skysight-inc/HackerNews huggingface dataset:
> I would be very surprised if Louis specifically endorsed non Gorilla glass replacements.

He pretty much does.

"So what they do is they take this screen ... and they replace the front glass layer. Most of the time the only thing wrong with the screen is the front glass layer is cracked. They put a new glass on it in China and then they sell it to us in the United States as a refurbished iPhone screen ... That is not a counterfeit."

https://www.youtube.com/watch?v=HkPUoUJPJAQ&t=1m55s

I understand why Louis gets worked up about this particular issue, but he's just flat out wrong. These refurbs are dodgy as fuck. The assemblies as sold are counterfeit.

> some people can't keep nice things

Absolutely. I don't disagree, but this doesn't describe the people I spoke about. Accidents happen to all of us, even when we're particularly careful. I would never expect a glass computer to survive rough treatment but I do expect that when it's repaired with a "refurbished Apple screen" that it is made of substantially the same material as the original.
But v1 is not being implemented yet in Edge or Firefox? [1]

And then you get these kind of "crap" from twitter [2]

It seems we have been talking about Shadow Dom for years, grid, flexbox, web development still isn't anywhere near good enough.

[1] https://caniuse.com/#feat=shadowdomv1
[2] https://twitter.com/Shihrer/status/1021891405633925120
I use Zotero to maintain a catalogue of the books I own. Being able to find the metadata for almost any book just by typing the ISBN (10 or 13) in the search field is a really nice feature.
Ghdhf
Goodbye chrome then.
Basically corporate scumbags pushing their own agenda with just enough plausibility that the gullible will help push their agenda for them.

What happened to "do no evil". Seems to be all google do now.
How to Fix Computer Programs Not Responding?
The 5 Best Landing Page Builders in 2018
I think it should be more prominent than that: make it the size and style of the "do you want to accept notifications?" dialog. It should be unmissable by users that they're on an insecure site.
Apparently each time a memory is accessed, it gets written down back again. Imperfectly.
It could reply with anything, even a valid, correct response. The connection you make to that result is still going to be redirected to the portal.
The key here is reverse dependency management. “If I change X, what would influence this change?”.

This can be achieved with single repo better than multi-repo due to the completeness of the (dependency) graph.
Amen, brother. A high trust society is bred by religiously killing off the dishonest. "Nice guy" weaklings make the world a much worse place.
whats the evil here, I guess Mozilla is also planning to do this in future.
What evil agenda does Google have for pushing HTTPS-by-default?
They tried that in the past: https://www.historyextra.com/period/modern/1940-the-year-mex...
For the record, in Russia a company is actually required to have a workplace cafeteria once they have more than N workers employed.
> You certainly not do dev proto, then switch to prod both in one step and without even rechecking the tests you did on the proto.

Exactly. I work in software engineering for cars and even for things that are not mission critical or life-threatening, the engineering and quality process is insane because so much money is on the line. I wouldn't be surprised if macbook pros are worth more in profit, or at least revenue, than a car line and should therefore see an equal engineering process.

I can't understand how the firmware was released without the proper key, unless there was a bad merge or they dropped a pilot firmware that was testing without thermal management... maybe a clue there is a desktop in the works and the desktop firmware made it onto the macbook pros? Either way, like you said, their quality process has a major deficiency.
You probably have the wrong idea here. https is not a cash grab or an information gathering tool. It’s the opposite--technology that protects users’ privacy.
Sap brings transparency to the processes inside your company.
You don't know what is happening in the mind of you accountant on the other side of the World. How bills are issues and if these are payed correctly and in-time?
How do we choose credit control, who is approving purchasing spends?
Internal and external audits could not see whole picture and they are not there all the time and even more - if someone would like to hide something from them it could be easily done in most cases.
> non-secured HTTP still makes sense for example during development or for home routers and printers where traffic encryption is less important compared to the initial UX

I think this goes deeper. Currently, supporting HTTPS means you have to have some kind of internet connection, back-end infrastructure and other running costs.

