skysight-inc/HackerNews huggingface dataset:
Port Ban on Iona is my favourite - a small pure white shell beach near the wonderfully named "Bay at the back of the Ocean" on a tiny remote island that is both stunningly pretty and absolutely loaded with history ("its cargo of mouldering kings").
Some google searches for old custom roms for Android would help. I recall stuff like this in non-commercial 2.0-series android custom roms.

For a very specific example of the genre, pdroid and its numerous clones (some of which were trojans as I recall) from around 2011 seems to almost perfectly match your request.

You know you're in deep when you have to root your phone, install a custom rom, then patch the custom rom, just to limit how much you're getting spied upon.
I think by this point Google is an exception to Hanlon's Razor.
Caveat: I have not worked with Rust. The comments below suggesting Heroku, DigitalOcean and other PaaS are good starting points. However, I want my side projects to be able to handle arbitrary load without managing additional infrastructure.

I design my current web apps to work using serverless functions https://serverless.com/
This ensures that if my applications become popular, I will not have to do additional infrastructure work to scale. I use a cloud provider managed database (AWS DynamoDB, RDS for Postgresql) so I don't need to worry about managing that either.

There is a steep learning curve! A quick Google search shows that Rust serverless is in its infancy (https://github.com/softprops/serverless-rust). Also, if you need to have bi-directional communication using WebSockets (or something comparable), the options you have to work with are limited (AWS AppSync is what I am currently struggling with)

That being said, it has been an extremely challenging and rewarding experience, migrating my personal projects.
If you're interested, I sell a dedicated Sonos music controller (built out of wood no less). It's available at https://turntouch.com and it's entirely open source so you don't have to worry about me taking your data and selling it. Earning money based on the initial sale is all that I want out of my users. That and props.
> When did it become acceptable to straight up disrespect someone to their face for their personal choices?

It always has been, surely? But for a different set of things than mere consumer choice.
Considering all the money norway got to pay indonesia came from selling oil, this is really nothing more than a billion dollar PR exercise. Not to mention that in a globalized world, the deforestation will ultimately get shifted somewhere else.

Just like europe loves to pretend it is lowering emissions when it's just shifting manufacturing to china, norway loves to pretend to be environmenally friendly with its oil money.

If europe or norway truly cared about emissions or the environment, they'd end global trade and drilling for oil, but they aren't going to give up their luxurious first world lifestyle are they?

Edit: To everyone downvoting, how about this scenario. We give norway $1 billion for them to shut down their oil rigs? Surely norway will sacrifice their economic wealth and prosperity to help the environment right? Or do we only expect that from poor countries?
That's one client we are working on. That client uses delta.chat core to which we are also contributing.
There is an island in Malaysia I like to visit. It’s definitely not easy to get to. You’ll have to take a coach bus with the locals, then hop in a taxi, then take a ferry boat with the locals.

Also, there is no power at night (generator and solar powered) the reactions I get are telling; European friends are really keen, American friends are aghast at the lack of air conditioning. Like how will they charge up their electronics.
Well spotted, what a stupid thing to do -- uneducated or nazi?
I'm failing to understand how it would be malicious - without this permission setting apps would absolutely be able to pinpoint a user's location. I can sort of agree that more fine-grained permissions could be helpful, but asking for something like "Allow this app to access Wifi signals" doesn't convey the privacy risk to the user, and so putting it under location makes sense to me.
Pardon the criticism, but I've got text running far off the screen on mobile.

Somewhat shocking to see a brand new 2019 website that isn't responsive, especially when it's not super difficult.
Cool stuff! Thanks for making it and sharing :)
I don't understand your point. Are you suggesting that people that pay a co-working space to work there should accept that whatever they're printing (most likely they're also paying for the pages they're printing) can be read by the co-working space?
you can get a Google Voice number only if you are in the US, at least when I tried to get one last year it was impossible from Italy.
EU Countries Back Copyright Reforms Aimed at Google, Facebook
> Yes, movies and TV shows with children under 13 are widely-accepted, but being widely-accepted doesn't mean it's morally alright.

You’ve presented no argument as to why it's not alright. Now, this may be a base moral axiom for you, such that no argument is needed, but that's not particularly convincing to anyone who doesn't already take it as a moral axiom.

> There might be a time in which we reject such content just as we did with prior widely-accepted behavior that was immoral (like homophobia and racism).

There might be a time when we see anything in any way you can imagine. That's not an argument that we should.

There might be a time
> When did it become acceptable to straight up disrespect someone to their face for their personal choices?

When people started having personal choices that affected the people around them. So: since always.
Not one reaction step, one row up in the periodic table, as a sign for "what is it chemically similar to"
I am on mobile and these keyboard-centric comments are exclusionary.
Yeah, a decade ago the company you worked for had your highly personal data.

