skysight-inc/HackerNews huggingface dataset:
Brave is completely open source and the ads are opt-in.

https://github.com/brave/brave-browser
https://github.com/brave-intl

You're right the business model is advertising, very similar to Google. However the key difference is that they're trying to enable ads in a way that is privacy focused. They don't let websites track you. The whole point is that there are client-side algorithms that decide what advertisements to serve you.
I'd rather see that money go towards paid training for workers like the coal miners in the article, and investment into the renewables industry they would be going into.
Bizarre that there is no interest in this subject at all on HN.
So I typed my domain into the setup thing and I got this:

"Hello. It looks like you are using WordPress!"

"Your domain is NOT using HTTPS.Uh oh! Your domain is NOT using HTTPS. You will need to fix that before continuing."

"The following error was encountered: SSL_connect returned=1 errno=0 state=SSLv2/v3 read server hello A: sslv3 alert handshake failure"

Why do I need to be using HTTPS before you'll think about paying me, Brave? I've been getting along posting comics on my HTTP site for an entire decade, and I'm really not interested in bothering to set that up. You are really not built with any understanding of the level of technical knowledge among people who make art, are you. And I'm unusually technical for an artist.

Oh wait there is a 'choose different verification method'. I can place a trusted file in my domain? Nope. Requires HTTPS. Or I can add a record to my DNS settings; let's try that... looks like I gotta wait for the dns to propagate, that's always fun.
Making a Xiaoshao composite bow from buffalo horn, sinew, and wood [video]
Might be silly questions, but is simply changing the line in my /etc/hosts to 1.1.1.1 enough to have the encrypted DNS? How do I make sure requests are sent encrypted

Also, if I have a VPN, are DNS requests sent from my machine or from my VPN provider?
“Engineer driven product development”?
A new security model for crypto wallets
Ah got it. Maybe the first-person part can be added to https://news.ycombinator.com/newsguidelines.html ?
> If you feel uncomfortable then that's your problem, not everyone else's. And as I said, you are free not to use it.

That's a lazy argument, and you know it.

"If your offended by me watching porn in my office, that's your problem not mine, feel free not to come in."

Or just consider if that package was called the n-word. Would you be upset with Debian for not choosing to distribute that?

> Also, "immature jokes" has been the backbones of technology and the hacking community. It's called having a sense of humor.

Slavery was the backbone of the American cotton industry. We seem to be under the impression that was a bad thing.

Look, we all know that a line exists. You can argue about where is should be, but trying to argue there isn't one is just lazy, and refusing the actually engage in thought.

This boils down to one simple thing: Debian chose not to distribute some guys boob joke. Seriously, that's what your mad about? Flip it around, and show me someone coming into the project demanding the name be changed, and I'm on your side. But just because you told a fart joke doesn't mean I have to repeat it.

>If people are so offended, then why not go create your own distribution with only "non-offensive" software instead of poisoning software that exists.

Feel free to create your own distribution that does. We already have a distribution that cares about this kind of thing. It's called Debian.

> Most of the debian and open source and tech community doesn't care about weboob or the hypersensitive agenda.

Citation needed.
And as a non-American, I like banking through a credit union that doesn’t have any US operations.
Why is debunking people faking stuff indicative of a pathological obsession with fame and status? Seems more like the fakers in the first place would be guilty of obsessing over fame and status.
You could argue it's charity fraud, though the "intended" target isn't being represented as a charity they are being given donations (so "charity donation fraud", I guess). But it's likely some flavour of fraud.
It's not a free market, though because right now there isn't really a direct competitor to e.g. Slack, because the trade-off of developer convenience vs performance seems to be working in Electron's favour in that nobody else has brought a native competitor to "market".
The article makes some pretty intense claims but I'm not clear if they are purely hypothetical or closer to real predictions

> This entry was posted in China, Doomsday scenarios,
I think this behavior is ok with commits that are in branches and with commits that were in branches that were force-updated (for a rebase, or a fix, or whatever reason). It keeps available the links to old version of a PR or something. (I sometimes do that. "The [first commit](link) does this, and the [second commit](link) does that." It's nice to be able to use the link after a few iterations of the PR.)

