skysight-inc/HackerNews huggingface dataset:
> Get more compiler people on Go and it will be even faster than it is now (really fast), and Go is written in Go so there's no reliance on C++, unlike Rust.

You'll still be stuck with the fundamental tradeoffs that Go made like being GC'd and not having a fast FFI.

Those tradeoffs make sense in the target audience of Go (servers), but it's not going to make sense in something like a web browser.
The history is truncated on GitHub. (first real commit is https://github.com/Microsoft/calculator/commit/c13b8a099eea1... ) They're using GitHub to merge PRs now.

Was this source previously in the Windows repository? Has all development moved to GitHub? If it was in the Windows repo, are they mirroring it back?

Do they still have the old history? There are multiple ways to deal with this in git (grafts, replacements) I wonder if they're using anything like this to get full history, internally.
Can't speak for anyone else, but hopefully they will not mess with Whole Foods much. They picked up some baggage with that one, and if they drastically changed things ... to put it in their language this would not be a Type 2 decision.
From that angle, Uber driver is no different than anybody who has not achieved financial freedom. We all are servants to the "opeartions", with freedom to change gig but not the freedom to not work. Do you know what people call these kind of people in some circumstances? working professionals
It matters because if 99% of people have the same 5 configurations and only the outliers are identifiable, then this method would not be as valuable for spying as it is reported to be.
What CSS file did the browser fetch? The one for screens less than 500px wide? Or the one for screens that are 504px wide?

There are a million ways to exfiltrate UI parameters through JS and CSS. It’s hard to both prevent that and still allow JS and responsive pages.
Sorry I was offline for a bit so couldnt respond. But I find it surprising that you picked 3 most messed up sectors in america as basis to refute my argument.

Anyways, Lets start with housing. Every housing transaction hold about 10% [of sale price] of commissions on both buyer & seller side. [If you dont know] you'll be surprised to learn that the govt taxes & fees are a minimal portion of that. its mostly realor commissions & bank fees. why can they do that, its because they have had a monopoly on MLS listing service forever. to have access to the MLS you need to be a realtor. if anything these commissions should be fixed cost rather than a percentage cost. to give you a sense of the severity of the situation, on an average people stay in a house for 7 years due to labor mobility & other reasons. so over a carries of 30+ years its likely you'd do 4 such transactions. That essentially means you've worked for realtors & bank for about 40% of your carrier (assuming shiller is right in concluding that it takes 30yrs of work to build/own a house).

Now Healthcare, why do you think nothing Martin skerelli had done was illegal? recall that he wasnt indicted for price gouging on the meds. I actually think he did a service to america by exposing the flaws of pricing system. Also regarding medical professionals AMA works hard to maintain control of certification process and not flood the market with doctors. believe me they are not that hard to make. infact they have been fighting efforts to allow RMPs to practice basic healthcare in rural areas just to maintain the scarcity.

there is a reason healthcare and college education sectors are the most inflation heavy sectors in america over last to decades. its by impeding price discovery and free market.
This is a great course, I took it once a few years ago and sometime think if I should take it again. Wonder how it changed over time. It was eye-opening training a small NN by hand on MNIST dataset and getting it to recognize digits surprisingly well.

However even understanding all that doesn't allow one using modern frameworks by itself, they seem to carry too much additional assumptions, terminology which aren't quite explained with similar level of patience.
Very cool. I want to give a shout out to the simple classic http://arctrix.com/nas/python/bpnn.py
> I think the discussion on privacy and ad based platforms should really be orthogonal.

Except that those two things are inseparable. The privacy problems are a direct result of the desire of the advertising industry to be able to target people based on their behavior, which necessitates spying on everyone.

If we could somehow eliminate that targeting, then we could discuss the two as separate topics.
And no one wants a social network with no friends on it.
I feel the same way about twitter. The only time I ever visit is when some service I use isn't working and I want to see if they've said anything about it being down (or it's just me).
perhaps also not-so-curiously lacking is also any mention of orthodox christianity as part of the worldviews presented; russians as a whole are presented as being proto-communists and ultra-rationalist:

for example:

"In England, utilitarianism supported moderate liberalism, but by the 1860s Russians took it as proof of revolutionary socialism."

