skysight-inc/HackerNews huggingface dataset:
> If this change makes the browser better (using whatever metric you want, I'd argue the correct one here is privacy),

How does automatically signing me into Chrome improve my privacy?
I've opened one lest it gets forgotten: https://github.com/brannondorsey/chattervox/issues/10
Thanks. Frustrating to have to do this. Nothing like paying $4500 for a laptop only to have it be a pain to upgrade 2 weeks in...

I’ll have to force power off... little hesitant to do that mid-upgrade but seems like the install is done and just it jacked up my account settings.
The Chrome team has been shocked about a lot lately.

I give them the benefit of the doubt on their intentions (although I'm less sure about upper management). But regardless of their intentions, they need to get better at thinking ahead.

Situations like this are always a little complicated, so I don't want to oversimplify or claim that they should have been psychic. But... it really shouldn't have been hard to tell that people would be upset. I kind of feel like if nobody on the Chrome team could have predicted this, then the Chrome team is seriously out of touch with users.

I mean, heck, the change contradicted Chrome's own privacy policy, which had to be updated after the fact. Is there seriously no process to check stuff like that before features ship? How is anyone supposed to trust Google's privacy policy when any team can break it inadvertently and it takes a Twitter thread weeks later for them to find out?

The Chrome team has a nasty habit of simultaneously saying, "just trust us, we're experts, we know what we're doing", and "there was no way we could have predicted that users would be upset by this."

Both of those things can't be true.
This makes sense for some completions (e.g., vanilla lists of options). But often the completion depends on other context that the binary doesn't need to know about. For example, I complete `git grep` patterns based on ctags. There's no reason git should know about ctags; it's only my personal completion that brings the two together.
Visited your website and can't figure your business model. How are you generating revenue?

Great service btw!
I think you forget that in it's time IE was massively innovative.

It was IE who added XMLHttpRequest and invented AJAX.
Excellent. Now we need Musk to come through with his "pravda" site that investigates news/journalists.

I feel the two biggest threats to american life and freedom are "big tech" and "big news". It's about time these companies get closer scrutiny.
Does APFS still run like dog feces on a spinning platter drive in 10.13?

I have a bunch of older iMacs I have stuck at 10.12 for this reason.
H-1B spouses' work ban rule coming within three months
Wouldn't the world's first animal be prehistoric by default? I mean, I assume the priority of any first animal on any planet is not going to be scribbling things down for posterity.
Interesting, that's not what I recall, but apparently that's how it was.

Thanks for correcting me!
How is sending my personal passwords to a server under Google's control an increase in my privacy?

More importantly, doing so without users clearly knowing and consenting to it is a clear violation of GDPR. This is an absolute, not a relative standard. Which means that it doesn't matter how it compares to what things were like before.

This for Google could be up to a $2 billion fine. 2% of worldwide annual revenue - annual revenue is around $100 billion. It would only take 13 fines per year of that size to reduce Google to not being profitable.

So you shouldn't think about it as a question of opinions about UI design. Instead think about it as a question of liability. Do you as an employee want the people working on Chrome to be subjecting your employer to this kind of legal risk?
I can see why they thought this was a good change.

It's a good change only if you are permanently logged in to google services, which is probably why it seemed like a great idea to the Chrome team, who probably have no idea how much distrust Google has started to build up. It moves the browser closer to an app runner for google services - I'd understand that if this was on Chrome OS or a specific 'Google' app, but in a general purpose browser the browser chrome should never indicate login state about specific websites, nor should my browser be logging in to google itself. It was bad enough when that was a choice for users, now it is one policy change away from being obligatory.

This is how we end up living in a world where google has access to all your data. I've switched browsers due to the move, not just because of this specific action, but because combined with all the other dark patterns Google has engaged in recently, and their clear moves to abuse their monopoly in search, it tipped me over the edge.