Even if you use Let's Encrypt and DNS validation, you will have running costs to keep the domain name registered and you will need some way to periodically transfer new certificates to your devices.

Even if you somehow manage to update the device without a permanent internet connection, if someone wants to access the web interface, they will have to use the domain name - and therefore at least need to be connected to an internet DNS server so the domain resolves.

So if, at some point, browsers would completely drop support for HTTP, this would suddenly force any kind of device with a web interface into an IoT-style lifecycle where the device loses functionality once its vendor is not able to support it anymore - even if the vendor would want people to continue using the device and even if there is no technical reason for it.
Agreed. I'm sure Google will take that into account if they decide to ramp-up the prominence of the 'warning'.

As it is, the warning seems to be disabled for localhost/127.0.0.1 (where I only see a 'not secure' if I manually click the ⓘ) but the warning shows as usual if I browse a local IP address over plaintext HTTP.
It makes so much sense to stimulate students to use a free tool they can keep using after they leave university or change schools, without resorting to piracy or expensive subscriptions ($250!).
I understand your point of view, although there are people I know who managed to run Web Audio API plugins as VSTs :)

This particular app is meant more as a playground / sketch / sharing tool for DSP techniques, and imho it makes sense for it to be on the most immediately accessible platform, the Web.

However, it's possible to add Faust or C support to it in the future (using WebAssembly), a feature which will allow exporting your snippets directly to executable / VST.
What on earth are you talking about?

I've heard this nonsense over and over again, and not a single person has been able to provide a plausible explanation why this is a bad thing to do.
Except Google don't sell certs. This isn't a cash-grab, it's use of soft power to genuinely improve the web.
How about blogs that only work with JavaScript and external sources allowed? Those sites should be marked as "Not worth your time"
Jfgjhg
For anyone wondering exactly what the current plan is regarding these secure/not-secure indicators in upcoming releases, the Chromium Project has a detailed proposal and timeline: https://www.chromium.org/Home/chromium-security/marking-http...

Basically it comes down to eventually removing "secure" indicators completely and only indicating when a page is considered "not secure".

As an aside, Let's Encrypt has been a godsend to me during this change.
But "you need to read up on healthy foods/workout routines" is something completely different from "listen to your body".

The two statements are similar in one way, though: Completely useless as advice that will get people healthier. "listen to your body" will get people to eat what they wan't. "you need to read up on healthy foods/workout routines" will get people to read all sorts of bad advice. Like, for example: "listen to your body".
Might be! I would also like to add MIDI files drag and drop, so that you can "play" your pre-made MIDIs. There are a lot of features I would like to add, and more support for MIDI is one of them.
All legacy content heritage that is hosted using http protocol just became not secure in Chrome. What solution does google suggest? Who will pay to upgrade old infrastructure? Pandora box.
Well, it doesn't help that the text (when clicking on 'Secure') says:

Your information (for example, passwords and credit card numbers) is private when it is sent to this site.

To the layman this means: Chrome says it is safe to enter credentials on this site (and not that it just means that it is hard to eavesdrop on the connection), especially that because this does not say anything about the trustworthiness of the site.
Firefox has been doing that for some time now, but you have to click on the information logo left of the address bar to see the “Connection is not secure” warning.
My interpretation doesn't actual differ a lot from that in the article. I have watched enough videos, you can easily understand what is going on by interpreting the full body language of the participants, part of which the head nod is.
Sounds like scopolamine:

https://en.wikipedia.org/wiki/Hyoscine
Surely a good thing since marking HTTPS as "secure" was always a bit misleading and normal users didn't understand that you were still subject to phishing attempts and such even with an encrypted transport and authenticated servers.

Now it reflects the real world better: HTTPS is necessary but not sufficient for security, but with HTTP only you definitely don't have much security. I guess that's the best you can guarantee or communicate via the browser UI.
I don't know what this means.

