skysight-inc/HackerNews huggingface dataset:
Can someone help explain how this works today? I'm a bit unclear. The Netflix app is, as far as I know, free. I use it, and I have a subscription paid for via their website. (well, okay, I've never really watched content on a phone or tablet, but I know it works).

Is the problem that new users who sign up via the iOS app have to make an in-app payment for their subscription, thus triggering the 30% cut?

I assume this also means Apple will reject any app that submits payment through the Netflix iOS app directly to Netflix, bypassing the normal iOS payments process.

Why doesn't Netflix just not allow you to sign up via the app, forcing everyone to use a web browser (either on mobile or on desktop)?

It seems like other app developers could do the same thing, allowing the app to sign in to your web account to view content. For example, the Remember The Milk todo list service. I believe I pay on the website, but they have a companion iOS app that allows me to sign in.
> ...they cannot update their phones, because they have locked firmware and walled-garden OS, largely put in place to make them buy new phones.

This is one of the biggest problems with the mobile landscape, with Apple, Google, and OEMs culpable to various degrees. It's deeply unethical, selfish, and wasteful.
Consider upgrading to RA 2 Select ($250 hub) someday. Then you can install their nicer dimmers (Maestro), though they also cost 2x the Caseta dimmers so it gets pricey.
Show HN: Fastmate – a native Fastmail-wrapper for Mac
Microsoft Bug Testers Unionized, Then They Were Dismissed
You realize you don't have to allow this on your Android phone right? Are you worried that you aren't responsible enough to leave unknown sources disabled (as it is from the factory)? Trying to understand how you view being forced to comply, a feature over the option to leave it on or turn it off.
In what way is Python any more of a synchronous langues than JavaScript?
>This isn't how it works in the United States at least. The police are allowed to lie to you, your lawyer, the media, anyone they want to, as long as they are not under oath.

That seems like you're playing semantics.

A contempt charge is a type of criminal charge. My contention is that if a lawyer, during discovery, asks the police a question like "did you analyze the data" and they lie they'd face issues.

So it looks like we're in agreement :)
"Leave No Trace" is a term of art: https://en.wikipedia.org/wiki/Leave_No_Trace

It's not without criticism.
Is not it better just to disable Javascript instead of cutting your CPU performance?
Of course it follows.

"Secure communications app" != "Secure communications"
On the flip side, Apple standing its ground and forcing poor companies to get their apps approved by Apple played a big role in South Korea's mobile banking experience not being a total shitfest filled with five Windows-only security plugins (per bank) that will fight with the user and each other.

Sure, in an alternative universe, you can always say no to the whole nation's banking industry and refuse to do mobile banking. Just like you can say no and not buy an iPhone in our world.

Disclaimer: Never had an iPhone. This comment is based on what I have heard.
Intel cooperates with organizations that obey embargoes and don't badmouth their partners in public, like Red Hat, Canonical, and probably the Linux Foundation. Intel does not cooperate with OpenBSD.
This is a small project that I made mostly for my own use. I did learn about Fastmail through HN, so maybe someone else here has use for something like this!
I'm not a US citizen but I seem to be more aware of what the 1st amendment actually entails more than a seemingly large proportion of actual citizens, surely you guys learn that stuff at school? Is it just presented really dryly and so kids don't pay attention?
You've missed my point, or perhaps I wasn't clear enough, from parent:

> The other thing people were more willing to do in the 1940s was move to where they could afford to live.

Where can you move today that offers affordable living and a good, steady job? Lets say you were on the expensive east coast and wanted a cheaper, more affordable place to live, with work. You'd consider Pittsburgh or Detroit, maybe. Both tick the boxes - affordable, plenty of good, union jobs, enough to own a home and build a family.

Does Pittsburgh fit that bill today? The answer is unequivocally no. Sure, housing prices are down compared nationally - but the last 10 years have seen a boon in housing prices here. Flipping is happening like crazy. Rents have increased. But wages have not - because cost of living adjustments punish employees in places like Pittsburgh.

I assume you're coming from a tech perspective. It's easy for that to skew your PoV. Think of it as the lay person. It's a much riskier prospect today.

Pittsburgh is one of the worst cities in the country for retaining recent college graduates (Pitt, CMU, Duquesne, etc). Why? The job market simply isn't large enough.
Feel like one could make more than $500 a year doing anything else with the skills required for bug hunting.
I believe you're incorrect, Johnny five supports both runtime models.

Was playing with Johnny Five yesterday (while they were releasing 1.0, fun to watch), and was deploying my node project code to my Tessel 2, which then ran independently of my laptop.

I was amazed at how easy it was to go from 0 to deployed code running reliably on the (detached, untethered) dev board. At least when working with the Tessel 2, they really think through the dev experience end-to-end.

