skysight-inc/HackerNews huggingface dataset:
While certificate pinning is annoying, it's just an obstacle not a roadblock. I haven't met a security research that mentioned this to be a prohibitive feature.

There are couple ways out, from revers engineering the binaries, through jailbroken/rooted phones, running apps in simulators, etc.
The burden of proof is on the new product, not the current society

Why do you think that's how it works? Society is not a formal debate, and its members should be able to question any aspect of it at any time for any reason, whether or not they think they have a better idea. The entire concept of "burden of proof" is out the window here since many of its mores do not exist for rational reasons!
It's funny how all the security measures for "your safety" always seem to reduce user's transparency and control.
It's very feasible to reverse engineer the Android APK for Facebook and replace the cert with your own.

https://serializethoughts.com/2016/08/18/bypassing-ssl-pinni...

http://blog.dewhurstsecurity.com/2015/11/10/mobile-security-...
It's just another step in the long slow boiling of the pot. The mass media already are nearly uniform in their interpretation of events with the exception of how they inflame cultural grievance. The American public is the most heavily propagandized in the world.

https://medium.com/@caityjohnstone/no-there-will-not-be-any-...

Edit: removed a section of this comment because it seemed too much to me.
"Now the US has gotten to the point where its president praises China's new permanent president for being so brave to do that."

Trump really seems to have a hard on for wannabe dictators like Erdogan, Putin and now the Chinese guy. Hard to understand.
Sure champ. Google never broke the law only to apologize and pay 0,00001% of their revenues as a penalty.
I'm surprised I didn't see this quote in this article, given the title and content:

"We always overestimate the change that will occur in the next two years and underestimate the change that will occur in the next ten. Don't let yourself be lulled into inaction."

- Bill Gates
Good point, what about the Euro?
Well, the way I read the article, is that one area is violating the SLA, albeit informally specified.
> "It's got all the worst elements of "enterprisey Java" style development."

What are your complaints about "enterprisey Java" development? Is this just a repackaged "text editor vs. IDE" complaint, or do you have other points you'd raise against Android development?
He made comments outside his paper that women just aren’t as good at men or more of them would find satisfaction in this

By that reasoning, there seems to be evidence that women are contextually better than men at medicine and healthcare.

https://www.fastcompany.com/3044934/why-are-these-3-stem-fie...
I think Android has features for detecting whether the device is rooted. Facebook could then disable spying, in effect Volkswagening the situation
Agree 100% the reality is more poignant when you go out of the tech bubble. Also if those open standards affect product maintainability vs simple integrations with less code, projects will tend to avoid it.

This is also Why complex Piracy/CD Ripping lost steam with services like Spotify/Netflix in countries with big piracy rings. Good user experience trumps ideology.
Like any right, there is no absolute. When your rights conflict with my rights there has to be a limit placed on one, the other, or both.

Finding a simplistic approach that will work in 100% of cases is impossible.

Once that is realized you can both hold the general idea that private property rights be respected /and/ that public access to public property be granted as well whenever possible. The idea is to minimize the encroachment of one against the other and to find a balance for each situation where the question is hazy.
I don't think it's clickbaity. There is a legitimate conflict in goals between this legislation and the increasingly popular use of public blockchains to store personal data.

You don't need a public blockchain to violate the law, but it's hard to have a public blockchain without violating this law, if you use that blockchain to store personal data.
You can sort of achieve the same outcome just my having all the various services/container specs inside a single .yml file that gets fed to 'kubectl apply'. docker-compose up does create networks and containers unique to the app your developing, but you could have the .yml setup a custom namespace and pile everything into that and get close. No option to concat all the log output though AFAIK.
So Taleb says the function that controls how you spend your money is a path function and you say that it is a state function. does anyone know how this could be tested? or does anyone have any good gedankenexperiments to illustrate the difference that they would like to share?
This is one of many many regulations and requirements that make housing so damn expensive. When you combine all these overburdening regulations together, the result is: you can't have cost effective housing anymore. At the very least they should open up a few square miles of space where they relax some or all the regulations a bit. This would allow developers to innovate and drive down the cost of housing.

