skysight-inc/HackerNews huggingface dataset:
Agreed.

I didn't use a framework until 2016. I use React now and love it, and yet I still find myself using all of my knowledge of the DOM when writing React, to ensure that it behaves smoothly.

I personally think there are simply a higher number of devs who can code fine in React/Vue/Angular/whatever but don't fully understand the intricacies of the DOM. So the result is that these SPAs often feel slower. But it isn't the fault of the frameworks necessarily.
On Concurrency in Go HTTP Servers
There have been similar vulnerabilities in iOS before, such as the crashing bug that could be exploited by sending a single malformed ligature/combined character in some incredibly obscure Indian script.
> It's also disturbing that the same people who brought us widespread hormone-like chemicals leeching into our food are arguing that this, too, is good for us.

I am not sure this argument works, because it's continuation is that "they also brought us autism inducing vaccines, cancer inducing wifi, and potato fish hybrids that are evil in some vague way".

Whether you like it or not eliminating mosquitos, colorado beetle, etc. will help billions of people to live better lives, and your ad hominem at "some post-doc trying to be alpha nerd" is out of place, because no matter their motives, the work of people like this is what allows us to write things on screen, instead of sitting in a cave.
I didn't assert that anything was truthful?

And prove the "harm" in its data collection practices. Since you've been very specific in data collection, I will expect your response to be about data collection.
Also what's not there? What are you not seeing? Have you wondered about the world outside your bubble?
Their top security clearances, their access to the deepest darkest secrets of intelligence tools, networks, and systems. Would you trust an employee with your biggest secrets if you knew they were retiring soon and very likely to be hired at many times their current salary by some major competitor?
> What do you do when an adversary compromises your VPS

You already have to operate as if an exit node could be bad, it's not that different. One could swap them each month.

> any slip up at all suddenly correlates all your traffic

Hadn't considered that, may be a major downside for some use cases. Easily solved by using one VPS for one service / website you visit :D
They've taken the sensible step of revoking the Enterprise account, which is usually separate to the AppStore account.
Well besides that they can’t do canary releases of their flagship apps, at least not without potentially introducing bugs to their users.
Why stay on Medium? Why not take total ownership and move to your own space?
What is it called? I don't see it on the play store.

I think I found it? Was it called onavo on Android? https://play.google.com/store/apps/details?id=com.onavo.spac...
It's not really an agreement, if you want to support Apple customers you either accept or leave that market to Apple itself. For something like social networking, that's absolutely massive, and we can't say that Apple has been shy to duplicate and replace applications with their own versions, and push them along with their ecosystem.

What we see here are two monopolists fighting, it's hard to pick a side but imagine what chances a startup has in this environment. The robber barons are back.
Yeah seems suspect. Hitting pushdata.io with cache disabled downloads multiple hundreds of kb of javascript:

highchart.js 75 KB

boost.js 11 KB

exporting.js 5 KB

checkout.js 26 KB

pushdata.js 57 KB !!

analytics.js 17 KB

and there's hundreds more KB of png images downloaded as well
Well there's Renoise, there's Jeskola's Buzz (the changelog starts at 2008 but I'm sure I used it well before that), Noise Trekker had a synth as early as 1999. Adlib Tracker? You're still right in that for the most part, for a long time, tracking on the PC meant FastTracker or ScreamTracker, and those just used samples. But we've come a long way since then in the early 2000s.
Huh, I stand corrected. I'm pretty surprised Facebook used their own cert. The fact it has been revoked was 100% predictable.
Feels like the author writes way too much without saying anything, then ends the article without a real conclusion.

I guess maybe "Black scientists are in the best position to understand what is so broken about the ideas of Watson and his army." was what he was working towards, but that seems like an extraordinarily weak point to make.
Low precision systematic sacking of colleges is a dystopian nightmare no mather what the pretext is.

You can't fire people and keep the morale up unless the sacked have anti-social behavoiur.

Further more, if you can't trust management to hire people you can't trust them to fire people.
Well we eventually got two things out of that operation....ICBM's and the Saturn V.
Learn Python with a Passion
To be clear, this app that was just removed WAS just a reskinned Onavo app - same code and "ONV" class prefixes, etc.: https://twitter.com/chronic/status/1090394419902197761

Facebook got caught, and then they tried to use their enterprise cert to get around App Store review because they knew it would get rejected.
Amazon researchers’ method adds classes to AI classifiers more quickly
FIRE is one of the things I'd like most in this world, so I'm definitely trying to pursue it, but I'm very different than the crowd you'd find on reddit or other online communities: I don't assume an happy path that will allow me to FIRE as soon as my expenses are 4% of my nest egg, I see that as too risky.

