skysight-inc/HackerNews huggingface dataset:
> I don't get people getting mad because a private corp is doing something with their own software.

Maybe it's because they created a situation where it's nearly impossible to avoid "their" software because it's integrated into the product the user actually paid for.

If you buy an Android phone you don't buy bare metal. That's not how Android phones are marketed and it's not how Google wants Android phones to be perceived. An Android phone is a device with Google Play, Google Maps and Google Search integrated into the operating system and providing core services. That's how Google wants you to think about Android and it's in their best interest for you to do so.

From a customer point of view, Google Maps is part of the Android device's core functionality. From a marketer's point of view, it's the same. From Google's point of view, it's also the same.

But although Google Maps itself has great offline functionality and in theory only needs online access for map data, traffic information and optimised routing, Google plays bait and switch by demanding you consent to being spied on in order to actually use it.

Sure, it's their software and they can do what they want but customer rights exist, privacy rights exist and competition law exists. They're being intentionally deceitful and maliciously abuse their position to coerce users into giving consent for providing Google with far more data than they need to provide the service.
I've gotten lost in the 'assembly is too high level' series on this blog recently and it was very enjoyable. Also learned some things I didn't know.
> Note: If you prefer video format to reading stuff, there’s a companion video for this

Thanks. I much prefer this format and can't really comprehend why anyone would prefer a video to a well laid out and illustrated blog post.

However your font size is pretty uncomfortable to read for me.
Tech:

- AppStories

- The Menu Bar

- The Talk Show with John Gruber

- Alternativlos (German)

- Netzpolitik.org (German)

Science:

- Science(ish)

- Daniel and Jorge Explain the Universe

- Die 3 Formeltiere (German)

- Forschergeist (German)

- Methodisch Incorrekt (German)

Popculture/Comedy/Video games:

- A Storm of Spoilers

- Dice Funk

- The Jimquisition (Podqusition mainly)

There's also a bunch of Harry Potter related ones
> and then when errors are detected you are supposed to restore from a replica/backup.

ZFS will recover/self-heal from errors if it can definitively figure out which data is correct.

many storage technologies do protect against errors, CD/DVD/HDD all have ECC in the physical layer. but without control/knowledge of the physical medium (so at filesystem level), how do you distribute the ECC sensibly? you can't.

another issue is if the other hardware doesn't do ECC, for example with non-ECC RAM. RAM is arguably more susceptible to bitflips due to it's dynamic nature. can you recover from errors if the information in your RAM can't be trusted? it's a hard problem, and ZFS pretty much requires ECC RAM for any data integrity guarantees to work.

it also doesn't necessarily matter. a single bit flip in e.g. a jpg or mp4 file doesn't necessarily render it unusable, so people don't care.

finally, ECC is a bit useless if your whole drive or device fails, which is a much more common failure mode.

storage is cheap nowadays, and even double or triple redundancy is cheaper and more straight-forward than trying to be clever.
Do you feel yourself being close to China?
Remove the Drone Shoot-Down and Biometric Surveillance Sections from the FAA Act
But the very existence of ethics is in danger in absence of free will. Existence : as in, whom do you blame for hanging the terrorist ? The lawyers, judges, jury, witnesses did not have free well : so it was inevitable that the terrorist be hanged.
Ah, interesting, I didn’t realize there were so many exemptions to free speech. Thanks! So basically all IRS letters are “illegal” :)
Hard to say really. If the company is completely broke (i.e. no chance of liquidated assets) then it's a waste. But if there is any liquidated assets to be distributed to creditors then suing might make complete sense (depends on where it would be placed in claim priority order). Also might make sense if any new funding where to appear (which seems unlikely).

Corporate bankruptcy is a long drawn out affair. I'm still getting notices from the bankruptcy proceedings of a client from more than 3 years ago. Sometimes it's monies owed and finally paid to the estate (presumable accounts receivables finally collected); sometimes it's money being returned to the estate (payables that probably ought not to have been paid); sometimes it's money being paid to the trustees; and sometimes it's even money being paid to creditors.
> I don't quite understand the objection here, this is fairly elegant in my opinion, you have a single opcode used to encode several operations by using "special cases".

