skysight-inc/HackerNews huggingface dataset:
That's a good question.

On the one hand, the W3C has this listed under new features for SVG 2.0:

"Allowed <paint> values and marker properties to take the child keyword and <child-selector> values to support ID-less referencing."[1]

That would mean you could have multiple inline SVGs on the same web page and avoid potential nameclashes from gradients and/or patterns having the same id.

On the other hand, that same page lists mesh gradients as a feature of SVG 2.0. I vaguely remember on the SVG archive that the browser vendors said they weren't going to implement that.

[1] https://www.w3.org/TR/2018/CR-SVG2-20180807/changes.html
I don’t think Audible is a significant portion of Amazon revenue.
So Does that mean that you currently cannot write an app for yourself on iOS without first getting it approved by apple?
I'm not arguing that. Just that it doesn't have to false to have a hidden agenda or bias
Aren't IP addresses used as PII by companies to track users that have profiles but aren't logged in?
Publicly, Apple will say that it doesn't care about Android market share for all the usual reasons John Gruber repeats. But privately, if there was one thing that would keep me up at night as an Apple executive, that number would be it.
> I'm surprised though that a Flash-like software tool doesn't exist for composing complex SVGs w/ animations and interactions.

It does! https://www.adobe.com/products/animate.html
Seven days.
You're slicing the argument thinner than what a politician would see.
Yep yep yep. I can see how, as a developer, it would be galling to face artificial barriers to what you can do on a device that you own. But I don't develop for phones, and as a "dumb" user in this case, I'm really happy that someone is trying to keep it secure for me...
So, devil's advocate here: why not just require your ToS to state that if the user is from the state of California, that they are to not use the service and find a local alternative?

It is a state law, they can't hassle you if you're not Californian and do not service their target market. Most of America doesn't live there, and California seemingly doesn't want you to do business there.
Free certificates expire after a week. Standard certificates obtained from a developer program membership last for a year.
Nuclear plants often have an open outer loop for their cooling. It's cheaper.

Like if you grab the environmental impact study from this license renewal for Point Beach Nuclear Plant near Green Bay, at maximum capacity it draws 1433 cubic feet per second from Lake Michigan and discharges it 23 degrees Fahrenheit warmer:

https://www.nrc.gov/reactors/operating/licensing/renewal/app...
This Trumpian idea is insidious. It’s a willful ignorance that pervades right-wing thought. If only it were solely to their detriment.
Previous discussion: https://news.ycombinator.com/item?id=18449506
I am against privatisation of key infrastructure and I would certainly count the internet as key infrastructure. However I am not sure the government would be entirely benevolent. So I agree that some good regulations are probably a good start.
I've tried the random word string concept but I can't remember those ones either.

I feel like I filled up my password memory sometime in the late 90s.
Seems like a very specific concern in a very specific line of business. The vast majority of engineers write CRUD apps for business clients that mostly care about whether it completely explodes or not.

It also depends on the service. Some services are critical infrastructure and should have their edge cases tested. Some services provide non essential functions and can get away with less.

I agree that there is no magic number, but 100% coverage is clearly overkill for the average engineering team. In fact, broadly demanding any code coverage percentage is probably over simplifying the issue. It just shouldn't be 0 :)
normal people call this an "empirical discipline"
None of this would be an issue if you could run whatever app you want on an iOS device.

There's many uses cases for kids that are not nefarious in nature. Say a parental lock feature that goes above and beyond what Apple provides out of the box.
Sure, that's possible.

And yes, I do mention science fiction and fantasy ~frequently. And I do like Richard Morgan's stuff, and people who are independent, and often violent, are a recurring theme.

But actually, it's Matthew Stover's "Caine" series that I love the best. His central theme is Aleister Crowley's Law of Thelema: "Do what thou wilt shall be the whole of the Law. ... Love is the law, love under will."

And there's a key point that's often missed by assholes. If you habitually hurt others, except in self defense, others will choose to exile, imprison or kill you. Because, you know, that's an expression of their love for each other.

