skysight-inc/HackerNews huggingface dataset:
I have Google Fi and I'm not sure this is the same thing. The Google VPN doesn't install a root CA (AFAIK) and merely acts like a normal VPN. It does terminate at Google's servers so they can peek at your traffic, but not any more so than a traditional ISP.

The "secure" VPN dialog only comes up for certain WiFi connections that Google has some knowledge about. For example, when I'm in Chick-fil-A I get the "Secure this connection?" dialog, but I never get it at home or work. I've never had a need to disable it to reach local resources, but I'm guessing you could turn off WiFi and turn it back on to rejoin the network and not accept the VPN connection. I've never had the need to do that so I don't know if it would work or not. :/
The article didn't actually mention whether Facebook were MITMing TLS connections by default or whether they'd observed them doing it at all.
I agree that the law should probably be changed, but for slightly different reasons.

They are clearly informed that the app will track information regarding their online activities, device usage behavior and applications they use.

I think the main issue is that users without a tech background are just not aware of the full implications of allowing a third party to collect this kind of data, even decrypting their HTTPS traffic and tracking everything they do online.

The statement by Strafach in the original article sums it up quite nicely:

“The fairly technical sounding ‘install our Root Certificate’ step is appalling,” Strafach tells us. “This hands Facebook continuous access to the most sensitive data about you, and most users are going to be unable to reasonably consent to this regardless of any agreement they sign, because there is no good way to articulate just how much power is handed to Facebook when you do this.”
Announcing TokenCard Visa Debit Cards
[video] 20 minute summary of password cracking, easy to follow
Trying hard to find something to disagree with in your comment, but no luck :) Seriously, I think I did at least mention in the blog post that the vanilla approach is something I'd mainly advocate for small projects, with few members. The kind of situation where I am myself, at the moment.

The thing is, I see so many reach for the big guns and over-engineer their new, tiny app that they're developing themselves, with a friend or perhaps a small team. And I see overuse of components in general - the tendency to just pull in a new dependency via npm for something completely ridiculuous. This post was not about big, in-house enterprise systems development.

And in fact, thinking about my experience from that financial company mentioned earlier, I would greatly have preferred a standardized, external framework before the in-house developed macro/library mess that worked but was pretty much undocumented and whose inner workings were known to a very small number of people.
It would be interesting to see a tree map of the sizes in Linux, like how big are the drivers, the network stack, ...

Maybe 99% of those 130Mb are the drivers, a lot were added to the kernel since 1997 I guess
IMHO I think that one of the main problems with CSS is that it doesn't have an explicit model of text. If you have that, then a constraint-based designer can take you through wizards to ask to to consider eg. When there's more text than space. Springs, struts etc. Can take care of layout. Controversially I think we should replace/remove div tags as they don't make all their behavior explicit vs flexbox/ cssgrid etc. Every object should have explicit layout behaviors defined. Then you can compose them or create new objects for undefined cases.
Christ I cannot stand Office 365.

For some reason, I cannot open files that are in my OneDrive folder without O365 authentication shitting itself, and refusing to save files. This means to edit files that are in OneDrive, I have to move them out of OneDrive, open them, edit them and save them, then move the back into OneDrive.

The situation with having a different fucking login/account for every single fucking Microsoft service (Skype, Office, etc.) even when you're on the business tier for them all is insane and endlessly frustrating.
Using worker_threads in Node.js
This isn't paradoxical at all, when both options are horrific there is little benefit to cover up one with the other and claim a solution.

Furthermore a short term windfall from selling organs will not provide the skills or assets required to prevent long term starvation and homelessness; so now the horror has been compounded: homeless, starving, and prone to debilitating illness.
Having studied linguistics, I already knew I had a "flat" or "newscaster's" accent.

But the word pairs they chose were interesting.
Could you give us some pointers on where to learn more about this connection between design patterns and abstract algebra?
Node.js Development Can Benefit Your Online Business in 2019
Impingement on quality of life by the seller of an organ can be, and is translated to a value statement.

