skysight-inc/HackerNews huggingface dataset:
Sure, sometimes I too benefit from adding a !g to the search query.

The perverse pleasure of knowing Google is out of the loop is a good compensation for a slightly worse search experience
Thomas, could you please explain the reference to arch-competitor - I might have missed any reactions by Mozilla/MSFT(?).

Thanks!
TLS isn't the only option, though. You could use TLS on setup to share a pre-computed secret between the device and the remote server, then bin the TLS connection. After that, encrypt and forward over HTTP.

Laziness isn't an excuse.
None of that was stated. I don't even see how it was implied. You're reading way too much into it.
I look at this differently. Your leaked data are in the public domain. Efforts are made to reduce risk, but the issue of "leaking" info is a bit nickpicky as the data isn't a risk and your hobbies are already out in the open.
Wait, I thought Go was designed as a system language.
Eric Law works for Microsoft on Edge
>There's also a part on how the secret on Enigma's breaking has been kept for decades after the war, supposedly because Enigma machines had been distributed to British colonies (and ex-colonies) and British intelligence wanted to be able to decrypt their communication.

Not to mention any units captured by the Soviets - GCHQ wanted to make sure any use of the units by them would be decryptable as well.
Parent comment refers to running buggy code in ring 0, however in a design like wasmjit, that code would be compiled first to wasm, and the actual code running in-kernel is a derivation that includes bounds checking on at least memory operations. The original code never "runs" in ring 0, what runs is a derivation that includes a software equivalent of the hardware isolation we're used to and have relied on for the past 20 years.

While I haven't studied wasmjit, the most obvious implementation is to run system calls naturally, with a global "struct task" existing as before that defines the semantics of the current context, including details like the current UID and capability mask - in other words, without effort, read() and open() could be made to behave identically to before, it's just that the caller now lives in a software sandbox rather than a hardware sandbox, and most/all expensive hardware reconfiguration was avoided
That switch strikes me as the perfect compromise - the default remains the automatic log in behaviour and those who don't want it have an out. If I were putting the automatic sign-in feature together I'd have considered this from the outset, but the Chrome devs have always had a preference for minimal UI. Usually this works in their favour, in this case it did not.
>I cannot imagine a typical American family fitting comfortably in there for a 10+ hr roadtrip.

From my experience, a Honda Fit is more than enough for 2 people + more stuff than two people may possibly need for a week-long road trip. And it's the same length as a VW Beetle New.

The average US household size is about 2.5[1], and the median is 2[2]. Again, to emphasize: over half the country are either living by themselves, or with one other person.

So, a typical American family would do well with a subcompact.

[1]https://www.statista.com/statistics/183648/average-size-of-h...

[2]https://www.statista.com/statistics/242189/disitribution-of-...
https://gizmodo.com/exclusive-heres-the-full-10-page-anti-di...

https://www.theguardian.com/technology/2014/apr/03/mozilla-c...

https://www.youtube.com/watch?v=y0duqM-6Tbg
Thanks! Stupid me - that disclaimer was right at the top of his blog.
In the previous discussion HN users were complaining about
"AES-256 in CBC mode but without an authentication tag (HMAC)". Is this still the case or has it been addressed?

Also, any idea the overhead in terms of CPU pushing around 100Mbps?
Tactically: public speaking.
Strategically: forget about titles and career path and comp and just figure out how to provide value to the people around you. The other stuff takes care of itself.
Totally. In terms of handling it, there was a French horror film "Inside" which is very good but involves attacking a pregnant woman. After having kids I found I just couldn't stomach it, which was a change. Same for Sicario's child murder scene which I found just terribly lazy and desperate to be "edgy" and all these rave reviews just pissed me off. Having kids definitely over sensitized me.. in a good way.
Yes. I won't use U2F on services that don't allow multiple keys because of this. I have two keys in different places so it's easy to use.
This is only applicable if they can actually sell very small increments of their time for that amount of money, which I strongly suspect they can't. There have been numerous threads here on HN about the difficulties of finding full-price work that isn't full time.