We haven't seen much meaningful innovation in housing in the last 100 years, at least none that addresses cost.

Imagine what a great world we could live in, if everyone could build what they wanted as easily as building a website. There's a lot of issues to tackle, i know, but it's a good starting point for progress. And considering that most of our incomes go to housing, it's the most important area for progress.
I would be willing to bet that this is noise.
So he's not homeless?
I just realized this the other day.

You'll hear qualms about trade unfairness and the occasional blatant copyright/knockoff culture, but hardly ever any mention of human rights.
Yup, patching the binary works fine.
$0.56 per mile not hour! (Though I see $0.545 per mile [1].)

[1] https://www.irs.gov/newsroom/standard-mileage-rates-for-2018...
TEDx – Do you really know why you do what you do?
Google's productivity suite now shows who viewed your files
Your comment prompted me to do some research on that line to Poland.

According to sources I've found (all in Polish, so I'm not linking them here), this 220kV line Between Bialostok and Rossj was built in 1962 and is out of use since 2004. The power to the region is delivered by 100kV lines which are not shows on this map.
There was an idea to build a new one double 400kV line to import energy from Belarus but nothing going on so far.
We live in a market economy.

The fact is, the SF Bay area is a housing shitshow, mostly because of a boom economy, which will end. Nobody was talking about this crisis in 2002 when the economy hit the skids, and all of the wacky California policy issues with property taxes and development challenges were all there.

I don't live in California. I live in an urban environment in a neighborhood a mixed 1-4 family freestanding units. A major component of my property's valuation is that neighborhood cohesion. When you hear people characterizing turning potting sheds into shitty rental units as some sort of victory for social justice, you're hearing a movement that is poised to be upsurped by well capitalized real estate developers.

I grew up in Queens, NYC, which has pretty loose zoning controls. My neighborhood, which in the 80s was a mix a 1-2 family detached and attached homes, changed dramatically, starting with the 80s real estate boom and continuing in waves in the 90s boom and the 2000's boom. The end result is a mix of cut-up single family homes and a bunch of teardown situations where nasty condo units eliminated open space, made parking a nightmare and killed the community. The only happy stakeholders are the real estate people who walked away with millions and left a mess for the residents and the city to deal with.
I'm not sure he called them out by name. If you read `Against VAR` [1] from 1997 (LTCM blew up in 1998) you see basically all the ideas of The Black Swan / Fooled By Randomness. LTCM was doing all the things that he says are risky. The guy who wrote "In Defense of VAR" on that same page subsequently wrote "Risk Management Lessons from Long-Term Capital Management"[2]. Also in Taleb's 1997 book "Dynamic Hedging", chapter 9 "Vega and the Volatility Surface" talks about liquidity as one of the pre-eminent risks of an option book (as opposed to individual option positions).

[1] http://www.derivativesstrategy.com/magazine/archive/1997/049...

[2] https://merage.uci.edu/~jorion/papers/ltcm.pdf
Experts doubt unprecedented homebuilding goal set by two governor contenders
Sometimes it even comes pre-installed, for your convenience ;)
+1

(Sorry HN etiquette)
Perhaps the biggest sham in the history of VC.

I predict a full season of Silicon Valley parody can be dedicated to this.
There's a big ugly gas power station on the north coast of Crete on the edge of Heraklion. I stayed in the hotel next door :-/. There's quite a lot of solar on hotel and house roofs too.

From memory they were planning to have a subsea interconnect installed.
Supermassive black holes or their galaxies: which came first?
The browsers are moving away from certificate pinning. The apps aren't, as they control both ends. If I made a Facebook replacement today i'd do it too.
This is the kebab shop business model in Europe, is it really that rare to find simple loyalty cards with stamps where you live (assuming USA)?
Your first question does take a rhetorical position. It effectively makes a claim, by the wording of the question.