[Edit: Tessel, not Tessle]
So, realistically, how much performance did your average OpenBSD server just lose from following this mitigation?
Of course that’s where the value is. Why are they charging me to use it twice, once on purchase of the phone and then on every app purchase?

The value seems to be for app curation, which is atrocious. This is incredibly harmful to consumer choice.
Although Amazon has had some success doing what everyone else does and extending Philip K. Dick's work with The Man in the High Castle, Asimov famously quoted that most of his action happens offstage. [1] So it remains to be seen if Apple can rework Foundation's action enough to keep viewers engaged without tweaking the material so much it's unrecognizable to True Fans (TM).

I'm not saying video can't be compelling when much is implied; Jaws is famous for suspension building as a happy accident from the shark robot's unreliability. But Foundation is a quarter million words and modern audiences do IMHO expect engaging and visual story telling.

[1] https://archive.org/stream/AsimovTheFoundation_201705/Asimov...

I read it with mounting uneasiness. I kept waiting for something to happen, and nothing ever did. All
three volumes, all the nearly quarter of a million words, consisted of thoughts and of conversations. No
action. No physical suspense.

What was all the fuss about, then? Why did everyone want more of that stuff? - To be sure, I couldn't
help but notice that I was turning the pages eagerly, and that I was upset when I finished the book, and
that I wanted more, but I was the author, for goodness' sake. You couldn't go by me.

I was on the edge of deciding it was all a terrible mistake and of insisting on giving back the money,
when (quite by accident, I swear) I came across some sentences by science-fiction writer and critic, James Gunn, who, in connection with the Foundation series, said, "Action and romance have little to do
with the success of the Trilogy - virtually all the action takes place offstage, and the romance is almost
invisible - but the stories provide a detective- story fascination with the permutations and reversals of
ideas."
Apple very explicitly sells the same experience as Nintendo aka ‘Just Works.’ Many people even some software developers like me love ‘Just Works’ and the only way to get that is via gatekeepers.

Either software like Chrome or Safari which restricts what developers can do, or people. And frankly people plus transaction fees cost enough that the App Store is not very profitable for them.

PS: I have owned an iPhone for 10+ years and never bought anything from the App Store. Downloaded plenty of things, but someone else was paying for it.
The linked article is an article written by Asimov. The main idea is an allegory about how even though the Earth isn't flat, and the Earth isn't spherical, it is less wrong to say that the Earth is a sphere than to say that it is flat. The point it that it is exciting to be alive now, in a time when physics is becoming so much more "right" about so many things so quickly.

Although I'm not sure if it exists, I would enjoy a brief description of ways in which physics is more "right" now than in 1989, when this was written.
Possibly, but it's not uncommon to refer to x86 and x64 machines as intel architecture machines or as intel machines.
Does anyone use something like this to help them wake up in the morning? During the winter in the UK I find it very hard to wake up. I think it would help if I simulated the sun. Is there a bulb that supports a soft, warm light in the evening and bright sunlight in the morning?
The Pi3 can boot directly off usb, alternatively just have the boot partition config (fat filesystem) on microSD point to the real rootfs on ssd/spinning hdd.

I have a raspbian cups fileserver thats ignoring all this and keeps running for 3 years on the same cheap sd: have it set up to offload almost all writes to tmpfs to reduce wear: /tmp, /var/run, /var/tmp, /var/log, the cups spool folder and more (/var/spool/*). Noatime mount option.
There's also lots of bug bounties for smart contracts, cryptocurrencies, etc. And they typically pay pretty well. So make money, fix problems, and stay out of jail is also another avenue.
The parent was probably being facetious (they're saying that you're sort of Greenspunning Facebook.)

Nevertheless, services like this already exist. https://about.me, for example. "Vanity website" is the generic term, I think. It's essentially a one-page business card that you can register a domain for.

The difference between these services, and Facebook, is that people sign up for Facebook and fill out their contact details as a necessary step in the process of doing something else they wanted/needed to do. People don't seek out Facebook, they just... end up there. Like your name ends up in the White Pages.

Whereas, these "business-card website" services, you have to explicitly seek out and register with, just for the purpose of having that information out there. Less like the White Pages, more like the Yellow Pages. People that want to be reached out to (i.e. people with "personal brands"—marketers) are willing to go to this effort, but regular people aren't.

It's very unlikely that, if you're looking to connect with someone (who is not the type to create a big public presence for themselves), that they'll have registered with one of these services. Why would they have?
I'm fine with the restriction, given that the App store needs to vet all the apps coming through. I have never felt there wasn't an app for what I was looking for.
I don't think this is how it works, at least not from my past experience with Lineage. A browser isn't an app installer, as when you download an APK from it, the APK is staged through the phone's integrated file manager (aka "Downloads" app), and is treated as having no real source.

