skysight-inc/HackerNews huggingface dataset:
> I feel like there must have been a lot of bullying to get systemd across so many systems.

I followed the Debian discussions when they debated init changing.

It was not pretty, there was a lot of things, but I don't remember any bullying. It was simply a very long uphill battle from a sort of loose group against the majority of maintainers that wished to stop worrying about 99% of init script problems.

Systemd is not perfect, never was, but it gets shit done, whereas no other project does in this regard. (A lot of people wanted to tackle some parts of what systemd does, but that was late and insufficient.)

And, all in all, there is always room for a systemd2 in Rust, distros would switch to it in a heartbeat, if it would be better.
Could Apple, in a software update, put Facebooks apps in a sandbox, or wrapper, or VM type thing? Not sure of the technical term, whereby the device would only return encrypted or dummy device data? So that regardless of what permissions FB app has been given, each time it goes to get that data the VM interrupts and asks the user.

Say, FB wants to get your location, even though FB has location permissions a pop up says "Facebook is attempting to find your location. Do you consent to sending your location to Facbook?" "Facebook is attempting to read the Names, Telephone Numbers and Addresses of everybody in your contact list. Do you consent to this?" every time facebook app makes the request?

I'd be a bad user experience, but Apple could say it cares about privacy and blame facebook.
Connecting Brands to Niche Markets, Nothing Better Than Mobile
You need some way for the device to communicate with your backend, and private keys work pretty well. For the devices I work on these keys are unique for each device, and transferred over to it during the setup process.
AWS lambda
When a Memory Allocator Hides Security Bugs
Before even clicking on that link I was going to say I bet this guy is citing an anti tax think tank disingenuously pretending income tax is the same as tax burden.

And, lo and behold...
I feel like the translation overstates the fine-grainedness of the consent a bit, it's more along the lines of "Swiss Media Panel is a consent-based [i.e. the user has consented to having the application running on their device] application that tracks the behavior of internet users"

Security and also how far they actually go in separating the tracked data from your demographic & potentially personally identifiable data is definitely a concern, next to the obvious issue of how informed one can consider the consent they get from their users...
Not sure what the "challenge" is.

That -- being warned and taking time to close a vulnerability -- has happened time and again.

Some examples:

https://www.computerworld.com/article/2523034/security0/micr...

https://www.wired.com/2010/01/microsoft-zero-day-flaw/

https://news.softpedia.com/news/Microsoft-New-About-the-Crit...

And I'm not sure how closing a vulnerability in a backend service, which is your main (and income-wise, only) product (as is the case with Google, FB, Twitter, etc) compares to a vulnerability to a secondary product like Facetime.
Bad idea. This would probably lessen innovation & freedom.

You could make this argument for any piece of software, then you realize that each software solves a different problem, including technically & philosophically.
Caught doing what? What they did was perfectly fine. Legal even under the GDPR, and people were being paid for it, which is the usual lament here ("nobody is paying me for my data").

Admit it, you just hate Facebook.
>The attention given, coming form european non-tipping culture, just feels absurdly fake to me.

Agreed.
It's the Columbia disaster for which Tufte blames PowerPoint: https://www.edwardtufte.com/bboard/q-and-a-fetch-msg?msg_id=...
Generally, my policy with accessibility has been to let other people deal with it; specifically, the people making the software that your app/website/document will be using to display itself. It's pretty easy to make passable accessible apps if you use standard platform controls and lay them out in a standard way, or acceptable websites if you use HTML semantic tags properly.
>Are any of these examples in recent history, in software terms?

Yes.
I've long been curious how exactly they determine the "registered domain", and your comment made me finally look for the answer. It looks like they use (and semi-manually maintain) a list of "effective TLDs": https://www.publicsuffix.org/

The maintenance process is described here: https://github.com/publicsuffix/list/wiki/Guidelines
Yes, tips are bullshit
When we change the role from passive to active we also significantly change the effect of incompetence and laziness, which are ordinary human traits we should expect to find everywhere and most especially in organisations with no public oversight like the registrars.

Peter's scheme involves a tremendous number of these delegated requests going out every day. Doubtless the vast majority will be legitimate. For all those the lazy (but incompetent) solution is to short circuit between Step 3 and Step 6. Everything appears to work exactly as you'd hope, indeed it's better and more reliable than you might expect. Right up until bad guys realise there's a short circuit.

We know Certificate Authorities, which actually do have oversight and are required to keep proper records and so on, have repeatedly got this sort of thing wrong, short circuiting essential validation steps and not realising because the happy path worked. We should expect it to be _at least as bad_ and probably much worse with registrars.

Hence, as I said, at best a side step.

