skysight-inc/HackerNews huggingface dataset:
"so they know opening that advert link in a private window was done by you because the URL contains a code that was only given out to use (in a non-private window)"

Nope. See, people are idiots and in this case that helps us. They absolutely will paste that URL (with the code in it) into an email to grandma, or their Slack channel, or Hacker News.

Now, Google _could_ try to figure out what happened here, and guess if it's still you to fill out the profile - but that would always be somewhat inaccurate, and it's also evil, so between those two factors it's not a huge surprise that they don't do this.

One thing Mozilla has done more recently in Firefox is make available a "Facebook container" extension, which isolates Facebook inside its own session. So whenever you follow a Facebook bookmark, or tab-complete it in the URL bar, or whatever, you get a tab that's inside this special session where it's logged into Facebook, but your other tabs aren't. So Facebook can't correlate your non-Facebook activity to Facebook activity. None of this works if you use the "Login with Facebook" feature on other websites, but too bad, might as well have labelled that "I hate privacy" when it was invented anyway.
Thanks for the pointer. I’m interested as well in learning rust.

Unfortunate name though.
You don't really "get told" you're an expert at something-- if you're waiting for someone's certification that you're an expert, then you're probably not an expert.

I don't mean to diminish what I'm sure is your extremely proficient grasp of bash; rather I mean to diminish the way you presented it. If you're an expert, you know it without being told.
The history of Google's "SafeBrowsing" with respect to Firefox is a real mixed bag. The privacy protections Mozilla asked for from Google were begrudgingly implemented. As a Linux user, I used to just turn it off.
> One thing that burned me bad though was that without a `try` anywhere, my 100 line async function failed silently.

You should be bubbling errors up to some top level and at least catching them there.

Wrapping entire async-fn bodies with try/catch (or outright overuse of try/catch) is probably the most ubiquitous beginner mistake I see in modern Javascript.

For example, imagine if your top level was even just run().catch(console.error).
At first but then I spent a lot of time making help videos that walked through each feature I was able to get tech support near zero with 30 new signups a day and about 1,200 daily users.
Someone didn't check their work before pushing to production.
Elephant Launches Security Token to Raise $40M
Chinese person here, I don't think those numbers are that accurate or those ships were being maintained or seaworthy. That period was chaotic on the seas and piracy was rampant with frequent attacks in-land, as well during that period the Chinese Haijin was in force, which means no private seafaring (https://en.wikipedia.org/wiki/Haijin).

If they had that many ships, it was likely inherited off Zheng He's expeditions and the 1400s Chinese period's brief uprise in naval interest (https://en.wikipedia.org/wiki/Zheng_He#Expeditions), the Vietnamese conquest or the Mongolian Yuan dynasty who might have used them as an naval invasion force or even other previous dynasties who were far more interested in commerce but all these events were more than 50 years before the 1500s. However, note at that period, China had went from years of prosperity in the early 1500s (https://en.wikipedia.org/wiki/Hongzhi_Emperor) to chaos in the mid to late-1500s and land wars were more important with Chinese fighting Mongols and Japanese (https://en.wikipedia.org/wiki/Wanli_Emperor).
Because then you don’t need to look at the source code
Hi jlogsdon,

This clause exists as we run Google Analytics on the main gurn.io webpage. It was a standard clause suggested by our lawyers here in the UK to ensure our users are fully informed about the possible data collection being conducted by the GA analytics.js tracking code.
If you're a Slack admin, you can export a dump of the chat history. Such dumps are nominally for import into another group-chat system, but—given that the dump is just a tarball of newline-delimited JSON events, one file per channel—it's very easy to parse through in pretty much any language.

And, of course, if you have a public Slack community, there's nothing stopping you from taking regular dumps and baking them into one-per-day HTML pages, and then putting the HTML files up somewhere where Google can find and index them...
This wasn't an accident. It was a marketing stunt to get some buzz around an otherwise unnote worthy movie release.
Most of the day-to-day issues with certificate auth aren't actually problems with "the web", so much as they're broader user workflow or endpoint support issues. Here's a couple:

* How does a user log in from a new device?