I'm not 100% sure if this behavior is fine for commits in PR that never were merged by the project. I guess it's an unavoidable bug/feature.

I don't like that this is posible with a commit that was never seen by the maintainer/developers/whatever of the project.

Technical question: Since all repositories are derived from the empty repository, then it is posible combine any user with any commit in GitHub? (To make it more believable it's probably better to use the same language of the project.)
Well, there was a solution to that last problem. Just bundle the whole runtime with the product each time. And just like that we're back at square one again...
If the rental has a sliding glass door one of the flaps at the linked site can be fitted but be prepared for sticker shock https://www.petdoors.com/pet-doors/cat-doors/sliding-glass-d...
I've read un-googled chromium is often behind/not up to date with the latest Chromium release/updates (which makes it not secure).

Source: https://github.com/privacytoolsIO/privacytools.io/issues/274...

i found that post because the un-googled chromium author linked to it here: https://github.com/Eloston/ungoogled-chromium/issues/640#iss...
Hey now, the 'Supreme' Court says that corporations are citizens too.
Good step. Now reduce the size of the civil service by 50%.
The article doesn't mention it, but Germany still heavily relies on brown coal and opens up a new open pit coal mine.
AT&T will put a fake 5G logo on its 4G LTE phones
Is anyone actually more skeptical in the long-term future of Facebook than of any altcoin?

(Remember that in order to prevent double-spend attacks, you need to ensure that nobody—and no potential mining pool—is sitting on more computing power than your network has. That's feasible for a single proof-of-work currency; it's technically impossble with even two unless one outcompetes and kills the other, and certainly practically impossible for a new one at this point. And if you're not using proof-of-work, what stability does the coin have once the corporate backer is gone?)
That’s actually what happened. The long timeline also allowed them to adapt: everyone trained in mines in the last two decades earned an education that’s transferable to work outside the mines.
it works. 4.0 gives you transactions.

it's pretty great.

and, most importantly, as far as I know the default replica set config is safe. (durable, consistent, atomic) it handles a lot of failover scenarios for you automatically. and you have to manually intervene to get into a bad state - which might be okay for that particular business case (better than full downtime)
The problem with signing transactions is basically then you can identify the browser history of the user. The BAT-ledger explains the principles of the transaction system

https://github.com/brave-intl/bat-ledger/blob/master/documen...

The current process is the data is anonymized and then sent out for privacy reasons.
Perhaps, but I surmise that most people spend a large amount of their personal time and life on their mobile devices while people who are using full computers are generally doing so for work. I have seen it personally in my work that native mobile app usage has surpassed both desktop and mobile web usage.
https://www.nytimes.com/interactive/projects/4thdownbot/inde...
After More Than Two Decades of Work, a New Hebrew Bible to Rival the King James
From operational perspective, it may be easier to maintain a certificate (after all, that's what you already do for an HTTPS service) than a DNSSEC signed zone. It is also easier if you have a multiple DNS providers, since you don't have to coordinate zone resigning. On the other hand, DoT doesn't provide the same properties (like client-side revalidation) as record level DNSSEC. It is undoubtedly an imperfect solution, but better than a perfect solution that isn't deployed. I see the two technologies as complementary, a fairly good DNSSEC deployment at the TLD level can provide a safe way for key discovery at SLD level. There are many facets to this, and it is still fairly early in resolver-to-authoritative DoT standardization process, this is just one of the first steps to show that it's feasible in real world.
Along with the US national government. About $17 trillion not owed to itself. Added 0.7 trillion in 2017.

Cost to finance $17T per year at various interest rates (today's average rate on the US debt is about 2%):

rate, cost($B), % of 2017 Fed income

2%, 340, 15%

3%, 510, 22%

5%, 850, 37%

8%, 1360, 59%

10%, 1700, 74%

As you can see by this chart (sorry about the formatting), the Fed has to keep interest rates low or the US will have little choice but to default on the debt.