It's also a huge pile of work. To do this you need to get all the registrars on board, or at least so very many that you can declare the others "unsupported" and cease issuance for their domains without a significant backlash. I would be _astonished_ if anyone can put together a working system, deploy it to all/most registrars and so on in under a decade. I might be on board with a programme of work taking a decade if it was a huge improvement, but as I wrote above it's just a sideways step.

Method 3.2.2.4.1 is dead right? So it seems as though other actors in this space also recognise that "Just ask the registrar" is not a workable solution unless it so happens you are the registrar.
Lithuania much like France exchanged a lot of electricity with other countries. Nobody has gotten a country close to 100% nuclear becase it’s way to expensive.

Wind/Solar don’t fit the demand curve, but they crush Nuclear from a cost perspective. This is making Nuclear non viable as the gap ends up looking more random which is the worst place for Nuclear power.

Basicly, if wind/Solar is 50% cheaper than Nuclear having a 30% over supply of wind/Solar still costs less. Resulting in the need for zero power most of the time. In large power grids Hydro power can then fill most to all of these gaps. Nuclear is then competing with storage but it’s costs per kWh go up when it’s spending most of it’s time off.
As a user, I prefer to strip styling from a site. No need for who knows how many people around the world to tweak and retweak the fonts, especially when the top competing priority is brand signalling.

Soon you'll just be asking Siri things without knowing where information comes from, and the information will likely be derived from many sources, so crediting any single author becomes irrelevant in a world where many authors contribute to any result or answer.

While we are different human beings, we don't even have the same computer lenses. I believe the digital assistant will be the one homogeneous interface to rule them all. Everything should become an API, whether you're offering content or services.
Instagram: How not to do messaging
The thing is that a cache line is 64 bytes, and loading from main memory to cache is orders of magnitude slower than from cache to register.

In the std::vector case, it's loading 64 bytes into cache just to get the heap pointer. Then the heap pointer tells it which other 64 bytes to load.

In the SmallVector case, the 64 bytes that contain the heap pointer are likely to include the entire vector, entirely eliminating the second load.
Firefox is doing amazing work with Servo browser engine and its modern multi CPU architecture. Some more patience and they will give other browsers (speed) run for their money.

At least tech wise. It is hard to compete in market share with Google's internal Chrome promotion on google.com.

Not surprised if EU will intervene in some point on Chrome choke push.
Well, "very very Northeastern" would be accurate again, wouldn't it?
This is just the old array of structs vs struct of arrays trade-off, right? This is true of pretty much any programming language's low level data structures.
The actual tip: https://pbs.twimg.com/media/DyGIwiHVYAAJaxH.jpg

You don't see this kind of stuff every week, and surely Apple has the resources to at least confirm it.
> How many billion dollars is Apple keeping out of the US for the sole reason of avoiding paying tax on it?

There is no point in paying tax on offshore money if they will immediately then spend it outside the US. There is no benefit to bringing the money onshore so why on earth would they do so?
This is definitely not true of ReasonML. ReasonML is just one part of a larger ecosystem that is pushed forward by a combination of academia and industry, and ReasonML is is very community focused/driven.
>Why should law-abiding citizens have to bear their costs?

You seem to negate the fact that the costs are burdened by law-abiding citizens to have them in jail/prison, anyway.

Certainly, the costs of social structures for those people are far less than a for-profit system of incarceration; which, as it is currently structured, only benefits from a minimum volume of people being maintained in the incarceration system, itself?

You admit that there's different classes of people who commit the petty crimes, so that - in and of itself - demonstrates that each class would require specific redress for their situation.

Finally, since they are petty crimes, in and of themselves, wouldn't facial recognition be rough the equivalent of dropping a bomb on an ant hill? The scope of the effect far-outweighs the supposed benefits.
You can’t be clearly informed and not aware at the same time.

Which makes this fraud, right?

In the same way automotive manufacturers are held accountable even if their was no intention to cause harm, the software industry needs to be held accountable.

We need to have professional organisations, and government regulators, working to ensure some kind of general industry best practice, where software developers can initially start getting tapped on the shoulder, then given a series of rapidly increasing penalties until the industry gets the point that it can’t keep making out it’s the wild wild west.

And this is why I don’t believe software development is a proper serious profession. The proper professions, here in Australia at least, are granted the authority to witness statutory declarations. I can go to a qualified vet, doctor, engineer, chiropractor(!), police officer, school teacher, postal worker, the list goes on[1], because these professions have a chain of trust.

And yet we trust(?) software developers and their employees with our most sensitive data!

1. https://www.ag.gov.au/Publications/Statutory-declarations/Pa...
As an American I also agree, since restaurants in Europe have to pay a higher wage, they can only afford a couple wait staff, which definitely makes it harder to get service.

Waiters in Europe also seem to be less interested in coming to your table.
> Chromium is also (IMO) significantly more difficult to compile than Firefox.

That's a terrifying thought. I remember a time when FF was widely considered the worst open browser to build and embed, which is why Apple went with KHTML when creating WebKit.