.. you know, umm.. except for the ones that didn't.

not to mention that marx and his 'dialectical materialism' was published from london, etc.

Tolstoy's faith (though clearly not always in agreement with the church) is here simply a 'personal' one which magically appeared in a vacuum.

etc.
Why would it? If no one else knows the password, just say it was a weak password (or even that you got lucky). There's $137m missing, so clearly something went wrong - one more mistake wouldn't be hard to believe. Even if it does, does it matter? "There's a vulnerability in <OS>" is not exactly news or useful.
Well, that's not really a fair interpretation of my argument, I'd say.

My argument is:

* We have a production, widely used codebase

* This codebase is in C++

* This codebase has probably the most significant efforts to secure it of anything of its size, or at least it's in the top 5

* This codebase suffered enouguh critical vulnerabilities for users to be attacked in the wild

So let's be clear - Chrome suffers from thousands of memory safety vulnerabilities, but not many make it to ITW exploits. This case is special because users actually suffered because of it. It isn't fair to say they've had "one security issue", certainly, just one that's had major user impact.

I'm not judging C++ or the choice to use it. I am saying that this is an example of a very hardened system not being able to compensate for memory unsafety.
The OS chrome between users varies a ton. Each taskbar, dock and titlebar can have their own size. In my case I'm using a window manager without decorations, so I don't even have a titlebar!
Correct, that's what I was referring to. Apologies if I mischaracterized his stance.
I hope it was obvious that I was speaking in the context of consuming a service. Why is pedantry so rampant on this site?
Lots of opinions, but no data to back it up.
The Brain, Just Before the Bungie Jump
Are online ordering services killing your restaurant?
See above, RE: “sensors”
It really does have to do with that. It ceased being useful as a networking and socializing tool. It was a slow descent, but that’s the truth of it.
Chrome wasn’t written from scratch in 2008. Chrome was a fork of WebKit, which was a fork of Konqueror, which was a fork of KHTML.
Gender gap isn't a problem to solve. It may be a symptom of many things, such as harrassment, discouragement, discrimination, or environmental biases that make women less comfortable than men. Gender gap is smoke, go find fires the need to be put out, and solve those. Otherwise you'll slam into a wall because the "optimal" ratio does not exist and has no consensus, but specific harmful behaviors and and systems are indefensible.
Woah there! disingenuous?

Using the example of life-saving CPR as a "similar" example seems to be extremely disingenuous of you, and I suspect you know why.

* CPR - almost universally considered a good & essential thing for all humans by any measure (sure, a small number of religious groups might beg to differ).

* Targeted ads - well... not so much. wow.
Gday Platforms that censor speech List :-

* Facebook

* Twitter

* Google & Youtube

* TUMBLR

* Pateron

* Stripe

* Paypal

* Twitch

* Spotify

* Apple

* pin interest

* LinkedIn

* Mailchimp

* Wordpress

* mastodon

* azure

* Mastercard

* Godaddy

* MEDIUM

* Shopify

* Cloudflare

* pusher

* WIKI

* Reddit

* teespring

* Slack

* coinbase

* GOFUNDME

* VISA

* Square

* Bitpay

* ROKU

* Netflix

* Indiegogo

Regards
Charliebrownau
Can you just include an invisible iframe with that link so the cookie gets placed?
That's not it. Offering people 10 bucks won't change that most say "no" when you ask them to borrow their phone and snoop through everything. Instead, it's that the whole loss of privacy is impersonalised. When you see my face, the face of someone who just asked to borrow your phone, when it's clear a person is going to be looking through it, that's when you say "no".

But when Facebook is harvesting data about you, it doesn't feel like a person is doing it. It feels like some abstract machine or algorithm or a faceless corporation is doing it. They even promise that humans aren't individually looking at your data. So people bank on that impersonality. The data may be collected, but who cares, nobody is actually really looking at it, right?