I think a lot of people who ponder such things have concluded that the Fed will keep the interest rates low and the US will/are fudge/fudging the inflation numbers so that the Fed can still claim they are hitting their 2% target even though asset prices go through the roof. Who knows what the end game on such a plan will be, but some form of hyperinflation is not out of the question. All those people who are too scared of losing value on investments and just parking their savings in cash, will be very disappointed and confused if that happens.
That's exactly backwards. Cheaper oil will lower the operating costs of power plants that use oil as a fuel, which raises the bar that newer technologies will have to clear to be comparatively more efficient, which will in turn slows the rate of adoption for renewables.

CO2 emissions are cumulative, and there's far more CO2 still sequestered in as-yet-unburned fossil fuels than even the rosiest estimates say our atmosphere could safely absorb. That implies that we're going to have to leave some sizable fraction of our planet's remaining oil in the ground, permanently.

From a long term betterment of the species standpoint, what we really want to be seeing is the global supply of oil starting to taper off and costs per barrel drifting slowly but steadily upward.
> although you'll get worse performance since Apple doesn't allow third party browsers to take advantage of Javascript optimizations

This hasn't been true since iOS 8 with WKWebView[0].

[0] http://www.iphonehacks.com/2014/06/ios-8-javascript-performa...
Ganta Claus – Turning Famous Faces into Santa Using AI
C is equally bad, but it can be used anywhere -- it can be compiled into a dynamic lib and used in any language/framework, which is exactly what we did.
I'm surprised there was no mention of recent security audits.

BitWarden just famously had one.
Is someone forcing you to use Electron based tools against your will? The last three comments you’ve made on HN are gripes about it, it sounds like you’ve got an axe to grind.

Back when I had four megabytes of ram I wouldn’t have been furious over a 50kb editor. 200mb isn’t a lot when most developers are working on systems with 16gb or more of memeory.
Who says AI will kill low wage jobs? China becoming an AI power with their help
No it's not.

The file searching code is in Rust (IIRC) and runs as an external process, but that is about it.
I don’t think such superficial cynicism is ever helpful.
Tidelift is the latest attempt at this: https://tidelift.com/

They don't adequately explain what happens if a project has no 'lifters' and it sounds like it could have the same problems as Brave.
I switched from LastPass to Bitwarden, I do not miss a single thing and quite a few irritating things have been fixed.
Interesting. Browser plugins, by nature, include source code. I wonder if there's an easy fix. Can you describe the issue in a little more detail?
People want to think their attention is worth something. Maybe they should be more careful where they spend it.
Is the frame rate still limited by the server-side tickrate?
> Bizarre that there is no interest in this subject at all on HN.

There's been plenty[0].

Maybe you should comment on one of those threads rather than starting yet another one.

[0]https://hn.algolia.com/?query=gatwick airport drone
Real time full body facial and body MOCAP
That's a lignite ('browncoal') mine. There are more of those still active in Germany.
This is a great opportunity, I'm excited for your inevitable professional growth from doing this.

To help my own professional growth I have now shadowed 5 CEOs for 1 day each and have found it the highest ROI growth/training exercise I've done.

I have a doc that provides lots of advice, templates etc feel free to use and share: https://goo.gl/BJ8GTT

My general pieces of advice

- every CEO is different, so do this 1-2 times a year to gain a breadth of insights

- take advantage of lunch time and the few mins between meetings so that you can ask follow up questions from your observations

- to add value back to the CEO you're shadowing, summarise your observations of them and their business

- talk to 3-5 employees (all levels) to understand from them what makes their CEO great and what they could improve on

- you'll gain lots of insights into how to run a startup, culture learnings etc so don't limit your learning to just CEO insights

Feel free to contact me if you have any questions.