If things got so bad on the Chromium side, I wonder if it's time for Mozilla to put some effort again in making Gecko easily-embeddable...?
Tipard DVD Creator 5.2.22 Crack Full Version
The article talks about showing warnings when accessing misstyped URLs, not "killing URLs."

Nothing in the article I've read suggests they're doing anything of the kind. What a bunch of clickbait bs.

If you search this HN comments page, you'll find 3-4 other people claiming the same thing.

This article is an insult to news reporting.
> "Thought: It's time for Mozilla to get down from their philosophical ivory tower. The web is dominated by Chromium, if they really cared about the web they would be contributing instead of building a parallel universe that's used by less than 5 percent?," Auchenberg wrote.

Damn. This is like some dude arguing that Washington should have surrendered after losing Philadelphia and Germantown. I mean, winter in Valley Forge?

Which is not to say that there's any hope, in this case.
This feels a bit tech-supporty. Are you sure you can't? There seem to apps for doing call blocking on both Android and iOS. I'd be absolutely shocked if none of them allow checking against your contacts.
> If you already have a middle box, then great, but usually malware (eg a nasty Chrome extension) likes to stick around to snoop on user activity. (Preferably on all user activity, forever.)

Well I'm certainly seeing why people get so frustrated with systemd junkies. Killing a "rogue" Chrome extension doesn't provide any meaningful form of security. There's no privilege escalation in play here. Whatever snooping it could do with you logged out could be done when you're logged in. Snooping on all users? Yeah, not going to happen without privilege escalation (which systemd will happily provide). So while systemd introduced this obnoxious behavior that broke all sorts of commonly used utilities no benefit was gained (except perhaps reinventing the wheel).

Meanwhile if you're worried about security don't forget that systemd has introduced a number of denial-of-service vectors (including one that results in a kernel panic) as well as an actual privilege escalation bug (which, in a fit of irony, could've been mitigated significantly by respecting return value tradition of zero = success). Take a look at the privilege escalation bug remedy, the vuln was due entirely to breathtakingly sloppy code. I'm ignoring the whole dereferencing unchecked pointers thing because that's such laughably bad practice I don't even know where to begin. Then take a look at Lennart's response and his unwillingness to mention CVEs anywhere.

The end result is that you have a combination of: breaking changes offering zero benefit, sloppy code resulting in reduced security, and a complete absence of any sort of security culture. Lennart, IBM, and systemd can claim all sorts of things (perhaps there really is a value in moving away from shell scripts) but security? No. There is absolutely ZERO merit to any claim that systemd increases security. The lack of security culture and defensive coding that permeates systemd all but guarantee future vulnerabilities.

Edit:

But wait! There's more!

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9445

Systemd is also remotely exploitable. Sure, no program is perfect, but most programs strive to decrease the attack surface where systemd strives to increase it.
Really helpful when designing models in openscad
> The subscript operator can modify the map if the key if the is not present, so it is not constitute and thus formally not thread safe even if you are sure the key is always present.

Yeah, I know why it is unsafe in general, but I don't see why the C++ standard can't specify that operations that don't invalidate iterators are legal to perform in a concurrent manner provided they touch disjoint memory locations (for associative containers, subscripting is defined to be one such operator, as long as rehashing does not occur like in this case).

> At and find are always constitute so you can use those instead; no need to cache iterators.

Now that you mention it, I could have just called find every time. I guess I'm too used to it being O(n) for other collections and avoided it somewhat irrationally ;)
It's the same argument about file hierarchies. Apple doesn't think users should even be aware that there is a file hierarchy (iOS). I don't think users are confused at all by files and folders. But somehow Apples seems to think they are.

What I do not understand is that the percentage of people who didn't grow up with a computer is only going to go down, not up. These evolutions I think go in the wrong direction.
That just shows how many Facebook employees are on HN
When I clicked on the link, I got an alert from my AV about the site having a JS Miner. I was able to reproduce it 3/3 times. Fair warning!
Solutions:
True Sight browser extension to identify CDNs like AMP[1].

It shows an icon in the address bar to inform you whether the website is in part or wholly being hosted by CDNs (eg Google, Cloudflare, CloudFront, etc).

You can block partial CDNs (eg scripts, images) using NoScript or uMatrix, for full webpage CDNs like AMP you'd have to observe the True Sight warning and navigate away manually at the moment.

For partial CDNs it's also worth noting the Decentraleyes extension, which loads popular resources from it's offline source rather than the CDNs.

[1] https://addons.mozilla.org/en-US/firefox/addon/detect-cloudf...
This isn't newsworthy at all; it's just a guy expressing his personal opinion and he happens to be employed at Microsoft.

My opinion: No, of course we shouldn't have only one browser base to work with.

