skysight-inc/HackerNews huggingface dataset:
> There is no practical difference between paying less "because tip" and not paying the tip.

There is, because the pay can't go negative.

> The legal system is not staffed by robots, either. I don't see how they can defend a class action regardless of what words they've written on a TOS.

It depends on what the lawsuit is for. Normally we have things like "minimum wage" but those don't apply if you manage to convince everyone it's a contractor situation. If they can be classified as employees then there's all sorts of lovely anti-tip-taking law. But that's a big if. And I don't think contractors have tip laws? It's not generally illegal to say one thing about how your company allocates money coming in and then do another.
Other discussion here: https://news.ycombinator.com/item?id=19032636

This is a better article though.
The rise and fall of a super-intelligent, self-aware Facebook game
You can enforce certificate pinning in your own native app. You can even go as far as not trusting the hookable (on a JBen device) system libraries and link in your own OpenSSL or something similar.
We shouldn't be ok with people needing money that badly, and we also shouldn't be ok with creating an economic dependency on those people selling their privacy, the same way we've banned economic dependency on child labor. That is not at all equivalent to banning homelessness. It's more like banning hiring homeless people to fight lions with their bare hands for entertainment.
Trueface Privacy by Design
I'm in the Netherlands and I hardly ever get any spam calls on my T-Mobile phone. Is there some reason like Dutch regulations, or are spam calls pandemic in the US because of American deregulation, or am I just unpopular with the spammers?
I fail to see how the gender or ethnicity of the company owners is relevant here. Would Munchery's behavior be okay if it was about a bakery owned by three white men?
My ISP blocks port 80; I can't use HTTP-01. I'm forced to use DNS-01 which certbot won't automate for my DNS provider. Why can't webroot run optionally over https?
I've been pretty happy with blacklist blocker.

https://github.com/kaliturin/BlackList

I had to work some magic (which I have since forgotten) to convince my S9+ to ignore this background process, else it would stop working after a few hours.

The key thing that I wish it had was a quick way to allow unknown calls for a specified time. This would have been helpful when given the option of staying on hold for an extended period of time or receiving a callback - or when you get that "my connection is crap, let me call you back on another line."
API Testing – Build a Test Harness for Your APIs
Default ring: three seconds of silence, no vibration.

People you actually want to talk to: custom ring/vibration. As a bonus you can assign different rings to people so you know “oh hey that’s Mom” or whatever.
The number one reason I constantly use desktop mode is so that I don't get AMP pages. I've even switched search engines to get rid of them, but still have to sometimes use Google search because it finds what I'm looking for.

>You can't force everyone to adopt the "amp shouldn't exist" model just as much as you can't force "electron shouldn't exist and everyone should write native apps" on others.

Considering that the reason AMP is even used is because Google puts AMP results higher in search results you could argue that Google might be leveraging their market position into using a technology under their control.
The second flight after the Challenger crash came literally within inches of ending up the same way as Columbia's last mission, as a loose-foam impact dislodged an insulating tile from the underside of the nose, which fortunately was at a point backed by a relatively thick steel mounting bracket for an antenna.

https://spaceflightnow.com/shuttle/sts119/090327sts27/

As with the final Columbia mission, attempts to study the damage were thwarted (though in this case on specious security grounds, as this was a military mission.)
But tax shelters aren't just manna sent down from Heaven to small island nations. They're products of the tax code- what we tax and how much.

If "tax shelters" are nonproductive, that doesn't say much of anything about the tax rate directly- it's an orthogonal issue. If we're taxing things that we want more than things we don't want, that's the problem!