Even then, the $2k difference between the cheapest pre-built the article references and the DIY version would be 20 hours at $100/hr. Half a workweek to build one PC seems excessive.
Imagine if artists and people in other industries looked around and saw people just like themselves and cried "monoculture!" They could, I imagine. The people who work a KQED probably interact professionally with other media people, same for SFGATE. Now, outside of work, of course, if they have lived here, gone to school here, then they should have formed friendships outside those industries...

It's interesting to see people who move from elsewhere round the country come to SF for a job and then winder why many people they know are in the same industry. I'd understand the complaint if they grew up in STL, for example, went to school there, got a job there and then only had friends in the industry...
This is underwhelming.

- Requiring the attestation cert and not accepting a self-signed one—which U2F devices will magically not work? I don’t know, but apparently it’s strictly Yubikeys now.

- Still not convinced anyone seriously uses the console except for root accounts, where AWS forces you to.

- Only one U2F key? Bad. Only one U2F key and overall only one MFA method at all, disabling MFA where it matters most? Baffling.

- The legacy U2F API instead of just using WebAuthn already?

This is one of those things where I keep thinking I should just open source the SAML thing that safely gets an assertion to your CLI where you can assume-role with it, but who knows when AWS is going to decide to reimplement your project.
Serious question - what does detaching a thread in HN do? Because I still see it show up in the main comment section.
Have you tried out the new tridactyl[0] webextension?

[0]: https://github.com/tridactyl/tridactyl
This is what it looks like when product/eng inside google encounter a serious trust deficit.
Dropping embedded systems / switching to services backend dev
Flat-earthers are fascinating. As long as they are not dangerous to themselves and others they are a good subject to study on how brainwashing, paranoia, and reality bubbles work. Also I wonder if some of them are secretly trolls. They don't believe it, but they spread it around to try to get others to believe just for fun. Then they also got a nice "mark" that's ripe for other cons and possibly to profit from ("send me PayPal money to buy this super secret flat Earth detector for $500"). I imagine their community is a goldmine for con-artists...
You can give IAM users permission to add their own MFA device. I’d recommend requiring MFA to remove the device to prevent an attacker from doing so
This is probably the most important change:

> We’re also going to change the way we handle the clearing of auth cookies. In the current version of Chrome, we keep the Google auth cookies to allow you to stay signed in after cookies are cleared. We will change this behavior that so all cookies are deleted and you will be signed out.
Workaround: a separate IAM user for each machine you leave your Yubikey Nano inserted into.
I run https://www.improvely.com and https://www.w3counter.com. Been doing this since before Google Analytics existed.
There's seven billion people in the world for which running grep is not easy. This makes it easy.
Not on the good models such as T and X series.
I have no doubt this is a direct result of the feedback in the hacker news thread. Googlers read our comments and take them seriously when there is true merit. Keep making noise folks, it matters.
Almost nobody uses the standard lib for http in practice. Just use Unirest/OkHttp/SpringBoot then it’s trivial. SpringBoot is the best framework that I have worked with regardless of language. It covers most use case out of the box and everything is still completely configurable.
One nasty change was that clearing all cookies no longer cleared Google cookies with these changes. That is a big, privacy-impacting change.
It looks like they're written in python.
I mean, if broadcasting an innocuous "register to vote" is taken as bias against the party in power, then maybe it says something about that party.
Thanks for taking the time to provide feedback.

