skysight-inc/HackerNews huggingface dataset:
That solves clickjacking for things which don't want to be iframed, but not for things like the Like button or login buttons which specifically need to be embedded into an existing page (and they were the attack vector for this article)
What specific negatives about America get 'treated with "C'est la vie"'? Americans and the American media are extremely self critical.

To counter your anecdote, when I talk to many Europeans there is this imagination that American cities now have gun-wielding criminals "running wild, riots in the streets" when in reality things "were pretty much the same".

People who don't know much about places outside their home often fall victim to sensationalist media. And Americans tend to be very inward focused so they are vulnerable to this. However, to say Americans ignore their own problems is blatantly false.
You're not getting hired if you don't have a minimum acceptable grasp of writing and communication skills, which are sorely lacking in most of the US unless you were raised by parents who taught that to you.
https://www.reddit.com/r/AskNetsec/comments/6mo4lt/how_long_...

checkmate
This is not simply about the presence of a "secure enclave" or security module as Google calls it. It's about preventing the firmware on the security module from being compromised without knowing the users password.

To mitigate these risks, Google Pixel 2 devices implement insider attack resistance in the tamper-resistant hardware security module that guards the encryption keys for user data. This helps prevent an attacker who manages to produce properly signed malicious firmware from installing it on the security module in a lost or stolen device without the user's cooperation. Specifically, it is not possible to upgrade the firmware that checks the user's password unless you present the correct user password. There is a way to "force" an upgrade, for example when a returned device is refurbished for resale, but forcing it wipes the secrets used to decrypt the user's data, effectively destroying it.
> license current

I continue to be shocked that software developers aren't licensed at least like RNs or CPAs are.
Nothing in this article should be a surprise to anyone who has been following what's been happening in America lately or to anyone who understands its history. America has throughout its history developed extreme systems of oppression, subjugation, and poverty to control its people and in attempts to control other nations. The main difference between the current implementation described in the article and previous implementations is that it's less focused on race. In the true spirit of progressiveness, the current implementation tries to fuck over everyone, not just minorities, in an effort to update the systems of old. It is a new type of poverty to exist, but not a novel one. It's one that was available to all other developed countries, one that every single one of those countries explicitly rejected. I think analyzing why all other developed, rich countries of the world blatantly rejected this system while the US supported and supports it to the extreme would be a fascinating study.
I find these GDPR notices useful. Obviously every website use cookies, but it's nice to know what these cookies actually do. I've already encountered a few news websites listing 100+ advertising/targeting companies whose cookies they use. That was quite eye-opening.
I also appreciate all the GDPR emails that landed in my email box recently. I've replied to about every second of them asking for my account/data to be erased.
Well these are real (adjusted) salaries, and most tech people do choose SF over Detroit so I think you're wrong.
That's cool I guess. So what is gifski? Answered in the project README: "Highest-quality GIF encoder based on pngquant".
Sorry, "Advanced imaging technology".
to sell dongles. err, i mean, cuz its the future!
I'm not sure I understand.

I was under the impression that DNS-over-HTTPS was nothing more than just an alternative DNS protocol just like DNS-over-TLS, where you perform an HTTPS request in order to query for a DNS name, and that DNS-over-TLS was just plain old DNS wrapped in TLS.

You seem to be implying that DNS-over-HTTPS would enable sites themselves to deliver DNS records. I don't see how that is possible, because connecting to HTTPS with a hostname requires resolving a DNS record. Am I misunderstanding?
No. If Apple develops a new, signed, version of the security module, it can bypass the password by updating the firmware in the security module without the user's password.

At least that was the case during the San Bernardino dispute. Apple never claimed it couldn't do, only that it refused to do for the FBI.

In this case (Pixel 2), Google claims that it is impossible to do that.
> how big of a mess that was on desktops

Wait, what? The desktop experience is wonderful in this regard - choose any number of app stores if you want, or don't, if you don't want.