How is "single repo" a "design" and how does this design dictate dependency management?

Yes, if you have a single repo then that would be a single source of data for building your stuff. That seems redundant.
Right, most normal cities. ;)

(I actually have more experience with Canada, but point taken.)
Same reason booking.com shuttered the Hindi version of their website, educated Indians speak English and are very comfortable using it. When politicians have Hindi speeches written in Latin alphabet instead of Devanagari it shows something of the grip English has on the South Asian subcontinent, not just India.
I believe Microsoft compilers have traditionally treated volatile as having ordering properties (giving reads acquire semantics and writes release semantics). On x86, this just results in compiler-only barriers, but on Itanium this would result in actual barrier instructions.

This is far from a standard behavior, though.
Not only that, but we intern coughing people with other people of various illnesses, and then we send those infected back to society based on time criteria, instead of health criteria.
All legacy content that is hosted using http protocol is, in fact, not secure. It's definitely not a bad thing to warn people.
https://motherboard.vice.com/en_us/article/9kmkve/thinner-an...
Google just being Google
How Trustable Is Blockchain?
We're hiring fullstack developers and a senior front-end developer
For now, yes. But, since the app is based on a standard spec, other browser will hopefully support Web Audio Worklets soon.

> — Please note that the app runs only on Chrome > v66, for

> now, because Chrome is the only browser implementing the

> Audio Worklet[1] spec. Other browser will follow suit

> (hopefully) soon

[1] https://developers.google.com/web/updates/2017/12/audio-work...
Blockchain card game utilizing ERC-721 NFT(non-fungible token)
Jgfjh
Why would unpredictability be good? If you eat at the same time your body starts preparing to digest the food before you eat it, making for a faster, better digestion of the food.
"We are now longer allowed to spy on you and violate your privacy. F* EU!"
You may view our code at https://github.com/PortalNetwork/nifty-game

Join our telegram for discussion, comments and feedbacks: https://t.me/portalnetworkofficial
Can you please explain how strcpy_s() validates that dest actually points to a memory region with enough space for destsz bytes?

https://en.cppreference.com/w/c/string/byte/strcpy
Bitcoin Lightning Network #3: Paying for goods and services
In the former each project is a self contained unit and if I'm working on project B I can forget project A even exists, which is lovely caused I've got enough to deal with on B as is. Each project can be branched individually, the log of project B is not polluted with commits to project A, I can rebase and not get a bunch of commits I don't care about.

The later forces me to be aware of the entire universe in that repo.
To play the devil's advocate and being very cynic (which is always fair game IMHO):

This change has the effect of pushing even mundane websites to use SSL, and so locking out corporate-level and other players from analysing web usage, or at least making them less effective, which enhances and increases the Google's "web scale" analysis dominant position even more.
Why I Let Urgency Ruin My Plans
BSDs simply don't guarantee ABI stability, so no third party app should ever make a syscall directly. It all goes via libc. So, yes, from that perspective, it is a fully self-contained system.

In practice, third-party apps sometimes think that they know better, and get broken. Anything written in Go, for example:

https://github.com/golang/go/issues/16272
Ah, yeah that makes sense :)
Yeah, 'It seems you're trying to run the editor with an old or unsupported browser' is kinda odd given it just runs on Chrome...
Humans are a violent species.

If this were true, then how come daycare centers and nurseries don't have to deal with violent toddlers all day long? By your premise, our violence is genetic, so infants must be taught to control their violence in order to become succesful adults. At what stage of development does that happen?
Just ask for tldr…
When I read it on the page I was trying to figure out how to combine fraud and entrepreneur. Fraudtrepeneur? Entreprenfraudster? Frentreprenaud?
It's better when compared to ad/malware laden webpages that people unaware of youtube-dl use.
hmm, I am a bit opposite - no issues with remembering even longer numbers (learned long serial numbers of all posters on the wall as a child just out of boredom), but introduce to me 2-3 people I haven't seen, and I simply can't remember their names. Feeling like a incompetent idiot guaranteed.