Sounds like CISC.
I get that. I really do. I'm just worried about how it might affect me (and my loved ones) in the near future.
Ask HN: Market for server endpoint security solutions
Do you think there is a market for managed endpoint security solutions for (Linux) servers? I worked in the network security monitoring (NSM) space and saw that large companies are willing to pay for having their network traffic monitored and analyzed for anomalies using network sensors.

I wondered if it makes sense to offer a service that runs directly on individual servers, monitors network (and possibly system) activity there and uses a combination of rules, indicators and machine learning to detect (and possibly react to) anomalies or attacks. The motivation is that many companies use cloud hosting solutions today, so they often can't just have a single network sensor that monitors all traffic centrally. Also, central monitoring makes it harder to see things that are happening on a server (like processes or file system activity), which can be easily monitored on the endpoint.

Would this be valuable for your business? How much would you pay for this? Do you know any vendors that offer something similar already? Is there an open-source alternative that is "good enough" for your use case?
This is a super interesting video about how things work internally - really fascinating.

https://www.youtube.com/watch?v=_FQJEzJ_cQw&t=3s
Ended in a bang the last times an empire fell and a new one was rising.
Business Adventures, Crossing The Chasm, Hard Things About Hard Things, Only The Paranoid Survives are great books.
Sirius was email, snail mail, and phone calls -- standard stuff, but over the top.

OnStar required calling to cancel. They provide a web UI where you can add a new payment method but you can not remove all payment methods or cancel. Once you've convinced the person on the phone that you want to cancel, a new option to remove your payment method appears in the UI. The person on the phone didn't tell me to go back to the UI, I was just paranoid and saw it by accident.

I'd read enough horror stories on consumer affairs with, for example, people still being charged after they canceled.
Who listens to radio anyway? Just use spotify et al, no ads. Sure, spotify tracks my music preferences too, but I don't see any harm in that, it just makes the experience better.
Chinese Censors Are Dividing Information Haves and Have-Nots
Yeah. I use Firefox so don't worry that much about it :).
If they require attestation that's one more reason I won't be using this, sadly. I always block attestation because there's no need for it when you're supposedly offering an optional second factor, even though I actually do own a Yubico product.

It makes no security sense to check attestation if your second factor is optional. How could a non-Yubico second factor make things worse compared to not using one? It couldn't. If you really, really care then store the attestations so that when fifty customers claim their U2F was broken into you can show that they all have Crap Co. FIDO tokens and point the finger at Crap Co. that's the absolute most that makes any sense with attestation.

Now, if second factor is _mandatory_ then it could make sense to decide OK, we trust Mattel, Apple and LexCorp but not HP, Tyrell Corp, or Weyland-Yutani. It's anticipated that banks (in fifty years when they hear about this new-fangled FIDO technology) would want that, giving customers their own tokens with their own attestation certs. But for an outfit like AWS this option makes no sense, so the correct design is to Never Ask, and if some higher-up insists on asking, just store the answer (including "No, fuck off") with the user's account and press on anyway.
Haha yeah that would be great. "Resumflate" or something. Get an AI to read billions of resumes and then insert buzzwords.
Here is the video that explains how he did it.
https://www.youtube.com/watch?v=_FQJEzJ_cQw

Incredible how many hidden tricks/bugs/calculations went into that world record.
Court Dismisses FOSTA Lawsuit Without Ruling on If Statute Is Unconstitutional
TCP port scanner, scanning entire Internet in under 5 minutes
He doesn't say Google doesn't track you with this stuff does he?

My guess is they know exactly which sites you visited so the fact you can't see the History sync feature means he's being disingenuous about it not being turned on.

And even if this isn't being used right now someone will eventually abuse that unwritten agreement between you and Google.
One advantage that wasn't mentioned is the ability to send a tab between devices.

I'm looking at something on my desktop, have to go somewhere, so I just send the tabs to my phone and continue consuming. If I forget to do so, I can also use the url bar to search through common history, so that I could enter a few words from the title and go back to that article.