Timbo
A standard Ubuntu installation plus the mentioned proprietary GPU-Driver package are using ~4GB of the available file system capacity.
Thats way to much to fit into a ramdisk while having enough RAM left for OS. Most of the nodes in the GPU mining farms I know have only 4GB of RAM at all.
So there is some optimisation needed to shrink the filesystem usage by getting rid of the things that are not necessary on the filesystem to run the OS. Source files, man pages, caches and so on. At the end of this optimisations you have a system which is much more lightweight but does still have the same well known usability.
Having a more lightweight storage footprint than a "classic linux distro" is the key to be usable for network booting and diskless operation at scale on hundreds of nodes.
Coinboot also has a highly customized Early Userspace (https://github.com/frzb/coinboot-debirf/blob/427b5fb8f3b9313...) so after extracting the root fs onto the ramdisk, additional file archives a.k.a. Coinboot Plugins can be downloaded and extracted on the root file system. This is how the plugin system of Coinboot works, which enables the extension of the core system without repackaging the Initramfs archive.
Sticking Our Neck Out
kind of hard to imagine people living in Germany and thinking "oh, this erdogan guy has the right idea"
Not sure the point you are trying to make here. If Google has translated it correctly, that last line:

> pankkake> not bad, there is boob in :)

So... yeah. Started with a boob joke that they double and tripled down on later. Got it.
I'm reminded of mail-in rebates.
Talking 'life centuries ago'. Almost every living person tilled a field with a hoe.
As far as I can tell, this game is still an utter clusterfuck. From a basic technical point of view, there have been fundamental flaws that have been there from its inception in 2011, that have never been fixed. They just keep throwing more crap on top of it making it buggier and buggier. Its the poster child for the sunken cost fallacy.

From a gameplay perspective, it hasnt gotten to a point where Ive been been able to even speculate on that. Their gameplay concept seems to be: build a big online sandbox and then... fun will magically appear, and they've iterated on this less than 1 time so far, so my expectations are about as low as possible. Also any time I've played it, every kind of interaction (flying, walking, UI, everything) is a mess, and feels terrible.

I dearly want this to be my dream game, but my professional opinion is that if it ends up being any kind of decently playable game at all it would be a miracle.
Better for who?
He is missing the point though.

It shouldn't be opt-out, it should be opt-in -- if the purpose is to give donations to creators then surely those creators should agree to receive donations (especially since donations have to be included in tax filings and so on).

For "donations to a creator" to be used for a different purpose by the party that is mediating donations appears (to a non-lawyer like me) to be some kind of charity fraud.
Using WhoisGuard for their domain is so not a problem. Namecheap gives you that for free and by default, and it cuts down on spam mail from other registrars.

Bitwarden is open source and self-hosted. This is a better trust model than any of the other offerings by a mile.
Result for the curious (pdf):

https://cdn.bitwarden.net/misc/Bitwarden%20Security%20Assess...
Maybe, but i'm pretty skeptical of the "taking money but not actually all that capable of getting it to the other person" to be a larger issue than streamlining.
So I didn't convince you?
These are author opinion and I respect and understand where he came from. People should have ability to share about their opinions with the world. That's great. But argue about the syntax highlight are silly to me. Argue about leadership though on that syntax highlight is fine.

Below are mine. Let's look at Go from 2 angles:

- Go the language
- Go the leadership

Go, the language is great to me. In the article, OP talk about `go get`, GOPATH, Error Handling. To me they are fine. I love `go get` because it was so easy to install binary that way and get update too. It fall short when have conflict because you have a single global tree which thing depend on. This is obviously not gonna work in long run, and in fact they always said they use it different way at google and expect community standarize and find ways through it. Which eventually lead to where we are now with go module.

But let's take a step back. Let's say if everything work great, do you like `go get`. It's just feel like `homebrew` and a game changer to me. What if we can abstract everything out, make `go get` works great as it's without population the global tree. Technologies will evolve. Look at how JavaScript evolve and become a great language and platform as it's right now. Give Go time.