And if I were really going on about it, I'd get into William S. Burroughs' stuff about killing the assholes (5-10% of the population) who impose their will on others. But I won't.
The best you can really do is point them in the right direction and help them when they get stuck, but learning to code really requires motivation that only they can provide
The advice we were given, and my general understanding is that you absolutely have the right to use IP addresses for network diagnostic and [anti-] abuse purposes. What you can’t do is leave those IP addresses lying around unsecured, share them with anyone who doesn’t have a legitimate requirement for access, or otherwise use them for random purposes.
Also, you probably need a lifecycle policy so you don’t hang onto that data indefinitely.
The most dangerous part of that would probably be being caught by the FCC.
Why only Western Civilization? Why not the collected knowledge of all of humanity?
Not on my mac.
The goals you mention between the governments you spoke are indeed different. This is not an unimportant point. I believe you are correct in that. I don’t claim that there are no moral people working for American intelligence agencies. I don’t claim there are only immoral people working for UAE intelligence. What I do claim is that I don’t look down on people doing dirty shit for UAE while not looking down on similar bad actors for American intelligence. What I do claim is that over the last 50 years or so the distinction between UAE and the U.S. in terms of governmental morality has blurred and I no longer see the U.S. government as a one deserving of support or the benefit of the doubt.
In Turkey 2FA is mandatory for online banking. When you renew your SIM card you cannot login to your account. You need to revalidate your identity with additional steps. I think there is an integration between banks and mobile operators because when you renew our SIM card you don't receive SMS code for login even though the phone number is same.

Another interesting thing is citizenship web site (turkiye.gov.tr). You can buy your password from a postal office. If you forget you have 2 options; postal office or if you provided via your both phone number and email. With this web site you can login to other web sites like "appointment to hospitals" web site.

Furthermore you can login to your turkiye.gov.tr from your bank web site.

I forget to mention that I think if you buy from the new Turkish id cards they give you a password and with that password you can login to turkiye.gov.tr. Hovewer there is a microchip within the id card and I'm not sure how it is used for identification. They sell some devices where you place your id and insert it into the USB and you need to install an application.

Oh, and in Turkey there is user side certificates too. http://www.turktrust.com.tr/en/products/e-signature/

Another option is so called mobile signatures but I'm not sure how they are used. https://m.turkcell.com.tr/servisler/turkcell-mobil-imza
Slightly unrelated, but i'm fishing for suggestions.

I have a beef with my local Australian bank, the ING (of Dutch fame). Their login system consists of your "customer number" (printed on the back of your debit card) and a 4 digit numeric PIN. Yes, 4 digits. In 2019. To add a payee to your address book the only auth that happens is over SMS; to actually transfer money out of the account you can select any existing address book contact with no further verification.

I like their product offering (cheapest / best in class locally) but this is such a worry to me. I've repeatedly talked to their customer support about this issue (and their Twitter is full of complaints about this) but they keep giving canned responses and redirecting to their "Online Security Guarantee" https://www.ing.com.au/security.html. Any ideas how to get through to someone who understands what's going on, before I grudgingly take my business elsewhere?
Great read, thx.

> You can probably take it as a rule of thumb from now on that if people don't think you're weird, you're living badly.
I wonder if Apple will ban their own internal apps that they use in Apple Park and Apple Stores.
Many years ago, in the heyday of domain speculation (after the dot-com crash), some of the largest domain speculators became registrars to gain advantages such as the one you mention.

This conflict of interest was not limited to registrars. Registries got into the game as well, reserving names for the sole purpose of exploiting speculators or speculating themselves.

What the OP could have done instead of taking a random sample is to examine certain nameservers in the com zone. That is, look at certain registrars. This reveals the true extent of parking.

Not sure about the situation today, but in the past many domain registrants were unaware that their registrar was deriving revenue from their "unused" domains The registrants were paying the fees to keep the registrations active and the regsistrar was collecting the ad revenue by setting up parking on the domains.
Do you have any pending litigation?

Every single company I have ever joined would have answered "yes" to this, and in hindsight, I really should have known about that answer prior to joining. Alone, it's probably not a deal-breaker, but I feel like I ought to have known sooner about these things.
I consider my IP address to be sensitive information, so I wouldn't host a VPN on my home network, and there are advantages in numbers to using a popular service, since you can blend in at least a tiny bit.

I use a 3rd-party VPN (PIA). This is obviously not perfect privacy, since they could be lying about what data they store. That being said, I'm not trying to hide from a government, I'm trying to hide from advertisers, stalkers, and criminals. So even if I can't personally validate that PIA isn't storing any of my data, having my data accessible to a warrant is still better than having it accessible to hundreds of different sites and companies that I 100% already know I don't trust.

I validate actual implementation security by regularly checking what information shows up in requests when I visit sites. There are a couple of tools that help with that online.

Being strict about what data goes where is part of the reason why my data usage is low. It turns out that if you block network access for most apps on a phone by default, data usage just goes down a lot. Apps like Uber and Lyft make a lot of requests, because they are constantly tracking you, so blocking their network access if you have them installed is just a strict all-around win. Even apps that should be good about this like Google Music will sometimes just randomly decide to download things.

Obviously the librem phone is still kind of up in the air, but my game plan assuming it's not a complete disaster is to migrate over to that and fill in any gaps of functionality by just programming whatever features I need. I dunno how voice calls will work. The idea of switching to something more secure than the existing phone system is attractive, but I mentioned above, I'm not sure what it would do to data usage -- I just don't have any basis to make an educated guess.

