skysight-inc/HackerNews huggingface dataset:
> Provided the merchant did not incur liability by doing something immensely stupid and insecure, the bank is on the hook. If the perpetrator is caught, they will pay restitution to the bank.

Source? As someone who helps support an online credit card gateway, in my experience it is the merchant who has to shoulder the cost (plus an extra penalty fee) of the transaction. Perhaps there are different chargeback policies for card present transactions for physical products, but for online (and therefore card not present) transactions for digital products, I have always seen the merchant have to cover the cost of the chargeback (plus fee). There's a process for disputing the chargeback, saying the customer absolutely made the purchase and got what they were asking for, but almost every time the card would side with the customer, because there was no physical product.

This is one of the reasons when card companies pushed for chip cards, merchants pushed back for chip and pin like cards used in Europe -- to cut down on fraud, which they end up paying for. The only system I've seen where the cost of a chargeback is on the bank instead of the merchant is if the merchant has setup 3D-Secure/Verified by Visa with their products, giving the banks and card companies the opportunity to have an extra login for making the purchase. However, those verify pages are made by the bank, not the credit card company, and are widely unreliable. I tried to set it up for our payment gateway, only to find that some of the banks had completely broken systems for it, leaving customers at an error page instead of buying the product.
People are trying. Apple is very likely to come out with “Lens” in 2020 and magic leap still exists.
No, if peoples feelings are hurt over political speech, it's fine to totally ignore their feelings.

It not only has nothing to do with race, it has nothing to do with national boundary, political association, or anything else. It's just a thing that we (westerners) take as a fundamental right.

It's irrelevant, but I also doubt that a substantial percentage of mainlanders actually have their feelings hurt by comparing the ruler to Winnie the Pooh...
I've done the same but for a proxy I needed to circumvent geofencing restrictions. I got a local(non-US) VPS provider and installed squid on it. I found it more affordable than the paid services out there and it's immensely better than free options that are prone to abuse and are rendered essentially unusable.
What are the reasons to attack? Mainly for resources and religion. Resources was solved by better global trade, religion is mainly in decline.

>What if there were a genocide occurring in another country?

How does a military solve this? Create an even bigger genocide?
Go checkout Beaker Browser (using dat) or IPFS.
Be careful with that assumption. Many, many VPN vendors actually sell their user data even if they advertise otherwise. They can also be far harder to penalize than ISPs, especially if they're outside the US/EU.
Retrieval: Tunable full text search engine in JavaScript
Why do you think it would be discovered at all? Unless the downstream customer buying the data makes it public, nobody will know. And by operating outside of the EU, you can't really be checked. So nobody who knows what's going on has any incentive to make the arrangement known.
Free tools to help with data analysis
Your approach to this reminded me of an article[1] I bookmarked last week. Their methodology was kinda similar.

---

[1] https://thewirecutter.com/reviews/best-vpn-service/
A few things, since I work in IT: we don't give a damn about your workstation. It's a fungible resource. Reimaging is easy and relatively quick. We even let you have local admin because who cares. Users are not prone to playing around with settings they don't understand, in my experience. If someone was constantly needing their workstation reimaged we'd probably just fire them for being incompetent. Ideally, the OS would be completely separate from the applications and configuration and be immutable, and that would go a long way towards eliminating those kinds of problems.

We managed to share home desktop computers in the 90s without significant problems, even though the OSs we used didn't support multiple user accounts at all. And there's no reason you need user accounts to accomplish what you're describing. You can still have profiles (preferences, application configs, etc), and you can encrypt them with a passphrase if you have any reason not to trust others using the same device.

> Heck, it's not even unheard of to end up with multiple "simultaneous" users on a single-seat desktop machine

A vanishingly small use case inside an already vanishingly small use case.
If I remember correctly from their statement on this issue before they were baaically unaffected by the new laws as they do not off end-to-end encryption, so they were already open to lawful intercept requests.
As a hardcore carnivore who became vegetarian leaning vegan 4 years ago I can only hope. One of the replies saying “in California” rings very true.

My best argument in favor of plant based is the anti biotics being so unregulated in meat production.
I'm using outline on digital ocean.

https://www.getoutline.org/en/home
>Society depends on women putting their bodies on the line to produce more members of society.

I agree. I think to make sure women uphold their unique biological responsibility to society, in times of war all healthy women under 30 should be forcibly impregnated so that our population is not decimated. This is a separate but equal sacrifice that the country needs in times of war.
Do you have a concrete proposal that is both credibly deployable and better than DNSSEC?

DNSSEC is awful in many ways, but it can be deployed incrementally, it's already standardized, and a good chunk of the benefit can be had without changing normal clients at all. I think that "absolutely staggering enormous global expense" is an overstatement.

edit: A major benefit of DNSSEC is that the CA/B forum already requires that CAs use it to check CAA records.
I'd say you are "appropriately grumpy and pedantic".