Now Slack, GSuite and others practically have the salary and work history of millions of programmers. Everyone seems to be totally okay with that.
Thank you for your post write up. I'm going to go through that first as my main intro to quant trading and programming for trading, and then will check out your later blog posts. But so far a few pages in and I'm hooked, this should be a great and fun exercise to get into a new field of programming.
It very hard to do that, because UNIX and C go hand in hand.

Moving away from C, which is a good thing on my opinion, would ultimately mean moving away from UNIX, as those OSes have other cultures.

So what we really need, since UNIX based OSes aren't going away that fast, is to tame C.

Solaris already did this with hardware memory tagging when running on SPARC.

On Solaris/SPARC an use-after-free attempt would terminate the process, or in this case trigger a kernel panic.

Google has been pushing for the Kernel Self Protection Project[1].

One of such initiatives is collaboration with ARM for hardware memory tagging on ARM v8.5[2].

Intel had MPX, but apparently it didn't took over and now is scheduled for removal, leaving SPARC and future ARM releases as the only architectures where it is possible to have some hardware control over C memory accesses.

[1] - https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Pr...

[2] - https://community.arm.com/processors/b/blog/posts/arm-a-prof...
Not to mention that it's just re-solving all the same problems other messaging protocols (XMPP, IRC, etc.) spent time solving 10+ years ago.

I always feel that the Matrix organization is a bit disingenuous. Not only are they not developed by any recognized standards body (meaning they have no long-term sustainable funding model), but if they really just wanted to connect all the other chat protocols and make sure everything was interoperable they could have built bridges for existing protocols instead of reinventing the wheel yet again and making the chat scene even more fragmented. Not invented here syndrome is not okay when there are plenty of good (or at least "good enough" even if they're not my favorite) alternatives on the market already.
Yeah, prediction is really hard and even here on HN people sometimes don't see the value of a good thing, as in the case of DropBox etc.
Having moved from one non-top-tier US city to another, look for an area that has a lot of tech activity spread across multiple industries. If there are a few startups in the area then that is better as well.

If there is a large downturn in the technology space, a place like Silicon Valley is going to see more of an impact. Multiple industries like tech, insurance, banking, biology/medicine, etc. in an area will help if there is a downturn in the economy for a specific industry.
Stress Management Tips for Developers
Back in the 1960s, if you were black and seated at a lunch counter, a white person would spit in your face. Which was considered perfectly civil for a lot of white people.

In some cultures, at various times (including today), the civil thing to do is to berate and even beat a woman if she appears in public without covering her hair or face.

To the guy in the story, telling someone to not use the plastic water bottle was the civil thing to do.

Civility has always been subjective.
You’d still be ok above the Armstrong line if you covered your head though. I think your skin would protect you?
This can easily be solved by app developers though. Add a screen before the permission explaining why you want that particular permission, and limit asking permissions to the point that you need to use them rather than the first time the app starts up.

Too many apps ask for permission immediately without any context as to why they're doing it.
Privacy is a question of agency. Who is in control of a person's intimate data? Who gets to determine which data is intimate? Who gets to determine which personal data is shared with whom? So far, the industry's response to these questions has always been an implicit "we, the masters". The current debate about online privacy is a (much overdue) challenge to those implicit assumptions.

So in principle, it is not about storing user-data nor is it about sharing that data. It is about determining who has the moral right to act on what data. And in order to have that debate on those moral rights, people need to know what happens wuth their online traces. As long as what really happens is shrouded in secrecy, legalese, or click-through patterns, there can be no meaningful debate.
Why does the app need Bluetooth or WiFi scanning permissions? Can't you handle the pairing in the OS and allow the app to use an already established connection?
You get to discount the drag of the plane since at cruising altitude you only have 1/3rd of the pressure.

edit: But then again emissions at that altitude have a larger warming effect..
By that reasoning, nothing is; even GPS signals aren't tied to geographic locations, you infer it based on timing calculations.

BSSIDs can be easily mapped to a location using free and readily-available services. They are as good as most geolocation mechanisms you can get.
Haven't the building code changes in Florida since (I think) Hurricane Andrew advanced the limits of what stick-build, platform-framed structures can survive?

I know metal roof tiedowns ("hurricane clips") were created to solve the issue of roofs being peeled off wholesale by high winds catching them under the eaves and lifting.
It's not a binary yes/no question.

Given equally-high quality JSON and binary serdes, JSON is sufficiently fast. Raphlinus is saying that Swift's built-in deserialiser is obnoxiously slow.
I honestly have no idea what you're talking about. The idea that UNIXes diverge from either BSD or SysV is not controversial. The fact that virtually every commercial UNIX had a completely different set of administration tools (other than vxfs as a add-on product to many) for any and every administrative task and init scripts in different locations are not orthogonal. "This system derives from SysV and that system derives from SysV, so I can administer them the same way" is complete bollocks and always was, even down to the location of the init scripts. That's the point.

