skysight-inc/HackerNews huggingface dataset:
The Temporary Containers plugin is very nice. It can be configured to keep all tabs completely isolated, as if they were their own browser.

And you can set it to isolate subdomains or not, which is very useful when you need multiple tabs and want the same session in them.
Do you see the difference between "Here's a very small change, easy to implement and add." and "Let's just rewrite the whole thing and buy new devs" ?
Nokia Phone Could Have 5 Cameras
So true. Even for wikipedia (which is not that bad at all) from a readability viewpoint it still gets better using the mobile version. Compare e.g.
https://en.m.wikipedia.org/wiki/Web_design and https://en.wikipedia.org/wiki/Web_design

On the other hand, with the mobile version navigation links are not as easily accessible.
Strings in Go's Runtime
Chromium has this behavior too, at least if you enabled the sync previously—and it's not new, it's been around for a long time, like a couple years or more.
Very good point. I had completely forgotten about that practice. Name, address, phone number. Seems surreal.
In 1924 the son of the president of USA died because he played tennis without socks: "On 30 June 1924, Coolidge’s two sons, John and Calvin Jr., set out to play tennis on the White House tennis court. 16-year-old Calvin Jr., in a hurry to get out on the court, donned tennis shoes but no socks. Young Calvin’s sockless exertions raised a blister on one of his toes, which soon became infected. The modern antibiotics that would quickly clear up such an infection today did not exist in 1924, and by the time White House physicians were summoned to treat Calvin Jr., it was too late: he died of pathogenic blood poisoning a week later."
Completely agree. It's interesting to see Microsoft extend C and others, here, are embracing it so quickly.
Without judging automation, that's the effect off making everything fully automated and highly efficient. You can

- order a pizza home without talking to the pizzeria and their staff

- get a car drive to your destination without knowing the language of the driver

- get your shirts washed and ironed without going to the laundry

- have your grossery delivered home skipping all steps of the purchase process in the grossery store

- write code for your customer without ever meeting him

- and so many things more

As a friend uses to say, the need for warm hearted and human body contact in a broad sense is built into our DNA. Not being exposed to it will make us suffer.
If the CEO is appearing erratic under pressure, we might investigate where it is being applied and who is applying that pressure.

> Investors are nervous because CEO appears erratic under pressure.

> Investors apply pressure in response to erratic behavior.

If an investor truly believes that he’s acting erratic under pressure, then the best response is not changing the type of pressure to societal and financial pressure.
I was referring to ride-hailing _apps_ specifically, my bad.

Anecdotally, I don't have good experiences with taxis here, and sometimes they're more expensive than Grab.
Radar Weather Image – How Its Work?
I guess trackers will just ask websites to route analytics traffic through their own infrastructure. Would it be enough for example.com to setup a dns alias pointing tracking.example.com to tracking.com?
Go lang... although google is driving that one and it’s dependency management is a mess, so pick your poison.
Yup, it's quite old, likely two years or more. And notably, Chromium also has this feature, at least if you enabled the sync previously.
What else can they do? Can they access other car features? Eg can I ask them to adjust climate control? Can I ask them to order me things online? :)
I discovered this bottling gallons of homebrew beer and cider.
Thank you! The following quote resonates heavily with my mind:

> I'm fairly addicted to that point in development of a project where it's all about exploring a vast solution space, and making countless little choices that will hopefully add up to something coherent and well thought out and useful. Or might fail gloriously.
But but but what about XSLT?
It's less about what they provide and more about how they use it. Americans use technology to wall themselves off from others, Asia in general with the exception of the unfathomable Japanese, uses technology to assist and facilitate, the same way we used to use it until the last few years.

If an American wants to connect with a fellow American, they must first find a convincing reason to. We don't just talk to each other anymore. The rest of the world is not like this. China is merely one example. It's America that's the exception. China is the rule.
Or they are running their own tileserver, generating their own map tiles, from their own local database (this is exactly what openstreetmap.de is doing), and would not be affected by this at all.
In all those options, CF still terminates (strips) SSL from user traffic to plaintext, on their platform, hence MITM by Cloudflare.
See also Drab https://tg.pl/drab
The extension library to Phoenix Framework for providing an access to the browser's User Interface (DOM objects) from the server side.
They confirmed they're launching in SG a couple of months back, but there has been no further news yet :-/
Yes, I do. But the unfortunate reality is that your "small change" makes your code much harder to work with for other people, since you are now writing a C derivative instead of standard C.
BurntSushi is a badass; always cranking out awesome tools. I use ripgrep [1] on a daily basis as a grep replacement

[1] https://github.com/BurntSushi/ripgrep
That's an interesting choice of words you have there. Are you trying to allude to what I think you're alluding to?
Not it's a serious attempt to protect your account from hackers
Crazy, I know, but some people don't read HN 24/7.
> I don't use smartphones

This has nothing to do with smartphones.

