skysight-inc/HackerNews huggingface dataset:
It is not "better than nothing," it is the minimum that is technically and legally required.

The UI is intentionally deceptive.

The text is deceptive. The big text says "Text anyone in your phone," which sounds great, but doesn't actually say anything about data sharing. The small low contrast text, describes what they're doing. They know that by putting it small and grey, most people wont read it.

The buttons are deceptive. It looks like there's only one button.

Even by putting all the permission stuff in a row on first startup is push ploy. Everyone knows, people just keep clicking OK until they get to actual app. People don't read the pages. People don't read the user agreements. They just want to get through the roadblocks as fast as possible so they can get to what they want.

None of this is by accident. All of these elements are chosen to push people towards the desired outcome, to upload your contacts, SMS, and call history as quickly as possible.
Nomad is very much alive and HashiCorp is committed to delivering a scheduler which concentrates on operational simplicity so teams can concentrate on building applications. It also gives the capability for running workloads other than Docker such as isolated fork for binaries, non containerised Java, etc. We have a great release with 0.8 and many features planned for the rest of the year.

Integrating Nomad with Vault and Consul is super easy and allows you to provide secrets, configuration and service discovery to the application with the right layer of abstraction, the application should not be aware of the scheduler it is running on. Cloud auto join allows super easy cluster config. Job files are declarative.

Yes, Nomad does not have all the features of Kubernetes, but we take a different approach believing in workflows and the unix phillosophy of a single tool for a single job. A fairer comaprison would be to comapare the HashiCorp suite of OSS tools to K8s, Nomad, Vault, Consul, Terraform, this gives you capabilities to manage your workload both legacy and modern.
11 MUST HAVE MEN’S FASHION ACCESSORIES TO INCLUDE IN Your WARDROBE
Regarding your question about a dev setting up a test server and accessing live data, that hole has been closed for years. There is some data that an average employee just cannot get to. For some data a dev can access it but the pattern of access and amount of data accessed will be audited and anomalies will raise an alarm.

As for why no one is giving you a clear answer it is because there is no reason for anyone to tell some random person deep details about security policy and procedure. The people building the internal controls and defenses are smarter than you, they know what needs to be protected and are rather devious about thinking up attack scenarios and possible paths of compromise, and eventually get tired of repeating the same answers. Want to know more? Too bad.
They're just doing their job. It's company leadership that should be ashamed.
This is the real bullshit.

Other people's lawyers are the worst.
Agreed.

gokrazy generates strong passwords by default and listens only on private IP addresses by default to reduce the attack surface.
As a European I'm surprised. In my country, every form of political advertising, TV or online, is strictly regulated.
> enabled by default

Actually, the device asks during setup whether you want to enable location services or not. They are also configurable per-app, obviously
Personally, I'd say no because I value the trust of my users over corporate money.
Macho Power Caps O CILISFIL
Just for the record; your lawyers are other people's other people's lawyers.
How's the interplay btw GodotScript and C++? (and the several other scripting options they give you)

I've played a bit with Unreal, so I'm not very qualified to have opinions, but I really like how the system is mostly a C++ stack. The Blueprints are in effect extending underlying C++ classes. The "FFI", if you want to call that, is pretty clean and easy and if you want to write C++ it works very well with the rest of the system. It definitely could be cleaner... not exactly git-clone, cmake, make, make install... there are magic macros, some C# that does godknowswhat and over all it's messier than I would like.

But with all the scripting that Godot supports it seems like it'd be even messier still? You'll have some assets in C++ some in GodotScript and some in C#. Or am I wrong?
Not necessarily, depends on the state. Texas for instance has no adult medicaid.
Yeah, like YouTube might suggest that you do something like more extreme like machine learning if you like Python.
Thank you for the feedback and I will improve the service using this feedback.

I've never experienced something this before, so I'm glad I've done this. I learnt a lot from this occasion.
There will be a rebounce, if EFX is any indicator, and FB is a hotter stock with higher profit margin.
> If you're going to offer social login, then offer at the very least all the major social logins

Note that ‘major’ can be different for different countries, regions, markets, product types. So be sure to know your target audience.
Most people expect cryptocurrencies to behave like, well, currency. Isn’t it the case that with Forex trading you simply pay tax on total gains & losses, not every trade you made?
And if the warranty-disclaimed item had been sold and depending on the nature of the sale, such term probably wouldn't hold up in many jurisdictions. Otherwise such a term can be carte blanche to fraud.
Brilliant mvp, impressive cares for details bravo!

Note that you're rewriting html entities to their readable counterpart, eg:

```
Loved &amp; Found
```
Of course it does and can deny it - isn't a user forced to grant the permission when installing the app?