I am personally using a conservative estimation that my portfolio will just keep up with inflation (0% real growth), and since I don't plan to leave any legacy, my math is simple, adjusted for inflation I can withdraw PORTFOLIO / (90 - CURRENT_AGE) every year. Based on that math, I still have a long way to go.
The owner of each instance pays the costs for hosting a given instance. So, basically, domain + hosting.

Note that these costs can be really low; Pleroma[0] can be run on a Raspberry Pi 3 or a $2.50 Vultr instance[1]

[0] https://pleroma.social/

[1] https://blog.soykaf.com/post/what-is-pleroma/
Tag URI scheme
Only ones signed on the same certificate.

One expects the reason they reused their primary enterprise cert is so they wouldn't have to justify their spyware in a new request to Apple...

You build a house out of kerosene jugs, don't go crying when it burns down.
That's something slightly different: reponsive design (see https://en.wikipedia.org/wiki/Responsive_web_design).
I got the impression they may have had a somewhat cavalier or insufficient approach to security as well.

https://www.forbes.com/sites/daveywinder/2018/12/04/quora-ha...
I know a reasonable number of Facebook employees. Their opinions on the last year range from “don’t care/getting paid” to “everyone does it.”

These are good people. They just don’t care.
> they manually review all articles before allowing an article to get promoted by their algorithm.

This is amazing - this is the thing that people demand of Youtube, in order that the algorithm stops promoting anti-vaxxers and Holocaust deniers.
> A more plausible timeline is that Apple (incredibly) intended to roll out a client-side update fix on a relaxed schedule

The most plausible scenario is that somebody at Apple threw the original report in the figurative trash bin after failing to read it or failing to realize the significance of it (although given the clarity of the report, failing to read it and failing to understand it are virtually the same thing.)
It violated the Enterprise Developer Certificate Terms, so Apple have revoked the Developer certificate.

The rules state that Enterprise apps must only be in the hands of users who are under the supervision of the company which operates the Enteprise certificate. It's likely that Apple doesn't consider the people Facebook have co-opted into this program to qualify
I thought most companies have figured out Jack Welch's rank-and-yank system doesn't work by now? Surely Amazon isn't that naive are they?
[my numbers match yours]

It's very interesting that we made more or less the same choices: NFS on a LAN for cold storage. In practice, I haven't seen performance penalties either. I will certainly standardize on that.

If needed, 'reviving' the cold stored data is as simple as copying it to other machines-- which will also offer sharding.

My only reproach is that servers have to be identical, as clickhouse doesn't seem to be able to take into account the speed differences. My backup servers are quite different from the production server, but in an emergency I'd like to use them all.
Because each of those is probably a homework problem in Stats 101, and every college kid is going to be googling for the answer to the variation from their edition of the textbook.
It's downright hilarious that now, when IE is dead at last and browsers finally have APIs and CSS support to do things cleanly, developers are completely abandoning "vanilla" JS development in favor of frameworks and per-processors. Feels like a job security thing.
Right, I don’t want something in the software which is what happens today. I want a hardware indicator, that should in theory be harder to break or hack (and should make this kind of bug more obvious to a QA team and the general public).
I've been quite happy using plain typescript lately, and focusing on progressive enhancement vs graceful degradation. I just don't see many framework-based sites being 508 compliant these days.
this thing is gorgeous.
C'mon everyone, be part of the solution like this person says. The intelligence agencies will never abuse their power. You can trust them. /s
It's either that, or they employed their market dominance to strike at their competitor. Without a public regulator that fines both Facebook and Apple for their respective abuses, we will never know which.
https://www.earticleblog.com/facebook-utest-research-app-pay...

It is only available via referral.
HN at its best: making conclusions based on one data point gathered randomly on the internet... happy Wednesday!
Accusations of flamebait and similar on HN are a form of censorship, to prevent the community from having to confront difficult issues and “keep the peace” — not legitimate regulation of tone.
Bill Hicks on advertising is great too, especially when he equates it to pornography.
Well, if FB used them the way they were obliged to, Apple wouldn't have to take this step.
Nobody credible believes for a second that Apple was involved, for whatever it’s worth.
Shannon himself talked about it in "The Bandwagon": https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=1056774

>I don't see anyone claiming it applies in places it doesn't.

It applies in a lot of places, but probably in a more narrow way than people think. You can say "information theory applies here" and probably be right, but to be specific about what that means requires some work. Shannon says that himself in that piece.