In general I want my phone to be a very specialized device -- not a dumb phone, but a phone that only ever does what I tell it to.

So a successful migration for me would look like a company:

- with good coverage

- without any horrible terms like arbitration agreements or stealth charges

- that does not sell data, and that is supportive of low data-usage

- that is at least not actively unethical :)

on a device that:

- gives me root access

- makes calls, texts, and browses the web in a secure way

- that is highly geared towards offline availability and low data-usage

- and that doesn't run extra software or do things behind my back

Librem is my hope for the second part, I guess if it crashes and burns I'll look into custom Android roms. I haven't made a list of carriers yet, but from what you say, it sounds like Community Phone should be high up on that list?
1000x this! I needed to buy golf balls for a Christmas gift. I went to 4 sports stores; “sorry we only sell hockey stuff”, “sorry that’s not in season right now”, “sorry we don’t sell golf stuff”, “umm let me check in the back... sorry not in stock”.

This is in a wealthy suburb where many homes back on to golf courses. So yep, I had to order them off Amazon.
It's usually electronic ballasts that cause more interference since they have an oscillator that runs in the high kHz/MHz, while the magnetic ones don't oscillate at more than the 50/60Hz mains frequency.
Meh, those aren't as well-defined as you think they are. Variously, market-dominant minorities have been labelled as "oppressors" throughout history, and "we can be as immoral as we want as long as the victims deserve it" has been cover for all sorts of horrible shit. You can do whatever you want under the aegis of "fighting the power" if you just define "the power" as the people you wanted to be vicious to anyway. It takes a pretty simple-minded view of the world to think that a one-dimensional oppressors/oppressed view of the world is anywhere close to reality, instead of just being convenient cover that can be targeted at pretty much anyone, so shitty people can be regressive and sexist and racist while sitting on their high horse.
Could you create an SVG viewer custom element? All contents will be independent.
The question isn't "do you", but "could you"?

And atm, you couldn't on a locked down device.
Because there are a huge number of users in California, and it’s also the fifth largest economy in the world. Ignoring California is probably throwing away a big market.

You could say that about Europe to wrt GDPR but you should note that almost everyone is becoming GDPR compliant too because it’s a big market.
Not under protest, but for profit. The current figures are not public, but Google pays billions annually to Apple to remain the default search engine on iOS.
This is why all voluntary environmental actions will fail. You can virtue signal and scold all you want, but when it comes to amoral corporations, economic incentives are required.
Is there a way to donate to support this grant? I think this is great.
> paid enterprise service to distribute their software

that's the problem - why should this service exist in the first place? It's extortion to have to pay to distribute apps to people who want them, on devices they own themselves.
I know that Startpage uses Google. And Searx uses Bing.

But I think that DuckDuckGo uses multiple sources. Although it's easy to restrict that to Google.
> What irritates me is that its citizens are convinced that they are "the good guys"

It will be interesting to see how well this ages. Looking at past iterations of global power(s), this era seems like one of the best. Sure, the US has done some evil, but it at least pretends to follow the law most of the time. It may have started some wars and interfered where it shouldn't, but nowhere to the degree of past global powers.

At the end of the day, the US never interferes with religious freedom, accepts homosexuality, and tends to treat men and women as equal. That has literally never happened before in the history of world powers.
OOP Before OOP with Simula
what?

Insys (manufacturer of fentanyl sprays) hires ex-prostitute "as regional sales director" to close deals and bribe doctors for prescribing their product.

Then CEO and Vice president of Insys become informants or governments witnesses? They cooperate with the investigation and the ex-prostitute is the scapegoat < Whaat?

Like why did they hire her in that position in the first place?!
It's easy to change, and one of the default options is DuckDuckGo.
I would add that even some of the academic papers focus on the applied perspective of machine learning. Such examples can be found in papers issued by security research institutes/companies. And now that we have cloud computing to replicate/validate or even extend those research papers is really just the matter of determination even if the subject of the paper needs a whole cluster of distributed resources.
As much as I dislike Apple, its amorality, its attitude towards it users, its effect on the markets it's in, etc, I don't have any disagreements with Apple's actions here: Facebook/Google violated their license, so Apple revoked them.

But the terms of this license are by no means "protecting" users who voluntarily chose to install these apps for payment. A license can have multiple legitimate purposes, including protecting the business interests of the licenser. There's no need to pretend that Apple is protecting users in order to defend their actions here.
You don't necessarily need a Mac.
Try reading this aloud: "The problem with return-types is that they constrain implementations by what possible success states they could have."

Checked exceptions are (for the most part) the mirror image of checked returns! Both describe and circumscribe your expectations for what comes back from the method, the only difference is one is happier than the other.