Your second question suggests that one should recap decades of human rights abuses.

Finally, by stating "Not everything is a battle, you know", you seek to make it a battle when no one else is.

This is all classic troll behavior.
Did I say that families should or shouldn't be allowed to do something? By all means, go there, live there, do whatever you want as long as you're not harming anyone else.

By the by, it's also a grave injustice that I'm not driving a lambo; someone needs to sort that snafu out, because it's not my fault.
Examining the ROI and Benefits of RegTech Solutions for Businesses
This assumes if it's a direct fork of Bitcoin and not focused on privacy like Monero or Bytecoin.
Tell that to the poker companies. https://en.wikipedia.org/wiki/United_States_v._Scheinberg
> Of our 9,813,747 accounts...

Stack Exchange has less than 10 million registered users? That’s surprisingly low even for Stack Overflow alone. I wonder how many MAUs they get...
Facebook already has plenty of issues with people not trusting them. Lying about this and then being caught red handed would be devastating from a public opinion perspective. Even if you assume a completely amoral team that cares about nothing but ad revenue, do you genuinely think they’d risk something as dangerous as that? Especially given how much you can still achieve with the data that is known to be collected?
My takeaway from this is whoever came up with the idea of including recipe ideas on/in the packaging of staples or kitchen products was a goddamn genius.

Because a common theme among many of these mistaken secret family recipe stories is that the concoctions are taken from those marketing materials, and I'd expect whatever they picked to feature would be tasty and hard to screw up to put that product in a good light.

If it's a hit with the family, they're making it frequently, and pretty soon the aunt or uncle or grandparent who makes it for the holiday gathering can do it from memory and so it's easy to assume they made it up themselves.

I bet if you were to ask that cook about their "secret" recipe to this day they'd make sure to emphasize that you have to use So-and-So brand chocolate chips for it to come out right; the very same from which they got the recipe in the first place, and without which it probably doesn't come out right (maybe intentionally)

Goddamned brilliant.
It's supposedly more or less an average across car types and includes a percentage of fixed costs however. It's almost certainly high for a driver who would own a car anyway and has an economical vehicle that optimizes for Uber driving. It's going to be a range depending on the driver though 25 cents per mile (all miles, not just those with a passenger) is probably near the bottom end.
ACM Releases Statement on Importance of Preserving Personal Privacy
> All OpenID Providers publish their details at a publicly discoverable (and standard) domain: https://{hostname}/.well-known/openid-configuration.

No, no they don’t. Not by far. Google, for example, doesn’t - and even if they did, it wouldn’t be useful, as they don’t support dynamic client registration either, as they want lock-in. Being able to type in my email address into a generic widget and get the Google auth dialog is specifically what they don’t want.

Facebook has the same issue, as does Yahoo. I don’t think I know of a single implementer of OpenID Discovery and Dynamic Client Registration - the only purpose of OpenID Connect as deployed in the wild is to share development resources, not to create a system where people can type in their email address into a generic widget which works for every OpenID Connect supporting domain off the shelf with no RP-side configuration and get a login form.
How to Access the Deep Internet [The Best Guide] Using Tor Browser
Sounds super easy to make your own stamp then. ;)
This is actually a pretty big deal. I think one way they can really solve it is to improve the emulator to make it actually useful.

For now, you'd just have to ship a Pixel device to France and pay an extremely high fee.
Hey Facebook, if you got nothing to hide, show us the code.

We showed you our friends, our relationships, our interests, our intimate and disarmed states, our rants, and probably half of the websites we visited. (in retrospect, that was dumb)

Oh, your tin can and strings might show? Competitors might get ideas? Please.

Until then, not a fan of you, not clicking on your ads, and generally avoiding your site. In fact I think I'll start deconstructing my profile as soon as I can muster the courage to choke back my gag reflex.

Sincerely,
A growing group of mugged social network burnouts.
> Why should only the super rich be able to invest in risky ventures?