Thermodynamics is an easier one to see, because people always make claims about something "because of the 2nd law of thermodynamics", something about everything always becoming more disordered. But that's too simplistic a view, and fails to consider what is a closed system and so on.
I have my reasons.

I see PTP as a good complement to NTP.
I know about Tidal, there's also Deezer HiFi and Qobuz. I like to store my music locally, but I'd sign up for one of these if they weren't twice the price.

This is my problem, why pay significantly more when the streaming services get the lossless version from the label? I get the extra storage requirements, but that can't be a significant factor for the likes of Amazon, Apple and Google.

As for selling music, Amazon, Apple and Google refuse to even sell you a lossless album, yet charge the same as you'd pay for a CD.
Was it easy to cancel?
I do love to travel. I will write your app in Backbone, Angular, or React, or ??? depending on what we're building.
It's hard to reply in a mature and productive way here; since you've called what some people do... bullshit.
There is no silver bullet here that is the correct technical choice for all situations, and using some bad choices to say we're all making bad choices is short sighted.
You could write a similar article about how people don't test, performance test, security test, or many 'tests'. We could have the same discussion.
Not every situation is the same, and not every user is in a remote locale with no connection; but when they are we have to take that into account. If our app is for a north american bank in the midwest; then yes - why would we care about performance in the middle of Australia?
Out in the real world, projects have priorities; from the customer, business, security, and even team (someone will have to take care of it).
I don't appreciate the constant Slashdot style negativity going on in this and many other threads these days on HN. I wish you'd reconsider adding something constructive to the discussion.
Unless you can spend tens of millions on lawyers when the benefit of wiretapping would be in the billions.
Show HN: Azartiz Contacts app
The Contacts app is the third demo app we've released this month that runs on any web server by uploading a single html file (contacts.html).

These apps use the Azartiz.com CouchDB as the backend database.

Azartiz is an experiment exploring the feasibility of a backend as a service and apps that can be run on any web server without installing any additional software.

It takes about a minute to create a secure backend for your apps. After that you really don't have to think much about the "backend".

There's example code for user authentication, CRUD, search, processing forms, displaying data, using embedded templates, and TinyMCE integration.
Oh interesting. That said I've only ever taken devices through PCI-PTS, not worked on PCI compliant software so I have no idea how much of a departure this is from common practice.

The one thing that would concern me about widespread adoption of FIPS-certified tech is that (IIRC) FIPS 140-2 essentially forbids PFS modes (DH/DHE) on TLS, presumably for traffic audit purposes in secure government environments.
What do you mean by foreign number? Most spam calls I get are from the same area code as my phone number?
National CDA Training
That’s a deep straw man of what I said, to the point of being non-constructive mocking. You’re just being dishonest to claim I suggested trusting the spy agencies.

Rather, I pointed out that they have a real mission, and they’re going to spend effort accomplishing it. But their mission isn’t to own every device — it’s to own a select few, probably on the order of hundreds or thousands a year. So, if we create a mechanism by which they can do that without owning every device, we can align our goal of protecting most devices with theirs of owning a few.

This in turn increases security for nearly everyone, because powerful agencies no longer have the same motivation to cause harm — and might be persuaded to help. After all, it’s in their interest to prevent large remote compromises — just not a higher priority than maintaining their own access.

Further, the best way to actually restrain them is through a change in government policy, which will only happen when the government believes there’s an alternative solution.

Perhaps you could try responding to the point?
>This is an honest question because I can't understand the motivation behind it.

How informed should the user be? What qualifies as an informed user?

This is getting into some dangerous territory because it because implies so some sort of contract literacy.
I read it as news sites using cryptocurrency as a primary method to avoid high transaction fees.

When it's a secondary method, it can be used as a way to invest in a growing market. You can potentially react to volatile changes in a currency if it's part of an investing strategy without worrying if your company will fold overnight. If it's your primary means of accepting payment, then your income is essentially tied to the volatility unless you cash out immediately.

Stable coins would be the obvious solution, but then I wonder what's the drop rate of someone who is only familiar with BTC and not other coins?
I have a number of articles on Medium with thousands of claps and 100K+ hits. I'm already working on my Jekyll blog for my next articles.

The writing experience is still great, but the reading experience has become bad, specially on mobile.

I don't need the social features Medium offers. Most of the interesting discussions happen here on HN, Reddit, or Twitter anyway. I don't care about claps and such stuff either. I mostly write because I need to get something out of my system.
I'm not exactly sure what you mean by "the map is moved to another region of memory", but a pointer to the value object in a map entry is safe (or unsafe) in exactly the same situations as an iterator into the map. Under the hood, the iterator is likely to be a pointer to a tree node struct that contains the key and value objects (along with pointers to other relevant nodes).
Well, I am not a big fan of telling people what to do or what not to do. Do you want to sell your private info to some corps? Feel free to do so.

