skysight-inc/HackerNews huggingface dataset:
> this happened because many Linux developers don't care about binary blobs.

It is mostly users, not developers, who don't care about binary blobs. The users then take the "pragmatic" approach of using binary blobs, but hey, stuff works for them.

See also the Nvidia binary driver. Who is the advocate for that? Users (hey, never had a problem and it runs my apps very well) or developers (whoa, we cannot develop Wayland/etc with this)?
That's a huge guessing game, though - remember StageFright? You could have a phone with an up to date Chrome, up to date Play Services, and still be trivially exploited simply by viewing a standard video file. (Not to mention wondering which of your apps uses an out of date embedded web view)

I would submit that the number of people qualified to safely make (and update) that risk assessment is extremely small, and all of them would recommend updating to a version which patches problems rather than hoping you can dance around them.
I'm no anarchist nor know about all the technicalities involved, but at what point does Venezuela become vulnerable to invasions from countries which they share a border with (E.g. Brazil, Colombia)?
I'm assuming if you don't have enough money to run a country, you certainly don't have enough to protect the border and power the military.
All the excitement around wasm seems quite puzzling to me. Yes, I understand that you can program in whatever language you love but what new language are you hoping would be supported? C? C++? Fortran?

As far as I am concerned, all the languages I care about already have compilers that target JS.
Startup Industry Tries to Quash Proposal to Tax Options Earlier
Your bank doesn't have a website?
KDE Frameworks 5.40.0 released
Got really interested, too bad I'm not allowed (by myself) to play any games that require some considreably time spent on them, at least by some of the upcoming years.

Good luck with this, hope to play it when you launch it on VR in some years!
There is no quintessential “socialist” country just as there is no quintessential “capitalist” country. In broad strokes we can say Venezuela is socialist, as they implemented a policy of government ownership of businesses including seizing existing entities. The result was abject failure.
President Donald Trump's noteworthy tweets
Using that "narrow" definition most countries around the world, including the US, have engaged or are engaging in terrorism, thus making the lot of them terrorist groups?

Bombings of cities during war time, indiscriminately killing civilians, sometimes as a show of power to pressure the opposing side to surrender, wouldn't make
the whole military a terrorist group.

North Korea's treatment of their citizens doesn't make the whole country, or their military, or their police, a terrorist group.

At times countries like the US have killed more civilians in a single day than ISIS killed in the past 6 years[1][2]. Do I consider them terrorist? No.

In the war in Syria, the Assad regime killed more civilians than ISIS by an order of magnitude[2]. Do I consider them terrorist? No.

All three countries would be considered terrorist by your definition.

I don't buy it. Just because of terrorist acts by a few, the whole group doesn't become a group of terrorists.

[1]: https://en.wikipedia.org/wiki/Atomic_bombings_of_Hiroshima_a...

[2]: http://vdc-sy.net/wp-content/uploads/2017/07/June-report-Eng...
To gain root access you have to flash an optional zip file [0] after flashing LineageOS itself and the also optional OpenGapps [1]. If you don't do that, your Boxer app should pass these SafetyNet checks [2].

If you want both root and still full access to these SafetyNet-"protected" apps, you can try the alternative rooting solution Magisk [3] which specializes on bypassing these (imho arbitrary) restrictions.

[0] https://download.lineageos.org/extras

[1] http://opengapps.org/

[2] https://www.lineageos.org/Safetynet/

[3] https://forum.xda-developers.com/apps/magisk/official-magisk...
BeautifulSoup. The difference is that lxml can run a little faster in certain cases for a huge scrape, but you'll very very very if ever need that. It's interesting and probably worthwhile to try both and know the difference, but bs BeautifulSoup is definitely where to start
tl;dr: The author discovered the identity of two guys (which were not explicitly disclosed) running a big network of bots that targetted man attracted to young, sometimes underage, women.

Those bots would point to video chat services, encouraging the man to masturbate himself while viewing pre-recorded videos of a girl masturbating. Then, the person would be threated to give a ransom or else have the video leaked, with the additional threat that he was masturbating to underage woman sometimes.