At no point did I make any claim that inittab+runlevels was the "only thing going". I claimed that many systemd detractors hold to some abstract idea of a "pure" UNIX which never existed in the first place. As mentioned in my last comment (or my first comment) recognizing that there are fundamental limitations to traditional init and replacing or supplementing it with whatever (SAF, srcmstr, openrc, initng, you name it) and "being like systemd" are not even remotely the same thing except that they both manage service initialization.

This kind of false dichotomy is the point of the original post, which you missed in your fervor to turn it into a strawman. launchd, upstart, smf, runit, and other modern replacements are also not "like systemd" except that they manage services. SRC didn't replace init _at all_. It was a system run in parallel, as you well know. It was not a replacement for sysvinit, and AIX still has sysvinit. Again, as you well know, but it doesn't fit your narrative.
Depends on the type of person. For some it’s the only way to have a sense of control over ones own destiny. Others who lack the discipline to always be selling and pushing forward are better off sticking to their current role.
I wonder how COI will perform battery and latency wise. I mean, if an email is delivered within 30 seconds to the recipient, that is considered fast, but if instant messengers take that long you wonder what is broken.
Have you try Tensorflow.js to run ML on the browser. I think is a good place to start
Questions Entrepreneurs Should Ask Investors
> When did it become acceptable to straight up disrespect someone to their face for their personal choices?

That time is lost in the mists of history, though which choices this is acceptable for have been different in different times and places.
I am a bit frustrated with one question regarding explain cost. Namely how to map the cost to wall time. Based on my research so far, andwer is about "you can't". But that is difficult for me to understand. I mean, I do understand that it does not map with high (or even relatively low) accuracy. But the cases where I have been needing the information are more like me wondering after 15 minutes of runtime whether the query is just heavy and takes more time than expected (up to even hours) or did I mess up something and the query in its current format is going to run approximately until the heat death of the universe and I better rewrite it. It just feels weird if I can't get even that accuracy out of the cost number.
Hetzner (hetzner.com) has bare metals, also have an auction [0] site where you can bid on "old" bare metal servers and get some good deals, especially if it's just for some experimenting and such.

[0] https://www.hetzner.com/sb
In some cases, the only thing that detection of non-symptomatic cancer does is turn someone into a cancer patient who's tumor would otherwise never threaten their health or effect mortality. The more cancer you look for the more cancer you find.

https://fivethirtyeight.com/features/the-case-against-early-...

>What’s clear is that cancers fall into a few general behavior patterns, which Welch and others have compared to animals that must be kept in the barnyard to prevent a deadly rampage. Papillary tumors are like turtles — they move very slowly and never pose an escape risk. They don’t need screening, because they will never cause trouble. Then there are rabbits, which are eager to hop away to other parts of the body, but can be confined if they’re found and fenced. These are the cancers that can be helped by early detection and treatment. Birds, on the other hand, are so flighty and quick that they can’t be confined. Screening makes no difference for bird cancers, because they’re so aggressive that they can’t be detected before they’ve begun their deadly course.

>No cancer screening has ever eliminated the majority of cancer deaths. Instead, the best screening can do is reign in the rabbits. Birds remain unstoppable, and they’re the ones responsible for most cancer deaths. This is why, Welch says, three decades of mammography have failed to put a dent in the rate of women presenting with metastatic breast cancer upon their initial diagnosis. Women with breast cancers that behave like birds will almost never be helped by a mammogram, nor will men with the most aggressive prostate cancers be saved by PSA tests.
I bet this data is worth (much) less than the cost to collect and analyse it.

It would be worth something for larger companies but for these WeWork will have only limited insight since they're unlikely to rent all or even a significant share of their total space from one provider. Lead generation is probably the ceiling.

Maybe they could do some targeted advertising/deals for various additional services. But probably not even that. Let's say they wanted to provide accounting services. Can they beat Mabel Luna? Will they have someone to answer a quick question about cash flow or depreciation?
This really highlights an advantage of centralisation. If those hundreds of thousands were stored in a bank account and a mistake was made transferring them, the bank would be obligated to fix it.

Decentralisation is cool, but it's not the solution to every problem.
This is a pet peeve of mine with Android (don't know about iOS). Another example:

Browser wants to download a file, so I have to give carte blanche permission to access all my files. Why can't I just give permission to place new files with app-supplied content, i.e. no reading of existing files, no overwriting / deleting of existing files, and OS-managed name collision resolution?