Last week I decided to create a Youtube account as their premium, ad-free service is now available in the UK. All was going well on my laptop until I hit the page demanding a phone number. Any number, smart or dumb.

Not having a burner-SIM to hand I just closed the tab.
If you are really good you should have SaaS product evaluation results in your front page with links to competitors :)
Where/when did you encounter that? I used a Mac machine for awhile without even logging into iCloud/Apple ID; I don't recall being asked for any personal info beyond what's required to set-up the machine.

Off-topic, out of curiosity: what distro are you running on the MacBook, and how's that going?
In Portugal you can buy and use a prepaid sim card without showing your ID or giving away any personal information. On the other hand buying credit is done via the bank, so you only have a few euros to spend before losing anonymity.
You should go for it. Don't bother to think about Tesla, it's a small company that doesn't even have a presence outside the US. They just enjoy nice news because the David vs Goliath archetype sells in media.

Any major manufacturer can roll out an equivalent car globally anytime and get in front of a Tesla in a heartbeat. I bet your new company will give you anything you need to do just that.
And other large parts of the internet are "MITMed" by AWS, Heroku, Microsoft Azure or other hosting companies then. For some reason people don't make the same argument in every thread about AWS though.
Format it and install Linux.
Not sure about climate control, they do have access to all information in the computer (they can tell you which petrol station you can reach given your current fuel level for example), but they can totally order things for you, you can say "please make a reservation at restaurant X for 7:45 for two people, and have flowers delivered to this address by tomorrow". They will call you back with a price and if you confirm then BMW just sends you an invoice for it.
If you look at a single photo, that’s true. But the author is also a prolific contributor to Dollar street [1], which collects and organizes thousands of photos in a way that gives a fascinating insight into people’s lives.

[1]
https://www.gapminder.org/dollar-street/photographer/56ec091...
This is a possible work-around, but it adds a lot of complexity to get HTTPS and stuff worked-around. Either the third-party must handle HTTPS for their partners who setup CNAMEs, or the first-party must handle HTTPS and proxy the requests back to the third-party. It’s doable but it will significantly slow things down to the point where even shitty websites would consider it unacceptable.
#DomesticKitten – An Iranian #surveillance operation under the radar since 2016
This Is Where Your Childhood Memories Went (2014)
At my last full-time job, I helped our infra team staged a revolt and some of us threatened to quit when HR announced they had signed up for Equifax's employee verification service about 2 months after Equifax's most recent breach. I'm happy to say that within 3 days HR had stopped using this service.
Almost 500 explosions found in galaxy cores
I use “alternative search engines” daily. However, I have to crawl back to Google if I want to find things that were published in the last two weeks. Even Microsoft Bing can’t keep up with all the content that appears on the web every day.
yep that is a Massive data-point i use as well.
>"...and now getting pried on like this."

Those students are being tracked regardless of whether they provided their mobile phone number. ChromeOS is an entire operating system that tracks you from the moment you sign-in with your Google account.

Sure, you can use a guest account, but you won't be able to save anything because the entire OS is "cloud-based".

People rush to Google's defence and say that Google doesn't build ad or marketing profiles from student data. But even if the online activity from students is aggregated or detached from individual accounts, that still means Google holds the personal online behaviour of millions of students. They can now poke and interrogate that data in ways that even they probably haven't fully grasped. And as we've seen from Netflix and Spotify, aggregated data still lets you pull out precise details and behaviour from "anonymised" data (a meaningless term).

Tracking is so pervasive and so normalised that no-one even bothers to ask: why should students be tracked in the first place? Tracking online behaviour is in Google's DNA and no-one does it at such industrial scale.

The hypocrisy of the tech community who have nothing to say on the privacy implications of ChromeOS in schools is hard to understand.
Non US citizens are able to open bank accounts in the US. By definition they do not have social security numbers.
Previous discussion on HN:

https://news.ycombinator.com/item?id=8809422
FPI was implemented (and enabled by default) in the Tor project and ported upstream back into Firefox. Container tabs is a side-product from that effort.
How I Got Over $11,000 in Bitcoin
Besides possible privacy issues one major problem with google accounts is that google doesn't work with "accounts". It works with "people" or "corporations". So if they think that corporate account X and private account Z are actually same person (decided by some obscure algo) they will link them in their DB and in case of any infraction, real or not, they will hellban both of them. And as we know there is no such thing as human support or appeal process with google. Don't use your private accounts anywhere where they might be linked, not even for password restore field. There are already enough horror stories about people losing gmails, youtube channels and so on, forever.
That breaks cross-domain tracking, though; before, cookies set on analytics.com (pulled on SiteA) would be sent back to them when pulled from SiteB. If you now use different domains on each site, that doesn't work.