Fraudulent porn websites stealing credit cards were also shared by the bots network.
Show HN: TimeFerret – Schedule meetings from your keyboard on iOS
Digital Polarization on Pinterest
Yes; in vanilla Paxos you need a majority of nodes to be up/reachable to service either a read or a write. There isn't really a distinction between read/write in terms of availability (for better or worse.) I think its pretty unlikely (in terms of db design) that you'd have a consistent system that could service reads but not writes during some manner of outage.
I can totally understand that as i was into the same situation earlier
>... and get banned, and that somehow "serves me right"?

The "serves you right" part was preceded by "... but you're bypassing that protection ..."
Previous discussion about performance improvements can be found here: https://news.ycombinator.com/item?id=15686653
How DARE you call spotmini creepy!!
This is exciting! Glad to see Google Chrome has competition.
from above: https://outline.com/vznfxw
Loaded with Cliqz trojan horse!
Show HN: Hss – Interactive parallel ssh client, autocomplete and async exec
If you use PHP, Simple HTML DOM[0] is an awesome and simple scraping library.

[0] http://simplehtmldom.sourceforge.net/
Yes, this happens to me on an Echo Dot. The responses I've noticed don't seem to be replaying previous queries but rather completely unrelated queries to the people in our house or our location. It's like a classic "crossed wires" from the old telephone operator. I guess it happens once/twice a month.
Nice to see Firefox competing in performance with Chrome again!
Socialism and dictatorships aren't mutually exclusive.
If you look at the history of all the governments that call themselves Socialist, and you does it honestly, you are forced rather strongly into having to choose between A: yes, this is the dominant natural end result of a Socialist government or B: whatever you think "true" Socialism probably isn't possible and attempts to bring it about are vastly more likely to bring about Venezuela than real Socialism.

(Note I frame this in probabilities; citing one or two governments that you believe are socialist and are doing it "right" will still leave it a very risky move when considered against the whole of everyone who has tried it. And I'm not particularly convinced that you'd consider them "real Socialism" if it weren't momentarily convenient for this argument, because all the European countries you might want to cite still have poverty and social and wealth inequality, etc.)

Either way, the cost/benefit analysis of "trying to bring about Socialism" has some rather hard-to-ignore things in the "cost" column if you ask me, not to mention a certain lack in the realized benefits column, so don't be surprised when I react poorly to the idea that we should try it where I live.
Why We Acquired Neumob
Fedora 27 released
Clumsy maybe. If I wanted to be sleazy, I would have used a false account for one or both comments. I have updated my profile though. Thanks.

Apologies. Wasn't meant to be - I thought that was clear on my profile but I haven't updated it for a long while.
I want to see if there was a single place for all of the key software events to be listed in a single place and I wouldn't want our events to be missed off as we think they stand up against others. https://www.inc.com/heather-wilde/6-cant-miss-conferences-if...
Congratulations to the developers on an important release.
The thing is nobody wants to inherit this mess.
Hah, how stupid do you need to be to fall into this obvious trap. Let's see... a random cute girl approaches you online and wants to initiate a sexy chat. The chances of this happening for real and not being a scam are about the same as you being a distant cousin to a Nigerian prince who just passed away and left you millions of dollars of inheritance.
Hi HN,

TimeFerret is a beautiful calendar app for iPhones and iPads. It comes with a custom keyboard that lets you access your calendar from any app.

How TimeFerret is different from other calendar apps:
1. Quickly see how much time you have between meetings in the 24-hour "Daily Donut"
2. Calculate Meeting Cost
3. Mark certain hours of the day as "Me Time" and flag meetings that interrupt this time.
4. Carve out a few hours as "Meeting Time" and flag meetings that are outside these hours.