The poor can easily invest in a risky venture. Buy into an index fund.
Reply All did an episode on this that was really good: https://www.gimletmedia.com/reply-all/109-facebook-spying#ep...

The thing I thought was interesting is just how adamant people are about FB spying via mic.

They also had an update in their year-end episode: https://www.gimletmedia.com/reply-all/113-reply-alls-year-en...

Both worth a listen.
I am curious for my own sake, what are some controversial views that you have heard?
Please keep that common insinuation off HN.

https://news.ycombinator.com/newsguidelines.html

https://news.ycombinator.com/item?id=16532039
A 25% tip is crazy. Our machine shows 15%, 20%, and "other", and I'd say we average something like 10% in tips any given day. Considering the level of service one gets from a food truck, that feels pretty fair to me.
https://en.wikipedia.org/wiki/Kelly_criterion
Yeah, but the idea here isn't to make a canal for ships, but to have a significant flow between the oceans. My vague memory is that someone suggested a channel 600 feet deep and a mile wide. I don't have a reference for this unfortunately.
Does the Assistant listening for OK Google destroy your battery life?

Your phone reads sensor data as a base state.
Magisk (Android root utility) has the ability to hide itself very well. Google Pay and most, if not all, banking apps are not able to detect it. It is a cat and mouse game for sure, but so far the Magisk developers are keeping ahead of that curve.
Yeah, I was actually surprised at how fast cairo can be. I had some ideas as to optimize things like prerender map markers into some tiles and then render those tiles, but it seems for my use case (rendering less than 10k small images on single surface) I didn't even need to optimise it, with 2k images I had over 40fps which felt more snappy than google maps, which was enough. Of course if someone needs something better, hw accelerated opengl is the way to go. Current processors are fast, but they have their limits.
> "when each and every single device is stuck on an old kernel often with a bunch of important CVEs unpatched"

As an iPhone user, I've heard about how one of the benefits of Android is that it's built on OSS, so that if you wanted to have a fully secure phone, you could just download the latest kernel and patches and software and install it yourself. Is this actually possible for Android users?
Would something like this work as a method to authenticate authentic clients?

http://www.cnn.com/TECH/computing/9908/20/aolbug.idg/index.h...
> As part of a larger effort to move all network traffic away from cleartext (unencrypted HTTP) to TLS, we're also changing the defaults for Network Security Configuration to block all cleartext traffic.

Finally! I know Apple originally promised this for iOS9, but I believe it eventually went back on its word? Is HTTPS mandatory for all iOS apps now?

> We will also enable encryption of Android backups with a client-side secret.

Did they just one-up iOS11 here? This one almost seems like a shot at Apple's recent security degradation for iOS.

> In Android P we continue to refine Doze, App Standby, and Background Limits to further improve battery life; please be sure to try your apps with these and send feedback.

How about you start showing me the apps that are actually draining my phone's battery, and stop allowing them to hide behind Android OS and System. Battery stats are virtually useless these days because they don't even tell you half the story.
Tamil has the largest users in internet[1]. It does enjoy the highest adoption.

1.
https://assets.kpmg.com/content/dam/kpmg/in/pdf/2017/04/Indi...
> The only option is to run the code above again, in its entirety

Not at all. The reactive pattern typically boils down to something like this:

el = document.createTextNode(initialValue);
parent.appendChild(el);
reactiveValue.onchange(v => {
el.nodeValue = v;
})

Ironically, in this specific example, vdom libs typically do this when possible:

parent.textContent = v

which does in fact replace the underlying text node, but they do so for the sake of performance
Now I think that is a neat idea, a combination of the post and the best summary on the home page or like the first 2 lines of the summary, since some can run quite long, with a link for the rest of the summaries.

Thanks bud for the suggestion.
Yeah, you'll probably be able to get away with that about once per location, give or take.
"which prevents the SSL traffic from being decrypted using the SSL certificate generated by mitmproxy/Charles"

There are some shady companies out there [1] that use the mic to listen to what shows are being played real time. [TVs in the US are on all the time] (Check out their customer list). These companies need this pinning.