* Especially if they've lost / broken their original device?

* What happens if users want to log in from a shared computer (think public library)?

* Do all the OSes/browsers that users are using actually support certificate management and auth?
I don’t find that scary at all - because in the gaps there’s a whole load of diversity.
Because he is trying to sound like he has a clue, lol.
Adding someone to an email conversation isn't an issue when using Topicbox, etc.

Slack can't initiate screen sharing on Linux.
Declarative languages are almost always more verbose than imperative languages. Not sure why you'd use LOC to compare across them when they have readily available execution engine planners with stats and everything.
Bhasa means language in Hindi and it’s dialects also.
> Look into modifying the TTL of your TCP requests.

so what, increment by 1?
I'd like to add "truly random" to

> use unique strong passwords per-website.

... use unique, truly random passwords per-website.

"Strong" is ambigous and hard to explain how to do right. Random means, in practice: "don't come up with one yourself, but let a tool generate one for you".
Henry Baker's papers about linear types:

http://home.pipeline.com/~hbaker1/LinearLisp.html

http://home.pipeline.com/~hbaker1/LFrpoly.html

http://home.pipeline.com/~hbaker1/LBoyer.html

http://home.pipeline.com/~hbaker1/LQsort.html

http://home.pipeline.com/~hbaker1/ForthStack.html

http://home.pipeline.com/~hbaker1/Use1Var.html
You'd have to time it in place-reveal sequences, so all orders received between 12:59 and 1:00 would only be revealed (along with the matches between buy and sell orders) at 1:00.
As a user, how do I know if a tool is generating a "truly random" password?
I really need to find where to do that. It's inside a redux dispatch and I dunno... Nothing is catching them. It's just silent.
Yeah, that was a long but interesting read. He has a long discussion about the secret of what latitude to use to cross Eastward. I never understood that loop so well until I saw the pics and diagrams in this story.

edit - fixed some of my endless typos
Ask HN: Who here works long hours just because you have nothing better to do?
The bulk of WP security issues stem from the 'writable file system' defaults that many plugins (and, to some extent) core either expect or encourage.

I can't say all, but the huge bulk of security issues I've seen revolve around some exploit which ends up writing a new file, or overwriting an existing file, which is then publicly accessible. If your file system is not writable, the large majority of WP exploits go away. However, you lose the "press here to upgrade your entire site and all the plugins in one easy step!" functionality, and the "upload files via the browser" ease-of-use.

If you're truly modifying public media files on regular basis, a non-writeable file system kinda stinks (either make the FS writeable or use an external media host, which adds complexity and cost). MOST systems I run in to aren't doing this often - it's "put up the site and updates some pages every few months" (or, blogging, which is often just text). For these, I recommend turning off write permissions to the whole of the WP system, and periodically turning it back on to do updates, then turning it off again.

Yes, this doesn't cover 100% of exploit cases, but nothing does, and I've found this to go a moderately long way to reduce the impact of various exploit attempts.

So, to answer the question, I would say "it depends". If the .net hosted version also by default allows for writeable media that is also executable, then there would be problems. However, I don't expect a .net-based system would allow you to get a ".aspx" file in a publicly accessible URL and have it just execute when accessed (unless there's some deployment mode that would allow for that?)
Yeah, I have no idea why you'd serially learn something first. Sounds like procrastination really. As if OP is too scared of failing that they keep putting it off.