We are happy to answer all your questions about TimeFerret and would love any and all feedback :)
Rebooting the Brain – Bryan Johnson
I was looking at services in this area a few weeks ago to automate a small need I had and ran across these guys. They offer a free 5,000 monthly request basic plan. I gave it a try, worked fine (I ended up building my own solution for greater control). It's just for scraping open graph (with some fall-back capability) tags though.

https://www.opengraph.io/
I wonder when the Android version of Firefox will be updated to 57.
Netflix for business strategy
I doubt it. User growth is used as a metric to measure future ad revenue. Fake profiles aren't going to generate a lot of revenue from those ads. Facebook would simply need to make a statement about deleting a bunch of fake profiles, but they don't expect revenue to dip.

However, that is not the case for a pre-revenue or pre-profitable business. Those startups are dependent on VC funding, they might lie about users and usage to get more funding (see Silicon Valley Season 3). *This is 100% inappropriate and should not be done. You will burn credibility with investors, for your current venture and any future ventures. It's better to shut down a venture and move on, than to lie about your metrics.
Wiliot harvests energy to make beacons without batteries
How about on your wrist? https://mytikker.com/pages/what-is-tikker
A friend released a little tool to only scrap html from websites, with tor and proxy chaining

https://github.com/AlexMili/Scraptory
Hopefully most of the missing extensions will be developed sooner rather than later. I have 15 extensions installed, 14 of which are "Legacy".

The most critical one, Tree Style Tabs, has been converted. That was the key blocker that prevented me from seriously using Chrome. But many more remain; Cookie Controller, RefControl, some kind of Classic Theme Restorer equivalent (to get a menu bar back for Bookmarks, at a minimum), etc.
Great !

I do like my rounded tabs though, hope someone ports the old theme.
I think the saddest part of this is that they prey on people. Many of the peeps here on HN can look at a profile and say "spam," so it's hard to imagine the people who can't. The 1% return from SPAM that click on those links, or put in their credit card details.

There was a ReplyAll podcast episode where one of the reporters actually tracks down a shop in India; even goes there and talks to people who've worked at a "tech support" places which charges $400 to remove fake viruses they've implanted.

I think this is even more insidious because they're preying on people who may be extremely lonely or desperate. When you really think about that, it's really sad. It's either psychopathic or they justify it to themselves in some horrible way like, "These people are losers anyway," or "If we say the girls are underage, then we're only going after sexual predators." .. The same crazy logic used by the Ashley Madison leakers.
Well, to be fair, to "be a thing" is not equivalent to "exist".

In this context, I guess that "be a thing" means, "be something people do in their spare time, even when not strictly required to because its forced upon them in their role as politician/whatever."
A Vision of a New Age [Alan Kay, 1988]
Manufacturers have no incentive now to do so.
I think very few people who've been using ZoneMinder will think of it as "awesome" with feasible API integration and such. Yes, it works. It's gotten a lot better recently. It's still quite buggy and the configuration is archaic. However, as an open source / free option, I cannot say I don't appreciate it being available, and I am certainly thankful to the ZoneMinder team since I run this system at home with 4 cameras. Sometimes I wish for more though.
> my first thought is:

> > what's the most effective exploit to tap into that market?

So??? What is it? Do let us know.

I'd venture to say that the fragmentation of that market makes it reasonably secure. Just like how the average router is incredibly insecure, and yet you don't advise people to avoid e-banking and just deal with their money in paper form and through face-to-face contacts.

Yes, you are technically right. But @quanticle is right, in practice: unless those users do some very stupid shit, they're pretty safe doing ebanking on their phones. (and those who do the "very stupid shit" are likely to do it on their computers, too)
That's exactly what incentives do. They increase driver revshare.
Had some lag after install and had to disable smooth scrolling in General Preferences to sort it. Not sure if I was somehow hallucinating but it's smooth now. OSX.
Is there a good Vimperator replacement for the new webextension addon system?
> And Torvalds and the major kernel maintainers all refuse to enforce the GPL, and actively campaign against doing so.

Two questions: why? and why use the GPL if you’re not going to enforce it?
Apprenticeships should be regulated (by the state). You should have some degree at the end that qualifies you to also work for a potential competitor.

Meaning they should teach you a solid but generic base of skills. And not just let you do manual labour that doesn't require much skill.
Yeah, because Apple doesn’t want a tablet to just run a phone app, but bigger. Or even worse, vice versa.
China's supercomputers race past US to world dominance
...and returned shortly thereafter.
Yeah web designers will hate me for this but at least 15% of every site is crap that I block.