From my perspective, my ISP is untrustworthy because it's legally required to be where I live. At least FSecure are not subject to that law, and are business-wise and give me a choice of endpoints that are outside of the jurisdiction of that law. They _might_ be collecting and on-selling that metadata, but I believe they are not. I 100% _know_ my ISP (and all my alternative choices for an ISP) are. So using them is a win.

Even if FSecure turn out to be evil - they'll be doing it for different reasons to my ISP (profit motive vs being compelled by local Australian laws), so the nature of my exposure there is different - and so far as I can see, smaller.

I strongly suspect the NSA _are_ tapping the egress of every commercial VPN provider and every commercial VPS provider. But if my adversary ever becomes the NSA I'm fucked, and I accept that.

If the local taxi commission or dog catcher go asking my ISP for my metadata records - even though I don't own a dog or a taxi license, I feel happier knowing my ISP can only tell them "Don't know, sorry. Here's a bunch of encrypted connections to various VPN endpoints around the globe."
Employers Favoring Experience over Education
Taxation is theft and drafting is forced labor and the kind of forced labor that might mean you murder innocent people if you do it.

I have moral obligations towards doing something good for people around me. One of them is not supporting such evil schemes.
"On Windows, you can basically use a UNC path"

How about NFS in Linux? It's a lot more transparent than SMB will ever be in Windows. SMB is and will remain a Windows feature.
In the meantime the best we can do is buy locally sourced, grass fed foods that are net zero emissions.

That is effectively calling for a drastic reduction in meat consumption. If people ate only grass fed animals there would be a lot fewer animals to eat overall. Add "locally sourced" and the consumption limit is lower yet for most people.
Deliberate by the company to get their game name out. I've never heard of this game, but I'm sure it's doing the rounds now.
I am Taiwanese who is currently studying in US college. I would like to say to hacker news: please stop supporting the Chinese government. Please try not to buy products from China. It is a bit harder, but it's possible. Last week I went to Fry's for a new pair of headphones, and it only took me a few tries before finding one made in Indonesia and another made in Thailand. If more of us do this, we can force more manufacturers to move out of China faster. Thank you.
I would think a military solves a genocide by preventing it. Reading the news or history would provide many examples of genocide being stopped by military action.
While it says that, it doesn’t actually link to anything about the modern amdgpu driver - developed officially by AMD and now part of the vanilla kernel - and the majority of the complaints are regarding nvidia.
I've said for years that Linux works for grandmothers, and for me (and a bunch of others).

It doesn't work for people who:

- need a locally installed copy of MS Office or other Windows only software

- IT admins that stopped learning a long time ago

- etc

As others point out, for som of us using Windows or Mac is a hassle. They're slow (30% longer compile cycles, don't even get me started on git), missing important customizability,m no built in universal package management etc.
I sometimes use "they" when I feel like using a gendered pronoun would distract from the topic at hand. It's incorrect but sometimes it makes sense.
> The new horror video game called “Devotion” created an uproar among Chinese netizens when a poster in the game was discovered to mock Chinese leader Xi Jinping, by referring to him as “Winnie the Pooh.”

What? That's it? Damn. That's nothing. Maybe free speech being rampant breeds thick skins, maybe free speech is a good thing.
Yet we have examples over the last few years to give women an unfair advantage in arm forces, police, fire and workplace

Funny how DIVERSITY quotas is not unconstitutional or REAL DISCRINATION

or actual examples of Australian armed forces Refusing to hire women to force more wamans into the role and lowing the bar for women dramatically

Nothing will make women more "equal" by

- Discriminating against men

- Lowering the bar of entry and job requirements

Typically since 70s women have gained rights, with ZERO accountability and ZERO responsibilities and still today in 2015-2020 you have a lot that CLAIM they support "equality" yet DEMAND and EXPECT special treatment because they are females

-------------------

Feminism since 70s

* Replace Democracy with Socialism

* women dependent on state for resources

* women HATE MEN+Democracy/west

* Misinformation + change words

* Remove individual accountability for women via
- abortion

- No fault divorce

- Duluth model

- pussy pass in courts

- Metoo

- Kangaroo courts in education/uni

- Removal of due process+video evidence

- change concept "consent"

- Allow "abortion" after the child is BORN , its "her choice" (Feb 2019)
Microsoft's HoloLens 2 feels like practical magic
This is covered in the article.

>“Our particular service is not materially affected as we already respond to warrants under the
Telecommunications Act."

The new laws would apply to something like Whatsapp or Signal, which do not have the ability to access the communications of users (thanks to end to end encryption). Fastmail already has enough access that if a legal demand is issued they can hand it over.
I'm not sure what you are trying to say here. The party that pushed for these news laws is the same party that has been opposing real action on climate change for years.