Same with error handling. Exception is just as annying too. You either handle it or just swallow up or let's it buble up. I prefer Go style. Read Go code force me to think about error right at that point.

I would love Go to have thing like Result or Maybe :( instead of return multiple value which is just a convention right now.

Go bring lots of toolchain and interesting idea. gofmt gofix etc...

However, Go the leadership isn't up to Go the language. I think they feel to the trap when they made a language which many big project use(influxdb k8s docker...) and they get defensive when people talk about Go or criticize it. Look at how friendly Jose of Elixir or Matz of Ruby is. I would love Go leadership reach that. I read in other thread where someone say `Golang` and one of Go core dev just dismiss because he written `Golang` instead of `Go`.

I think eventually the leadership will change. Go is opensource after all. And we will see a day where Go is great both at language and leadership.
Interesting. Lastpass works perfectly for me on Debian based Linux, and I have friends that use it on arch. I can't speak to use on other distros though.
Hypothetically we have code enforcement. In reality, the chance of getting caught on a non-obvious building defect is much lower than certain.

I see licensing as buying into the system and aligning interests. Suddenly, it's in a tradesperson's personal interest to follow regulations, as they otherwise risk their right to practice.

That said... as was mentioned upthread, there's a happy balance. If there's limited long term harm, it's probably not justifiable to require licensure.
The Little Mermaid is not a Disney creation, it is a story by Hans Christian Andersen, as is The Snow Queen which Frozen is (very loosely) based on.

You can't trademark a story or idea, but you can trademark a particular character design. You can make your own Cinderella interpretation as long as you don't copy the exact art and design made by someone else.
How much did they save the health service compared to coal though? Air pollution kills.
Been working with Go a bit and also reviewed and saw tons of production code at places. The one thing that stands out is how messy and unorganized code is written often. It's more of a "write only" language to me it seems. Java or Python are much more readable.
Top Paying Tech Companies of 2018
In one of my early jobs out of college I had a manager who really got this. He knew I was getting my work done, so our 1:1's turned more into career coaching, and his focus was almost always around improving my "visibility" within the org. Looking back, it's hard to say whether he was genuinely interested in helping me get promoted, or if he just wanted to improve his own visibility by proxy, but either way it worked, and the lesson stuck with me.
I work at Brave on the business team. This is helpful feedback.

Brave is a startup with a small team earnestly building a new thing that combines a browser with a tipping system, with creator tools, with ad blocking... it's ambitious!

As it's a new thing, describing it can be messy sometimes. We're always working to make our language better and clearer though. Thank you for letting us know it fell short for you.

To address a point:

We know there's a lot of creators on a lot of platforms. At the moment, we've built support for creator channels in the form of web sites, Youtube channels and Twitch channels. When I joined this past summer I had the same reaction. "What about Tumblr? What about Twitter?" Each new platform takes time to write support for and we have a long list of features requests. We'll get there!
Would you entertain the idea of a database of verifiable gluten sensitive people that
the seating host validates upon check-in which affords this 'clean glove' type of dining experience across all sit down establishments? You maybe enroll in this service through a physician so it's legit and they can't question you about it along the lines of not being able to question the need for a service dog.

I think this would lock out all the people who ruin it for the ones that need it most and lower the burden on the kitchen staff. Thoughts?
Twitter is relaunching the reverse-chronological feed as an option for all users
> Well are you trying to be surprised, or are you trying to defend your natural born rights?

False dichotomy much?

I find the idea of natural rights to be of mixed value (beyond perhaps the case of a single natural right to something that might loosely be stated as that degree of liberty which does not intolerably impinge on the liberty of others), and the idea that the particular details of political compromises made by long-dead politicians define the proper scope of such rights actively harmful to efforts to appropriately balance liberty with other concerned for real live people living today.

> It sounds like you're not interested simply because it's redundant.

I'm not interested in efforts to treat political compromise as holy writ.