(To be clear, I think this is a good thing)
Good tips, unfortunately, the explanations are not very clear and it's written in poor English, this gets very distracting.
Mirror life
> Greyhound buses are nasty enough, and they expect someone to sleep in a Greyhound bus bed?

This isn’t Greyhound.

> Think of the lice and bedbugs.

Bedbugs tend to spread through people using their own bedding (which is why hostels often forbid people from putting their own sleeping bags on the bed). Presumably on such transportation as this bus you would be issued sheets and blankets, people wouldn’t use their own. Train companies with sleeping carriages have decades of experience in this and it turns out that bedbugs are not that big a problem.
(1) It matters to those who follow the language's progress, because it points to increased adoption.

(2) It matters for tools that, like csvkit and ripgrep, make parts of their implementation available as libraries.

(3) It matters because e.g. Rust is both fast as C/C++ and safe-by-default for more things than C/C++, so one can expect xsv to be faster than e.g. the Python based csvkit.

(4) Startup costs, static binary, etc, things that are strongly influenced by the language used, matter.

(5) It matters for those wanting to contribute to the tool, since it's also open source.

(6) It matters because we are programmers here on HN, and we want to know about the internals of the programs we use, check their implementation, learn from their coding style, etc., not just to use them as mere consumers.

Should I go on?
> Also the term conspiracy theory was created and popularized by the CIA as a function to install into the general population as a protection mechanism against their own true and active operations, which as stated, are treasonous to America and American citizens.

This is not true. The term is older, dating back to at least 1870, and was used then much in the way it is now [1]. The idea that it was coined by the CIA is an urban legend.

[1] https://www.csicop.org/specialarticles/show/nope_it_was_alwa...
It's a question. The user saying that may be wrong in that assumption, but to counter assume intent of spreading a lie is a bit of stretch.
Report recommends NASA build new space telescope to look at exoplanets directly
That's a criticism that could be placed on any collectors markets. Star Wars toys, Beanie Babies (actually are worthless), Coke bottles, comics.

The main difference is, good collections usually aren't just about speculation. People really enjoy watching Star Wars, drinking Coke and reading comics. The collection is an extension of their enjoyment. Even if the collection keeps no value beyond what they paid, people had a good time.
Huh. Thinking about this example I'm confused, because the power series for exp(x) looks like the type for unordered lists of x: e.g. the term for lists of length three is x^3, and if you ignore order you get x^3/3!. The cosine is almost the same as the even terms of this series, but with a minus sign on every other term.

What confuses me (besides what to make of the minus sign) is that the type of sets of x ought to be 2^x -- that is, x -> Bool -- because it's isomorphic to the characteristic function of a set, and a function type is an exponential (https://bartoszmilewski.com/2015/03/13/function-types/). But 2^x differs from exp(x) by a constant factor. So I seem to be messing with surface-level analogies without real understanding.
I had a Gmail account for a secondary email address that I used at times. One day I logged in with my email and password, and Google said I needed to further verify my identity. Well, my security question was a bogus one because I was confident with my password manager and backups it would not be needed. But, I guess I was wrong, because I didn't anticipate that knowing the password wouldn't be enough for Google. I never got access to the account again.
Please delete your third paragraph. At best it's a gross oversimplification. At worst, plain old racism.
I found the rest of your comment insightful.
What on earth are those of us supposed to do that don't have a phone?
Isochronous Curves
This would be already a giant leap forward: Usually, there is not a lot of trust between actors, and there doesn't need to be: everyone gets their own tracking pixel and is happy, who cares if user data is leaked along the way. The setup you describe requires more trust beetween parties, and, as a side-effect, reduces the overall number of potential contractual partners which get access to user data. It also reduces the number of websites with the knowledge to implement such a setup.
Wikipedia says 922 million acres of land are used for agriculture in the United States, or about 40% of the total area of the country. I would guess that you'd have a hard time finding that much spare land lying around. Particularly in places that have the soil and infrastructure needed to support farming.
Companies who don't want to get DDOS'd should pay randos on the Internet to update their computers?
Can we agree that sonnets are uncreative and that heroic couplets are?
That's a good way to put it. The ones who think it's an uncreative field are usually the ones who struggled through learning the syntax, and therefore assumed that's what the hard part of the job is.

Thinking that an unambiguous syntax implies it's not creative means something that is creative must have an ambiguous syntax. That's on its face absurd, yet a weirdly common belief.
I deployed DNS-over-TLS on Cambridge University’s central recursive DNS servers last week, and they immediately started receiving traffic from Android P users - not very much traffic, a few queries per second, but not negligible. I did some followup investigation of how Android behaves in the wild and posted them to the IETF DoH list (and the dprive list but for some reason those copies did not go through) - see https://mailarchive.ietf.org/arch/msg/doh/I-ytiO6ykbt9krrC9F... and the corrections and further information in the replies.