As far as I know, real "app installers" are purpose-built programs such as Amazon Appstore and F-Droid.
It made me so mad to see Tim Cook on stage with a gazillion dollar check, as if any significant amount of that money actually benefited developers or content owners compared to what a sensible market would have allowed.

Heck, for a year or so it almost would have been lying to claim to be paying developers (plural) when a single developer like Supercell was raking in so much.

Let’s be honest: there’s a giant check from people blowing money on games that they shouldn’t (gems, etc. to fuel addictions), and a large check for a very short list of apps constantly in the top 10 due to app store positive feedback loops. The remaining $4.52 of all payments to anyone is split 145,622 ways to the 98.9% of developers trying to survive.

And let’s not forget, Apple’s store platform feels like it was once one person’s side project and is now 5% of a different person’s time. It doesn’t feel like they’ve cut any checks to make this a good marketplace.
Sony’s revamped Aibo heads to the US for $2,899
> Is the world really worse than the 60s?

Depends on which part of the world. In the US, for sure. Incomes have stagnated since 1970 and income inequality has skyrocketed.

http://www.pewresearch.org/fact-tank/2018/08/07/for-most-us-...

https://www.epi.org/publication/charting-wage-stagnation/

https://hbr.org/2017/10/why-wages-arent-growing-in-america

We have an entire region of our nation suffering from the rust belt.

Some say the last 40 years have been the greatest theft in human history. The american people have been robbed blind and we are too stupid to realize it and now we ( the children of the blind fools ) are suffering for it.

Even in NYC, look at the housing prices and look at the wages. It's ridiculous.
We did talk in the blog article about engaging with Security Innovation too.
No networking can touch silicon-level interconnect between cores or within cores on a single chip

So how about silicon-level interconnect that looks like networking? As it is now, it seems almost designed to elicit badly non-optimal code.

multi-socket/distributed systems are not perfomant for latency-critical user applications...fabrication costs and energy efficiency would be significantly worsened.

I think there would be tremendous benefits if we started designing multi-socket/distributed system that could perform in those situations. For one thing, Intel has currently painted itself into a corner with regards to large wafer yields, and AMD is kicking their butts by combining smaller dies.

https://www.youtube.com/watch?v=ucMQermB9wQ
If you have to trust the CEO, you’re gonna get burned. They have different interests than you. The only thing you should trust him to do is make more money if possible.
Variations in the CMB is a lovely sub grift in the cosmology ecosystem. I only know from former peers back from grad school who went into that area, so take my take with a grain of salt of course. This is (yet another) "explanation" of variations but of course it isn't convincing, many other things could explain different variations in the CMB hence why it's a furtile area for particle physicists to grind for publications.
That is a horrifically biased & wrong summary.

AMD enforce privilege checks at access time rather than at retirement time. Whether or not this is due to "lack of optimization" or "good security engineering" nobody knows. But your claims that this was purely the result of "less optimised [sic]" cores is nonsense. You have zero evidence whatsoever that that was the case vs. AMD just having superior engineering on this particular aspect and not adding bugs to their architecture.

All we know are that Intel & ARM CPUs have an entire category of security bugs that AMD don't, and that upon close analysis AMD's CPUs are operating in a more secure foundation.
We took a slightly different approach to solving a similar problem: https://github.com/thomseddon/traefik-forward-auth

We were already using traefik as a proxy for our docker/swarm clusters and this is a single container drop in to add authentication to every traefik request.

It's still missing a few key features but it can get you started, we're testing the use of a single auth domain (so you don't have to add every internal service domain as a refirect_uri in Google - looks similar to how sso works) internally and we expect to release this shortly once finished.

Additionally, if you want an even lighter weight option, we also use, with great success, cloudflare's lua script on a few services we don't run with docker/traefik: https://github.com/cloudflare/nginx-google-oauth
Already have this in Seattle. Restaurants switch to compostable straws and life goes on.
Node he's making about that much a month, which is apparently around the average income where he lives.

Still, it seems low.
Isn't this only an issue in jurisdictions with civil forfeiture? If a $10M bag of cash materialized in your house, and you properly paid income tax on it, what can the government do?
>Why is a physical space needed for this? Wouldn't it be [programming]?

Why does art have to be programming art? Why do they have to be learning about computers?

>They can look down their noses at the idealism of those who thought to try to make something for once, instead of leaving the important job of art to those who know better, who have the right ideals, the right politics, the right message.

Isn't this just "looking down your nose" at someone who wants to build sheds instead of messing about in chrome dev tools?
> Most companies do this kind of testing internally but it's good to pay for the recognized expertise and thorough process of jepsen.

Yes, but having it published so that everyone sees the actual results without sugar coating or outright ignoring problems is what I meant. I didn't mean that the testing itself was unique, but people funding research and letting the researcher publish it is.