[1] https://www.audiblemagic.com/
Very interesting idea. Have you heard about Basecoin and Seigniorage shares? They are trying to do exactly that: http://www.getbasecoin.com/ Are these coins securities in your opinion?
Hasn't this been a thing since forever on Android? People are always lamenting that uptake of the newest version (or newest 2 versions) is slow.

Do you actually have evidence that the uptake of this specific version is slow? Otherwise I don't see any reason to believe this is out of the ordinary for Android.

I remember when it took forever to go from Donut to Eclair on my T-mobile MyTouch device... when the newest version was already Froyo.
Oxygen and Stem Cells May Have Reshaped Early Complex Animals
When I was still on Facebook, I used a 3rd-party Facebook app alternative. I forget which one exactly, but I distinctly remember being impressed that it barely needed any permissions.
How is this not just the golden mean fallacy? Just because two sources make different claims doesn’t mean the truth is equidistant between them, or between them at all since one source could be accurate and the other peddling complete bullshit.

In fact applying this system over time will just shift your view of the world toward whichever “side” is willing to tell more extreme lies.
What about the Android One devices like the Moto X4 or any one of the ones from Nokia that will end up getting P?
For example, when the article says:

> five of the most widely used scripts in India—Devanagari, Gujarati, Gurumukhi, Tamil, and Latin. Those five scripts support seven or eight of India’s most widely used languages, together spoken by hundreds of millions of people across the Indian subcontinent.

this list of scripts actually does not cover (for example) Bengali and Telugu, which together have more speakers than the population of the United States.
I was thinking the same thing. Also not claiming to have any real idea of as to what they are actually doing but certainly having access to everyone's phone gives them a ton of distributed computing power for free.
Are there other common Washington, D.C.'s outside the US? Or is this just a flippant comment?
Where's here?
I can't tell if that's sarcasm or not.

In the US, we're not going to view as "progressive" anything that lets my next-door-neighbor decide to build an oil refinery in my subdivision. That will take significant value from my house and land, with no recourse available to me. That's... not going to fly here.

What we need is something between what we have now (too rigid) and "build whatever you want on your own land".
> Changing the world one murdered-by-starvation Yemeni at a time.

I don't think they want to change the world, just multiply money.
You could create a new user profile, and install the extension only for that user.
You edited your post to remove the first sentence of Thiel's response: "It would be absurd to suggest that women’s votes will be taken away". That's a deflection, because it's a truism and doesn't address the criticism. Of course women's right to vote won't be taken away, but Thiel still believes that women's voting rights are not compatible with a free (meaning libertarian) society.
So you think it's better if Uber wasn't there and he couldn't make any money at all?
Different (esp. older) versions might be another variable that would be of interest to a researcher.
They are an area denial tactic during peacetime. There used to be free navigation there, now only warships go near without Chinese permission.
That's reasonable until you realize that most people are very busy and don't have enough time to read every contract they sign. Not to mention the amount of peer pressure they might be under from the staff ("just sign it, it's just standard stuff"). Plus almost all of those contracts are on a "take it or leave it" basis, so if they do not agree, they just wasted their day and have to reschedule with another shop, who might also have the same clause in their contracts.
Here is an example of a factual statement that is also intellectually dishonest in a similar vein: "There were unsourced rumours from earlier that cycrutchfield assaults women. However, even arguing with them is rare nowadays for him."

The only assumptions I had made is that you rarely argue with women and that you don't assault them (or people in general, which let's pretend is true for the sake of the argument), everything is factual. See why this kind of framing is dishonest?
> we'd find our "genuine" selves

Maybe think about it this way: what are your very _deepest_ values? The things that you think make a life worth living? That's starting to touch your genuine self.
An injustice? They have a fundamental right to live in the Bay Area? My bar for "injustice" is a bit higher than that...