I still need to verify that TCP fast open is working, to minimize the DoT latency.
That's quite neat!
Maybe important to note that they have described an experiment to test the theory but not conducted an experiment yet. :)
>Its only been a couple of years that Microsoft has been behaving "better"

So? Oracle has never behaved good, so there's that. Do you expect a MS regression?

Besides MS has made some concrete efforts to clear things, like a pledge to not sue over patents, an ECMA standard, etc.

>I suggest you read up on the history of Java, Android, Google and Microsoft because you also seem to be unaware what Android Oracle vs Google was really about; Its wasn't about patents, it was about copyright.

Same difference if Oracle ends up suing you for recreating Java APIs.
"Yes, it's true: I am a rocket scientist" often quothe one of the stupidest persons I have had the opportunity to meet on this ball of dirt, because he had a PhD in aerospace engineering.

That said - he was good looking, had a reasonably good sense of humor and knew where the good parties were - so he could be forgiven this small vanity.
I’d appreciate a ‘New Temporary Non-Isolated Window’ for use with websites that don’t work with FPI.
>Plenty of JVM vendors are happily selling their own versions, playing by the rules.

Good for them. The parent suggests we should not stick to a platform that imposes such rules.
How is this UX behaviour a special case? HSTS also requires the brickwall UX, so does the OpenSSH key change scenario.

The original sin the Browsers had is that the initial SSL UI was built by people who had no security UX background because almost nobody had any security UX background. This was the era when PGP was considered usable security technology.

So when HCI studies start being done (e.g. at Microsoft) and they come back with the scary result that real users just perceive TLS error dialogs and interstitials as noise to be skipped, there is a problem. Lots of real world systems depend upon skipping these errors. I worked for a large Credit Reference Agency which had an install of Splunk, but for whatever insane reason it was issued a cert for like 'splnkserver.internal' and the only HTTP host name that it accepted was 'splunkserver.internal'. So every single user of that log service had to skip an interstitial saying the name doesn't match. For years. Probably still happens today.

Browsers couldn't just say "OK, that was bad, flag day, now all TLS errors are unskippable" because of the terrible user experience induced, so what happened instead is a gradual shift, one step at a time, from what we know was a bad idea, to what we think is a better idea. That means e.g. "Not Secure" messages in the main browser UI replacing some interstitials, and brick walls ("unskippable errors") in other places where we're sure users shouldn't be seeing this unless they're being attacked.

HPKP was new, so like HSTS it does not get grandfathered into the "skippable because this is already so abused we can't salvage it" state. If you went back and asked HPKP designers "Should we do this, but with skippable UI?" they would have been unequivocal, "No, that's pointless". HPKP and HSTS only improve security if the users don't just ignore them, and the only way we've found to make the user actually pay any attention is to make the error unskippable.

Yes that means "badidea" and subsequent magic phrases in Chrome were, as they say themselves, a bad idea. Because users who know them just skip the unskippable errors and end up back in the same bad place.
Mega Chrome Extension Hacked, Laced with Data-Stealing Malware
I feel like the cause is most likely that there are just too many darn websites for a user to be willing to specify them all. Solving this would seem to require some global database of "all sites run by company X" that undergoes constant maintenance.
Except all the analytics company has to do is have another shred of evidence that your identy is linked and it can just give out tokens that represent opauqe blobs you take care of and index by it's token like PHP does session storage.
>what is the place to be in from an investment standpoint?

It depends who you are and what you know really. I mean in the 08 crash ideally you'd be "John Paulson made over $15 Billion for his firm by betting against sub-prime mortgages" but it's hard to pull that off. For the average person probably life as usual but don't leverage up too much. For someone a bit more active it might make sense to sell property if you think you are at the top of a bubble and maybe rent a while. Stocks like BRKA and FFH tend to do alright both in the crashes and otherwise - run by Buffett and a Buffett copier.
/r/softwarecrafters, a subreddit for content on how to craft great software
While this is a good idea in principle, in this case it's a recent development. You can't really go back in time and unbuy it just because Google suddenly decides to be a(n even bigger) dick.
Absolutely. The best maintenance I do isn't renaming a bunch of properties, or putting in better exception handling. It's deciding that entire features or the basic approach to a problem is fundamentally flawed and needs to be scrapped.

You do this work long enough, and you can usually tell in under a minute if you're dealing with code that takes shortcuts, or a big pile of copypasta from SO.
FYI, it's possible in Ireland.