I've never, ever thought of this as a problem.
I found it very odd given Apple's commitment to accessibility and the existence of https://en.wikipedia.org/wiki/Talking_ATM
The voter laws also exclude people like me. I work in SF and would love to live in SF, but because of the high rental prices within city limits I'm living in Brisbane instead. I consider myself a natural part of the San Francisco constituency but have been disenfranchised by the city's artificially high cost of living.
As someone who enjoys the idea of writing stupid programs for my own use, occasionally even doing dumb things to the kernel, the games I have to play to work with the Software I paid for is disheartening. Yes, yes, if I screw up a kernel mode driver while toying around with faking USB input, I could brick my computer forever, but since I've already found my way to the driver SDK, and decided to continue, isn't that proof enough of willingness to take the risk?
Show HN: Teach, Learn and Improve your sport, music and art skills
People in the community probably want their slummy airbnb's and garages to rent keep renting for astronomical rates.

Also, we're not in China but the population density issue is the same. If the jobs are in one location, you don't actively prevent new housing or better public transportation.
The article you are linking to says that it is not clear if those German cease and desist letters are based on any facts or if they are itself just FUD.
Some London boroughs tried taxing empty properties to discourage this. Owners of empty properties just paid the tax. In most cases British law still lets them hide their identity, which is of course why passively owning London property is so preferable over, say, actually doing anything where their identity (as gangsters, foreign leaders who've looted their country to enrich themselves, etcetera) might be revealed.
IANAL but you should not use that word lightly and a lot of marketplaces[1] recommend against doing that because lifetime it's vague and may create liability.

[1] https://jvzoo.zendesk.com/hc/en-us/articles/115004072793-Lif...
There are 3 major protocols available for DNS privacy:

* DNSCrypt

* DNS over TLS

* DNS over HTTPS

DNSCrypt is the one with better client support and a long list of providers available. If you pick DNS over TLS or DNS over HTTPS you will be restricted to 3 or 4 major players (google, quad9, cloudflare and cleanbrowsing). If you trust them, you are good.

For example, this is the list of providers with DNSCrypt support: https://download.dnscrypt.info/dnscrypt-resolvers/v2/public-...

For DNS over (HTTPS|TLS), there is very little client tools available for troubleshooting. The best one I found was these 2 in PHP:

https://github.com/dcid/dns-over-tls-php-client
https://github.com/dcid/doh-php-client
I spoke to a homeless guy I often saw around many years ago as we were approaching winter in Michigan. I asked how he fares during the winter. He laughs and tells me that they mostly migrate South or West. That's right! They head to Florida or California. I still tipped him and sure enough I didn't see him winter time but he was back around June.
Loop – New Horizons in Music: Polyrhythms
When your grandfather says racist shit about your girlfriend you might start understanding.
> taking a month off

A month off? I completed an MSCS (including a thesis) while working full time with two young children at home (my daughter was born in between my first and second year). I can't imagine educational/licensing requirements that would be more difficult than that; you can continue your education without dropping out entirely.
As a cynic I would say this is an attempt by Google and Cloudflare to collect DNS data. Why else would they provide this service for free?

Both Google's [1] and Cloudflare's [2] DNS privacy policy prohibits them from storing personally identifiable information or from correlating DNS information with other Google data coming from the same IP/account but it does allow them to store information about which domains are popular, from which locations and from which type of device.

TLS (and therefore HTTPS) provides a very useful fingerprint based on accepted cipher suites, extensions, compression methods...

[1] https://developers.google.com/speed/public-dns/privacy

[2] https://developers.cloudflare.com/1.1.1.1/commitment-to-priv...