Names stick like 2 seconds around in my memory and are gone. Heck sometimes even a single person is an issue. My memory ain't greatest but for names specifically it is almost not writable. Tried few mind tricks but not really successful. I am sure there must be some way to get this to more acceptable level, anybody has any idea?
> Every case going to trial would cost an incredibly unreal amount of money

There are other ways of avoiding the trial than threatening the accused. Also there are countries that don't seem to have this problem. Perhaps a look outside the US might suggest some alternative ways of behaving that might be used.
I actually wonder what the neurological research is on this subject. Does too much information crowd other information out?
Cloud Build – Automated builds for continuous integration
I think you have to feel really crazy adventurous or desperate for money, to become a guinea pig for new drugs, that mess with your brain ...
> First world problem.

Why is that wrong for first-world people to tackle first-world problems? Just because you don't believe in a particular piece of psychology doesn't necessarily have to make it untrue.

Seriously, it's quite annoying to see problems dismissed just because they're "first world problems". Comfort is important and we're proven to process things subconsciously.
I think the Finnish point was that in Finland you are looking the part with a back pack.
Yes, that's right – because it _is_ insecure, fundamentally.

These sites will continue to be entirely accessible, so I have no idea what solution you think is required. If a provider wants to upgrade such that their site is no longer insecure, then they can pay to upgrade it themselves.
As soon as browser support the standard, the message will be shown less and less. Chrome was an early adopter, but Audio Worklets are part of a W3C working draft, which is the de facto standard for web audio:

https://www.w3.org/TR/webaudio/
Looks like a lenticular display with some filtering and refraction to expand the perceived focal plane outwards.

It also looks like it works best with a black background.

https://blog.lookingglassfactory.com/introducing-the-looking...
> A monorepo depends, fundamentally, on all code having complete test coverage.

Covering every single line of code still doesn't mean that you have complete behavioral coverage, unless your tests somehow run for all possible inputs. In practice, there will still be holes, not because someone was negligent, but because they missed a corner case specific to some state.
Nani? What does https have to do with analyzing web usage? Whatever that means exactly.
Keto absolutely works. The first time I did it was from sedentary and about 60lbs overweight. It felt like a life hack how fast I was losing weight.

Fast forward to a new, leaner, me and I try exercising properly. On Keto there's no way I can exercise. Whilst I felt fine day to day and had a clear head, anything more energetic than walking was a huge effort.

Years later, having dropped keto, a friend and I were very heavily into mid-distance running (10k and half marathon). We weren't particularly fast, but we were doing probably 50k per week training and several events per year.

We decided to do a burst of keto to try to drop a few more pounds whilst maintaining the running since we'd seen some blog posts claiming it was possible to avoid the lack of energy.

First run post keto went from us running routine 55minute 10k to me abandoning the run altogether part way through at 64minutes because I was in agony.

tl;dr keto + exercise may not work for everyone
Chrome's long-promised HTTP 'not secure' website warnings arrive
Jhjgh
I set it up to sync the full-texts via syncthing, has been working flawlessly.
>Are you really suggesting that anybody in the world who wants to walk into the USA should be allowed to?

Maybe block known criminals and bad actors, but otherwise yes. If your argument as to why we should exclude people is based on the idea that it would make standards of living worse for people here, that's a) probably not true and b) only makes sense if you think the wellbeing of the people here is more important the wellbeing of people elsewhere.

>It seems like that nullifies the existence of the nation itself. Why have a border?

Not really, there'd still be a government and a system of laws that apply within the border.

But beyond that, why specifically do you think it would be bad to nullify the existence of a nation?

>Why have a military to protect that border?

In as far as a military is necessary, it is to protect against other militaries, not non-violent civilians entering the country.
Presumably the businesses that should have seen this coming a long time ago.
Email clients on Linux
I need a email client on Linux that I can use to send patches to mailing lists, inline reply to email threads etc. Most of them have issues with word-wrapping, mangling text, inserting extra characters etc..