The tax rate sets, among other things, how strong of an incentive folks have to do things that are taxed less. Right now, some unproductive and sometimes downright absurd things are taxed less. Playing with the tax rate just sets how big of a problem that is- to eliminate it, you need to do meaningful incentive engineering.
Want to give out to https://traefik.io/ as one of the few reverse proxies that has full native support for TLS-ALPN-01. Easy way to add this in front of older servers, and it supports reading config from Consul, Redis, or even Docker/Kubernetes tags. Very nice product, it also supports DNS-01 validation for wildcard certs with many providers, unfortunately you have to set it to either DNS or ALPN mode, it can't choose which one to use based on context.
VERTICAL CLEAR BADGE HOLDERS
The vertical badge holders are designed to be worn on, with the retractable tether, lanyards, or some other the same device, and these are all made available with different colors to choose from depending on your taste and use.
https://aboutsimplethings.webs.com/apps/blog/show/46316695-vertical-clear-badge-holders
The operative word here is was. Everybody else was making toys. They aren't now.

Tesla might be the most impactful EV company, in that you can make an argument that what Tesla did (and, to be frank, what they talked about before they did it) changed was to is, but Nissan, GM, and Hyundai are all making EVs that are decidedly not "toys" and Tesla's advantages in the EV space (not necessarily the creature-comforts space, but a big reason why I won't buy a Tesla and am buying a Hyundai Kona EV is because I don't want a giant tablet screen as my instrument panel) are shrinking.
I don't think you understand my argument at all. I'm suggesting that the tips be rearranged so that the working is making significantly more than minimum wage, and the company can't scam their way out of paying what they promised to lure in workers in the first place.

I'm all for bringing a legal hammer down on them! I'm just saying that as far as personal action goes, getting them to lose money while their worker gets a healthy wage is better than a boycott.
> the kids know all of their data is being tracked for money ( and presumably are happy with it)

Yes, and?

Kids (and some adults) frequently send demeaning nude videos of themselves to public web forums (and promptly get harassed IRL). Are they being defrauded? Or just act that way, because they are naive and can't read emotions and body language across the computer monitor? Either way, the incident described in article is a clear children rights violation. Whether parents properly understood and condoned it or were defrauded by Facebook, — does not really matter (I suspect, that if any of them faced a trial, they all would claim the later).
Ask HN: What do you believe is Facebook's ultimate place in world history?
It's a pretty impressive accomplishment on paper. Yet there is an ever increasing list of reasons to delete your account. There is always a lot of outrage it seems but few people ever actually delete. They may deactivate, take a break, but most everyone I know, ends up using it again.

Is this solely because there is no alternative (there have been many, some still exist)? Or because the network effect (one of the strongest of all-time)? Or that most people simply don't care as much as a very vocal minority (it seems) who is writing so many of these articles and doing these investigations? I wonder...

I created my Facebook in 2005, I was in 10th grade. I want to DELETE mine but it's like a time capsule, it's a piece of history now if you think about it.

Anyways, share whatever comes to mind. Let's talk this out, all angles and caveats. This is one of the most important questions of our time if you ask me.
Feels like every point you mention can be designed in a user friendly way. I’m a UX designer and have some ideas for this.
I’m sure this was approved by product counsel (most features go through legal reviews at large companies like Facebook) and was justified (even using the Enterprise certificate) by arguing that the teens are actually contractors working for Facebook who’re being paid and are have consented (along with their parents, if necessary).
He was only 15 at the time. It would have been better because we would have had the technology decades earlier.
"...enabling audiences across the globe to examine this iconic locomotive in unprecedented detail for the very first time."

"For compatibility reasons you are seeing a 360 version instead"

and what I'm seeing is a blurry smudge that can be dragged between stills on the horizontal plane. Damn shame.
I used to if it was a girl I was talking to or while my friends traveled. I just don't care anymore. Posting stories and checking who saw it, seeing others is a time waster.

I love my work, my hobbies, solitude, family, analog lifestyle as much as possible.
UEFITool
"Men With Self-Confidence Come and See and Conquer"

Women with self confidence get put in a damned if you do, damned if you don't bind. They have substantial challenges trying to self promote. I'm convinced it's mostly systemic, not innate to women per se.
Quick Start Programming Guide for Redis Using Java Client Jedis
You can't install apps though, which for many people may as well be "you can't use the phone"
Double exposure: 24M loan records also exposed on open Amazon S3 bucket
When you have to resurrect 1990s falsehoods to make a point, you have no point.