If knowing something is going to help you with Rust, then it will help you even more in parallel when you've gained some entry-level experience with Rust.
The thing about being homeless is that you have a lot of time. I had a lot of time while in jail too. I exercised 2 hours a day and ate healthy and felt great physically. If I spend any time exercising or taking a walk or spend my time doing anything other than working every waking minute, my wife and kids will be homeless.
You don't need a phone number if you don't need to be called on one, and you don't even need to be actively tracked in the home location database if you don't need to be reached at low latency at all. Think low latency=incoming call, no loner low latency=hourly email check. The remaining overhead is just renewing the sim once it degrades and keeping database space to allow it to associate if it turns the gsm module on.
> Router is a generic term for something that takes wired Ethernet and performs NAT and creates a wifi network

not to nitpick, but this not actually true. for home use, perhaps it is conflated to mean this, but really it is one machine that reroutes traffic on behalf of another - NAT/wifi or other media transformation is not necessarily required here (though definitely could be a part of it)
I was about to comment exactly this. Genius.
Too expensive to do in one frame. Too cheap to use a worker. Alas. :)
Cool I hadn't heard about that.
Yes, they are taking on risks by making these trades. Do insurance companies 'earn' money? Do bail bondsmen 'earn' money? Does a retirement account 'earn' money?
> I'd like a query language that more expressive, expression-based syntax where the results of each expression can be "piped" into the next step to perform transformations, joins, reductions and so on.

I do not think this can be easily fixed in SQL because the problems are not in the syntax but rather lie deeper at the level of the underlying paradigm and principles.
Yep. In my example I want each iteration of map to be queued so they all occur whenever there isn't rendering or whatnot to be done.
Sony probably figured the best way to stay one step ahead of the North Koreans was to hack themselves.
Ask HN: Cold approach your way through a career (and still hitting major goals)?
This is something that I have just thought about today. Is it probable, or even possible, to get to a point you want to be in your career in places and positions that normally take people years of networking and building good relationships, and replicate the same goals just by entering a new town, a new job, a new company, as a total stranger?

Has anyone here successfully done that going with a cold approach 100% or close? Get to your career goals (or even life goals) without a reliance of a network to carry you. It's just a thought I had about what is possible with social constraints.
and this "leak" is worthless because a blu-ray version was already leaked last year.
This is worth emphasizing. If you have a model with a parameter that represents the probability of something happening, and then you have uncertainty in that parameter, your real probability needs to integrate over that uncertainty.

But the final probability is still just a single number.

But I suspect the GP's reasoning was getting interference from the valid point that poll numbers, which are not probabilities, are meaningless without confidence intervals or some other measure of uncertainty.

That uncertainty will then feed, via some model, into a probability estimate of a candidate winning. And that's just a single number.
People think a programming language should be a complicated ecosystem

Who thinks that? Everyone I work with wishes for simplicity. Sure, we recognise that there are tradeoffs and constraints, but simplicity is prized above complications.
Small piece of annoyance, the clickbait press had a field day with this. From the positive which I appreciate[0] to claiming putting `rm /*` in the wrong place so that it didn't even work is "file wiping malware."[1]

For the most part, this appeared to the work of a teenage skiddy (given the addition of a readme with a racial slur as the text), and not any actual sophisticated attack.

[0] https://www.techrepublic.com/article/gentoo-stops-github-rep...

[1] https://www.bleepingcomputer.com/news/linux/file-wiping-malw...
PRISMA CSI – Cyber Security and Intelligence
Also, for a human there is cognitive load in moving around. If you are safe where you are now and nothing significant changes, it's mentally easier to stay still instead of re-evaluating everything constantly. And this frees your brain to better plan your next move, so it's advantageous. For an AI, CPU power isn't as scarce.

And even with a computer playing a video game (not the real world), your joystick hand gets tired.
Ha, time passes fast.
If you do any of those things, you use actual numbers with your words - which, if you actually care about the subject at hand, you should have used numbers in the first place.
It's a baseline. It's common that many places will have local offerings that exceed the baseline (moreso in other categories like beer than potato chips), but it's nice to know that literally the worst possible thing that could happen is they only have Lay's.
Show HN: My portfolio website to get a remote job – Need reviews and suggestions
I am looking for a remote product or customer support related job and so I created my own portfolio website.

Do I need to add more content to it? Does it lack anything substantial?

I am available for hire at a $2500 per month salary.

Do you have any suggestions for me?