How much is a Jew's life worth vs a Christian's life vs a Muslim's life? Or would it make you squeamish to try and adjudicate that? Or are some things not worth putting a price on because of principles, because breaking those principles would have worse second and third order effects?
Shouldn't you then just make sure to use System76, Librem or Raptor machines which avoid this issue?

Of course you would pay the price premium for that level of protection, but interestingly I have yet to hear of someone being compromised specifically via this mechanism.

With all that said, I am very seriously considering buying an ancient ThinkPad, just so I can run Libreboot on it.
and it also reinforces the point that the whole tipping culture is ridiculous
Backbench a PaaS to rapidly build and run Serverless applications
I sort of agree with you, and it might appear like circular reasoning (although it's not really) but what you said just ties into the larger picture - people are not rational.

I say, play to our strengths. Massive roll out of solar now - keep nuclear on the table (it's good tech), but don't rely on it to solve a substantial part of short to medium term future energy need. I also think we should plan for the event of "Global Thermonuclear War". Solar deployments and other renewables will fare much better. You can count on any centralized structures being targeted. That means (large) nuclear power plants and large hydro installations.
I'm also interested in tech stack used. What are you using in the backend?
Then I would say The Elements Of Programming Style, and possibly this one (I haven't read it, but from the description it seems to be what you're looking for):
https://www.amazon.com/Elegant-SciPy-Art-Scientific-Python/d...
Regulations typically aren’t proactively enforced, but retroactively penalized.
$20.- is actually quite cheap for a total invasion of privacy. You can rent out just your Facebook account for $500.- per month[1].

[1]: http://fbdollars.com/
I used to be an enthusiastic gandi customer. No more. I'm pretty sure they've sold my query data, which has caused me no end of headaches and inflated my name purchasing costs.
Disregard the cause for a second - it's still not good PR to focus on a coal fire.
GDPR doen't outlaw the sale of personal data. It just prohibits selling personal data without user consent.

Under GDPR, it should be perfectly legal to compensate a user for agreeing to share personal data with marketing companies.
D printing could give you a better pill to swallow
Exclusive Design
Indeed, according to [1] a bit more than half of the Linux source is the drivers. But I don't know if those proportions still holds after compilation.

[1] https://unix.stackexchange.com/a/223753
Deep Learning Is Easy – Learn Something Harder (2016)
For silence...?
maybe the right thing is just stopping tipping altogether? Then Instacart will be forced to pay a somewhat reasonable wage
Not literally PowerPoint:

The Challenger disaster was in 1986, while PowerPoint 1.0 shipped in April 1987
And incur more cost. The captain likely was under pressure to perform and get to harbor as fast and cheaply as possible.
You haven't requested systemd, you started a user scope, and haven't started a service for what you need.

POSIX is nice, but rather lacking in certain aspects, such as security anf administration-friendliness. cgroups help with both, but people have to understand them and use them well.
They bumped up against modern considerations of plug-n-play. You'll see that it's the kernel which makes up most of it, the rest of it is quite small. If you wish to compile a kernel for your own hardware, you can slim that down by a _huge_ amount. I've managed to go from around 130 mb -> 25 on one machine.
People throw away or resell other stuff as well that has Wifi credentials in it (or will have in the future):

- sale of used smart TV

- thrown out wifi range extenders

- used wifi enabled cameras

- your smart fridge, toaster, whatever

You will not get Google Home Mini / Alexa levels of security with these.
What if my style requires a triple outline around a header?
You read my thoughts. It really is insane.
What would the worker have received if the customer had tipped $50 on a smaller order? Would Instacart have pocketed the additional $40?
There seems to be an attempt at a single-sign on solution, but when I used it about 2 years ago, it sent me a on trip to about 6 different domains (live.com, microsoft.com, office365.com, something with sharepoint in the name, and several subdomains of those).