There are good C++ wrappers to make GTK tolerable to use, although they cannot make it less buggy.
> Why would you attack some guy trying to help you achieve your goal of rescuing the trapped boys, and call him names on twitter

Something I've been wondering about too.
Benzodiazepines have a depressant effect on the respiratory system, and have a risk of paradoxical reactions. In addition you’d need a heroic dose to cause total sedation, so a benzo is usually only a component of along with an opiate to induce “twilight” sleep. For the purposes of this dive obviously respiratory depression was unacceptable, and doubling down with an opiate would have been worse.

Ketamine is very safe, and some nasty side effects are preferable to death.
As I mentioned elsewhere, I recall reading Turing was starting to think about what we now refer to as information theory, but shortly thereafter he met Shannon. After hearing Shannon describe his work, Turing was so impressed he decided to leave information theory for Shannon and work elsewhere.
You could probably detect it by looking at the Common Name of the TLS certificate in use when making network connections.

https://twitter.com/chronic/status/1090399087827083264?s=21
“Eye witness put a person in the area and we just looked at the footage for that time frame”
For it to reach that screening step it has to be tagged as security bug.

Do you really think a consumer would think to do that? Also you have to consider the number of bugs that are incorrectly flagged as being security.
There's been ongoing votes for what's to be included. It is coming along.
Argh! I'll be closing my DoorDash account right now and also sending that website to anyone I know who uses DoorDash.
There appear to be plenty of other unethical companies to work for so this is unlikely to be a problem.
So, if they bill me out at $50/hr, my equivalent annual salary should be $30,000?

Because 50 * 600 does actually = $30,000.
How long is reasonable? Consider the number of incoming bugs, etc
Half of my spam calls these days are from numbers that are supposedly in the same area code as my phone (likely spoofed as I've called a couple back before and the person didn't know what I was talking about when I said they called me) but since I no longer live in that area code I am able to use that as an identifier.
Why do web portals want me to use “their app”
I write mobile apps for our company using Swift for iOS and Kotlin for Android. I do so because that's what I figured out how to do, and we do quite a bit with BLE and 2+ years ago, the BLE shims for Cordova/PhoneGap weren't very robust.

Everyday, I see more and more push to write progressive apps, or somehow write my apps using web stack technologies. I'm fine with that. I perceive that more and more, the consensus is that you need to have a pretty good reason to write a native app instead of a mobile web app of sorts. I'm fine with that and am not opposed to succumbing.

The one thing I don't understand though is why many large portal sites want me to download and use their native app, when I go to their mobile web site. CNN for example. BBC. LinkedIn. Facebook. On and on. All of these sites and many other "large public facing" companies always have a banner up top suggesting I download their mobile app. If progressive is the way to go, why do these companies persist in wanting to offer me a native app? Have they just not "caught up with the times" yet? Are they able to better monetize me when I use their native app? What is their incentive?
Frequency Analytics – open source private web analytics server
Teenage strippers are frowned upon in most jurisdictions.
Or why isn't the law enforced? Why is the FCC and do-not-call.gov asleep on the job?

Why are scammers even allowed to spoof caller IDs from local area-code numbers that don't even exist? (Thankfully, this makes them blissfully easy to spot. But I fear someday the fraudsters will get up to speed on that heuristic.)

Don't get me wrong, I'm all for a technical measure like the one you suggest — it appears to be sorely needed. But I'm dismayed at how little the government and the carriers care.

And for God's sake can we choose a more convincing scam than "the factory warranty on your vehicle is about to expire"? My car is over 20 years old. The warranty is gone.
I used the support form to request a full refund of the component of all tips that I’ve made that were used to offset DoorDash’s expenses. I doubt they’ll do anything but close the case but it’s wirth the annoyance.