So yes, we do deserve better than these clowns.
The claim that Wireguard has not had a security audit is false[1][2]. It's based on the extremely robust Noise protocol framework, it has a formally verified Tamarin security model and two of the most well-known cryptographers in the world have personally reviewed it with no significant findings.

Wireguard also does not do any of the logging claimed by that article by default. I know this because I maintain Wireguard VPN instances on baremetal and public cloud. This strikes me as a misunderstanding of what Jason wrote on the mailing list about Blind Operator Mode[3].

I stopped reading that article after I saw these two (glaring) inaccuracies. Either someone has a vendetta against Wireguard or they seriously misunderstand the protocol's security and default behavior.
________________

1. https://www.wireguard.com/formal-verification/

2. https://eprint.iacr.org/2018/080.pdf

3. https://lists.zx2c4.com/pipermail/wireguard/2017-November/00...
Lenovo has created ThinkPad and Yoga headphones
Is some modest bulging really a problem? I'd say it has far less of an "annoyingness factor" than even your typical phone notch.
I think the point is just that the Linux kernel is irrelevant to the Android operating environment. It could run on anything Google wants it to and may do so in the future.
Why Developers make great data scientists
https://www.bbc.com/news/blogs-china-blog-40627855
> When something has enough complexity to be aware of the boundary between "it" and everything else, then we have a being of some kind.

Exactly. This agency idea is appealing because it seems to unify a number of other ideas: from evolution (survival), autopioesis, active inference and Bayesianism. Without sounding too much of a crackpot, I hope we’ll be able to import subjective experience as a necessary component in the universe.
I know but it's useful for many education related activities.
Kangaroo meat is a good Meat substitute
to replace steak/snags/mince/etc
The question probably stems from the fact that we tend to identify with our conscious experience more than we do our physical body. So it seems reasonable to imagine this conscious experience separated from one body and placed in another body. But this is a mistake. Your body owns its conscious processes in the same way your body owns its process of digestion. There is no way to identify you separately from the physical stuff that makes up your body (which includes your brain).
Oh yeah, also a good example.

Coincidentally, I just recently discovered Marcin Grochowina's channel YouTube, where there are several nice Rhodes videos:

https://www.youtube.com/user/jazzijazzful/videos?flow=list&v...
A good reason for live coding is transparency even beyond a GitHub repo: I tried live-streaming data science because everyone thinks it's magic, and I try to show that it isn't. (and also show that data science coding is easier than one may think)
Yeah, Trump is regularly compared to a lot worse.
Physics dictates the the samsung fold likely will have a "cleaner" fold, since it is pulled taught in the open position, whereas the huawei phone is at its loosest in the open position.

But in my view the huawei concept is far better better on pretty much any other metric (pending info on durability)
I'd much rather just have the simplicity of a hardware switch than a bug-prone implementation like this. Not to mention that this is anti-user in the sense that it gives the user less control, not more.

I highly doubt Apple will ever implement a basic hardware switch, because of it's dead-simple nature. I find it highly annoying that Apple at times is like a German car manufacturer that likes to over-engineer shit.
I'm using ExpressVPN Miami servers to video chat to Europe from Colombia, and the quality of the video feed is day and night.
Chargebacks also occur for fraud. It's the merchant's responsibility to detect fraud, not the bank (though banks usually do their own screening too). Worth remembering that if your fraud rate goes above 1%, you can be blacklisted for life by Visa & MC. [1] [2]

You can avoid chargebacks by pro-actively refunding any transactions that look suspicious. And if a real customer asks for a refund, you should always give it to them since they can chargeback anyway. But if it's a stolen credit card that got through, the first you'll hear about it is when you get the chargeback from the real cardholder's bank.

Side note: back in the days of shareware, a few of the 'cracking' groups didn't do any cracking at all. They just used stolen credit cards to buy the software and post the licence codes online - no technical talent involved. I'm looking at you, Team OXiDE....

[1] https://www.braintreepayments.com/blog/changes-to-visa-charg...

[2] https://chargeback.com/visa-chargeback-monitoring-program/
so common it's normal in Australia, I wouldn't worry about it.
Search for “csa meat”. Community Supported Agriculture. It’s a good start.
> 14 organizations are under investigation, not just one.

I did miss that, fair enough -- amend my statement to "Which is presumably why it merits this year-long investigation of these 14 organizations".

> it's not clear why you'd think they are manually looking at any of these

It's not clear why you'd think 818,000 (per WSJ) identical comments submitted in alphabetical order should pass automated tests?
You're right that a shared resource like a database does endanger one of the microservice benefits and I think we're on the same page when I say the reality is "this is fine." You still get the benefit of being able to deploy, version, scale and manage a single microservice separately.