IMHO Google is to stop abuses like this on the Android OS level by means of allowing users to deny any particular permission an app demands and still install the app, encouraging users to grant/deny every particular permission consciously and forcing the app authors to handle denial of any particular permission gracefully without crashes and without denying to function (but in the cases when it is absolutely physically impossible to fulfill the function the user invokes without the missing permission).
That doesn't say much. It's regulated in the US too, including digital.

What matters (and what is different) is what the specific regulations are.
No :). Started with Postgres long time ago, switched to MySQL. Added MongoDB into the mix. Removing MongoDB from the mix.
I always enjoy these lawyer correct texts by facebook and how we all know it's been going on for a long time now. If only the general public would suddenly all figure this out!

It's 50/50 now if everyone will forget this next month, or if the new trend continues to remove facebook.
To anyone who actually reads annual reports on a regular basis, this is a copy/paste for basically every single tech company, on every year's annual report

There's like 50 pages of this stuff that covers literally every possible scenario in case of legal liabilities. Has no meaning whatsoever
It’s not a full-blown distribution; it doesn’t distribute third-party software. Instead, it allows application authors to build their own distribution (at which point “appliance” is a more fitting word than “distribution”).

Updates are easy to fully automate with gokrazy (and I’ve been using that mechanism for a year at this point) because assembling a new image and installing it over the network is just one simple command. New kernel and firmware versions are provided automatically once they are verified to boot on real hardware.

There is no maintenance aspect in the actual installations (i.e. you don’t need to SSH into them, ran commands to update, etc.) — the root file system is read-only, and an update overwrites it completely. Unless the applications you want to use with gokrazy introduce state, gokrazy defaults to being stateless.

Hope that clarifies things, let me know if you have further questions.
reason n^x to disable JS (I get a nice single page without it)
The entire purpose of Cannes is to showcase films which need distribution. It’s pointless to show films there which have already secured distribution. It’s worth noting that the films shown there can be and are purchased for distribution by Netflix, Amazon, etc.
> As for why no one is giving you a clear answer it is because there is no reason for anyone to tell some random person deep details about security policy and procedure.

Where did I ask for "deep details about security policy and procedure"?

> Want to know more? Too bad.

No, but thanks.

> There is some data that an average employee just cannot get to.

"Some data" means nothing. I'm sure this is true in many, many companies, ranging from the most competent to the most incompetent.

> For some data a dev can access it but the pattern of access and amount of data accessed will be audited and anomalies will raise an alarm.

This is yet again consistent with what I've said.
Faster python for Intel CPUs
Yeah also pay attention to the review dates. I wanted to buy a lightning / audio split cable for my iPhone. I noticed the vendor had 800+ 5 star reviews and none for 1-4 stars. Then I noticed all the reviews had been entered in the previous 3 days. /fakereviews
Testing in Production, the safe way
Please do not take this as a critique, just curiosity:

What type of background brings you to HN? I’m surprised that you find PW managers friction if you are a HN trader. Can you share what you don’t like about PW managers?

Note getting my boss to use a PW manager is like pulling teeth. But she does not have interest in things like HN and a PW Manager could solve some of her it problems almost every week, saving her (and me) time.
Statistically speaking, they're probably not the same "other people's lawyers." As in, you're probably small and they're probably big.

Big firms acting for small clients generally doesn't work out so well for the small client.
If you read the TechCrunch article you wouldn't have to guess where it was shown. There is a screenshot of the prompt that shows that the prompt and explanation "Continuously upload info about your contacts like phone numbers and nicknames, and your call and text history." Your solution of hiding this information in a minimal terms of service is strictly worse.

My take away is that you can tell users exactly what you're doing and they'll still be outraged. So don't do creepy stuff.
Apple had zero permission management on the contact book, it was wide open. Especially FB and LinkedIn exploited that heavily and partly do to this day.
I remember working on integrating facebook with an app I was working on several years ago. It was in the pre-M days, so Android was still using the old install time permission system.

As soon as facebook would be installed without even running the app, it would access the contact database and do network operations (very probably uploads .. ).

For this reasons, well among many others, I never installed the facebook app on one of my personal devices at the time.

In their credit, when M arrived, they have updated their app pretty quickly to the new permission model.

Still, I try to be as conservative as possible with critical permissions.

The only one I regret is whatsapp now that facebook owns them.
Child Pornography Links Detected in Bitcoin’s System
Perth Angels to offer a masterclass for willing investors
Interesting to see Vesper (pronounced Feshper where I live). That's a distinctly southern German term that not even most Germans will use.
If you trade XRP/BTC pair the USD value is largely irrelevant
Must be coded in C++.
The baker has no decisive market share, people can reasonably go to another bake and get the exact same cake for the same cost (or even lower cost).

People can't reasonably go to another video hosting platform and expect to get the same kind of exposure and income. Some people's income purely depends on youtube's quasi-monopoly on video hosting.