That being said, I personally wouldn't trust Google to do this, so I use Firefox that I believe encrypts data client-side by default.
Weird. I remember a time when maps were printed on paper and somehow worked as references without a satellite connection.

I also remember having used Google Maps to look up routes between two places while I was underground and GPS didn't work and my current location was indicated as being miles away from where I was.

It's almost like GPS is not actually required for anything other than indicating your current location.
Because they would not like to have a (nuclear) war in their neighborhood, it's easy for the US to stirr up war for 50y in the middle east when the middle east is far away.
HERE WeGo (formerly Nokia Maps) is ok for car navigation. Citymapper is nice if you need public transport. OsmAnd is decent as well.

I do think Google Maps is the best, but the choices exist, and for some cases they work even better.
Thanks! will do.
CS:GO in the USA – ESL One: New York 2018
Is there speculation on what this might be? It’s hard to imagine what it might be, though to be kept hidden it must surely be something bad relating to the allies?
World War II bombings weakened upper atmosphere at edge of space
I run Linux without desktop environment on a 4K screen, so I ran into this stuff on all GUI kits.
I set the respective scale detection/factor variable in my environment and be done, e.g., for QT5 it'd be:

export QT_AUTO_SCREEN_SCALE_FACTOR=1

for auto scaling. See: https://blog.qt.io/blog/2016/01/26/high-dpi-support-in-qt-5-...
and https://wiki.archlinux.org/index.php/HiDPI#Qt_5 for more options and other UI kits.

Normally, the desktop environment should do this for you, though. But yeah, this was quite horrible for me for a long time and only got better recently (~ 1 to 2 years), with an wider adoption of high DPI screens, I'd guess.
Doing a bioinformatics Masters degree. Had 15 years molecular biology wet lab experience and was getting very bored with the repetitiveness of it. Did the degree, learnt to code. Now earn more money, much safer in a highly competitive job market, and most importantly really enjoy what I'm doing.

Without taking the time to do the degree, none of it would have happened. Had 2 kids whilst working and studying - come to think of it, a supportive wife was by far the best decision career wise.
I always breezed past them, acknowledging that they were interesting in abstract but I wouldn't retain enough for it to actually colour the story. Mostly the story conveys the things I care about (terrain/distance/etc) and knowing that cities c and f were actually quite close together wasn't important.
"Oops, who could have imagined they'd be a little liberal with the bullets. Oh well."
Maybe I'm just not quite able to get why "lightweight" is a thing. I also prefer Django over Flask for even the simplest of server software...
But. What if Firefox Monitor had a data breach ?

Just trolling here, don't pay attention.
How to hire your first employee?
If you are into web but also want to expand to mobile and desktop in the future, check Countly. Open source and can be deployed on prem, too.
> It does not protect a user module from itself. It does not change the semantics of C.

Which is my whole point, WebAssembly does not protect memory corruption inside of the module code, which allows for security exploits anyway.

On my sample code if I expose func() to the host, and it gets called with 200 as parameter for a buffer size of 100 bytes, no trap will ocurr.

On a real use case that call might induce an internal memory corruption that will, for example, change the behavior of other functions exposed to the host.

If you wish I can provide an example how to do that, which you can try out in your favorite spec compliant Web Assembly implementation.
If you only care about the code, why do you even care about the CoC, it's not a .c, .cc, .h, .s, .mk file.
The first rule of tilde club is ... We don't talk about tilde club
Well, you could start one?

I would have thought this was within the remit of the EFF, but then so are a lot of other things.
AWS eu-west having connectivity issues
In my experience the APL family of languages are extremely hostile to the kind of exploratory coding that people would do in e.g. Python, JS or even C.