In the past, I've given folks the tip to not open links if they send you to a different domain than the link suggests -- by that standard, the SSO looks like a complete scam. It takes some serious knowledge of the Microsoft products to know that those domains all belong to the same corporate entity.
> I don't mean at all to diminish it as an achievement to complete one in any time

Good.

> but

Oh dear.

> I think you are minimizing the effort many people put into training

Nah. Just pointing out that people who say "you must do 80km a week to run a marathon" are talking gibberish. If they added "sub-3", sure, I'd accept that as probably valid (although I know people who do sub-3 without 80km a week.)

Like I keep saying, it's all anecdata and there's no hard and fast rules yet people insist on pontificating as if there are.
hmm... what if tipping itself is a problem?
Causal Inference 3: Counterfactuals
I'm pretty sure he just means he doesn't have to set aside any time to directly interact with the app himself
Heh, maybe it's the opposite then! Like an accumulation of shitty trackers, because you don't use uBlock or privacy badger or the like. That would be pretty ironic
You are not alone, just in a minority of people who are not familiar with something that is almost integral to US culture: that most people in the hospitality/services/restaurant industry depend more on tips than wages, and that the bigger the business (chain restaurants vs small local places) the more likely that their system involves pooling the tip money.
Could they've achieved this another way? Still getting all the metadata for market research without a root certificate? If not, the step wasn't that appalling.

Compensating people for information on their behaviour is nothing new. If you participate in a program to report daily purchases you probably give away as many information and yet it's not viewed as controversial. The fact that Facebook doesn't have a great track record is problematic but generally, I don't see a big issue.
Online Bayesian Deep Learning in Production at Tencent
Your phone doesn't just contain private data about you, it contains private data about people you know. Selling them out like this is a scumbag thing to do, not to mention it's probably a TOS violation of every service you interact with. FB basically solicited people unwittingly commit crimes on their behalf.
The emerge of digital health startups provide services via the internet using smartphones, which allows patients to communicate with their preferred doctors to get treatment.
Here I read an article about on-demand health startup revolutionizing the medical industry: https://www.odtap.com/on-demand-health-startups-revolutioniz...
A few years ago my parents were getting a lot of spam calls on their landline. Basically all of them were automated calls, either a recorded message or you were connected to a person shortly after the call was connected. I bought an OBi100 [0], which is a small device designed to be a VOIP adapter, but you can setup rules on how calls (incoming or outgoing) are handled.

I setup a rule that if the call was from a withheld or foreign number, it would play an automated message asking the user to press the number 1 to be connected. This alone stopped basically all the spam calls. I'm surprised how well it actually works, I assume the caller detects it as a voicemail message so just hang up.

I imagine most carriers could implement something like this relatively easy. Sorry Google, no AI needed here.

[0] https://www.callcentric.com/support/device/obihai/obi100
> 20% should be a baseline, for bad service, 25 for "decent" and 30% for good service...

where does this insanity stop? 50%? 100%? No matter how much you tip, people will grow to expect it as baseline, and then some more
complain to distros then. (systemd set the secure default, even if that breaks backward comp, as usually upstreams do, when it comes to security.)

or better yet, read the release notes, it likely mentions this breaking change. (if not, that's a bug.)
Reminds me of chromium dev discussions about severely limiting ad-blockers, for your safety of course, and only for the users.

Not for Google's massive benefit.
Elasticsearch, how we paginated over 10 000 items
The straightforward way to separate content from presentation is to have a step that transforms that content into a specific form: 2D screen based, 2D page-based, aural, etc., including different purpose like a small read-only mobile gadget vs a full-screen desktop app. Web technologies actually have a beginning of this: XML source + XSLT processor, which is a general-purpose declarative tree transducer. But web community took a wrong turn here.
Oh god I'd forgotten about AMP4Email. It's such a blindingly obvious bad idea, and the GitHub response was overwhelmingly negative. They do not care at all.
Can someone summarize what mathematical operations are used in the reconstruction? E.g. is there an (inverse) Fourier transform? (Asking since the first thing the ear does is basically to perform a Fourier transform, separating the auditory signal in different frequencies).