I no longer use google search (have been using ddg for a while), and now no longer use google browsers as a result of their disregard for user privacy.
It is not clear to me that just because a company can gather and use personal data that they should be free to do so. Even if they should be so free, it is not clear to me that they should be free to use any personal data in whatever way they want.

> Limiting freedom is bad unless you have a very good reason to do so.

The argument that they should be free to do so because otherwise we are otherwise limiting freedom is not convicing. Consider, for a moment, whether we have a right to privacy. Restricting person A from violating the rights of person B is generally not considered a limit on the freedom of person A. For instance, we generally do not talk about laws against theft limiting the freedom of a person to take whatever they want. If we do not have a right to privacy, then preserving privacy may still be a "very good reason" to limit such freedom.

> Some people may find that giving up their privacy for convenience is worth it, others, like me, would think the opposite, but we individually make the decision to use or not use Google, Facebook, etc. "Being taken advantage" is subjective.

Most people do not realize they are giving their privacy away or if they do, do not realize the extent of it. Privacy policies are intentionally obfuscated (and these public policies only exist because of regulation). People have expectations of how their data will be handled and PR departments do their best to suggest that their expectations align with reality, but theose expecations are never aligned with reality.

Even if this is how it actually worked, it would only work that way until it no longer works that way. Eventually you may find yourself uninsurable if you refuse to install a tracking device in your vehicle.
If they're really jonesing they'd like to know that you have to create an account to download a Windows only installer ;)
I agree that checked exceptions enforce clarity however I absolutely disagree on the fact that the exception should be managed immediatly. Usually exceptions can and must be managed at different levels of the call stack depending on their origin and destination. My experience tells that usually in an application there are just a few sinks that can be used to ultimately manage exceptions raised from different application flows. The pro of checked exception is to enforce exception management the cons is that they require a pedantic management. For unchecked exceptions pros and cons are exactly inverted. What would be ideal is to have a meta-exception management rule system that would allow to specify which exceptions are allowed to pop-up and which must be managed at the class and method level. Is there any language that provides something nearly similar to this?
Commonsensemedia.org has many resources and parent-driven (and child-driven) reviews.
Women Tech Hiring Sees Minuscule Growth, Short of Hopes – CIO Journal
What's there to investigate? What's more likely, that people obsessed with social justice latched onto a story about a guy who gave a clinical discussion about rape statistics [1], alleging him to be a rape apologist, or that there's a conspiracy by the US government to smear Linux contributors who don't like backdoors?

[1] http://geekfeminism.wikia.com/wiki/Rape_apology_on_LCA_maili...
I already do. There is a strong internal culture of argument and we do tend to use critical news, forum or blog posts as anecdata points. The higher quality and quantity of external voices on a subject, the better argument can be made one way or another. So please keep them coming, but do remember that usually the best result of those is starting proper research into the topic, which then can show that the best for the 99% still lies the other way.
The Fine Structure Constant (PDF)
I cannot prove anything but for the screenshot I took in utter shock, but I very recently started suffering headaches at night that cause the one side of my nose to completely block and generally make a mess of my sinuses. I had never spoken about it to anyone, searched for it online or otherwise had any similar problems before. One night I had a headache start while watching a video on YouTube with my iPhone so I put the phone down, video paused, on the side and spent the next hour sniffing and generally making some horrible sinus related noises. I woke the next morning, picked up the phone and finished the video. On going back to the recommendations, between physics talks and movie reviews was a video by a doctor about “instant sinus drainage”. Nothing else was in the recommendations like that — just one out of place yet creepily relevant video. I just didn’t believe these kinds of stories until then. I cannot fathom the sheer precision, relevance and timing. The only responses I’ve had about this are like “you must have searched x, or done y” and the reply is no, I really have not, honest to God, and I live alone. It knew via listening, there is no other explanation unless invoking a coincidence that stretches all credibility. Anyone got a third explanation?
My Adventures in Self-Hosting Part 2
Don't forget the recent bullying that was done to redis over the master/slave terminology.
But what does school start time have to do with race and income?