You do APL like you do mathematics: sit down with pen & paper and think. And yes, many times it’s hit-n-miss, and someone walking by will tell you how it’s trivial with technique X you were unaware of. But again, this is how people do maths too: Maxwell’s original set of equations for electromagnetism were 20 differential equations, and it was later that Heaviside came by and rewrote it in its concise vector form we all know. (And those four equations can still be simplified to a single equation via geometric algebra! https://en.m.wikipedia.org/wiki/Mathematical_descriptions_of... )
Any good un-Googling tips for someone stuck with an Android phone, Moto G4?
> IRL: Online Life Is Real Life

> The Tim Ferriss Show

> Recode Decode

> The Success Series Podcast

> Freakonomics

> Song Exploder
I think the subtler point is that the primitives have varying complexity, meaning that "get something by its key" is on the same level as the Mealy machine example. It's messy to read and is also kind of a waste of valuable global namespace

There's some nice magic in how quickly you can write mode as an expert, and part of the appeals of APLs are the power of some of the built-ins. There's likely other tools that would be more worthwhile in the `:;` spot than its current definition.
This modern tracking stuff will get used for a genocide before we ban it, I guarantee. Previous totalitarian states couldn't have even dreamed of this kind of shit.
No. Most times I use a maps app it doesn't need my location. Let it ask only when I explicitly ask for directions from my location, or when I click on the "center on my location" button.
Is this a request for investment? I would be happy to help. Feel free to contact me.
If I had a paid click for every time youtube has asked me to switch to their shitty tab-less app..
I completely understand, it's in their right, absolutely.

However, once you disable the tracking, the UI no longer show the address and even say "Set location" under Home address and Work address. This let you think that Google doesn't have this information, which is false. This makes me feel like Google got info about me and I can't use it. I find this part dodgy. Once you disable a setting it should be clearer that data is not deleted.
T&T+MILLENNIA+CITY+LONG+HẬU+|+DỰ+ÁN+T&T+MILLENNIA+CITY+LONG+HẬU+|+T&T+GROUP
Yes, I'm sure the code is ready but some evil mastermind twisted their mustache and said "No... let's collect two weeks more of data! Bwahahahaha!"
I too find it a bit discouraging that my data would leak away to the whole network eventually. I'd like to have "an island" (I believe this metaphor was used in some docs) to myself and those close to me. Or maybe I haven't yet grasped how SSB works.
It’s been a fair trade off of benefits/drawbacks in the past - you don’t have to hold gold, you can hold a currency that is stable and reliable, you can use it to trade around the world for modern goods and services. You put yourself at the mercy of the US, but if the US follows international rules and acts multilaterally and you’re not North Korea, the risks are small.
And this is also what makes Authy a terrible 2FA tool no one should use ever.

It stores your secrets in plain text on the phone without any secure enclave. If your backup password is sniffed or there is a flaw in Authy or your mobile OS sandboxing fails you are toast.
Six months to Brexit: how scientists are preparing for the split
> it’s comparable to C

I think you may want to reassess your definition of what a runtime is ;)

> "crt" stands for "C runtime", and the zero stands for "the very beginning".

[ https://en.wikipedia.org/wiki/Crt0 | https://en.wikipedia.org/wiki/Runtime_library ]

Yup. C definitely has a runtime!
Current WASM spec is a MVP. There will be other ways to expose functionality to the host that should be safer. See future proposals. Your points are valid though.
> The web browser/JVM certainly needed an operating system to run, and by extension the applets did too.

Not moving goal post at all "JVM certainly needed an operating system to run".
I don't think you're contradicting my post. If you don't know the fundamental primitives you don't know the language yet.
You also don't need to know 200 of them, the author even addresses that point.

>Normal languages

Who's to say what "normal" is? There is a learning curve to other languages too, people just forget that because they went through it so long ago.
It's possible that I want my passwords (of other sites) synced on all instances of Chrome across my devices, but I don't want Google to know these passwords (obviously). They have an "encrypt-passwords" feature for that.

https://support.google.com/chrome/answer/165139

Perhaps you have never visited passwords.google.com :-)
accidental tech podcast
beautiful anonymous

these two are my favorite for a long time.
The point of webassembly isn't to replace general javascript code but to be a better compile target for C/C++ etc than javascript, and to optimize performance critical parts of javascript when necessary.