Which email clients do you use on Linux? Would you recommend it? How do you address these issues?

Would appreciate any suggestions. Thanks.
Jfghfg
I remember those times as well, but my recent experiences with new hardware on Linux have been rather positive.

As long as you avoid hostile vendors like Realtek and NVIDIA everything should just work.
Why would you need to go low protein with low fat? High carb and high protein is pretty common.
When using HTTPS, our ISP can only see the server you're connecting to, not what you're doing.
I really, really dislike this kind of medium-to-long form article that don't bother to even expose some sort of context (topic introductory line). This is incredibly disrespectful to the reader. You read the first half trying to put the pieces together, while given that this is a proto-longform article (does not have the length, but has the tone), there is fluff added here and there for flavor. This is so frustrating to read.

> The truth, then, is this: our generation was raised with the understanding that the image we portrayed mattered more than who we actually were not out of some malevolent, externally imposed agenda, but because it was actually true. The result was that nothing we ever did felt organic; instead, everything felt like a checked box.

As every generation before? Why even speak about generation here? This seems like an absurd reduction from the author, while this is the kind of thing you learn to recognize as you age and you start seeing the word with your own eyes. Most people becomes disillusioned as time goes on, seeing how much public action is fake.

A much more interesting analysis would be to show how the new engaging platforms distord this longstanding social behavior (signaling), amplifying it or distording it. But to say that they are an "Instagram" generation is giving far too much credit to Instagram. The world was not "disrupted" by Instagram, it was only a lens and a way to capitalize on this behavior.

I could go on with the "lost authenticity", but I feel I'm just trying to justify the time taken to read this empty piece.
> non-secured HTTP still makes sense for example during development

To make it easier & cleaner in development, it's best to make yourself a Certificate Authority CA and issues local certificates. This makes for no warnings in browsers and ensures a better development experience.

A post from my colleague on how to do it https://reactpaths.com/how-to-get-https-working-in-localhost...
Not to mention it lacks certain useful features like being able to change the head but the convenience factor won me over anyhow in the end.
> nor did they push the limits of graphics cards and whatnot and design it for two generations over.

Moreover, it ran just fine on a decent 2011 laptop.
Death was more of a concern in the 1800s regarding medical procedures.

Multiple jobs just to get by sounds a lot like today yet plenty of people still grow, learn and create.
So has Google said how they expect router configuration pages, network printers, NAS boxes and other local-network-connected devices to deal with this?

I mean, I know Plex has an arrangement where they provide a dynamic DNS style record and they have a special deal with Digicert to issue loads of wildcard certificates [1] but that needs a bunch of infrastructure and a special deal with a CA, as well as precluding offline use and breaking if the supplier ever drops support.

And obviously, you can also use a self-signed certificate - but that means teaching users "Just click ignore on the invalid certificate warning" and I've heard people say we shouldn't train users to ignore invalid certificate warnings.

Is there some alternative solution Google is proposing?

[1] https://blog.filippo.io/how-plex-is-doing-https-for-all-its-...
IP addresses and routing
Being able to quickly import literature via embedded metadata or specific extractors within zotero is incredibly convenient.

They have a super simple interface to do this from firefox, but I also configured my qutebrowser via a userscript:

https://github.com/parchd-1/qutebrowser-zotero
I had a similar experience when trying a keto diet - I struggled to cycle up a single short hill on my commute home, despite being a moderately-fit regular cyclist. Bringing the carbs back in solved this. YMMV.

It's interesting that even some of the more pro-keto/paleo/primal blogs often recommend carbs (albeit appropriate quantities) to support any significant level of exercise.
ISPs (almost all of them) and lots of corporate (school, business, university) firewalls run analysers on websites and aggregate that data.

This data can provide a fair bit of powerful insight and intelligence into things like change of trends and growth of businesses.