As mentioned in another comment, you can opt-out of the HIBP database here: https://haveibeenpwned.com/OptOut

I also filed https://github.com/mozilla/blurts-server/issues/466 to consider making this visible in the Monitor UI.
Seems fine, unless you read it as them arguing that they should not be given a fair trial; I read it the opposite way, as them arguing that the women and children should have been.
The State of Higher Education in Michigan [pdf]
Why I turned down a job opportunity from Amazon last year
No it’s just that by saying you oppose feminism and equal opportunity because you want small government it’s implied that in general you don’t think the government should protect people and would probably for the same reason oppose child pornography laws- or really any law. I’m curious- do civil rights laws also go against your small-government principles?
Perhaps these short-enough-for-Twitter statements aren't ideal, because they can easily be construed as demanding retribution without due process. But the righteous indignation doesn't seem out of place. Not only are the killings themselves shocking, but the BBC alleges that the Cameroonian government was itself complicit in the cover-up by calling the viral video "fake news", and putting the burden of investigating its own military onto outsiders.

The BBC could have worded its closing tweet more clearly, but I don't think it's wrong for them to reiterate how rich it is for the Cameroonian gov't to make promises of fair trials when it seems to have done its damndest to avoid bringing justice at all.
There are plenty of people doing open source data gathering and investigations. It's pretty interesting. Bellingcat is one of such orgs.

You can find a lot of individuals and small orgs on Twitter doing stuff like spotting military ships and their cargo, spotting drones on satellite imagery, collecting lists of destroyed heavy weapons, listing ATGM attacks, airstrike victims (airwars.com), geolocating videos/pictures posted to social media, colleting info on chemical attacks (bellingcat), collecting and publishing ISIS documents online, recreating 3D models of some events from public videos/photos, etc.

One example of 3D modelling (they call it forensic architecutre) based on open source data is in this report on Douma attack:

https://www.nytimes.com/video/world/middleeast/1000000058408...
The noise was a distraction; the noisy were complaining about sync, which the change did not enable without an additional consent, as always.
Interesting, but besides from shopping trips where I don't want to transport 10-20kg.. I don't see the point for myself. I'm going to work by bike most of the year and if I use a car I'm usually going 100 - 1000km. (Not saying I won't take the car out of sheer laziness sometimes, but I wouldn't buy one of these)
Might actually be ok for 2 person trips in the city, though.
I have already switched to Firefox and loving it (Facebook container, tracking protection enabled), but these changes are welcome and responsive.

I hope this is a wake up call that privacy implications need to be seriously considered during product design (even if the intent was better UX), and hidden changes without any UI/notice is going to make issues blow up far more than if there was clear in-app communication.
In 1943 a large chunk of Sydney, Australia was photographed from the sky.
It's now available on the NSW Government website here: http://maps.six.nsw.gov.au/
You can flick between the aerial photography and the modern satellite imagery, or overlay the maps and fade between them. Fantastic stuff.
> Personally, I haven't found this to be a problem. I find separate identities less distracting. (My favorite reason to use SSB is that continuous syncing is not an expectation.)

A luxury not shared by marginalized persons, such as closeted gay or trans folks, political dissidents in repressive countries, or conservatives in Silicon Valley
I believe at this point the number of ironic/trolling flat earthers greatly outnumber the genuine ones. It has reached meme status.
my mom doesn't know how to grep someone's account. My mom does know how to type her sister's email address into a form.
I was working for Sun during those days. They used to have this vision that everything would be written in Java. They threw everything at that wall, and ran with the ones that stuck.

I've been in presentations showing all kinds of things being rewritten in Java just because apparently that was something that needed to be done. I particularly remembers seeing a NIS (YP) server and and NFS server in Java. When I asked why they did that, and particularly why they didn't go for NIS+ (which was many years old at the time) or event LDAP, they had no answer.
Terms of Use and Service Agreement
>This is definitely no safer than a bike or moped

Any tri- or quadricycle is most definitely safer than a bike or a moped. You can't fall off it when it's not moving, for starters.
Can you elaborate more on "make more than 50% of that in stocks"?

It looks like GOOG is up about 120 points compared to this time last year. Is that $200k / year just from projected stock growth / dividends / etc? Do employees in this situation get issued $200k worth of stock every year? Or is it done via options? Is it a case of stocks vesting over time?

