skysight-inc/HackerNews huggingface dataset:
A lot of people here are commenting that its no big deal that organizations are recording every screen, tap and swipe for their own apps. There are two problems with that:

1. As the article mentions, in some cases these apps end up leaking sensitive data like credit card detail and passwords. Generally, if you are taking snapshots of the user's screen instead of sending text metrics, it becomes much harder to mask sensitive data at all times.

2. The bigger issue is that these services generally use third parties to record this, and their privacy policy is a big problem. For example, Glassbox explicitly mentions that it will share end user personal data with their "enterprise" clients (which I am guessing are basically ad companies):

> From time to time, GLASSBOX grants certain of its enterprise clients a license or other rights to GLASSBOX’s proprietary software products and solutions (the “GLASSBOX Solutions”). Through their use of these GLASSBOX Solutions and/or through other means, enterprise clients of GLASSBOX may get access to, collect and use: (i) End User non-personally identifiable information; and (ii) End User Personal Data.

> There are also times when we will combine such information with additional non-personal or de-identified information we obtain from other companies as well as End User Personal Data, in order for our enterprise clients to market directly to a certain person subject to requirements of applicable law. We typically analyze this information and organize it into user groups and audiences, based on factors such as age, gender, geography, interests and online actions. We and our enterprise clients then use these user groups and audiences, along with information about the possible relationships among different browsers and devices, to design and deliver customized advertising campaigns or other relevant content.

https://www.glassboxdigital.com/privacy-policy/
We’re about the same age.

I agree with most of your statements.

Success is not only determined by how much parents spend on education, though. It’s a lot harder to start a Facebook or Apple in 2019 than it was in 1980 or 2004. Or to start a Snapchat or Twitter than it was in 2009.

That isn’t to say all the good ideas have been taken. Technology is just much more mature than it was in the early 2000s. Many of the ideas (which seem obvious now) have already been fulfilled by dominant, established players. I’m sure I’m not the only one who looks at someone like Dell and says “crap, if I was 20 years older, I could have definitely done something like that.”. Nope. Wishful thinking.

I was always a top-scoring test taker but I actually don’t like complex mental work that much. I wish “trade” jobs paid more, because honestly, it sounds much more relaxing to do electrician type work or mechanical work than sit and stare at a computer all day.
How did you get into embedded? Web work doesn't really interest me and I've been studying kernel programming for a few months.
So Volt seems interesting, but how to I download it?

All of the download links just give todays date and issues in the GitHub page the site links to mention it being flagged by virus or not being supported.

https://github.com/voltapp/volt/issues
Absolutely - not sure why all these mini-emperors-of-Rome insist on downvoting a legitimate compliment, but to have a piece of security writing that

1) reveals a significant security issue

2) ...without the usual overblown signals to the effect of how important it is (it usually isn't) and "hey, pay attention to me"

...is refreshing, no other word for it. And if it were done more often that way in the mainstream, there would be no need for a clickbait headline arms race.
I would love to see the code open sourced! (it's ok if you have edge cases pending as long as they have been documented or at least mentioned in a README). Managing and running migrations smoothly without downtime is a very common challenge that a lot of startups face and I think a lot of us have been reinventing the wheel over and over to handle this due to the lack of current offerings.
The challenge the post sets is to line up as many keywords as possible in sequence, without separating commas, semicolons, parens, braces, symbolic operators, etc.

So yes, of course if you ignore the constraints on the problem it becomes much easier.
Yes, but it's not actually zero, even if you remove all the false vaccine side-effects like autism and mercury poisoning. And that's where the irrational fear of vaccines attach itself.

But the actual non-zero risk of death or other horrible side-effects from the diseases, they have nowhere to attach to. We don't get regular stories in the media of kids dying of measles, because we almost eradicated it.

So given this, some parents weigh one risk incorrectly way higher than 0, and the other risk incorrectly at 0, and then they make the rational decision not to vaccinate their kid.