Snarky answer... It's the US, everything has to do with race and income, even when it doesn't.
Show HN: RoutineHub – A place to share and keep track or iOS Shortcuts
Both seem to be US companies. What levarage do you have over them if they screw you? I would say none. Suing a company overseas is pretty much impossible.
If Bob logs into Alice's computer and forgets to log out all she has to do is hit the "sync" button and she can now view everything that's his synced with his account. Previously she would have at most his email, now she has that and more.

To me that seems like a decrease in privacy.
The phrase probably refers to Unix pipes:
https://wiki.tuhs.org/doku.php?id=features:pipes
> The CoC - any CoC - requires that all members agree on a telos. That wasn't necessary before

Does it though? All it says to me, that whilst working towards this "telos", do it in a respectful manner.
I haven't yet seen an algebra class that would start from scratch, define groups and rings for the first time, and do commutative algebra with modules, and fields with Galois theory in a single semester. Usually these take around 2 semesters.
So that organizations with money that benefit from the standards pay for their creation. For everyone else, there's scihub.
Like namecoin? or https://handshake.org
Let's just say that I don't want my porn throwaway gmail account to have anything to do with my personal or work accounts.

Ya'll fucked up big time. I uninstalled Chrome off all my computers today.
Using Scoped Slots in Vue.js to Abstract Functionality – CSS-Tricks
The Quest to Topple OpenTable
Developing for the browser is leaner but it's the opposite for end-users. I hope PWAs are the future as well but native is still king for the time being.
It probably looks like what Zoho should use..
Google is just playing the game (embrace, extend, extinguish) - meaning the outcome they try to achieve is the same.
Why do you think this information is unavailable today?

I can get the critical paths, device utilization, power, etc. from every vendor's software suite I'm aware of. And they are all fully scriptable from the TCL interface. Once I have a mostly stable design, I usually run Xilinx/Vivado from the command line. Same with Lattice. The reports the vendors provide are much better than what would get from the raw bitstream because it has all the symbol information. What you're proposing is akin to decompiling c from object code.

Also keep in mind there is huge variation in architectures between vendors, products, and the various product categories. For example, few things LUT based anymore. Now we have macrocells, "logic elements," and slices, etc. and that's just the soft stuff.

People have been working on implementing FPGA in higher level languages for years. Even LLVM to RTL has been tried a few times. I've observed matlab to RTL is starting to catch on in the DSP/control-system crowd.

https://en.wikipedia.org/wiki/C_to_HDL
gosh, 30 mins.. care to post a TLDR?

I'm not too concerned by this to be honest. Since the last 10 years banking is regulated to such a painful degree that such concerns are minutiae.

This isn't bitcoin or a stage coach hurtling through the wild west. The only way money is leaving my account is by way of my chip & pin card, which is no easier or difficult than any other, and subject to the same protections, or by wire transfer which is easily detected and reversed.

Beyond that, it's the bank's problem, ergo their underwriters and if they weren't happy they wouldnt be underwriting. Even then, if the bank does go tits up my deposits are guaranteed.

That said, of course there may be risks of bad actors within the bank itself, but even in that regard I'm at least as safe as I am with any other bank.
Sounds like evernote. Which I use for free.
> good software is not even desired.

You can make good software without formal proofs. It just may not be proven to be perfect.

> They want to be involved in the process. Make dumb decisions.

This I agree with though, sure. They do make dumb decisions, and they push ahead anyway, even when told. Later they change their minds, we change the software. It's the grand circle of life or something.
Learn to code for free
>How is sending my personal passwords to a server under Google's control an increase in my privacy?