[3] https://devcentral.f5.com/articles/tls-fingerprinting-a-meth...
Interesting because I don't love the distinction between states and things, but that'll happen when you try to summarize this topic into a sentence.
Also, if you or your partner have ever had a STD/STI please be aware that this can affect your fertility. I was recently talking to a OB/GYN and he was telling me that one of the saddest things he has to do is inform a person that they are sterile due to an untreated STD/STI from their younger years when thoughts about fertility were the the furthest thing from their mind.
The 3.5mm jack was just fine, and I truly believe Apple removed it to sell us something, to further lock us into an ecosystem. It was a business decision. So is mine to switch to Android. I’ve got a 6 plus with the jack and I’m holding on to it, gently, for the day when I’ll go to the store and say give me the best phone with a headphone jack, knowing it likely won’t be the best phone on the market.
Once upon a time the specs planned a <iframe seamless>, but unfortunately it was never widely implemented. Probably because it also tried to do things like letting the outer CSS leak into the seamless frame.
This is really terrible. No wonder no one wants to develop open source software on windows anymore.
> It's about isolation.

Not necessarily. An innovative center and conservative periphery is commonly observed even in language families where the center is far from trade routes, while on the periphery the languages are spoken in territories along major trade routes.
Fertility tests can cost $1,000. Company offers an at-home version for $199
"Crossbar.io", "WAMP" and the WAMP - The Web Application Messaging Protocol logo are trademarks of Crossbar.io Technologies GmbH. All rights reserved.
Phishing Protection at the DNS Level. Comparing DNS-Based Security Filters
If it's good and covers products of interest to me, I'd consider paying a moderate subscription fee for such a service. But only if that meant the site didn't have advertising, tracking or affiliate links.

The power of affiliate links to warp reviews is underestimated even on Wirecutter, imo. If they have to choose between a product that has no affiliate links and one that does, it's pretty much impossible for that not to eventually affect the recommendations.
As I much as I am growing tired of HN discussions about Apple products descending into a circle-jerk of "no more innovation" and "dongle-gate", I must state my two gripes that I remain astounded by:

- A new iPhone and a new MacBook — out of the box — have no way to physically connect to each other.

- A new iPhone comes with earphones that cannot be used with any other device than other iPhones (e.g. not your new Mac).

Why have Apple's peripherals been broken for more than 2 years?
Why not. That probably makes the team even more international. I even heard North Korea has quite a bit of expertise in missiles.
> How are you thinking about the increased growth of egg freezing

The actual number of babies that have been born worldwide from frozen eggs is only around 2,000, and most of those were done either to prove out the concept or else due to some specific medical condition (e.g. about to get chemo). Despite the fact that you read about it in the news all the time and it feels like everyone is doing it, the number of babies born to women who decided to just pre-emptively freeze their eggs is probably only a couple hundred, accounting for literally 0.00% of babies born each year.
This is a great example of what I keep trying to get people to recognize.

The trending method of improving diversity and inclusivity is through exclusivity.
This will not work. People and groups who don't talk to each other grow further apart and trust each other less.
I have visited the Toyota factory in Ontario, Canada. What stood out to me was how little people was involved, literally everything was automated and the only labour people were doing was testing the cars by driving it (or even just checking the colour) when it came out or standby mechanics to maintain the machines.

I see Tesla as incorporating more labour than regular cars but not extensively as modern car plants have pretty much eliminated the need for humans.
The snark is a problem, it wasn't clear what your point was, and your example contained plenty of secondary flamebait just waiting to blow up when another commenter supplied the match.
I was initially skeptical, but optimistic about the removal of the jack. I thought maybe this would lead to some new headphones with really good DACs or lossless wireless headphones. But alas, it is not so. I’m stuck with my same headphones and a dongle.
I would think having their employees in the office for an extra 2 hours per day because of reduced commute would be more beneficial.
8 years ago a friend of mine bought a perfectly serviceable house in a nice, safe, convenient neighborhood in Pittsburgh for about 90k.

Generally, here’s what I’ve seen gets you equivalent size/convenience/safety:

1m in NY

500k in DC

300k in Philly

150k in Pittsburgh.