And I think it's important to understand that anti-vax parents actually don't make irrational choices, they make rational choices, but they're made on the grounds of an incorrect and horribly wrong risk analysis.

Hopefully, news stories like this increase the general awareness that measles is a terrible disease, which then can change the risk analysis that people are doing. It just sucks that a bunch of kids have to suffer needlessly because of stupid fearmongering.
Facebook says the list contains “info about you”. There’s no reason to assume that has to be an email address. Your full name and DoB will do, read the docs for yourself:

https://www.facebook.com/business/help/606443329504150?helpr...
I picked up Carl Sagan’s “Demon Haunted World” recently, and it’s all about this question of why certain myths, urban legends, and superstitions, persist. Really worth the read.

He often pointed out the precariousness of living in a world that runs on science, but where few people understand science.

People who know me here know that I’m a big Sagan fan, but seriously — wish we had him around for times like these.
DNA-eating bacteria lurk beneath The Atlantic Ocean floor
Yes, according to the OP (in a comment) it has to be unique keywords.
That sounds like good advice! But if you could elaborate a bit, how do you actually apply this in everyday situations?

Any recent examples?
English is wonderful. In thwe title, bbc.com is likely exercising its right to droll English humor is this title which has multiple parses. Did Pierre Bonnard like to paint his wife while unclothed? or did Pierre Bonnard like to paint his wife when she was unclothed. Of course, any analysis reveals additional questions: Did Bonnard paint upon the wife's body? or did Bonnard paint a picture of the wife on some other medium. It is all very exciting.
> "These fancy educated people in their ivory towers telling me what to do with my children...".

I have seen college educated people including those with advanced degrees who just as easily if not more so pedal anti-vaxxing bullshit. No, they are not scientists, but they and their peers would consider themselves intellectuals.

> you should simply defer to the critical mass of thousands of people with doctorates

I noticed a paradox in that people who have doctorates in unrelated fields just as easily decide that they can research on their own and other doctors might just not be as "smart". Unlike flat earth, contrails and other such bullshit, anti-vaxxing does seem to attract educated people as well as uneducated ones.

Even if you read the article, I wouldn't consider Washington state as the epicenter of anti-intellectualism in US. Quite the opposite I would say.
If i had a kid and i was told this kind of drill and indoctrination is happening at school, i would remove said child from that school and let that school know they will never see my childs face again unless, they can prove, and guarantee physical, and psychological safety.
I would rather send my kid to a paramilitary cadet corp for an education if the school is so dangerous of an environment as these drills seem to indicate. I would not have any child be trained to fear freedom liberty and life itself.
I agree with what you're saying, my post was mainly trying to point out that there might appear to be more Clojure jobs than there actually are. For the past couple of months, I've been looking for Clojure jobs (after my company in one fell swoop decided that Clojure was out, and we were no longer allowed to use it for new projects), and though there are quite a few matches when searching just for "Clojure" on job boards, most of those have nothing to do with Clojure. Out of 50-100 matches, maybe 2-4 of those were actual Clojure jobs. Granted, this is in Stockholm, but the situation was pretty much the same a couple of years ago, and things don't seem to have improved. I love Clojure, it's probably my favorite programming language, but I finally decided on a more normal C#/Java/JS position for my new job.
Which suggests that college is a better place to suss out an academic field you love or value than high school.

(I take the point, though -- I briefly taught HS math and one of my responses to the perennial "when are we going to use this" question was "most of you have no idea all the things you'll need or want to do yet, and we want to open doors for you.")
ctypes is a thing, and gives you access to the world of runtime-loadable libraries on your platform. Beyond that, C modules for Python by hand, SWIG, Cython (can take Python 3.x annotations now), etc., are not bad at all.