Or do they use a more opaque ML approach?
I probably misunderstood you. From the very beginning of Gmail, Google has been very upfront that they do look at your emails, each and every one of them. They use automation for that, is that what you meant? No fleshy humans physically reading with their own eyeballs?
The WiFi password will be there in any case, obfuscating it is not a big hurdle, and asking a secure element in a $30 lightbulb is unreasonable in a world where many PC still ship without a TPM chip.

People sure should have a dedicated IoT network, but in the grand scheme of things, home networks are not usually that sensitive, as in no important yet unencrypted service will be exposed internally as it is typically the case in enterprise networks.
That may be true for children (who should need parental consent which Facebook apparently asked for). But just because someone doesn't have a deep understanding of tech doesn't mean they can't consent. You can't exclude people from signing an agreement just because they don't have a CS degree.
I'd expect that you can then sue the fax vendor?
Tough question: would targeting the offer away from poor people make it more ethical?
You are a wonderful person. Keep doing you :).
Some of the recent fires were thought to be caused by PGE negligence. Once brought under control and investigated, it turned out to be your very standard sparks-on-the-road and dry bush fire, just grown to epic proportions. Nevertheless some maintenance issues were found in PGE’s service record and they are still being held accountable by the state, for a fire they didn’t cause. Right criminal, wrong crime.

I’m not a fan of PGE, and I’m personally very happy their filing for bankruptcy, but there does appear to be some political grandstanding and scapegoating here.
I know right, I run openvpn as user nobody and I keep thinking that nobody user better stay logged in!
When using Google Fi, can't they look at all your traffic anyway even without an extra VPN?
Somehow my responsibility

Right-to-work state or not, I know if no state in which that $20 clawback (as you describe it) was legal.
AWS: How to get notified on root account login
Become CEO of this sexy startup for just $1 a month
About Microsoft not eating their own dog food.

Nadella used an iphone secretly for a long time and then openly and then finally killed Windows Phone.
probably they underestimated the risk
Got Neutral, but it was missing some utah valley isms that I'll slip into if careless.. for -> fer, creek -> crick, mountain -> mou'n (or other nt+vowel+n suffix, n and t are soft enough to not be there and the vowel is replaced by a pause; clinton -> cli-in/cli'n, mitten -> mih'n...), both -> bolth... The NYT one linked was interesting too, the heatmap included everything aligned and west of Utah minus Arizona, plus a bit of the northeast and great lakes areas. The NYT one was also interesting in that a few examples, like roundabout, had me think for a minute about what I'd say in a conversation vs what I expect to hear (traffic circle) in general from e.g. google maps and might say instead if primed with it.
Selling a kidney is NOT the same as telling companies about your behavior. Organ transplants are extremely risky and should only be done if there's no other alternative. The risk of death is very real in those cases. I don't think that's true when you install a Facebook VPN.

Some people value their personal data more than others. That's why no one should be forced into giving up their data (essentially what GDPR is for). But if they want, they can of course set a price for their data.
That's true, but I would say GraphViz is a textual interface for programming graphs. Not a GUI for modeling graphs.

I'm very much for using something like GraphViz for visualizations (for exmaple integrated in AsciiDoc) to have a very good diffable plain text documentation that's nice to look at.
isn't this just a sign of a still young field (data science)? maybe we'll soon start to enter a consolidation phase.
> If I buy a used iPhone for $100 from someone who would die if they didn't get the $100, have I acted unethically?