The same applies to the camera app. And no, the camera app does not need to read my files to display a gallery of photos taken. The gallery app already does that, and Android is perfectly capable to re-using an activity (via intent) of the gallery app as part of the camera app without the latter gaining any permissions.
Including Android and ChromeOS, which while being based on the Linux kernel don't expose its interfaces directly to userspace, and with Treble Android Linux variant is a kind a pseudo micro-kernel with several services running on their own processes and using Android IPC for data exchange.
Nodes is a term for geeks.

If I have commented and then verified my email I want unverified nodes as a todo.

"
Welcome to Remarkbox. You have unverified comments. Please check they belong to you and verify them. You will then be notified if somebody replies to them.

[x] I suggest something better / 1 days ago / foo.com/blog/a-good-choice

[x] I am stuck at X / 2 days ago / foo.docs.com/product/intro

[These are my comments, verify them]
"

Login state should be represented in a consistent place. If I am not logged in, there is a email field at the bottom. If I am logged in, there is my username at top. A gravatar would have helped.
The dot-com bubble tells us that when company leadership appears more concerned with meat consumption on premises or water bottle choices of employees vs say addressing actual business issues like losing money hand over fist despite being in business for many years then the future may be a wee bit bumpy for said company...
So what should one do today to minimize their early death from cancer risks?
Do some kind of a genetic screening? Have periodic (annual?) checks for specific cancers?
I prefer the EU approach where the collection and use of personal data is regulated, not merely "be warned."
I have uMatrix set similarly.
Hi!

You might be interested to know that the Turn Touch homepage starts playing audio as soon as it is opened. This was enough for me to close it and never come back, and I think this sentiment is reasonably widespread.

I'm genuinely curios about the reason some people decide to add audio (or video for that matter, but audio is way worse) on autoplay. Do you enjoy when web pages you visit do it? Did you see from some kind of metric that it increases your sales?
Four Kinds of Luck
I would blame lot of this sort of thing on various frameworks / sdks / libraries and whatnot. Many of them demand all sorts of permissions like this.
If you dont want to write everything from scratch then u are stuck with this sort of crap.
The only take-away from this is that Norway should just sit back and relax, no matter what you do, it will be wrong.

Less than half of the exports from Norway are oil. It accounts to less than a quarter of revenue. See: https://www.norskpetroleum.no/en/economy/governments-revenue...
No, but would love to hear the joke!!
Would it have helped in this case? Permissions should convey the privacy risk to the user, not just the technical details of what's happening.

To a non-technical user, "Access nearby Wifi signals" (or something similar) sounds totally innocuous. Most people would approve that assuming that the app just wants to connect to the internet.

You could get more detailed and say "Access nearby Wifi signals, which could reveal your location", which conveys the privacy risk. But to the average user, "access nearby wifi signals" isn't adding anything - the only real privacy risk is that location is revealed, so it just makes sense to convey it as your location.

There's other cases where I think there's a better case for finer-grained permissions - some apps ask for phone call permission just so they can know whether you're a call or not - arguably something that should hardly require permission at all, but it's lumped in with one of the more scary sounding ones.
People used to be polite to each other as long as they were the right people, but being polite to the wrong people became a sin called "political correctness".
Every time I see articles of these places there are pics of people with laptops, in rows, on narrow tables, almost elbow to elbow, sometimes sitting on high chairs or stools.

Is that what these places are all like? It looks uncomfortable. It's like doing all your work in a high-end cafeteria.
The problem here is that they don't really want location, they just want a list of the surrounding Wifi networks, it just happens that such information is easily converted into a location, so Android requests that permission.
Hey, this is pretty useful!

For me (and I believe a ton of other of devs, especially back-end oriented ones), it is tiring and boring having to spend time and effort on design stuff, which is needed but could be done in a easier/simpler way, and I believe you're on the right path about this.

Keep up the good work.
The Missing C++ Smart-Pointer
Yikes! It's part of a hidden video that shouldn't play until you explicitly open it. What's your browser/OS? I tested on Chrome, Safari, and FF on mac as well as iOS.

I also just added a muted attribute to the `video` tag so it should no longer do that even if I messed up the JS for some browser somewhere. I encourage you to try it once again to confirm.
I think for Bluetooth it doesn't work that way (you can connect some standard devices Android can use itself, e.g. a headset on OS level, but not arbitrary devices). For WLAN it's probably an ease of use thing, automatically finding and setting up the device instead of telling the user "please connect to the WLAN created by your new device and then press this Button".
That helps, but I don't feel like it solves it.

Technically, for example, an app may not even want to see all available SSIDs. Maybe an app just wants one passed to it. Sort of like a browser file dialog works.

The pop up text from the OS says it wants the user's location. That's not what it wants or needs.

This comment has some other examples: https://news.ycombinator.com/item?id=19216715
Sounds like they made a very broad ruling (that the 8th Amendment does apply to the states) and left the narrow rulings (about the specifics of the case) to other courts.