Can you explain how platform-specific stuff takes "a lot of work" with Python, and wouldn't with some other language that is not Python?
There’s a step you forgot — turn your phone on and off. It’s annoying but it can fix problems with headphones when it’s not actually the headphones’ fault.
Opera Will Allow Ether Buying Services on Their Web Wallets
criminals has a loose definition, but I think the more plausible concern is people who are barred from legally possessing a gun by existing regulation (the chance they will use it for offensive violence has been deemed above the acceptable risk threshold) will have information on private residences to burglarize for the purpose of acquiring a gun. But to your question, lots would prefer that when it's unoccupied, some either way.
There are phone switches that were made in 1982 that are still running phone service, including 911 calling, for mid-sized towns.

And yes, postfix or Exim or qmail, once set up, in a fixed configuration like boat only email, could easily run for decades automatically.
That's a very bold statement to make.
I agree. I wonder whether he consider an "expression" up to the place where another expression can be placed e.g. && combines two expressions into a third one.
"brutalism"
This. The only real issue is that the teams implementing this decided not to do a data security assessment and are violating PCI-DSS and similar by recording things that are supposed to be stored securely or not at all (ex. CCV).

Also, as I recall, banks legitimately "track" user interactions as a means of fraud detection.
I'm not sure I understand. I don't use the Context API any differently than I would a Redux store.
CCV isn't ever to be stored after transaction completion, encrypted or not.
What under the hood image?
this can be incredibly effective as most "bullets" intentionally discharged toward a human, travel a path above knee level. This is the reason i was given to drop to the ground and stay flat while moving toward concealment and cover
https://www.smartlook.com

https://www.appsee.com/

https://uxcam.com/

https://userx.pro/

That's just a small sample of services that allow you to record the user's screen or take screenshots). App session replay software has existed for years, and of course, they capture all the things that are going on the app including checkouts and profile data (unless you flag those screens on the SDK implementation).

Like someone already pointed out, that video or image will likely be stored somewhere (an S3 bucket or some static storage). I think anyone who is implementing these type of SDKs on their app needs to do their due diligence, and not push sensitive data to these third parties.
I agree, but there is also something conceptually useful in learning early that a program is code saved in a text container that is then either compiled or interpreted.
Seattle times published data of percentage of unvaccinated children in Seattle schools (https://www.seattletimes.com/seattle-news/data/are-measles-a...).

Each and every school in top 10 is a private school. In Seattle, private schools cost an average of $25k/year. I bet illegal immigrants are not sending their children to the private schools that cost $25k every year when public schools are free.

The top schools is Waldorf which costs $20k/year for grade 1-8 and $25k for 9-12. This fee is only for 9 months of school. This school has 22% unvaccinated children. I bet there are exactly 0 children in this school from illegal immigrant families.
But you do agree that Spotify can read private messages, if it wants to. The news may not be clear about this, but we do need tighter permissions.
I am running a fully remote, unlimited design agency[0] with about 25 freelancers and project managers in various timezones.

We offer a 14 days, 100% money back guarantee. We do have some bad actors but I think the fact that design is highly subjective, the money back guarantee really convinces customers to try us. Currently we have less than 3% refunds.

[0] https://www.manypixels.co
Breakin' Bad – Reviewing Qualcomm's Secure Boot Implementation on Android [pdf]
Numerical cognition in honeybees enables addition and subtraction
This is really well done. I’d love to know how you built it and what data it is trained on. The suggestions are totally on point. It even adds extra words sometimes, which are uncannily well fitted to the context.
S Carolina Wasted $9B on Failed Nuclear Project. Still No Money 4 Green New Deal
> I guess that's why all those statically typed programs don't have any bugs and don't need any tests.

This is both a straw man and a fallacy. Nicely done.

Also something I never claimed.

You are basically saying that since you can't prove a program can be 100% demonstrated to be correct, there's no point in trying to approach this goal, therefore dynamically typed languages are good enough.

With your reasoning, we wouldn't be using safety belts because they can't guarantee you'll survive a car crash 100%.