I would absolutely believe you could find something nice for 5 figures in Detroit.
I don't think DNS-over-HTTPS precludes the use of DNSSEC - I think the intent is that eventually, you will in fact use both in tandem. DNSSEC alone would only give you the ability to check the integrity of a record, but DNS-over-HTTPS makes the transaction confidential and prevents third parties from censoring the request.
Yep - I have a friend who takes pictures of (very expensive, high profile) weddings all around the world with a MF film Hasselblad. They still can't be beat
I think it was more heavily popularized immediately after Wikileaks' DNC email leaks by the people who opposed the guy you're talking about. Then, the guy you're talking about adopted it as a counter-attack in order to devalue the term. His campaign turned the weapon back on its source. If you were paying attention to how the term "fake news" evolved, it started as a weapon for the left and then was adopted by the right. It's a great way to censor or discredit information that is inconvenient for you, regardless of your political leaning.

https://trends.google.com/trends/explore?date=2015-05-01%202...
We can neither confirm nor deny that he's a federal agency.
In fact, it already happened between this Mozilla announcement and now: https://www.cloudflarestatus.com/incidents/2mz3wly2g7dy

I think encrypting DNS transport is as important as the next guy (though DoH is bad), but am super unhappy about Mozilla apparently signing on with Cloudflare's ongoing fairly successful attempts to centralize the internet. Sure, they say they'll delete your data "within 24 hours" (they shouldn't be keeping it at all), but pretty soon they'll get a Nat'l Security Letter like everyone else does.
Hah, plus points for Vogon poetry!
Apple owns Beats Electronics, whose higher-cost headphones are primarily wireless.
Shuttle–Mir Program
It fits a trend in modern philosophical publishing. Part of the reason I'm so quick to stop (or not even start reading) articles like this.
Yep- there is a sports chat site I frequent that straight up locks out my browser when I come through corporate proxy- because they are blocking ad pages on proxy.
Shunning someone for being an asshole isn't equivalent to genocide.
The Digital Poorhouse
You are correct for the initial request. I've seen many arguing for taking this to another level of actually sending DNS requests over the same HTTPS session being used with a site the browser is currently connected to.
Mozilla Developer Network is back up
My favorite consequence of simple things having no identity is this. Every oxygen atom that you breathe is a superposition of having been many places a century ago, including in every lungful of breath that anyone anywhere was breathing. It isn't "x atoms were in so and so's lungs", EVERY atom both was and wasn't.
I mean, "Best City" as described by the article is a really loaded term because it means a bunch of different things to different people. Some people like to optimize for net income. Others might want to optimize for like-minded folks, support networks, and peer collaboration. Still others might want more health oriented amenities and pleasant weather. I think you're right though; by excluding these software engineer-dense cities, I think the article is missing the point of what might be the "best city" for a software engineer. After all, if they aren't even in the top 10, why are people even there? :)

Anecdote: at my current job in Houston, I know I earn a significant amount more than my counterpart in Austin, and I get a way less cost of living also. I also know that Austin has way more opportunities than Houston does, so I'm screwed if I ever want to leave this job. My personal situation matches the chart in the article.
EasyNIC: easy-to-use host interface for network cards
> Before the TSA, didn't airports just have security screeners employed by the airport directly?

Yep. And in many cases, all of those "ineffective" security people were fired when TSA was created after 9/11. Then, in order to fill all of the openings, TSA hired them (with little to no training) and gave them raises. Source: I know a few who went through this process in a regional airport (Toledo Express, in Ohio).
Having fewer kids, or no kids at all, is actually the single biggest way to reduce impact on Earth.

Also, as can be seen on the graph of the article, the major problem is actually beef, and not meat in general.

Something the article doesn't mention, and maybe the paper doesn't take into account, is distribution. Fruits and vegetables can have a bigger footprint than certain meats because these can be transported off season from very long distances.

http://the-ecotarian.com/stories/2016/2/26/environmental-imp...
Sure, you also get it in embedded safari views. You still can't block apps in ads, you can just block ads in content your apps show, usually incidentally - those ads in the feedly view are not _Feedly_'s ads.
(Original article author here.)