Link:https://www.milanmotavar.com
This wasn't the code base (save the systemd stuff which increasingly is not being used by gentoo users), it was merely a github mirror.
I’ve used them for a number of years for low volume sheet metal parts. They are more expensive dive than a local shop but they are ALWAYS fast turnaround and never have a problem. I can’t tell you how many issues I’ve had with various machine shops over the years. I wish they did more complicated machining too.
For a while, credit card processors in the US were pressured by the government not to authorize charges, even if Wikileaks would accept them as payment. That make it effectively impossible for Americans to donate that way.

Even if that’s different now (which I’m not sure it is), there will always be the next important cause.
Huh. I normally complain about how functional languages seem to be designed to be easy to write the first time but super hard to read and modify. However, in this case, the F# code seems very clear, significantly moreso than the Python code.
The press these days will do hit pieces on their targets du jour. I sympathize with Elon when he satirically called for "Pravda" to rate news orgs on truthfulness.

We need something to stop this. This is way beyond Mockingbird stuff. This has pervaded everyday living. It's awful.
While true, many apps, including github, make this problematic for something like an admin account.

2FA, by it's nature, is bound to one single software, tool, or piece of hardware[1].

This limits the access of e.g. an administrator-login to one person and her personal phone, only. A bus-factor that is unacceptable to many.

Software like AWS allows more granular set-up, but still complex. Linode, Digital-Ocean and even docker.io, last time I looked, make it impossible to share the admin-account by allowing multiple 2FA devices active on one account simultaneous. And if they did, that would greatly lower the security of that account (still better than no 2fa though)

[1] 2FA, like google authenticator (or one of the much better open source alternatives thereof) make it possible to share a 2fa secret across devices, but that is both insecure and hard.
A modified version of Hanlon's razor seems appropriate: Never attribute to intelligence, that which can adequately be explained by dumb luck.

(Or replace "never" by "always" if you're feeling kind and positive)

Edit: To be clear, I don't believe in either philosophy as an absolute, it just seems appropriate here :)
The uniform experience of the US is why I roll my eyes at people who suggest "why would I travel elsewhere if I haven't even explored my own country?"

As if seeing some new sights is the only rewarding aspect of being somewhere new rather than experiencing something truly different in life, like different culture, language, and way of life.
Joe Celko's Puzzles and Answers is a nice complement to the Smarties book.

Neither of them cover analytic functions, though. And they can really make a difference (for performance and succinctness). So it's worth it to look into them after going through these books.
People are genuinely absolute idiots.

Jar Jar was a badly written, unnecessary, even somewhat racist, nonsense character. That’s not the fault of the voice actor, nobody’s childhood was “destroyed”, and the thought of anybody sending an actor a death threat because they voiced a shitty character is so completely nonsensical to me that I’m struggling to imagine the sort of person who would do it.

Maybe humanity is doomed after all.
Thanks! So the underlayi g issue is less SNR so higher error rate and lower throughout. Is that correct?
RN is a compromise, and a very big one.

It might be the right choice for some products but my experience on complex products more closely reflects the Airbnb one than the myth of 'only know js, write once, run everywhere'
> "let us login everywhere with a certificate that we'll be able to securely store on a HSM and easily revoke and update if necessary"

Would U2F be a part of the answer here? It is by far the most user-friendly implementation I've seen, and it's already supported as a 2FA token on many sites.
HFT allows the faster trader to see that you're trying to buy (or sell), put their order to buy (or sell) in ahead of yours, then turn around fill your buy order at a higher price (or your sell order at a lower price).

HFT allows better-connected traders to front-run you. You don't get the best price because the HFT guy extracted risk-free profits for himself at your expense.

https://www.barrons.com/articles/BL-SWB-27750
Ultimately the Operating System doesn't (and can't) know whether the storage is actually going to retain data you've written to it.

Even if your OS goes out of its way to use all six kinds of double secret synchronization primitive, the cheap eBay clone product didn't bother implementing any of them and replies "Yup, definitely 100% synchronised" while doing nothing, then the user is disappointed because your OS promised that the data was safe and it isn't.