I'm on a 5Gb data plan for mobile and even on the excellent 4G networks we have here sites are still too slow and unresponsive.
2014 - the title could use an update. Also, long time user here. Thanks for keeping the FreeOTP app updated and working!
Why would any other south american country invade Venezuela at all due to defaults?
Well, that's a good task for this morning : test it !
Because the industry basically milks the insurance companies, the customer doesn't actually pay (much).
Depends on your needs. If it's mostly the shortcuts, Vimium works pretty well (at least for me). If you want the full-blown UI customisation, then I'm afraid extensions are not allowed that anymore due to the associated security risks.
I hope that firefox will continue to protect users privacy as good as possible. I'm thinking of super cookies and the like. Other brother vendors don't seem to be very engaged in this area.
Does anyone know of benchmarks comparing this to the current version of chrome. The Mozilla team only mentions that it’s faster than previous versions of Firefox.
It's not really for public consumption because it's embarrassingly badly written :)

It's pretty dumb really. Just figured out the search URLs and then parse the list responses. It then stores the auctions/ad IDs it has seen in a tiny redis instance with 60 days' expiry on each ID it inserts. If there are any items it hasn't seen each time it runs, it compiles them in a list and emails them to me via AWS SNS. Runs every 5 minutes from cron on a Raspberry Pi Zero plugged into the back of my XBox 360 as a power supply and my router via a USB/ethernet cable.

The main bulk of the work went into the searches to run which are a huge list of typos on things with a high return. I tend to buy, test, then reship them for profit. Not much investment gives a very good return - pays for the food bill every month :)
Greasemonkey / Tampermonkey? I'm just too lazy to install them and write the little scripts.
Asked this a week ago in anticipation for the release but got no response.[1] Whatever happened with Cliqz? Is it still a part of the release?

[1] https://news.ycombinator.com/item?id=15643154
Note, three, that all garbage is gold under the light of a sufficiently child-like mind devoid of expectations, ideals, creeds, beliefs, biases, and stigmas.

The insane man is only insane when in a world of sane men.
It's fast. Fast!

Thanks!

It seems i also got Ebay as an additional search engine. Oh well.. deleted it. :)
Amazon might prefer that you get an Amazon Fire TV Stick, which sells for $40.
You could try the ff port of vimium, but it's not vimperator.
Yep, the Yammer article is just opinion. It may or may not match your experiences/beliefs :) Check the Spanner paper for slightly more data (but its still pretty informal) from Google. They don't talk about other systems, but they explain why Spanner has such high availability. It would be interesting to see an empirical study comparing availability but I'm not holding my breath because doing that fairly and realistically would be challenging.

I'm not sure about the claim about CP systems, but I probably have a different opinion on "common" CP systems (etcd, consul, Spanner-likes, which do offer consistency in the sense of ACID.) But it's definitely worth considering things weaker than that - e.g. Azure Blob Storage and Google Cloud Storage (S3-likes) offer strong consistency but no cross-key transactions. These databases are very applicable but weaker than Spanner-likes like the one from TFA.

Agreed that AP vs. CP isn't a good way to describe databases :)
nor I, but they do have an impressive list of partners here:
http://apollo.auto/index.html
Wondering this too
> to get a menu bar back for Bookmarks

Is that something other than the "Bookmarks Toolbar" or the "Menu Bar" (which includes a bookmarks drop-down) that I can enable by right-clicking on the empty space in the toolbar?
I found it a good opportunity to reëvaluate which extensions I'm actually using. Most of them I wasn't.
Killer clones
The ones I've taken this year were two days of effort and five days of effort. Because I was so busy with other things, both submissions were littered with TODOs and hacks, and both were given no-pass with zero feedback.
It's worth noting that most legacy extensions still actually work. You just need to enable them.
Agreed, the article was good, the title didn't necessarily drive home the point of (I'm guessing) that as you get more experienced, you'll understand what really matters in business and understand other people's perceptions.
Hopefully now there will be many developers with an itch they must scratch. Tree Style Tabs was the main blocker for me too.
It has never been part of the release - it was part of a test rollout to 1% of German users (not sure if that was of an actual or a beta release).
Perhaps the most significant news in this release.