In some cases, you have clearly acted unethically. For instance, if the iPhone is worth $800 and you have more money, but you're getting the $100 price because the man is dying now and there's nobody else around to offer him more than $100.
To be sure I played a little fast and loose with "almost as much", but to be fair, 1) the decommissioning is unfinished, overbudget, and behind schedule, and 2) building a containment building around a reactor that hasn't already exploded is sure to be much, much cheaper.
That was the nice and friendly POSIX way, turns out it's really convenient for malware to stick around that way. Now user session isolation and termination works (cgroups), but it of course breaks backward comp.
Because this 'dude' is a google developer 'expert'
It’s open source. You can use it on Linux rather than being tied to MacOS or iOS. What’s your objection?
China’s coal mine methane regulations have not curbed growing emissions
You can use Instagram and Facebook without the app. It's a lot easier to limit what data Facebook has access to that way.

Block 3rd party cookies, install an adblocker and delete the cookies when you are done with FB/Instagram.
The Rebirth of Groove
There's always TinyCore Linux.
You are absolutely right. I found many Projects and YouTube Channels in the past which were claiming "no copyright" music but have either many different crediting rules in small print or have claimed ownership via YouTube or Soundcloud.

As a Music Artist I found out early, that Music-Copyright is not trivial - just because someone says a song is copyright-free and submit it, it really is - still someone else can claim ownership rights on parts of the song etc.

I realized that I can't easily get some songs from the internet and put them online. I decided to give my own music away for free as I can assure the rights and I only used license free material in the music. In the hope others will follow.

To answer your question: All submitted songs to wowa.me will be checked and reviewed one at a time on quality and ownership. I use tools to ensure this song is not already registered etc.
Furthermore every submitter has to accept terms of submission.

But you got me on two important things:
1. Submitting System needs to validate email-realness via double-opt-in or so.

2. How multiple commercial usage can work? Example: artist uses the free beat/soundtrack and publish this new song (with vocals) to all platforms (spotify, itunes and youtube network) Question: Will YouTube copyright mechanism take effect if another artist uses same free beat with other vocals?

thanks
And if I have enough money, work in tech and still value $20 more than the (additional) data I give up? Especially knowing what's already collected the difference isn't necessarily that big. Am I not allowed to give consent then?
I used to have a wicked Boston accent, but I lost it when I moved to Silicon Valley. It comes out sometimes, especially when I've been drinking. My test result was Western.
Hiding the URL has nothing to do with seatbelts on a car.
"Sorry we got caught"
Not sure if you are serious.

I am very aware of data I share with Facebook. I take measures to prevent them from getting data about me elsewhere.

Giving up close 100% of privacy just because you are currently giving up, say, 20% of privacy seems insane.

It's like saying "let's throw all our plastic in the countryside because some people are littering already".
No extradition for civil judgments, so no. In principle, the successful litigant could seize any assets Musk had within reach of the UK to pay the judgment. Not sure how straightforward that would be, as it'd depend on how Musk's finances are structured and how much he travels.
Google Call Screening almost solves the parent's problem. The only thing missing is a setting to have it automatically screen all calls that aren't in my contact list. Then my phone would never ring unless I know you or you waited/responded to the call screening.
Knowing how much outright spam a security email address gets... (luckily spam filtering is good enough to not surface them but a human still has to periodically go through the spams just to ensure there were no false positives)

Even then, the modern day incentives around vulnerability disclosure are not helping. Because security bugs are awarded bounties based on their severity, every single reporter has a financial incentive to hype and inflate their findings. "URGENT" this, "CRITICAL" that, "ACCOUNT TAKEOVER" due to already compromised computer/device, you name it.

Teams without sufficient resources will spend a lot of time dealing with the maladjusted severities. And yes, I believe the "mal-" prefix is warranted. If your report does go through with inflated severity, you stand to make more money.

I am starting to think that a reasonably run bounty programme should state up front that inflated severities in bug reports will reduce their payouts.
Any large software project is taken over by bureaucrats if all basic issues have been solved by the real programmers.

Chrome introduced garbage like rounded corners, now this.

It's the Gervais principle in action.
Start by naming and shaming. Its not much but there you go:

* CEO James Beriker

* investors Sherpa Capital and Menlo Ventures