This isn't really just about hard disks either.

Over the years lots of manufacturers have sold "smart" network cards that corrupt data if they're left to their own devices to "speed up" networking by cutting corners, miscalculating checksums, copying things wrongly from RAM, and so on. But it's even possible to build a card where the most trivial scenario - where the OS lays out the entire packet and then explicitly does IO operations to write it to the card - still sometimes randomly corrupts data. Your OS can promise a "guarantee" that the network data is exactly what you sent... and then you find 0.1% of packets are corrupted before they even reach the switch, oops.

Ultimately all bets are off when running on real hardware. Many years ago a friend of mine had a PC where randomly sometimes basic Unix features like "cat" would segfault or misbehave. Did disk checks, re-installed the entire OS, loads of hair-pulling. Eventually he discovered that the CPU fan failed, and overheating had damaged the on-die L2 cache...
At some point you hope the compiler is able to remove dead branches and function stack setup or you end up with massive code duplication...
The Earth has a lot of water which is postulated to have come from comets, I believe. The moon must have been struck by some of the same comets and didn't have a enough gravity to maybe hold onto the water and I don't think it had a magnetic field so solarwinds strip the water away but still, Ceres has water or at least organic materials, ie carbon.
Golang HTTPLogger for API Requests on GitHub
The recent explosion in investment activity likely indicates this is no longer the case (although you may have to learn some different rules).
It probably just happened that way. To note, systemd isn't as popular/required for Gentoo as most people I know still use openrc. There is even a set of hacks (that I very thankfully use!) to use Gnome 3 on a non-systemd system[0].

[0] https://github.com/dantrell/gentoo-project-gnome-without-sys...
There was a brain password hash developed by Blum IIRC
This wikipedia entry takes 6 paragraphs to explain the nuances involved and they are far more complicated than you state (not that I think you intended that way):

https://en.wikipedia.org/wiki/Red_states_and_blue_states#Con...
> This is a separate issue, and one I would disagree with.

It's possible to state a lack of certainty with confidence and clarity.
Juno: a powerful, free IDE for the Julia language
It's not unlike other trailers in that it spoils the whole movie.
Whoops! Thanks for the heads up!
Thank you for the clarification, I did miss the reference.

Your brother’s story brings me sadness. I see a lot of suffering, both for him and for the ones around him. I hope he is able to find a way toward healing. Introspection can be an important step of this process.

Labeling is a violent process as it replaces the person in our relationship with the label we project onto them, thus confining them to that projection, taking away from their humanity. It is easy to recognize it when applied with the explicit purpose of dehumanization (Jews as “vermin”, immigrants/refuges as “illegals”).

Mental health diagnoses do a bit or a lot of this, too, unless one is able to intentionally look at the diagnosed as a human being, especially in difficult situations.

The mention of Oracle makes me think that Pieter Hintjens’ book, Psychopath Code, may be of interest for you — it looks into the mental health of organizations. https://legacy.gitbook.com/@hintjens
Presumably Sony and other major corporate users of YouTube do not have employees selecting a file and sitting waiting for it to upload every time a trailer needs to go out, nor do they give employees access to these high value YouTube accounts. Presumably they have a system between their staff and YouTube that is responsible for uploads, and in that system a mistake like this —- referencing the wrong file —- would be much easier to make and go unnoticed.
"Relative probability" is only correct for standard GAN, not for other GANs which don't estimate a probability.

My first name was "Critic's difference" since it's literally C(x_r)-C(x_f) so its the difference in critics, but it felt really unclear, it doesn't give the reader any sense of what it is about. Relativism/Relativistic is better since it's to say that it really doesn't matter if the data looks real, what matters if how realistic is real data relative to fake data (and vice versa). The frame of reference is important here.
He was likely not a person trying to do serious damage more than trying to have fun.
uBlock Origin reports svedic.org is trying to track me with Google Analytics. Isn't websites using Google Analytics part of the problem with the internet, too?