"As part of our focus on user experience and performance in Firefox Quantum, Google will also become our new default search provider in the United States and Canada."
Yeah, if you are doing something like this you have to figure out some way to spread out the writes over the available EEPROM. Since we are just storing a time it would be pretty easy to do, just always write to the next location and pick the largest value on restore.
Oil. Venezuela has an ocean of the stuff.

So much so they decided to base their entire planned economy on it, which didn’t exactly work out.

Almost like an economy that can adapt on its own might be a better idea, but I digress.
Nope. It is very specifically tailored to crawling. If you just need something distributed why not check out RQ [0], Gearman [1] or Celery [2]? RQ and Celery are python specific.

[0] : http://python-rq.org/docs/

[1] : http://gearman.org/

[2] : http://docs.celeryproject.org
Have a look here [0] for legacy extensions replacements.

[0] https://docs.google.com/spreadsheets/d/1TFcEXMcKrwoIAECIVyBU...
FYI, Amazon (retail) does support TOTP. Here is a direct link to the 2FA settings so you don't have to crawl through the account settings page looking for it: https://www.amazon.com/a/settings/approval.
Can you install add-ons in Focus? When I tried you couldn't and that made it less privacy friendly than vanilla Firefox with Ublock.
Cloudflare expands into mobile performance with Neumob acquisition
Probably today as well, but it won't see the massive speedup desktop Firefox has seen yet - that should come with one of the next few releases.
So essentially you have a linear limit to the one part that is promised to be potentially exponential?
> Anyone working in the cyber space that has half a brain will tell you that any system can be hacked, and there's no reason to think that airplanes are the exception.

This is an overly simplistic view of the world. We should expect that airplanes are more resilient to being compromised than your average system produced by a consumer-focused tech company. The standards of assurance for aviation related software is far higher than most other areas, thanks to extremely tight regulation.

That's not to say aviation software is bulletproof.
I have had some entertainment downloading an app that just feeds the accelerometer data to the screen. I did it first as a diagnostic to see if the accelerometer was broken (it was on this machine), but then I have some fun just watching the data on the screen and trying to imagine how on earth you're supposed to extract whether the user is standing or not, or going up stairs, etc.

And I say that from a position of being educated in signal processing, not just staring slackjawed at all the numbers. It's a very noisy signal, even after processing, and while it's correlated with the values you're trying to get out of the data it's not necessarily a very strong correlation. There's a lot of headwinds against getting this data out of the accelerometer. It's a minor miracle that they are as accurate as they are.
I once used it to automate the, well, scraping of statistics from an affiliate network account. So you can do pretty specific stuff, as long as it involves HTTP/HTTPS requests.
Paypal supports TOTP everywhere, but it’s hidden on a page not reachable via any of their sites, in their old site, and you need to run a custom python script to even generate the token you want.
Unfortunately, I don't think theres ever going to be a Classic Theme Restorer equivalent that works going forward.

https://bugzilla.mozilla.org/show_bug.cgi?id=1328244
Ultimately, investors want money back and them some. Or at least they should want it, definitely those who don't play with retirement and what not funds money instead of their own.

Moreover, tons of money being poured into financially bad shops kills real market and skews incentives. Companies that could be able to make profit die. Meanwhile, startups are motivated to target quick growth instead of actual profit - until bubble breaks and everyone is effed for no fault of their own.
What's wrong with CRUD
It's way more likely that something like that would happen at the time Venezuela closed their borders and prohibited foreigners from leaving than now that they simply didn't pay some debit. It didn't then (got solved by diplomacy), it won't now.

Besides, Venezuela's military is large enough to be a threat to Brazil and Colombia. All on wars haven't happened on South America for a long time, it is very unlikely that one will simply happen between not-too-asymmetrical powers.

At least here in Brazil, the government would fall if it decided to send people to die there.