I tried to find a way to close the account but there does not seem to be one.
Same boat. Milking this until it's not :|
Right, but when I tried saying it in my head it seemed weird because my brains turn it into “an hacker news” :)
It seems that this arose from a fundamental issue with a lot of internet specifications. The person developing hosts' SNI implementation did not consider SNI to be a form of unique identification, but rather a way to establish that the server was authorized to serve it--as long as the server makes sure to serve the right files, which is a security issue for them to deal with, the certificate can be returned to anyone who requests it, even just to get a 404 page. It's like the janitor randomly trying keys from a ring, doesn't matter whose key is whose as long as it gets him in and he does what he is supposed to.

The TLS-SNI-01 developers assumed, presumably based on the implementations they knew/wrote, that SNI was an identifier. When used as originally intended, of course, SNI provides the name of a real certificate desired, not a validation string, and the returned certificate authenticates a pairing of server/IP->domain not validationstring->returned certificate. I'm not sure what the TLS standard documenting SNI actually says is the right interpretation, but unless it clearly says that this might be done in the future, it seems to me like a "hackish" solution that could reasonably be expected to cause a lot of issues. This seems to be a failure of setting clear standards for critical security protocols more than anything else.

By contrast, HTTPS-01 and DNS-01 operate using a known authoritative measure, ability to control the actual content of the website. If a bad actor has access to this, its game over. Only EV certs are intended to protect against this. Likewise, TLS-APLN-01 created a new protocol that could not possibly by implemented by accident or by anyone not intending to authorize issuance. It seems like nearly every major security issue (short of hard coding/crypto flaws) involves an assumption or edge case relied upon without consulting relevant standards.
I'm not sure what you mean here, so it may be worth elaborating. I think a lot of people understand how theory, and certainly in communication theory everyone understands the famous equation. I don't see anyone claiming it applies in places it doesn't.
Introducing “trusted content providers”. Default opt in, opt out only if you acknowledge you’ll be exposed to phishing (red scary screen).
Edward Tufte made a great case that data visualization could have prevented the launch... and that PowerPoint was to blame.

https://www.asktog.com/books/challengerExerpt.html
Hey HN, we're releasing our version of self-hosted web analytics here. Very happy to take feedback or questions in this thread. Thanks for checking out our project!
Hey - thanks a lot for the note - much appreciated. will check out TNeo too.
I use "Should I answer?" which serves this purpose very well: https://play.google.com/store/apps/details?id=org.mistergrou...

The main service the app offers is a community rating of phone numbers. Depending on the rating, calls can be muted automatically. You can also, however, tell the app to generally block all calls except those from contacts in your address book.
I moved from NL to Canada. There. are. so. many. spam. calls. here. The idea of telcos by law being required to actively block reported spam numbers is literally foreign here.
Since they were also targeting children, 13 yo and up, they probably fit into both categories and is extra unethical...

As far as I know, when Apple discovered Uber doing some shady, but way less messed up things, they were flat out threatened to be kicked out. Problem is, this isn't Facebook's first rodeo, their previous app that did this was kicked off.
This is exactly why the new encryption laws are so detrimental to the Aussie tech industry.
Why did you try to remove the SOM? I have a devkit, and have ported an OS to it, but have not found any reason to unseat the SOM.
I really like Firefox containers. Having different containers for each of Google, Google G Suite, Hacker News, Twitter, and Reddit lets me have one browser open and keep cookies separate.

I started using Firefox again when I got a new Linux laptop last December (from Sytem76 - love it). After getting used to having containers, then I started also using Firefox again on my MacBook.
more pity points. despite them saying in a differnt part of the article that some of their clients give them 15k a week
There generally is a way for them to work towards that isn't there? That's what getting made a partner is.