If this change did that, I might be inclined to agree with you. But as far as I know, it doesn't. You still have to explicitly opt in to syncing. Which is a no-op compared to the old behavior.
Someone I know recently bought a beautiful beach house in Florida near Cape Canaveral. I'm too anxious to ask if she is familiar with the climate change issues in the area since they are almost at sea level and even NASA is struggling with climate change there.

On the other hand, I hope that where ever these American climate refugees go, that the cities they go to will have enough infrastructure especially for water, and if they don't, they can fix it.
I've had issues logging into iCloud in the past and this always seems to fix them. Good luck.
Putting underused smart devices to work
How about popping up a message saying, "you're logging in to someone else's computer, would you like to do this in an incognito window?" Or something like, "you're signing in to a different Google account, would you like us to remember this account and preserve/sync history to account X, which is currently signed into Chrome".
> extremely SV-centric Hacker News

HN users are about 10% from SV (5-14%, depending on what exactly you count). And about 50% from the US.

https://news.ycombinator.com/item?id=16633521
How would the system simulate user interaction required to get to a point where the popup would be necessary?
The Witness is a fantastic game, and while all the puzzles are drawing a line on a screen, without getting into spoilers, they have a great deal more variety than you might think.

That said, unlike the magical-realism of Myst and Riven's lived-in locations, the island of The Witness is impressionistic: It's not supposed to feel like a real place, only a kind of 3-d painting filled with relaxing and thought-provoking details, and coincidences to notice. So it might not be your cup of tea.
These are the transaction authentication numbers which are unique for each new transaction:

https://en.m.wikipedia.org/wiki/Transaction_authentication_n...

For me in the UK to move money I need to generate a TAN using a SecureID token the TAN is generated by using the secret in the token and digits of the account number I need to transfer money too.

The same SecureID also generates OTP for 2FA login.

But there are other TAN schemes including pregenerated lists and TANs sent over SMS or TANs which are generated by using the smartcard in your debit card.
A notable exception in the US being for the telecommand of space stations (97.211b).

There's also some grey area around encryption for telecommand of terrestrial craft --- you aren't allowed to "obscure the meaning of the communication" (97.215b), but other sections of Part 97 require preventing access to telecommand stations by unlicensed operators. This has raised questions over whether disallowing encryption is more important than risking telecommand stations being maliciously hijacked.
HL7 standards are developed on a consensus basis by providers, payers, vendors, governments, and academics. The established vendors certainly help, but I deal with their HL7 representatives on a daily basis and I can clearly see that they're working in good faith. The main reason there is flexibility (and convolutions) in the standards is that healthcare is highly complex. Integration projects are thus labor intensive; software is usually a relatively minor slice of the total cost.

If you have a specific suggestion for simplifying or otherwise improving any HL7 standard then please submit a formal change request. The process is very open and accessible. I've done it many times myself.
That's an institutional problem though.

Yes, it's true that most companies hire way more people, way too quickly than is probably prudent for a problem domain (especially one that is still such an open-ended science project like AVs), and that as a result barely anybody has any idea what they're doing measured against what's being expected of them, but that's a wound that is entirely self-inflicted. It's not a natural law that one needs to suddenly staff up dozens or hundreds of really expensive people ahead of any real capacity to train or assimilate them, but it does happen with depressing regularity. If anything, I'd say this is probably the biggest problem I see in the ecosystem that you and I are in.

The team I work with is small. Everyone has several (5-15) years of experience consuming research, turning it into practical solutions, and in some cases even having created a novel practical application that was later supported by adjacent research.

It's not easy to construct a team of half-dozen to a dozen prolific programmers w/ a bent toward the academic, but an innate sensibility for remaining pragmatic and applicable. But, it's also not impossible to do so either. This is inline with my incentives comments elsewhere. I think the incentives are broken at too many layers to be able to be fastidious and intentional about how we solve problems. Say you get an "empire builder" into the leadership structure... you're doomed. The whole point of everything becomes about having as big of a "rockstar" team as possible, not about trying to solve a problem. Unless the problem one is trying to solve is how to quickly become the SVP of an extremely expensive and probably fairly unproductive team of increasingly disaffected previously very effective people.
This is a project I've worked on for the past week, and I'm excited to finally get it out to the world.