Sure, static types have trade offs, but they are a clear improvement on all dimensions over dynamic types, which is why we see dynamic languages converging toward static typing and never the other way around.

In ten years from now, we'll look at dynamically typed languages as "It looked cool at the time, but we know better now". A bit like we look at FORTRAN and COBOL today.
Huawei: Tackling security concerns may take five years
> Your data actually confirms my thesis.

I don't think it does.

Your thesis was:

> the least expensive foods are fresh vegetables

This is a vague claim. Are you looking at the price per

- unit?

- weight?

- volume?

- calorie?

A cup of milk is a lot more nutritious than a cup of lettuce. A dollar of sardines is a lot more nutritious than a dollar of apples.

In most cases, fruits and vegetables are nutritionally more expensive than flour, potatoes, milk, eggs, meat, etc.

> So at least for 'fries, burger and coke' in the cheapest place, it's still cheaper to cook - and of course the 'expensive' part is the meat.

I have never claimed that fast food was cheaper than cooking at home.
Abercrombie's data collection should start and end at the data I choose to send them, including the products I click on.

I do not expect Abercrombie to "see what I do in real time," including where I position my mouse on my screen, text I type and then choose to delete, my physical location, etc.
Some more would be statistical (R, Matlab, SPSS), gaming outside the web (C, C++, Java), scientific computing (Python, Fortran, Julia), supercomputing simulations (Fortran, C++, C), embedded devices (C, C++, Rust), server farms (C++, Go, Java), financial (Java, Cobol, J/K), to name three PLs in each category that come to mind.

There is a big world of computing outside of apps and websites.
I wonder why they don't use syncthing.

Can't we modify syncthing so that it becomes like a low latency shared filesystem and uses bitttorent as an underlying protocol.

Or is the bitorrent not fit for making a shared/distributed file system?
i threw this alias in my .gitconfig early on, and it's gotten the job done so far...

hist = log --graph --pretty=format:'%Cred%h%Creset %s%C(yellow)%d%Creset %Cgreen(%cr)%Creset [%an]' --abbrev-commit --date=relative
SaaS channel partners
Is it very hard to find a channel partner to sell SaaS products?
This article is almost four years old but I still refer to it all the time: https://medium.com/@dan_abramov/smart-and-dumb-components-7c...

What I tell my students is that you want to think of your app in three layers -- the data layer (Redux/data fetching), the glue layer (@connected components, useEffect hooks), and the presentational layer. The representational layer should be just your rendering logic and the data layer should deal with fetching/storing/updating data. The two should never interface directly, only through your container "glue" components.
I just counted and Facebook tells me that 713 advertisers have uploaded a contact list that contained my info.

The super funny thing is that i saw my old girl friend create a page and upload my info and target me. ;)) (a good idea to create jealousy i guess)
How would I know, CodeFlow is internal to Microsoft. As far as I can tell from public sources, it's trying to solve some of the same problems (keeping track of structured, possibly multi-party and multi-round conversations over revisions), but it's a Windows app, and Critique is really Google's V2 or even V3 of this kind of thing that runs in the browser and is deeply integrated with the rest of their engineering infrastructure. I hope it eventually makes it into Google Cloud, it really is that good.
That's strange, I find Rust to be much less complex than working with C++ or C. It keeps track of all the tough bits for me, and it has all of the nice expressive stuff from Haskell. With Go I kept running into cases where the language simply had no feature to save me from multiplicative complexity in my code base.

I haven't had any problems with build times thus far, how big is your project?
The rebuttal in Scientific American
https://blogs.scientificamerican.com/observations/early-meat...
Splitting Firefox cross-site iframes into different processes
It's a dynamic language, if you must have static typing over Clojure it's not for you. (You can of course do a lot of other things at compile time via macros)
On iOS, apps can open a modal Safari webview instance within the app.

Can apps screenshot what's displayed in Safari in that case?
> You're beginning with the assumption that native is the only, and best solution.

I never said anything of the sort, you're again manipulating what was said to give you an opportunity to stand on your soap box. I said Apple and Google control the distribution channel and have an interest in protecting it.

Web Apps are at a distinct disadvantage on both platforms because Apple and Google control the channel to dissuade them from reaching mass adoption.

If anything I said that these actions might actually help Web Apps.
There are many fields that you could be searched for beyond just those two. Your name, street address, city, state, etc.
If you are in a module context, you could add "export" in front of the whole thing.
I worked at both, but I left MS before CodeFlow was created. An earlier version of what is now Critique (called Mondrian) was already in use at Google when I joined, and predated me by several years. There might have been something similar before it, I don't know.
I disagree. First of all, F# is functional and therefore has another design. C# also intentional followed C style languages to pick up developers. C# was built for the masses while functional programming is for the elites (F# is has 10k devs using it, VB.NET has 100k and C# more than a million active users).
I agree that there are some syntax they would have designed differently when they would have understand the functional programming influence they have today a bit earlier.

When they would design it today from scratch, I think they would look at JavaScript.
> people have a right to sell their research to the highest bidder, whomever that may be.

> whomever that may be.

I think most readers, myself included, read that additional qualifier on "highest bidder" to mean "even if such a bidder is unexpected or unscrupulous". If you meant "unless selling to such a bidder were illegal", then you should have said that. Your words were not only very different from that, but they specifically cover the case you claim not to be endorsing.

To say nothing of the fact that if you're informed enough to have a discussion on the sale of 0 days, it can be assumed you know the market is full of bad actors and state actors, so even if nobody mentioned it upfront, it's a topic that's on the table from the outset, IMO. It's not uncouth to bring up illegal behavior when it's a routine part of what's being discussed. I think it's a bit much that you attack that person's character for making what seems like a pretty sane reading of your post. Especially when it seems the person you're yelling at was right – the thing you said is not the thing you really think.
“...cannot afford to eat more fruit and vegetables”

Worse than “can not afford”, they do not have access to fruit and veggis to start with. Do a search on “food desert” or “poor access fruit”. It is not good.
Signal Messenger Rolls Out Optional Link Previews
It's easy to miss those signs too. It's common to have earmuffs and sometimes a dust mask on when using power tools, and power switches often don't clearly indicate state. Many start/stop control boxes don't have any visual indication of state at all.
A r9k of sorts?
Data Annotaions Done Using Google Forms
wut

It's possible to get in an 'envelope' behind another car and get pulled along with it.
I would be more worried if they begin absolving themselves of guilt due to this when they do something genuinely harmful to someone else out of childish behavior.
Well said. I am also on that journey and compared to C++ the complexity is still very low and readability very high. I think the only C# feature I have not cracked yet is co/contravariance. And that is more due to the fact, that you rarely need to declare it.
Timing lights for engines work this way for clarity: The distributor on an engine has a spinning rotor and a number of points (one for each sparkplug) on the outside the circle the rotor forms while spinning are a series of contacts across which electricity jumps to send voltage to the spark plug.

The timing light is then pointed at the flywheel on an engine, which has numbers or marks stamped into it. Each time the spark plug fires the timing light (which is hooked into that same current via induction) lights up for a brief amount of time to show at what timing offset the engine is currently at. (this all happens at hundreds of rpms a minute).

so I'm not sure it's the same
I don't think Racket includes the immutable data types that Clojure does?
Just because everyone does it doesn't make it right!
And the advantage compared to running containers is...?
The poster above mine said that languages that didn't ship out of the box with mandatory typing had a limited lifespan.

Indeed grafting types onto python, ruby, and even php seems more likely than people stopping using.
Here are some alternatives to Reddit:

http://voat.co/

http://gab.ai/

http://notabug.io/

http://kr5ddit.com/
Never heard of this in my four years there. Hrm.