
It's not just big companies necessarily either. Say you are a small startup working on something really innovative and you have a patent on part of your work. Facebook decides to build something similar, violating your patents in the process, and they are going to put you out of business. If one of your core technologies is react under the BSD + Patents license, then you are screwed. You can't sue to save your business because even if you do you have to immediately recall all of your software and replace React.

Sure, not everyone is in that situation. Facebook is big enough though that if you have any patents you have to be _very_ careful about that license.
Nom they deserve the same privacy. I wish there was a solution for them, but I don't think there is.

Better software and newer generations that know how to use them will, however, come before anyone can make a government that respects his population.
Ask HN: Why do so many sites keep breaking their page URLs?
Seriously, it's 2017, and 301 redirects are a thing that exist.

So why do so many sites still keep breaking all their page URLs? It's not like its a CMS limitation; most modern CMSs automatically redirect pages to their new URLs. It could be developer incompetence or laziness, but many sites that make this mistake are run by large companies with hundreds of employees, some of which are likely really good at their jobs.

So why do sites do this? Why are 301 redirects seemingly so rare when sites are restructured nowadays?

Because it's really hurting the usability of the internet, and making forums and wikis far harder to use than they need to be.
This seems like a legitimate use-case for permissioned ledgers where various lenders have necessarily siloed lending history data but also have an interest in seeing what data everyone else has for prospective lendees.

In the longer run, you can imagine not just credit history data being exchanged (with the permission of the borrower perhaps) but also the ability to trade the loan products themselves, most of which is done OTC right now. Fixed income contracts can be described as "smart contracts" [1]

[1] https://lexifi.com/files/resources/MLFiPaper.pdf
There are absolutely computer wargames that can do this.

Here's a Let's Play of War in the Pacific that was played at one day (real time) per day (game time) - for 1320 days. And as you can imagine, it can very easily take an hour or more per turn. https://lparchive.org/War-in-the-Pacific/
I'm not sure I understand the point of this. Why wouldn't I just use the built-in `rpc` module?

What does `backwater` get me that `rpc` doesn't?
Welcome to the glorious big data future.
Yeah, trust companies like Equifax instead.
There used to be one such Firefox addon that even made it into the Debian (Wheezy/Jessie) repositories. Unfortunately it was written for the old plugin system and never updated and is now designated as blocking the new Firefox multiprocessing, so I already started looking into Firefox addon programming just to replace it. Somehow I never thought about looking for newer alternatives in the official addon store, where several modern ones seem to exist already, so I'd like to thank you a lot for your suggestion.
Same as DNS hijacking any website where the user has an account. What's the security issue in Exchange here?
Droll. But wasn't context unawareness part of the problem too?
> It is possible to stay anon on Tor.

That is an extremely dangerous statement to make and one I do not agree with.

Keep in mind that:

- you will have to trust that a large chunk of the nodes is not in the hands of someone that you count as your enemy

- that even if your enemy is not in charge of a substantial part of the network they may still be monitoring entry and egress and that that alone can be enough to figure out who is talking to who

- that any data present at egress that can be intercepted might still reveal who you are

So no, Tor is not 100% secure and it is very well possible that even if you use Tor your identity will be connected with some activity or even all of your activity while using the network.
I saw this commercial too. Utter lunacy. I am not even surprised anymore- these corporations have the green light to do whatever they want. Only wrist slaps for punishment if they do truly heinous things.

Houses wouldn't be so expensive if nobody had access to credit. Nobody would be betting with 5-7x their yearly income.
Prefixes for character length? Is that a better choice than byte size or would it even matter?
Facebook has decent incentive to move people from their web app to their mobile app.
Why web Apps? Because you can hit just about every platform with one codebase, you got instant distribution, you got near universal compatibility. And, If you are inclined, you have minimal licensing.

Desktop has big compatibility cross/platform hurdles (does it run on Linux, MacOS, Windows, Android, iOS, and Playstation?), difficult distribution, and at times licensing (even moreso on walled-garden platforms).

You are also dependent on the desktop/PC manufacturer (ever have Microsoft, Apple, Google, etc pull the rug from under your product? it happens regularly especially with OS updates and "trusted" platform initiatives) Not to mention the development platform whims ("Sorry guys, we are selling to MS. We're sure they'll keep those MacOS and Linux versions up to-date, they are really excited about it!")

Maybe if its a open platform with high adoption on the scale of LibreOffice or GIMP... maybe.
I remember how impressed I was when Google Maps was released. Instead of having to click on arrows to reload the page with a new map, you could just drag and it would automatically load new map tiles!

Google Earth (the native application) is really old and abandoned by now, but its still better than the new "web" version that only works in Chrome.
No mobile apps ?? I was ready to buy it on my ipad...
Can't be overstated. Web assembly is going to be a disaster for users in the long run.

The helpless feeling as a bunch of people actively destroy the web for no reason other than that it's more convenient for them is so frustrating.
I just find the way DOM/CSS does layout and styling to be completely convoluted and crazy compared to any desktop toolkit since 1990. Center anything either vertically or horizontally - that cannot require me to google and most importantly cannot have multiple different solutions. Simple things should not just have simple solutions, they should have one simple solution.

Memory-unsafe programs on the desktop should go the same way as the HTML layout model.
I agree that the web is kind of a catastrophe. However, the problem is not really that it confused documents and apps. I would actually like to see this distinction get blurrier, in the form of better support for active documents, ranging from interactive illustrations of ideas to spreadsheets with formulas.
You're being downvoted because you're completely deaf to context.
I'm sure blockchain will magically solve that problem!

(If you're not laughing then you need to admit you have a problem)
Gridbox and Flexbox largely make layouts sane again.
You didn't actually disagree with your parent comment. It is possible to be anonymous on TOR. It does not come for free.
How do we fix this?
.... what women want isn't relevant?
"Knowing that there will be better hard drives in the future for less money has some effect on your willingness to purchase."

It'd probably be surprising to know how many businesses have been killed by intentionally or inadvertently releasing information about an upcoming product.
I bought a high-end Stearns and Foster 15+ years ago from a department store and it's about due for a replacement. It was expensive and worth it.

Now it seems the market is all about overpriced mattress stores with sleazy salesmen or start-ups selling fabric covered foam.