A more correct analogy would be if a baking company had 90% of the market and refused to make cakes for gay weddings and every other baker can't afford the volume prices so the cake will be more expensive and possibly of less quality.
Third Try's the Charm - How I Got Hired in 1.5 Years
You need/needed READ_PHONE_STATE if you wanted to suspend your app data/saving and allow calls to be accepted you did.

For instance you are playing a game and a call comes in, you needed them to allow that and to possibly not crash your game and save your data as well as for some analytics/social network integration.

Also if you allowed os level music to be played over game audio, you need that to handle music and app state when a call came in.

It was/is a default on many large app platforms including game engines like Unity and any social network app integration such as Google Play Game Services and Unity analytics [1][2]. When you have READ_PHONE_STATE you could get the number and more.

For games it wasn't such a big thing but for apps like Facebook that are always running and kept alive playing a silent sound [3], it could get every call that ever came in on record and apparently did. With these holes, apps could scrape everything and they did [4].

[1] https://forum.unity.com/threads/unity-5-1-adds-android-permi...

[2] https://stackoverflow.com/questions/39668549/why-has-the-rea...

[3] https://www.reddit.com/r/iphone/comments/3opxhm/facebook_app...

[4] https://arstechnica.com/information-technology/2018/03/faceb...
They don’t fire you, they arrest you. And then they find out who you work for.
Yup. Everything has been reduced to generating memes/outrage and reacting to them.

Only exit from the trap is turn off the internet.
Agreed - not trying to trivialize the work here, but this thing seems solved with tools at hand. Perhaps I miss some of the subtlety in their usecase, though.
How does it work? The http://hypercardonline.tk only accepts new uploads and a card archive is an iso file (https://archive.org/details/hypercard_twin-peaks) that the emulator can't seem to run.
I'm not grasping the concept; Do I use this in production to manage concurrency, or do I use this in 'testing' to fine tune my system?
The general consensus about writing, IMO, is "just do it" and "your first draft isn't your final draft" -- similar to software's "make it work, make it right, make it fast"

It can't hurt to follow Stephen King's advice: http://www.businessinsider.com/stephen-king-on-how-to-write-...

My personal pet peeves re: software writing are:

1. Render code nicely
2. For all that is holy, don't fill your page with a ton of memes and animated gifs
3. Oxford comma :)
More interesting is the newest 3.x release, stable should follow soon.
> nobody wants to waste time reading them

How about a law that requires the party presenting legal paperwork to show that the recipient could have read the document. Use an algorithmic method to estimate the reading time, take off ~33% to account for variance in reading ability, and declare that the minimum time that must be spent with the document.

If you cannot show that e.g. someone clicked "I Agree" at lest 5 minutes (or whatever) after they received the ToS text, then the court will assume prima facie that the have not read the ToS and are not responsible for anything in it. The friction this would add to the checkout/signup process grows with the document size, creating an incentive to write short and simple ToS.
One thing I haven't been able to figure out is how to treat cryptocurrency gained via a fork. Any idea?
The Vatican Is Wooing Silicon Valley
I'm not sure what you consider as "no useful output"? Is it the offering your services for a fee instead of ads or guaranteeing the privacy of your users' data?

Because to me, both are quite useful outputs. The first one is quite common practice, and for the second one there are other industries (e.g. financial, medical) from where we can see how this is actually already done in legislation and practice.

(I would think that majority of Google's and Facebook's technical challenges are because they want to utilize the customer data.)
How about you let me download them without creating an account before calling them “public”?
dark pattern like this one needs to be hammered down by law. We should consider the most prominent button as "default" and such a form as an "opt-out".
Machine learning with clojure in 2018
And you think thousands of companies didn't do their math before outsourcing.
>>You've repeatedly used the term "natural right" without defining what you mean by that, and without explaining why income taxes are a particularly egregious infringement on those rights.

I would be happy to debate my use of the term natural rights, but you're moving the goalposts.

Let's reach a resolution on the previously discussed point before moving to another.

The previous point was that dismissing a person, and their argument, merely for their comment containing one of a set of blacklisted words, like "pernicious" or "female", is absurd.

It's obviously anti-intellectual and trying to defend this kind of conduct shows bad faith.

>>This is not to say that you cannot use the word "pernicious", but your use of it is remarkable.

Again, moving the goalposts. Your argument is not the same thing as the one you defended earlier.
If you lost contact so long ago, it migt be better to leave it like that: https://thoughtcatalog.com/stephanie-georgopulos/2011/08/a-l...
> To me it seems that every alleged application of blockchain technology can be done by having a trusted organization maintaining a reliable database.

Congratulations, you have just discovered that every application of
a decentralized service can be implemented with an appropriate centralized
service without changing much of the protocol running on top of that service.
You do know that this is an obvious result, right?