(OK, "unique" is much too strong as that's what much of Jepsen does, but I feel like whenever I'm watching the news and there's a public health study talking about how good or not bad X is, it was often funded by an X industry group and reading more about it find it subject to a lot of issues.)
Microsoft Hit with U.S. Bribery Probe Over Deals in Hungary
If you're going to change the substrate or paradigm, then you need to do a dynamite job of supporting your users. Sony did not do that.
If your boss is regularly expecting you to do the work of two people and consistently work overtime to do so it doesn't sound like he is a good boss and looking out for you.

The fact that he works longer hours than anyone else isn't justification for this. As the company owner his decision to do so is an option he has chosen and the benefit he gets from do so greatly exceeds the benefits you get from doing so.
Although what you say might be true, this is exactly the kind of "joke" that comes easily and frequently from those who really are cruel from what I've seen.
This is a pretty shady restriction by Apple. I can see why they wouldn't want IAPs in games to be moved out-of-channel, but making it a violation for subscription services to send you to their website is pretty bad.
Following that logic, it should require the 30% until the costs of R&D are covered.

This is monopolistic behaviour. I write an app, can't install on someone's device without paying apple? Want 30% fine but it's my device, I should be able to put whatever I want in there. Let's face it, the best price is when people complain but pay. This is just extracting more money, plain and simple.
I do this with home-assistant, Phillips hue bulbs, and f.lux. f.lux controls the color temperature of the bulbs while home-assistant controls the brightness and emulates the sunrise at dawn.
My theory is that when you have children the sum of time spent at work, commute, chores, exercise, child minding, sleeping is very close to 24 hours per day. So any decrease in the time requirement for any of those means a big difference in discretionary time. So no commute vs commute could triple your discretionary time. Then, amazingly, you can be three times as "productive" despite being in a very similar situation.
Farewell little one we hardly knew ye.
Bring listened to by the government is very different from being psychologically manipulated by political parties.
I've done that using Home Assistant, it's pretty easy. Adjusting temperature isn't that important, but I'm really light sensitive and having a light slowly fade on in the morning is enough to wake me up gently.

Many smart bulbs support color temperature adjustment, e.g. Phillips Hue, IKEA Tradfri, and LIFX all sell bulbs that have that.
Yeah, he could be throwing up stuff on openbugbounty, with its "spam 30 different @company.com email addresses" method of bug reporting.
Okay, so many tennants are on the same BigQuery/Dynamo machine sharing cores.

If the API is "SQLish queries", I have a hard time believing you are going to be able to trigger these kind of attacks. You need a tight loop of carefully constructed code to flip them, no?
Correct. They also must have had a way to sign up through the app itself, which would require going through StoreKit and the App Store (as any app that allows purchasing of products delivered to the device without giving apple a cut will be rejected during the review process). So they are now doing exactly as you suggest and just disallowing the in app purchase.
is there a realistic mining/digging simulator? I love minecraft but sometimes I wish I was digging a real mine with buttresses
yep

and you can also "audit" these things at a nice premium for a day job as well

the hackerone bug bounty formalization was just getting up to speed, but the competition has greatly expanded.

exploit, audit, bug bounty.. its all semantics in my opinion. you get paid, and you have to weigh what kind of liability you create. where's the distinction? Even people that go straight through hackerone or some company's bug program wind up with undue liability, its still better not to be known in your most "compliant" way
Yes, free speech in some legal systems (including the US) includes the right to sell your speech (and restraint from speech is also a form of speech.)
Incredibly difficult to even figure out who the company behind Spyfone is. Anyone know?
Craftsmanship-The Alternative to the Four Hour Work Week Mindset
I mean they already charge 1-3% why not 30% if they can get away with it? What are you going to do, not accept credit cards? Take cash on your website? I think people are rightfully mad when they realize how much leverage someone has over them but it doesn't usually change that fact.
> I work from home currently which is nice because there's no commute and I can see my kids a lot

I'm guessing this is the fundamental difference.
Wired to a belt mounted computer doesn't sound dangerous. Wired to a fixed computer sitting near by, that sounds dangerous.
Due to architectural differences, AMD CPUs are immune or nearly immune to some of the speculative execution attacks (though not all of them). For example, AMDs branch predictor uses the full address and so is not vulnerable to branch predictor poisoning in the same way as Intel.

The major win (whether AMD intended it or not) is that AMD cpus don't speculate loads until page permissions have been verified. Intel fires off the speculation immediately. That is one of the primary side channels underlying many of the attacks.

Intel has been actively muddying the waters with FUD to get people to think AMD is just as vulnerable. Please don’t buy into that. Intel is far more exposed. The subsequent slowdowns are more severe.
Managing/Generating CI Configurations at Scale
Does this company operate in Europe, if so GDPR is exactly the kind of thing that would make this incredibly costly.
Any able-body can get to this

>>can't afford to take time off work and trek across the country to go camping in the desert

if they work hard enough.
My Daily Guide for Living My Life