Beyond that, consulting has low startup/asset costs, there isn't much of a barrier to entry. So if a worker at a consultancy doesn't feel like they're getting as much value as they're generating, they can always just start their own. Plenty do.
This is how I broke into my first full time dev job from tech support. I wrote a web page without any frameworks or anything that would upload images, remember the hashes for them, rotate them, and detect duplicates. I built it because I didn’t want my daughters pictures on Facebook but wanted to share images with family. Then I made a YouTube video with lots of pictures of pizza to demo it. The hardest part for sure as a dev learning only from my Google fu was the async stuff. But I doubled my income that year, so it was definitely worth it.
The site definitely needs to be redesigned to actually work if someone has noscript running, because it can't possibly look like this by design, and I'm not "allowing all" just to see what it's really supposed to look like.
Global Honeybee Deaths Have Been Blamed on the Wrong Culprit All Along
I think that’s illegal in California.

But also, that would mean you could assume in a row of cars, the ones with tinted windows were most worth breaking into (which would also defeat the traditional “keep expensive things out of sight” mechanism).
https://developer.apple.com/documentation/callkit/cxcalldire...

Single number at a time though. Useless for spammers that use random spoofed numbers. Not sure what sort of performance problems you'd hit by adding 10M numbers per area code. It's probably a hashset underneath, so maybe none...?
Years ago, an HTTPS-01 challenge was proposed that would have operated like HTTP-01 except using port 443. However, concerns were raised about the safety of this challenge.

I can't find the relevant discussion thread at the moment, but I believe this was because the default configuration in some shared hosting environments would have allowed users to receive certificates to others' websites.

Edit: https://mailarchive.ietf.org/arch/msg/acme/B9vhPSMm9tcNoPrTE...
Vultures and Ventures – Structure of Growth and Decline
Also, this gives a way to entities who control the payments control who can send emails.

Might be a concern in authoritarian regimes.

Weren't there a project with proof of work?
The reason it pisses me off so much is I have used them like, 3+ times a week for 2 years, and every time I felt good about tipping which of course now feels... well, not good.
Betting $1 on 26,000 races:

Stated win rate betting on the post time favorite is 37%

This equates to a loss of 16,380 of original 26,000. Earnings must then come from the 9,620 bet on favorites that won.

Assuming the 55,000 is winnings (and not a total including original 9,620), this would equate to an average odds of better than 11/2. If reduced by the 9,620 then odds come down to a bit over 9/2

My experience in horse racing (regular and harness) is that odds on the favorite of 11/2 (or even 9/2) are extremely rare and certainly not the average. A realistic figure is 3/2 over the various field sizes (smaller fields tend to go close to even money, larger to 2/1 or so).

So yeah, the data as presented appear flawed.
Imagine that we are designing an MMORPG world. We know that individual player would seek to maximize their "gains" and to advance their ranking in the game as a part of the gaming experience. Meanwhile, as the game operator, we don't want the inequality to be too extreme between the top players and the casual players so that no hopes for the newcomers to advance their ranking, which hurts their gaming experience and they would quit for other games. But is it a wise idea to brute-forcibly transfer the 'wealth' of the most hardcore, talented, or just luckiest players to the others to make the game more enjoyable for the bottom players?

If we were thinking about it in a way that "you're not one of the players, but the designer of the game," and you want the game to be sustainable and reputable, I believe the answer would not just that simple.
Came here to post this; they're re-inventing AOL keywords. It was bad then and it'll be bad now. Chrome is user-hostile.
Living in Austria I've never heard of phone spam either but my parents in France are plagued by it, I guess that's a regulation thing.
That sounds fascinating. I don’t suppose you have a blog, or any other write up about that world?
Even perhaps a link to one of these betting APIs, if they’re generally available to the public?
This is an awesome article, not just for the content, but the writing style is great. There's a ton of information packed in links throughout, and even if you're not interested in the topic, it's still fairly humourous.