The truth is that people do often look at it, despite all the promises and everything. That's what you have to convey and that's what John Oliver was trying to establish with his angle.
So you think they broke the disk encryption not the OS login mechanism?
> Rust has `unsafe` all over the place; it's no more safe if you use that keyword to do the same things that are done in C++.

Yes, it is, because the language has the concept of safe code to begin with. The problem with C++ is that all C++ code could potentially be unsafe.

> Get more compiler people on Go and it will be even faster than it is now (really fast), and Go is written in Go so there's no reliance on C++, unlike Rust.

This is a very confused comment. Rust is also written in Rust. If you're thinking of LLVM, sure, the Rust compiler uses that, but LLVM is nowhere to be found in products written in Rust that are shipped to users. What matters is how safe the runtime is, and there's no real difference between Go and Rust in this regard. Go might theoretically have some kind of edge over Rust in safety in that it calls syscalls directly instead of going through libc, but I highly doubt it matters in practice, because (a) the libc wrappers are a drop in the bucket compared to the complexity of the kernel; (b) Go only does that on Linux these days anyhow.
The Evolution of Managed Marketplaces
I'm going to go against the grain here and say that I really like Facebook and think that overall it's a good platform with some flaws.

Right now I'm messaging 2 different groups and about 5 different people, while organising an event that's happening in a few weeks, and organising supplies and camping for a festival on the weekend. After this festival in the weekend, I can post the photos I took on Facebook, where everyone can tag each other in the photos, so they can be easily found.

For me it's an integrated social and event management platform. It works incredibly well for this purpose. If I need to find a generator for an event, I can ask in a group chat, or even put up a timeline post asking for one, and it will probably manifest. I had a friend who's laptop died and he needed a temporary replacement, so he put up a post and later that afternoon was in front of a new laptop.

There are some really shitty features that I hate about Facebook though, to the point that they induce anxiety. For messenger, being able to see when people were last active and when messages have been seen really makes my anxiety build up. I know that people aren't ignoring me and just take time to reply, because I do exactly the same myself, but it still plays in the back of my mind.

The second really shitty feature is that the people you interact with more are the people you keep seeing on your newsfeed or at the top of your messenger. I had a bit of conflict with a friend a while back, so we were giving each other some space to cool down. I kept seeing all her posts at the top of my newsfeed, and she kept appearing on the top of my contacts list for messenger, Facebook would even give me notifications that "Alice and 89 others have responded to events near you tomorrow". It actually did my fucking head in to the point where it was causing significant problems with my mental wellbeing.

I understand exactly why Facebook does this, to increase activity and engagement. But fuck it pisses me off.
You can ask lender to drop PMI once 20% downpayment is reached.
Those have been discontinued.
Huh, I thought the original was a sarcastic question. In that case, let me explain:

I keep a browser window open at all times. It is never full screen, because if it were full screen I wouldn't be able to see multiple windows at the same time.

I keep my browsing window as close to 1024x768 as possible. In 2019, a lot of websites can't handle a browser window using a mere 75% of the laptop screen, so they either render incorrectly or, worse, switch to a mobile view. When that happens, I either blacklist the website forever in a contemptuous fervor, or just resize the window. Apparently, this resizing action is trackable.

When I say "as close to 1024x768" as possible, I mean exactly 1024x768 unless I have resized it and forgotten. I use a little AppleScript thing to resize it to 1024x768, precisely for browser fingerprinting reasons. When you resize the window by hand, you typically end up with a VERY unique window dimension.
Gday Platforms that DONT censor speech

* Minds + mewe (FB alt)

* Gabai (Twitter alt)

* Bitchute (Youtube alt)

* Tutanota + Protonmail(email alt)

* Wire (skype alt)

* subscribestar (Donation alt)

* Startengine (Kickstarter alt)

* peertube (DIY self host youtube stream style server)

* Voat (Reddit alt)

* Movim (Tumblr alt)

* Pixelfed (Instagram alt)(one admin is an leftist)
* @GetTogether (meetup.com alt)

* searX.me or Duckduckgo or startpage (search alt)

* OpenStreetmap - instead of Google maps

* