skysight-inc/HackerNews huggingface dataset:
I sincerely doubt Google would send ANYTHING to a third party unless it really had to.

That being said I think this is a good compromise and I hope Apple applies this to all vendors.

I think the biggest winner here if I read this correctly is AWS and other cloud providers. The most straightforward way for someone like mouseflow to comply is to separate each customer to its own instance in a way that mouseflow has no access to user data.
I think many people would be surprised by the amount of analytics data leaving their phone _all the time_. I recently was doing some work where I had my iPhone proxied through mitmproxy on my laptop, and was blown away by just how much data was being sent. Some apps were sending a request to one or more analytics firms every single time I touched a UI control. I would set up a pi-hole and VPN to block this stuff, but I'm sure the app developers will just start tunneling the requests through their own hosts. Maybe some day one of these open source phones will actually be viable.
>since in those cases google and amazon are not actively tracking you

For now :-)
It's a bit surprising that the article didn't mention ensuring constant time algorithms are used. If latency or the emissions of the CPU (etc. externally observable) are data dependent on something secret, that secret might leak through the side channel.

One way to combat these side channels is to use constant time multiplication, loop conditions (including functions that might return early, like memcmp), etc.

Is it possible for Rust to have any new or surprising mechanisms that cause loss of constant time execution?

(Of course also other aspects can leak than the CPU instruction execution latency itself. For example cache effects might be measurable.)
Theophrastus’ Characters: An Ancient Take on Bad Behavior
I have published several apps on the App Store and none of them make use of any analytics or screen recording or any telemetry, really. So your statement "every app" is categorically wrong as far as I can understand it.
I think its because python has very strict and very simple indentation rules (a nested block must be indented, and the file requires consistent indentation. Is there anything else?)

YAML gives you options, or varies necessity somewhat arbitrarily on the structures, which is (marginally) good for reading, but a lot of headache in writing
GitLab and GitHub also send you emails but they provide a sane UI to use as well. The only benefit I see to email is it serves as a central notification location so I dont have to check every website to see what is new.
It's sad building a sustainable "lifestyle" business isn't good enough in go go go Silicon alley culture. At the end of the day, our communities do not need dozens of Amazons who grow too big to actually participate in a meaningful way in the local community and motivated by stock price and not impact.

The country would work a lot better if everyone who wanted to could build a lifestyle business. And sustain themselves, their families and maybe a couple of employees.
Speaking hyperbolically, Full Metal Alchemist: Brotherhood might be the best content across any medium that I've consumed in years. Speaking somewhat less so -- if you're thinking about trying out anime, start here, it's amazing and hilarious with great characters and an intense storyline.
He's talking about switching from vc rocketship to bootstrapped. In that context the pejorative makes sense: he's describing how he felt at the time.

Furthes, he ran this "lifestyle" business with outside investors.

He's written a nuanced, heartfelt essay, and this comment seems to have missed all of that to nitpick on a word.
I've always felt that the we've never actually seen anything really use the Raspberry Pi to its fullest because of closed-source graphics drivers and closed-source graphics schematics. Is this realistic?
One thing to note is that it is not guaranteed that values are ever dropped. In rust, it is "safe" to leak memory (it wasn't possible to make it unsafe in rust).
Due to the wireless industry's bandwidth cap (or severe service degradation after soft-cap) as a standard feature, I have little hope for 5G.
The ads just keep coming and coming...

Sometimes I think top 40 radio has less ads than the Techmeme Ride Home. I haven't crunched any numbers to see.
LSP also uses JSON messages.
I really like TOML as a compromise between "looks pretty" and "parses well".

That being said, I find it funny that the author is crying afoul, saying that YAML isn't as well suited to be templated as JSON is, when XML had schemas sorted out ages ago.

People ran away from XML, saying it was this verbose, ugly, bandwidth hungry (back when we were sending XML over AJAX) behemoth (which it totally is)... but I think when your usecase is complicated enough to worry about templating, you should take a hard look at XML and ask whether it might suit your better.
No comments, constant need to quote every string, inane comma requirements, no multiline string, little typing support.
If it takes decades to notice the effects of a toxin, it's not very potent and there certainly isn't going to be much of an evolutionary drive against it.
I guess I’m too busy trying to cope with squeezing into the seats and finding something to stave off boredom to notice humidity.

How does increased cabin pressure make for increased comfort? Once your ears equalize, the only difference should be less oxygen available, which I’d think would make you feel better (albeit stupider).
Because the app review team only evaluates a compiled binary, it is fairly easy to obfuscate nefarious activity. It could be as simple as serving different javascript from your backend to a [JSContext evaluateScript] call based on a flag you set after the app is approved, for example.
That's really not possible. It would be pretty trivial for an app to to capture screenshots by drawing their own main window into a bitmap and composite those screenshots into a video. iOS has system frameworks to make both drawing and video composition easy.
How would you do that? If code can render something to a screen, how would you prevent it from rendering to a video?
"instead of making myself write the book I ought to write, the (“neo-realistic”) novel that was expected of me, I conjured up the book I myself would have liked to read, the sort by an unknown writer, from another age and another country, discovered in an attic."

Chills.
Worry no more https://www.raspberrypi.org/magpi/raspberry-pi-official-reta...
Unlikely. Those who really want to get to Stockholm will not get on the NYC to London plane if they can get a direct plane. Substitute ALL other cities in Europe for Stockholm and a fair number of people are not on that plane. Those who do want to get from NYC to London have different schedules, some want to take the 5am flight and get to London in the afternoon, some want to get to the airport at a normal time and still get to London at a good hour. Some want to leave right after the days work is done. Some want a last supper with their family before leaving... Smaller planes are customer friendly. Also smaller planes leaves more room for redundancy - if one plane is broke you have less people who need to be rerouted to some other planes making it more likely you can get everyone to London without a major delay.
Agreed, regardless of your own playlist and album library you are pushed regional generic lists.

Also Spotify will start pushing its podcasts more in app since as per the article there are better profits available - so expect it be slower and require more clicks to open the app and just play your music avoiding promotions for exclusive podcast content.
I think we are approaching a transitionary period where lines by various companies are starting to be drawn in the sand with regards to privacy and user hostile design choices. It's still a little blury, but as the lines become clearer users will start to shift. And either by choice or regulation the lines will be drawn. Apple's hand is being forced in some cases, but usually in a direction they are already heading. Google will find the balance much harder due to the nature of their revenue model.
> You need bitcoin exchanges for any kind of practical transaction. Not only that, people who don't keep their money on exchanges lose their coins all the time.

OK, what's your point? Nobody claimed it was perfect, just that it happens to be immune to the particular failure mode which happened here. Can you accept that that is true?

> This stuff just keeps on happening, but crypto folks always make some excuse as to why it's not actually a systemic problem.

What "stuff"? People losing coins? People lose cash all the time, does that make it a "systemic problem" with cash? They are just different technologies with different trade-offs.

It's understandable that you hate the cryptocurrency community but that doesn't mean you need to deny every possible advantage of cryptocurrencies.
I had the same thought. The first paragraph concludes: And the evidence is in that it conclusively makes broadband more expensive, but this seems a bit much given the confounding variables you mention.
yeah, the data center affected apparently had a halon gas suppression system.
I think this is one of the cases where observing past and using it to predict future adds a bias that's no longer valid these days. Most people I know that are alone seem to be happy, the ones in relationships seem a mixed bag (some oscillating between high highs and low lows). Again, there is surely bias among people I meet (I can't make a stratified dataset with perfectly balanced classes), though it might be an indicator that socioeconomic and health conditions changed dramatically recently, invalidating long-term trends.
They need to have this anyway because they never know what might happen to that person. They could say tomorrow they have another job, or as my old boss used to say "got hit by a bus" and died. You'd have no recourse then, so you better have redundancy.

Of course, every job I've ever been in has been terrible about redundancy, and when people start leaving, usually it's the people with the most domain knowledge, and so you get a big gut punch right away, and then it snowballs as more work and responsibilities get put on other people and they end up leaving once they've had enough or found something better, and it just keeps increasing until you're basically totally screwed but hey, you're saving money by not having to pay all these employees anymore, and that's all your stockholders are going to see for the first year until your company completely falls apart.
> I'm a little amazed to see a finance professional recommending things like this when studies repeatedly have shown that picking stocks does not work when you get a large enough sample size.

If every financial professional believed that, there would no be finance professionals. With me maybe the quote is true "It's hard to make a person understand something when their job depends on them not." I work at a firm that tries to make money for their investors and if I believed it was impossible, I probably wouldn't be working for them in the first place.

In no way am I an unbiased commentator, my livelihood depends on me believing that I can be smarter, than I can be better than everyone else. And while most people can't, many people can. There are a handful of funds that have demonstrated significant outperformance over a long period of time. Funds like RenTech or Bridgewater.
mlock, like VirtualLock, doesn't guarantee that a copy won't go out to disk, only that a copy will always be in RAM.
AOC_Sec bringing down the global financial industry.
As an alternative, I might suggest starting with "Guards! Guards!" since it's one of the good plot arc beginnings and actually directly involves the library and L-Space.

I'm also a bit less fond of "The Colour of Magic" since I think his writing style was weaker in his first few books and since his characters were not well established. Both "The Colour of Magic" and "The Light Fanstastic" are very fun books but not quite at the same quality level as his later ones once he found his rhythm and built up his world.
It definitely is. You have no idea how intimidating an equivalent JSON file would be for a new user creating a pretty simple k8s setup.

YAML hides most of the scary brackets and quotes so that new users can focus on copy-and-pasting semantic tidbits.

That said... I don't like YAML...
I'm so glad this people are finally having this conversation.

I will start by saying I'm not a developer of any kind. I'm learning Ruby and I've been doing that for a few months now. However, back in 2015 I got the itch to learn HTML/CSS/JS with the idea of changing careers. Long story short, I tapped out somewhere between 2016 and 2017. I still haven't changed careers. I was stressed and discouraged about how much I had to learn. I'm not saying this is everyone's experience but it was mine and I'm sure I'm not alone. It felt like trying to catch a train that is gaining more speed while crawling.

Hopefully there's a mindset shift after this, although it is my feeling that it will take another 5 years until there's a complete shift in tool set.
I completely agree that wanting to make a positive impact on the world is important, although, and I don't want to sound too nihilistic here, the actual magnitude of that will probably be small for most people, therefore I think that personal satisfaction in life should be important and isn't meaningless, which was what OP claimed and the reason why I asked that question.
Thanks for the link ! Shared it with my colleagues
It is possible. They specifically make it possible for bad actors.
I'm sure the developer was happy to get some time, but as a user I would rather see any app that's violating the agreement removed immediately.
John Galton Wanted Libertarian Paradise in ‘Anarchapulco’ He Got Bullets Instead
The first party already has your data under their own privacy policy. But users aren’t necessarily agreeing to the privacy policies of third parties when they use an app.
AIUI, this should only come up in rare cases, mostly involving RC cycles. The "should" proviso is there because the operation of "forgetting" that a value has to be dropped (thus de-facto leaking it)
is in fact allowed in Safe Rust, and it's not immediately clear to me where that might come up in practice.
I was interested, so I did some research here.

Rational Choice Theory
https://en.wikipedia.org/wiki/Rational_choice_theory

Rational Behavior
https://www.investopedia.com/terms/r/rational-behavior.asp

> Most mainstream academic economics theories are based on rational choice theory.

> While most conventional economic theories assume rational behavior on the part of consumers and investors, behavioral finance is a field of study that substitutes the idea of “normal” people for perfectly rational ones. It allows for issues of psychology and emotion to enter the equation, understanding that these factors alter the actions of investors, and can lead to decisions that may not appear to be entirely rational or logical in nature. This can include making decisions based primarily on emotion, such as investing in a company for which the investor has positive feelings, even if financial models suggest the investment is not wise.

Behavioral finance
https://www.investopedia.com/terms/b/behavioralfinance.asp

Bounded rationality > Relationship to behavioral economics
https://en.wikipedia.org/wiki/Bounded_rationality

Perfectly rational decisions can be and are made without perfect information; bounded by the information available at the time. If we all had perfect information, there would be no entropy and no advantage; just lag and delay between credible reports and order entry.

Information asymmetry
https://en.wikipedia.org/wiki/Information_asymmetry

Heed these words wisely:
What foolish games! Always breaking my heart.

https://deepmind.com/blog/game-theory-insights-asymmetric-mu...

> Asymmetric games also naturally model certain real-world scenarios such as automated auctions where buyers and sellers operate with different motivations. Our results give us new insights into these situations and reveal a surprisingly simple way to analyse them. While our interest is in how this theory applies to the interaction of multiple AI systems, we believe the results could also be of use in economics, evolutionary biology and empirical game theory among others.

https://en.wikipedia.org/wiki/Pareto_efficiency

> A Pareto improvement is a change to a different allocation that makes at least one individual or preference criterion better off without making any other individual or preference criterion worse off, given a certain initial allocation of goods among a set of individuals. An allocation is defined as "Pareto efficient" or "Pareto optimal" when no further Pareto improvements can be made, in which case we are assumed to have reached Pareto optimality.

Which, I think, brings me to equitable availability of maximum superalgo efficiency and limits of real value creation in capital and commodities markets; which'll have to be a topic for a different day.
isn't really a fringe idea

It's not a fringe idea in itself but in the context it's a talking/advocacy point that is a foundational building block of something quite different. I wish I knew more about spotted owl or food labeling matters so I don't have to use such overwrought examples so excuse/bear with me:

'states rights' is in itself not a fringe idea but at the time it was deployed entirely to advocate against federal civil and voting rights legislation - that was the goal, rather than a desire to debate the nature of the federal structure of the United States. 'Patient safety' is similarly deployed with the goal of restricting reproductive rights.

'Congress should spell it out' is precisely in that vein - its goal is the structural defanging of the federal regulatory regime. To my mind, that's a fairly conventional, mainstream analysis rather than than some lefty fever dream of mine. In this particular case especially - I think (if I'm remembering this right) both houses of Congress took the matter under consideration and neither brought it to a vote.
>1. Nothing. Which is what makes this seem soooo shady, and both parties refusing to give even a surface exuse.

i think the fact that Reddit is losing money and needs cash infusion counts as surface exuse.
Also because the longer the YAML file, the bigger your indentation gets. It gets exponentially worse as you go.
If you were 1000x the size of a cow, you probably could (and would) eat it whole, as your teeth would mash through bone and skin without a problem.
This is part of the reason I enjoy Beaker Browser so much. It makes the web fun like it used to be. You can easily make a site and publish it instantly. And you can just use a markdown file to render the page! https://beakerbrowser.com/
Its hard to beat Full Metal Alchemist: Brotherhood in general. Its kinda got something for everyone in my experience. A huge variety of people I know like it.

I would argue that there were better anime out there, but they are difficult to get through and may require a good understanding of "anime culture". Ex: When they Cry, or Madoka Magica I would argue are superior.

When they Cry requires a general understanding of visual-novel harem style stories, while Madoka Magica requires a strong understanding of the typical Magical Girl plotline (Sailor Moon, Cardcaptors, Lyrical Girl Nanoha are pretty much required watching BEFORE you watch Madoka Magica)

-----------

In contrast: FMA: Brotherhood is self-sufficient. You can enter the show without knowing anything about anime and enjoy it. The only "risk" I have with the show is the chibi-styles / super-cartoony that they push randomly.

Its otherwise a very serious plot, with some quite dramatic moments. So a lot of people feel it to be bipolar since it also uses "cartoon physics" on occasion.
The last lines would have sufficed then! ;)

Thanks for your wonderful software BTW!
I don't think I've ever used anything under than vanilla vim for editing YAML files... with next to zero issues.

The problem for me is that the multiple ways to do the same thing result in something that's pretty opaque to clear specifications that aren't just very simple examples / structures.
Is there a reason that go's defer is only function-scoped?
Are you talking about the crate `crypto` or `rust-crypto`? Both have not been updated in a couple of years.

The `ring` library is a bit more modern, but still requires a bit of a run around. Here's an example of encrypting a cookie: https://github.com/alexcrichton/cookie-rs/blob/master/src/se...
It personally bothers me that enterprise server software comes with consumer GUI applications on by default.
The point is to not make it so easy. It doesn't need to be easy, or automatable.
> but you're describing a failure mode of bitcoin exchanges rather than the bitcoin network

Of course! With bitcoin, nothing is the fault of bitcoin and always something else's fault. Bitcoin can never fail. It can only be failed.
I blame the 40 hour work week with rigid requirements on time/location. 8-10 hours of a day are basically the entirety of the hours someone has to not be tending to chores and other commitments. This would probably be helped by a UBI.
I really don't know if that's true. The only example I can think of is ad-ridden media/news sites but those are that way by design.
> I had the simple task[2] of encrypting bytes with AES using the library. But (as detailed in the post), they didn't expose a simple, "give us plaintext bytes, give us key bytes, give us options, we'll spit back the ciphertext bytes". Instead, you have to delve into the irrelevant details of constructing mutable buffers (which require special care in Rust), so it can read from and write to them, and without even any good examples in the docs for how to construct those buffers.

That is a surprisingly uncommon API for a crypto library. It's far more common that they make you do a lot of the setup that really should be under the hood and that if you get wrong your security will be ruined. Plus the docs won't explain what any of the values mean because obviously you wouldn't be using crypto unless you already took a college course in it.

It's far too rare that the docs even explain what an IV is, or what you should set it to, or if it needs to be kept secret, or even what the initials mean. I think it is on purpose to scare off developers that have not studied the field extensively, but in reality they have a job to do so they set it to 0 and then ship 84 million appliances where this code is baked into the firmware update system.
Finding out if a set ends in a comma or not still makes it easier to debug than YAML.
Not really. To be fair, all modern GPUs are closed-source and the Raspberry Pi actually has the only mobile GPU with some public documentation. Sure, there are open-source implementations of Mali and other GPUs, but they just don't work well. Unlike many knockoff boards, you can build the proprietary blob into your code and get great performance (see Kodi or VLC, which can play 1080p30 and has a very smooth UI on the Pi).

As for closed source schematics, it doesn't really matter because there is no way to purchase the processor powering the Pi yourself. Some clone manufacturer tried to buy the BCM2835 in like 2014, but Broadcom had a 100,000 order minimum, and so the clone manufacturer just couldn't afford it. So, schematics aren't really useful.

Finally, a HUGE reason why the graphics software is closed-source inside the GPU is legal issues. The GPU contains dedicated video decode/encode blocks which have patents which require licensing. RPi gets around this by keeping the GPU closed source and selling MP2/VC1 decode licenses. If the Raspberry Pi foundation distributed open-source GPU software which could use those decoding blocks, they would be underwater with lawsuits from multiple patent bodies.
You picked the best 10 years to start investing :)