I was excited about Apple's new Shortcuts app and just how powerful it is, but there seemed to be a huge pain point that there didn't seem to be a great community for it or a way to keep track of versions, etc. So I created RoutineHub.

I'm really excited to see other people's Shortcuts!
Better yet, use SteamPlay

https://github.com/ValveSoftware/Proton/
{Futuro Descentralizado}Webserie about Bitcoin and Blockchain on Portuguese
They did it by ironic accident.

Bill Gates wanted their browser to be the best, but also wanted it not good enough to replace desktop apps. However the right hand didn't know what the left hand was doing. The Outlook team was told to make a web version. They got the IE team to add XMLHttpRequest for their use, everyone implemented what they needed to, then went home and forgot about it.

Then Google recognized what the feature allowed, and used it in gmail and maps. The rest of the internet said, "Wait, what, you can DO that?" Studied it, popularized the technique as AJAX and the rest is history.
Read the actual privacy policy, not the tweet talking about it. Primary sources are always best.

> The personal information that Chrome stores won't be sent to Google unless you choose to store that data in your Google Account by signing in to Chrome.

That doesn't say "unless you enable sync", it says it changes "by signing in to Chrome". Since they're now forcing you to sign into chrome without your consent they are also forcing you to accept that they can send your data to their services without needing any additional permissions from you.
Another interesting thing about these rovers is that they are fully autonomous. They decide on where to explore the asteroid on their own using stereocameras, photodiodes, accelerometers, gyroscope, and temperature sensors.[0][1] In the last Minerva rover much of the autonomy consisted of hopping randomly, hopping in a human specified direction where direction is estimated from solar position by the photo diodes, and survival hopping[2]. One interesting issue they have to contend with is the low albedo(0.05) of Ryugu. The low albedo(0.05)[3] makes portions of the asteroid surface a rather warm 100°C[4], which is not good for long term operation of the electronics. And of course really cold temperatures are not good for the rover either. In the last Minerva rover survivals hops were to have been performed to keep temeperatures as moderate as possible. For example, hopping away from the sun during the 'morning' and towards the sun in the 'evening.' Presumably there are also some behaviors to get out of dark ruts like the Philae probe got stuck in.

[0]https://www.dlr.de/pf/Portaldata/6/Resources/lcpm/abstracts/...
[1]http://www.hayabusa2.jaxa.jp/en/topics/20180919e/
[2]https://ieeexplore.ieee.org/abstract/document/1307442/
[3]https://en.wikipedia.org/wiki/162173_Ryugu
[4]http://www.hayabusa2.jaxa.jp/en/topics/20180907e/
They obviously didn't think through privacy issues very deeply, since it completely crashed with the privacy policy when it was released.

And the feature might be fine, but the UI is not good. It's confusing whether the big "sync" button says you are syncing, or lets you start syncing. And as this article says, when you go into "options" instead of clicking "undo", it starts syncing...
Bumble is taking Match Group to court, says it’s pursuing an IPO
I don't understand what you're saying. Which resident keys?

WebAuthn adds a number of crypto schemes -- to wit, I think they add RSA. You can certainly deterministically generate RSA keys but it's a lot more of a pain in the neck than x = HMAC(k, "u2f" + custom); P = xG :)
Agreed. Uber and Lyft’s responses say as much.

> Uber’s biggest competitor, Lyft, agrees with this sentiment. “The fact that this study did not examine hourly earnings, the metric that drivers care most about, has resulted in misleading headlines,” a Lyft spokesperson said in an email.

> “Many more drivers are choosing to earn with Lyft on a part-time basis, often fewer than ten hours per week, and they tell us they truly value the flexibility Lyft provides.”