Plenty of people want it to be a complete replacement for javascript, but I don't see that happening. I certainly don't think the doomsday scenarios that sometimes get mentioned whereby the entire web becomes nothing but closed, DRM ridden WASM binaries is likely. Large corporate owned sites and streaming services will almost certainly leverage it as much as possible, though.

"closed binaries in the browser" have existed since the days of Java applets and Flash. And no one is stopping anyone from providing or distributing the source for their webassembly modules, so I don't see webassembly as being any less free in that regard than any other language that compiles to a binary. Arguably, webassembly is more free because it isn't owned by a company or restricted to a single language.
Lastpass 2FA is just used for account management and sync anyway. It has no role in the secret crypto. If your attacker phishes the master password your synced passwords are all compromised.
Do you find it likely that Google is earning over $1,000 from each user? How are they getting that? I'd say the real cost is probably a couple of orders of magnitude lower.
Eating junk food raises risk of depression, says multi-country study
Thugs of Hindustan Trailer – Thugs of Hindostan Final Trailer – Fan Made
Building a Tensorflow Real-World Image Classification Pipeline
What value would you expect to get out of a luxury car that you wouldn’t get from a car that costs half as much?
Interesting. Where can I learn about this (history)?
1) Working in Investment Banking - the salaries are significantly higher than you can get anywhere else, at least for the UK

2) Starting contracting - Higher salary, greater variety of roles/projects etc etc.
It's got Nuxtjs wireup, web3 as a plugin, contract communication layer using eth-abi / web3 in Store. (Truffle included)
ah i see.
>I have mixed feelings about the grandes ecoles.

To be fair, so do I, and I think you make a good point. The profile you can expect from a GE is:

- Extremely well-learned. They know a lot of stuff.

- Solutions implemented by GE engineeres will be principled, rather than ad-hoc.

- Not self-starters. They very much have an employee mindset.

And to be faire, there are plenty of outstanding employees (not to mention freelancers or entrepreneurs) who haven't gone through a Grande École.

Let me put it another way: you may not need a GE-graduate to build the next iPod, but you certainly need them for the next EuroTunnel.
It bothers me because of a widespread and damaging tendency to focus on second order ethical issues rather than the main point. Instead of talking about what actually happened, people talk about how what happened is presented or the precise words that are chosen, how the same thing happened elsewhere in a way that attempts to make the speaker appear a hypocrite, or the identity of the person who presented it.

This happens all the time in the media and politics, and often involves deliberately uncharitable interpretations of what was said.

https://unherd.com/2018/09/insincere-politicians-cheapening-...
Open Source MANO (OSM): Addressing Interoperability Challenge in NFV
There were many 'normal programming languages' of APL times. But not so many of them are still around - Lisp with 'no syntax! so many brackets!' and APL with 'arbitrary symbols', Prolog, Smalltalk - what else? All of them are special, and maybe that's not a coincidence.
First politician to seriously stand behind breaking up big web/data-collecting giants gets my vote.
This trivializes my childhood accomplishment. I don't like it!

It blows my mind how speed runners learn to exploit the inner workings of a game, from timing hacks of the RNG to positioning actors on the screen to unlock design weaknesses. While it takes a lot of skill and many hours of practice to pull off these exploits, advancing through a game at record speeds through exploits takes away from the experience that was intended for play. Speedrunning is not playing the game better but rather playing exploits better.
fascinating, thank you sharing that!
you don't necessarily need two security keys. written down backup codes or an authenticator app are also good second factors.
Looks intriguing and interesting.

You could make the use case more explicit, in, how would people use it:
* the publisher; having the original version of the text, and releasing a censored version;
* a casual reader; reading and verifying the released text was not altered (without having access to keywords? at all?) - so there's a matter of trust to add here as well?
* a reader with the key to verify and reveal the keywords
2. I'm wondering (as others have outlined) that, granted they do give me value today at the risk of my privacy, but what about the future, what if there motives change, that can affect me in insidious ways.
I buried one of our cats yesterday - spent quite a long time doing it - spending some time placing stones and flowers he liked round his body.

I did find myself wondering if some archaeologist in some distant time would try and work out what I was thinking....