I find all this fascinating because it's so different from my experience. I work for a software company in the Philadelphia suburbs, and I have about 15 years of experience (all over the place - C#, Java, some C++, JS, etc.). When I compare myself to my local peers, I feel like I'm a pretty decent developer.

$200k+ / year total compensation seems absolutely massive to me, even factoring cost-of-living adjustments. Like in the realm of "too good to be true" or "results may vary". But now I'm wondering...
> All names are your parents expressing themselves through you.

I mean that parents can restrain their self-expression by picking an inconspicuous name.

> I also fail to see how one can no longer express themselves due to a given name.

OK, I overstated my case. I was only referring to the name drawing unwanted attention at first impressions (maybe not even meeting in person).
Could it be? It’s a browser-based protocol.
Going to more events/meetups and being social without trying to sell anything.
When did you learn rails? Would you recommend learning it today?
I'm not generally a fan of the privacy hysteria around Google/FB, etc. But I think the solution here is pretty clear: Don't build a login system for your browser. It's inherently confusing.
There are a lot of minor differences, but the biggest difference is that you're able to be completely independent of the system python install. You bundle a complete python interpreter, all libraries needed, etc.

The user doesn't need to have python installed at all, and if they have 2.x instead of 3.x or 3.3 when you're expecting features that are only present in >= 3.5, it's no issue.

This may sound trivial, but it's a _huge_ deal, particularly when you need to deploy something that runs on multiple different OSes and versions of OSes.

Other than that, the "directory full of libs, binaries, and code" approach is a lot easier to package into something that will work well with the native package manager (e.g. an .msi for windows, etc).
Helping out with a profs side project
That was in the past, now JetBrains's tools preferred their own, forked OpenJDK

https://github.com/JetBrains/jdk8u
These three free apps will make you more secure than ever
Their explanation about solving the inconsistency between the chrome browser logged in user and the google web site logged in users makes some amount of sense. I am sure there have been some interesting incidents where people's browsing habits were exposed to other users unintentionally and it's reasonable for Google to want to respond to that.

It seems unnecessary however to auto-log in a person to the chrome browser when there is no such login in the first place to solve this though. It would make more sense to just display a warning when the state is inconsistent rather than start auto-logging people in (regardless of sync state).
> You're a substance dualist, then?

Not really, I am a non-dualist actually but introducing non-duality in the current context would be a way too off-topic and unnecessary. I prefer not to go into the spiritual stuff beyond what can be easily experienced by everyone unless asked by a person specifically interested in this kind of information.

> it's purely an exercise in philosophy and logic

It's not. It's of little use as long as it is. One has to experience that. That's why I've mentioned the rubber hand illusion. Imagine your hands have been covered from you since you very birth and you have been believing the rubber hands are your real hands for your whole life, then the cover is removed and you experience your actual hands for the first time - it feels like this (approximately). This is how I've got into Buddhism - all the major religions tell you unverifiable things and demand you to believe and here the whole clue is a thing we can experience directly. I've used a quote from the Babylon-5 show because it's a lot about this and you suddenly find yourself understanding the Vorlons' "Who are you?" and "We are all Kosh" after you experience that.

I also suspect this kind of realization may happen to render people nearly-immune to addictions, I would even do some sort of clinical testing if only I had enough money (by the way, some time ago we have already seen news about mindful people being scientifically proven feeling less pain here on HN).
You're the one who failed to come up with the quote I asked for.
Suggest changing the title to "Delta Resumes U.S. Domestic Flights After Computer Glitches", as the headline has changed, since the issue has been resolved.
Even the linked article on HN was more about the implications of this change - without any notice. It removed one wall of protection that users who didn't want Sync had.