They follow the same kinds of type-rules, and the real problem is entirely on the human end: It's harder to imagine failure scenarios, features are prioritized over error-handling, and people don't like to do it if they can avoid it somehow.

> What would've made them good would be a static analysis of some sort that could divine all possible exceptions thrown by a method call and its dependents based on its code

Again, ask yourself "why don't we already do this but with return types?" Probably because it's horribly impractical in most cases and and outright impossible in others. For example, when it comes to interfaces, abstract-methods, or overridden methods... All of those involves concrete implementations that haven't been made yet.

Heck, they might not get created until months or years after you ship your .class files. Then some random guy you've never met says: "Oh, hey, I can fix my problem by creating my own implementation based on their interface..."

So unless your compiler can literally see into the future, you've got to set down your type-expectations first.

> but in Java a class can always override another class

No, even if all classes were marked "final", you'd have the same problem when it comes to using interfaces.
They’d shut down your API access immediately

This is not true for major consumers of the API. They will call you and work it out. I know this from personal experience.
>So, devil's advocate here: why not just require your ToS to state that if the user is from the state of California, that they are to not use the service and find a local alternative?

Silently redirect them to a similar-enough site run by a partner company that's based in another state/country.
I believe it is often the point of fiction to blur the lines between fiction and reality.
I’d hope not. From the company’s perspective, there’s never any guarantee at all that an IP is going to be 1:1 to a real identity. IPs will be dynamically reassigned to new consumers constantly, and there are many situations where you’ll have many (some times very many) users sitting behind the same IP. The only situation I’ve come across where some level of PII has been retrieved from an IP are services that will be able to link an IP to a particular company’s office. I’ve seen that used in Account Based Marketing funnels where you can get information that ‘somebody at ACME Corp viewed these pages on your website’.
How does worrying about big-O cause issues? You should back up such a strong statement with at least anecdote or something.
> Do you expect to be able to run any programs you want on the micro-controller on your washing machine?

Yes. It is within my full legal right to install whatever programs I want on my washing machine.

Apple lost a bunch of lawsuits, when it tried to sue people for doing this. The courts proved that yes, you do have a legal right to do whatever you want with hardware that you own.
Nice work, would be awesome if it has google drive / dropbox syncing
About 20-30 at any given time. I expect to be able to see the list of domains I own, when they expire, and if auto-renew is on or off from one convenient panel.

Also "just silently auto-renews" is not an okay behavior for me either. Even when I have auto-renew on, GoDaddy sends me email notices around renewal time for any of my domains. I like to manually renew them a bit early to ensure there's no problems with payment processing. Obviously I have like a year until any of my Cloudflare-held domains renew, but if I don't get email notices in advance, I will likely look at transferring them away. Proper notice of account/billing activity is a must for trustworthy service.

For one, my host auto-configures a lot of features on the DNS for my domains. Cloudflare imports it, obviously, when I transfer over, but if my host changes something, Cloudflare isn't going to get it, and I don't even have the option to change my name server provider even temporarily for troubleshooting purposes. That's a big flaw, and Cloudflare will need to fix it to keep me.

I don't have any .io domains, but my understanding is Cloudflare keeps literally nothing for any of their domains, so presumably Namecheap was able to cut a better deal with the registry.
I don’t understand people who are acting offended that Apple is enforcing the clear terms of service it laid out.

Because of two related points:

1) The apps in question would not be allowed into the app store by Apple in the first place.

2) People believe that Apple abuses its dictatorial power over the app store and that it should be a more open platform.
Yes, and more to the point, they cut off Facebook and Google for distributing unreviewed apps to the general public. So the violation was using the enterprise key to evade app review by Apple. Which Apple does to protect its customers. And so Apple is just protecting its customers.
I'm pretty sure the Persian empire did all those things.
I'd argue that GC still isn't taken seriously as an option for high performance code by people who actually write high performance code and Java is not the language of choice when performance is a primary goal. The lack of value types hurts it there even compared to other similar GC languages like C#.
Walmart is adapting fairly well. It's just that they have a stigma among wealthier folks, so we don't know about it. Walmart's online selection is often competitive with Amazon, or even cheaper. They have free 2 day shipping, you can ship to the stores, and Walmart is very good at having the right things in stock. I bet they would have had hats if you checked there.
Play Store publishers don't have a phone number to call.
Eric Weinstein of the Intellectual Dark Web
Ah the ol' case-insensitive filesystem
Ooh, perfect timing. I'm switching to a team that uses React rather than Vue (which I have more experience with). This'll definitely come in handy.
I am sorry to disagree but if you think that the iterator or visitor pattern or the state pattern or abstract factories are only bound to Java than you have a very low skills/understanding of those patterns and you really don't understand their importance and/or applicability.