Blockchain is the first cryptographic protocol for document timestamping that
does not need the trusted third party to run. This alone is a significant
technical success.
No thank you.

How about present your TOS in a form that is understandable by the average user in a span of 2 minutes? Without being a lawyer...(and I doubt you have 2 minutes at all)
Those in the academic fora do not discount an argument for containing the word "pernicious" or "female". The kind of behaviour that does that is ideologically intolerant to the point of being anti-social.
What’s Apple’s market share worldwide? What percentage of Facebook users access it from mobile? What percentage of those users are using Android devices that also need the same materials? When did you last hear about Samsung or Xiaomi or others on slave labor or child labor?

I’m sure Apple has a long way to go on several fronts, but one sided hyperbole like in the above comment is unproductive.
Where I can hear more about this one? Link please
Various ToSes already attempt this. Either by forcing you to scroll to the end, timing you, or by putting verification next to each paragraph. Still, no one reads them. The problem is putting a legal contract before a leisure app. I'd rather see legislation that requires the reading level and length of the ToS to match the reading level and attention span of the average user.
Careful of fact checking with Google, it can easily validate something as truth that isn't. The best option is to usually include the keyword "study" and actively look for only that data.
I think it would be a very cool automation problem to solve. Whether it's fresh garbage or landfills, it all could be separated into recycled materials or base components.
How to use rake db commands in the correct way
Facebook Messenger is keeps reminding me to let it access my contacts “to find my friend”; after telling it no it stops reminding for a while then it comes back again.

This attitude is just an example of the constant weasel to get access to the data.
Wait wait...French law as in law by the French government? You get hit wit fines by the government if you defy it? Or an industry norm like "If you allow streaming within 36 months of a theatrical release we won't talk to you/union workers won't work for you/no awards for you"?

If it's an actual law, that sounds utterly absurd. Good on Netflix for not playing ball.
Machine Learning as a Service with TensorFlow
Almost by definition, for something of that level to happen, someone needs to be very not apathetic...
Both Google and Apple should provide "middle" controls. Even if I grant the app "access" to my contacts, I want to be able to select "which" contacts and which fields.

E.g. if I use whatsapp for 3 people out of my 100 contacts saved in my phone, I want to be able to give to whatsapp only the access to the phones of these 3 contacts. Others should be invisible for whatsapp, if I want so.

And they should not get the addresses, birth dates and my notices about even these 3 contacts. They should not be able to see them, unless I explicitly want to allow.

I know, users are lazy, but at least the fine grained control and white-listing should be an option. Now it's all or nothing.
I don’t think Netflix customers nor Netflix cares. The competition is a side show to the real purpose of the festival, that is the professional event where deals and contacts get made.
The Last Jedi or Black Panther obviously wouldn't win the Palme d'Or and even if they did the audience for such films would not care a whit. So I've always thought that they simply didn't bother because there's no benefit.
Biggest Mega Impossible Ramps Stunts 3D
Biggest Mega Impossible Ramps Stunts 3D is new ramps stunts game for Racing world and hit different objects which are place on different positions in the game. Feel unique adrenaline car racing and blast the ramps with the help of your driving skills. Show your stunts moves and win the race by playing this impossible mega stunts games. Hit the Objects to get points and increase your car driving experience.
I've seen this nonsense spouted a few places now. Personally, I think there is a big difference between the two, one focused primarily on cheerleading to get out the vote, the other using inflammatory fabrications to enrage your base (and get out the vote). I see this as a classic example of when "the ends don't justify the means".
Show HN: HAL
Isn't this what torrents and blockchain already do?

You have chards of data on more than one endpoint that sync between eachother - to forcefully remove it you would need to remove it from all of those hosts manually.

But with, let's say, an access/crypto key - you can do it on all of them. Systems like Storj already do this i believe?
Except Facebook isn’t cigarettes, dude. No matter how much you want it to be cigarettes, it just isn’t.

Facebook is a boredom cure at best, and at times it can be a version of the cold, hard, cringey truth. You might complain that Facebook harms mental health, but the reality is that sometimes the truth is the most depressing thing to learn.

If Facebook does harm by preventing enough escapism, there’s no regulatory cure to fix that. You’ll just have to wait for the tide to shift. But hey, look at that, today’s your lucky day...
> People don't read the pages. People don't read the user agreements.

Then maybe "people" shouldn't act completely outraged when they find out that their call history was uploaded?
Good point! Unfortunately i can't edit my post any longer.
I really miss alarms from the old time phones, the ones that didn't require your phone to be open already
unless it takes a turn for the worse.
In which case, yes, you're absolutely right. Open-source protocols could possibly change the situation.

But that's got exactly zero in common with funded organisations making applications using the blockchain.

You can't monetise what you don't control.