Even more opinion: Chrome's extensions are consistently worse than FF's (can you even get a decent vim extension like we had with vimperator and does it even have tab groups + tab containers?) and FF quantum seems faster to me than any Chrome I've run.
Haproxy only solves a single Part of the Problem. If you do DNS based failover you should really Check how clients behave, when one node goes down. Without a floating ip or a cloud lb, some stuff will be troublesome
Yeah Facebook definitely just shut it down and walked away, definitely.

No harm done...
Please write them down and publish somewhere; we need more proposals that empower users to be out there to see and discuss.
Show HN: Handfully Crafted Illustrations, Characters & Landing UI
It is for a lot (dare I say, most?) people.
New website for graphic design and web designing inspiration
Hello friends, I have just developed a website for graphic design and web designing inspiration and idea. Here I have compiled lots of cool and trending designs which you can use to get inspiration and ideas. The link is https://furbito.com . You can also submit your designs to showcase your creation.
> I don't think users are confused at all by files and folders. But somehow Apples seems to think they are.

Agreed. And am glad that they were forced to reconsider and have introduced a FILES (https://www.imore.com/files-app) App on ios.
Very nice. From wikipedia:

'It is the most famous example of an evolving design of locomotives by Stephenson that became the template for most steam engines in the following 150 years.'

So much innovation from a small, rainy island off northwest Europe.
Interesting work.

This proves that the Borg's collective voice uses " DNN + Spectrogram" to synthesize their voice from the drones auditory cortex, compare: https://www.youtube.com/watch?v=ql83z8yBx2M&feature=youtu.be...
No, it doesn't. Google is still responsible. The team at G maintaining it is still responsible.

An ML solution is a completeness vs correctness trade off. ML can make the blacklist virtually infinite long, whereas a human team would likely burn out (and make more/different mistakes).
Docker tutorial for beginners
Content optimization for voice search
A 19 year old can. If he access private discussion with his 13 year old brother, indirectly the study will gather data of the kid. RGPD don’t care if you gathered data directly or inderictly, you are liable.
>You’re accepting a real threat (global warming) to sustain an imaginary one (nuclear meltdowns of modern plants).

This deserves a lot of upvotes
ElasticSearch module for ProcessWire
Indeed, I also use Jekyll for this.
Quality Assurance in App Development – App Owners Perspective
In an utopia scenario you own the digital assistant. It is based on open source (even if deployed to cloud ) and you carefully curate the data sources is has access to.

In a dystopia version megacorporations own and control the digital assistant and can decide what information it feeds to you. It will become the marketer you trust, which has a significant influence on the decisions you do.
I'd encourage everyone not to support colab or any other proprietary lock-in platforms. But do as you will.
> There is a trend among web designers to use large, clear fonts and less clutter. I really like this style.

I don’t. Because typically these redesigns do away with visually distinct borders on tables/elements/zones and make everything flat and indistinct. Because that’s cool right now.

The new Kinguin frontpage is a very good example. I hate it.
How would this bypass DRM?
True Sight seems interesting. I am exploring ways to avoid Google Amp completely ...
I would try to detect right before I am about to loose patience and told them that I have deadline now and thus help will have to wait (and then follow up on that).

On second point, some people need to hear that discovery and googling and figuring out and trying wrong options until you stumble onto right one is what they should do. It is not just matter of laziness, some juniors think that if they are confused and lost they are wasting time and something is wrong. They need to hear that it is ok and normal and that it is their turn to train figuring out part.

When you help people too much, they may become too used at that and wont realize when they are ready to start the harder part by themselves.
From a documentary on channel 4 about this, the risk was more to run out of coal before arriving as the fire would have been ongoing since the departure and been quite big.
We do have laws? Numerous companies in the US have been sued over their lack of website accessibility (the biggest was Target, the most recent Beyoncé). The same goes for EU states: Norway recently had a high-profile case and Tesco in the UK was forced to amend their site. The problem is that this approach doesn’t scale.
A thread by Stanford Computer Science lecturer regarding Facebook spying methods
Ask HN: How do you convince management to test before building a feature?
I believe that it's almost always better to build and release something basic and iterate on the feedback you get from your customers than to work on something for a longer time and only release it when it feels "done". My previous assumption has been that this is basic product development orthodoxy. In my case, I was heavily influenced by Eric Ries' Lean Startup book.

This week, I've learned that management has been planning a major new feature that would take 6-9 months to build, but don't have any indication that they've tested the idea or want to do a minimum viable product.

I don't see this as a problem just yet, more of an opportunity to initiate discussions about building MVPs. The strange problem I have (and perhaps I've had a charmed career so far), is that I've rarely had to actually make the case to a skeptic that the Lean Startup approach is better.

When talking to management, what have been the most convincing things you've shown them about why this is a good practice to follow?
Onavo is back on iOS using Facebook's Certificate to circumvent App Store review