I'd distinguish between screening false positives (which my article focuses on) and hiring false positives. Screening rejections (before the final interview) are usually done with very limited information, so there's more room for bias and noise.

Hiring is hard! :)
You could also run your own DNS server as well, like Core DNS, and configure it to resolve through DNS-over-HTTPS. I'm sure this is about the same thing, but it's worth noting that you could possibly use your existing router or NAS to run the software.
I was responding to the post as written, which did not mention adjustments.

Most tech people do not choose SF at $55k. That's all I'm saying.
Acronym aside, I think this is fantastic. These patterns (RPC, pubsub) have been around for a while now, and are fairly well understood. Formalizing them into a common, agnostic protocol that everyone can use is a huge win for all parties.
> Find me and put me in jail for something they cannot prove even happened?

Yes. It happens more than you think.
I'm a huge mechanical keyboard nut, so for a while I used the Filco Tenkeyless[0] models with Cherry Blue or Brown switches. Over time, though, I found working on a non-split keyboard made my wrists unhappy--it was too easy to scrunch my wrists inward. I tried the Matias Ergo Pro[1], but while I liked the feel of the keyswitches, the quality control was awful: after a few months, the keyboard was nigh unusable due to repeating-key and missed-key issues.

Fortunately, Kinesis (a long-time manufacturer of split-layout keyboards) has a new Gaming Edge line[2] that combines their super-adjustable split design with actual CherryMX keys. The resulting keyboard works wonderfully on my Mac: I haven't played with any of the macro keys they include for gaming, but the key layout works really well, the keys feel wonderful, and the adjustability makes my wrists and fingers happy.

[0] https://mechanicalkeyboards.com/shop/index.php?l=product_lis...
[1] http://matias.ca/ergopro/pc/
[2] https://gaming.kinesis-ergo.com/edge/
You'd need a court order to get that data from Google, but not to get the data from a seized phone. That court order might also be challenged by Google.

That applies especially to non-law enforcement actors. Those can't get a court order to force Google to hand over the data.
This alert is so annoying and stupid it hurts. I had it too when running one of my own program. I guess this is part of MS strategy: FUDing traditional applications in a desperate attempt to get people to use their store. Except the store won't become attractive anytime soon by alienating developers.
You hold your tongue and value family relationships above petty squabbles.

It’s not some pious virtue. It’s just what you learn to do as a functioning adult.
Just like hoarding Macbook Pro 2015, I have a brand new iPhone 6S Plus with headphone jack as a spare to my current iphone iPhone 6S Plus.
Did you mean: i am in great pain please help me
The article clearly states a desire to ship more providers as soon as more providers exist. If you know of any other providers who meet the declared privacy choices (e.g. deleted after 24 hours) and protocol choices (e.g. DoH, TRR, QNAME min), please do let us know!
Inventing fake argumentation points doesn't actually work. I said nothing about such and such nation being smarter or harder working. You said that.

I said, directly and indirectly, that developing nations benefit immensely more from developed nations than vice versa. It was similarly true for the US as well when it was a developing nation. It's factually true and very easily demonstrated: it's why the global median standard of living is at the highest it has ever been, famines are almost non-existent globally, the median life expectancy globally continues to expand, there is less extreme poverty today than at any other time in recorded history, global equality is at an all-time high and has continued to improve, food security is at an all-time high, infant mortality is at an all-time low, etc.

If you were right, none of that could be true, because all the wealthy & powerful nations would be busy oppressing all the poor nations, such that they could never climb the standard of living tiers.

Over five decades Vietnam suffered repeated occupation, genocide, famine, civil war, a brutal form of Communism, and overall had a large percentage of its population killed. Today they're on a booming express train toward a middle income economy. What excuse could you possibly present next to that? Countries like Vietnam (and China before it), or Czech, or Estonia, demonstrate very clearly what's possible and they deserve credit for their accomplishments.