Will it blow up in your face? Perhaps. I could not care less. It's your problem. You didn't know what you were being asked for? Again - it's your problem.

People agreed to do that on their own, they got paid for that, and, most likely, they don't care if FB knows what kind of porn do they browse.

All the stuff about ethics and "honourable means" is irrelevant in this argument. Is war ethical? Is spying honourable? Depends on whom you ask.

>requirement to install a root certificate

Requirement? You can just tell them to f*ck off.

In any case, I could not care less about this, but what annoys me is the people that pretend to be super-nannies that gonna save the world by telling what the others should do. Through history, this has never worked.
> These are good people. They just don’t care.

I think these two statements contradict each other.
The design and execution of the site is really terrible. The banner loads immediately then the content pops in after a 3-4 second delay.
From Google, MS, Instacart, Uber et al? The reality is that every major tech company does scummy stuff. There are vanishly few tech companies that don't.
"scientific" racism
It was a voluntary agreement (license) that was broken. It's hardly chilling.
Don’t forget decades of corruption. Remember when a few blocks of houses exploded a few years back?

Apparently, decades ago, PG&E employees simply pocketed the natural gas pipeline maintenance money instead of doing the work. Last I heard, PG&E was supposed to replace the entire pipeline network in California, since the fraudsters didn’t document which pipes were maintained, and which weren’t.

Just like the current bankruptcy will likely turn out, the only real impact of this on PG&E seems to be higher utility rates (which probably let’s them keep more for profit in absolute terms...)
Isn't this common throughout the industry? I love to bash on Amazon as much as the next HN'er, but is this really news?
Thanks! I'll try them out at my local running store.
There is no reason to doubt this. It wouldn’t be the first time such a vulnerability was found.
I have somewhere a huge list of patent expiration for medicines in the US for the next 5-10 years.
I’m very puzzled. You are operating from the assumption that 34 kB would take 50 seconds to download on a 1mbs connection? There was clearly something else at play, maybe related to the fact that the people who built his react codebase had never programmed before.
Distributed In-Memory Caching in Elixir
> Black scientists are in the best position to understand what is so broken about the ideas of Watson and his army.

His army?
> It is standard (though not universal) practice for restaurant staff to pool and divide tips, which would appear to be the same thing from a defrauding-the-tipper perspective.

Absolutely. Thought its definitely more pernicious to find out the restaurant owner was keeping the tips.
College kids have to search for the answer to what the probability of getting a 5 or higher in a die roll is?
As a former Amazon manager, I don't have a problem with forced attrition so much as the proportion of my time that was put into finding the candidates for that forced attrition.

There are a tremendous number of low achievers in every industry and if you keep them around they are toxic, every bit if not more toxic than Amazon's culture in 2019.

That said, I would have liked to have seen most of the time dedicated to this task allocated to developing the careers of my direct reports because I think that is of much higher value to any organization.

Not hiring idiots in the first place is IMO the proper solution to this problem, but that now seems intractable. It seems there's a real temptation to scrape the bottom of the barrel to fill positions these days.
A significant benefit of owning a FLAC for me is so that I can convert it to any format I may want to for end consumption.
I think the asertion that it's on the baseband is correct, for sure
U.S. Midwest Freezes, Australia Burns: This Is the Age of Weather Extremes
I saw a talk at SnowCamp Grenoble last week about the use of vanilla JS on both front-end and backend, only using what's available in the language / browser APIs / Node.js core libraries.

The author published his project (a 2048 game clone) here:
https://github.com/Swiip/vanilla-modern-js
A public regulator of tech oligopolies is a great idea. Until that happens we have few choices in whom we chose to trust.
Apple is no corporate saint but for now it is the best of the lot because of its business model.
There are a fuckload of tech companies. You don't have to work for a big name.
How long until Facebook creates its own phone and OS?
That's rather charitable, comparing this project by Facebook to an academic study.
I mean, if I was going to have that kind of surgery I'd definitely be looking for an expert. You put a regular cosmetic surgeon in there and you risk having no wrinkles on things that should have wrinkles and other such catastrophes. All this to say maybe they missed an opportunity when they ditched that domain. ;)
How long before Facebook creates its own phone and OS?
I thought this was cool, but my coworker said these are shit compared to the husqvarna automower which have been out longer. https://www.husqvarna.com/us/products/robotic-lawn-mowers/