You might eventually have to break out the microservice entirely and build it out such that the shared datamodel has to be fully represented in api and not the database. That's fine too. That's a lot of work but you're only closer to that goal when you start with SOA and microservices not further away. Sure, you can get into trouble if you build a large interconnected monolith that you happen to be running in parts across many servers. I would, uh... advise against that. Try to separate your services in natural ways that won't cause massive headaches.

Basically, there are still some benefits and this critique, while valid, only points out what you aren't getting for free. Its not actually a negative.
well, australian voting systems aren’t exactly progressive (it’s just a few steps above the worst case), and neither is the voting populace

id say our government matches closer to our electorate than what the US government does, but we still have only 2 major parties which severely limits choice. there are ways to combat this (NZ, Germany for example)

this example is also a fairly poor one, because it’s possible this law came as a “test the waters” as part of 5 eyes, so it could be followed in other counties. where spying and secrets are concerned, we shouldn’t draw too many conclusions because we don’t know all the facts
Catholics have a meat substitute for JC's flesh and it is much simpler.
Most likely it's not just a test. Even though it's a county government job, the Feds probably made it a requirement to receive federal funds so it's enforced on state/county/city levels too.
A problem that I now have, after seeing the solution. I've toyed with the idea of getting a tablet, but never made the leap because of how bulky they are. If I wanted a bulky spacious computing device, I'd just use my laptop. If I want a tiny computing device, I'd use my phone. This scratches both itches.
Nothing short of removing all devices identifiers (IMSI, IMEI, etc) and using an untraceable payment system for network access (eg blinded tokens) will mitigate the location tracking ability of the carriers.

The perfect is the enemy of the good and cops do use stingrays for a reason. But targeted government surveillance is only one privacy threat, and carriers have no compunctions about bulk selling your location to the mass surveillance industry.
For $2k+ it better look flawless.
But a new mystery opens up: how did a site for sharing news about manga end up being built in a custom language built for the NYT?
In the 90s, when our desktops didn't have user accounts, we used third party software to lock people into restricted environments. It wasn't perfect, but neither are user accounts.
I don't disagree but I think in practice you're probably dealing with a single user at a time when working with orders. A query that referenced n users plus their orders is probably a reporting type query that could be supported in a data warehouse where all the tables could be joined together.
He's right, of course. The Linux community has been in denial about this for years.

At the kernel level and close to it, the areas that consistently give trouble are video/GPU support and audio support. GPUs are hard, but there's no excuse for the mess in audio persisting for a decade. Video/GPU support is tough, but the current situation, where you have a choice of five different NVidia drivers for the same board, all with different bugs, is not good.

As the author points out, regression failures are a big problem. The sheer bloat of Linux has made it unmaintainable. And who wants that job? Big chunks of important code are abandonware.
I disagree that in order to have a connected home it will be complex and that it doesn't "just work". From having added a suite of products from Ubiquiti and somewhat thought out the design of my home network I have less issues than before. Yes I have more to tinker with but I don't, and now the household can stream any media they like on any TV or device, and play games with low latency at the same time. I don't even have what you would consider a hobbiest setup.

Of course, in order to correctly manage IoT devices and the sort on the network you need a bit of knowhow, but its not essential. And purely comes with the nature of connecting these devices in your home.

Mentions privacy as a concern, but probably still use a mobile device? And you mention you don't need a TV, but okay that's clearly what your projector is used for.

Also the smart blinds comment, your issue with the smart blinds was to do with blinds themselves not the smart component.
So this is the new phone fad? I have never felt the need to fold my phone. It seems like the phone industry invents pointless changes just to show something new to get people to buy a phone again. Curved edges and screen notches come to mind.
And do you have any reason to think they were submitted to CQ in alphabetical order, as opposed to the obvious possibility that CQ or their client sorted them prior to submission to the FCC?
The submissions are individually timestamped, not pre-sorted and submitted in bulk.
I think the arrows are in terms of how good they are at being simple.
It's funny how different aspects of one's identity hang together. You'd think that diet should have little to do with someone's views on politics or gender, but when I learned that Jordan Peterson adhered to an all beef diet, I thought "Yeah, sounds about right."
Discussed at the time: https://news.ycombinator.com/item?id=3573694
They're timestamped.
Does it concern you? It does me.
Part of me thinks "I don't care. If Facebook or Google or Experian or Equifax or whoever it's work a buck to wants to pay my VPN provider for my metadata - that's kinda bad, but possibly not as bad as being part of a great big juicy pile of government compelled metadata retention records at my ISP which can be easily accessed by random government agencies or evil actors working in government agencies with very little oversight."

I suspect my data leaking through profit motive from a VPN company specifically selected to be in a far away country is much less likely to fall into the hands of an internet troll or griefer, a disgruntled ex employee or partner, or a vindictive neighbour - than the trove of ISP metadata that can quite likely be readily accessed by bribing or blackmailing some random low-level government employee locally...