Many people _purposefully_ don't want to sign into Chrome. The change suddenly signed them in, without notice or confirmation. That's problematic.
Can you think of any examples where great technology or product compensated for bad strategy? I can't. But I can think of MANY examples of where great strategy compensated for bad technology or product.
I don’t think firing gets rid of vested options, right?
Thank you for sharing that awful story. Sorry you had to go through it. Quite disappointing to a customer of Namecheap as well.
"Fecal microbiota transplant (FMT), also known as a stool transplant, is the process of transplantation of fecal bacteria from a healthy individual into a recipient. FMT involves restoration of the colonic microflora by introducing healthy bacterial flora through infusion of stool, e.g. by colonoscopy, enema, orogastric tube or by mouth in the form of a capsule containing freeze-dried material, obtained from a healthy donor. The effectiveness of FMT has been established..."

https://en.wikipedia.org/wiki/Fecal_microbiota_transplant
Find the video of Jones saying that. He doesn't say what the BBC claims he does; BBC doesn't include video of him saying those things because such a video doesn't exist.

It's not his fault the victims received death threats. He did not advocate for deranged people to send death threats.

Just off the top of my head, Peter Fonda: "We should rip Barron Trump from his mother's arms and put him in a cage with pedophiles..."

https://www.cnn.com/2018/06/20/politics/peter-fonda-baron-tr...

He wasn't banned.

Sarah Jeong, despicable racist now working at NYT: "oh man it's kind of sick how much joy I get out of being cruel to old white men".

http://www.foxnews.com/entertainment/2018/08/02/new-york-tim...

Also not banned.

Please find me one example of a prominent Twitter Leftist being banned for saying something "hateful", whatever that means.
I wish I could say I had a plan that lead me down my career path. I made one dumb random decision after another, and somehow they all got me where I am today. The best decision was way back in 1999 I started a blog because I loved Slashdot. I used that to learn how to program, and that has lead to every job I've had since. So my long winding dumb successful career path is all thanks to me wanting to be like cmdrtaco! (I once got to thank him for that here on Hacker News)
Ask HN: Do cars have app stores?
I want to make an app that uses the cars video camera. I know it would be a security issue but the app would be rad.
After having looked at that graph I too was confused by the assertion that millennials are driving down divorce rates.

It appears that the divorce rates for 18-34 year olds has been flat, the changes are happening in other age brackets.
Getting outside of my developer comfort zone and embracing sales. Giving emailing, calling, coffee'ing, etc the same priority (sometimes more) as coding.
Alright, so I just made a run of it and verified it all works.
As you say, the tutorial from Microsoft is for VS[0], but it actually talks about the android emulator, which is the same thing that Android Studio uses, just make sure you update it to latest, atm it's 27.3.10
Admittedly, the startup time seems a bit longer than with HAXM, but otherwise the emulation is pretty responsive.
[0]https://docs.microsoft.com/en-us/xamarin/android/get-started...
I set up Chrome remote desktop for a family member today, and absolutely sync is enabled simply by signing in. Sure, it presents "Undo" after the fact, but on visiting the associated Google account, it had already copied everything. I have NFC where this article sourced "sync isn't automatic", but it clearly is. Zero UI indicator it's happening until the Undo button appears, by which time you've already been ripped off.

Nice to at least see they're making it opt-out, but the damage has already been done.
The shortage in the sfba is of different kind - too much competition. So all you have to do is to offer larger pay or something non-monetary like career opportunity and you got yourself a great engineer. In some other locales it could legitimately be shortage of qualified staff.

To your second point, faang employees are much more likely to pass any interview process (based on my extensive interviewing experience at my current gig) so you’re saving money on recruiting at least.
I did as well. DuckDuckGo, ublock origin, privacy badger. I haven’t used Firefox seriously in 5 years or so and I’m very pleased with the experience.

To be honest, it’s best to use an independent company for your internet browser. Google’s incentives and business model no longer matches web browsing for someone who cares about privacy.
The first point rings very true and it's not the first time this hypocrisy has been pointed out. "People should own their content, but also host on a closed-source site under a subdomain" - yes, I think you can use your own domain but IMHO owning your content without controlling the (hopefully long-living) url is kinda pointless, it's just a bit better than making a copy/paste backup of everything you post on Twitter or Facebook.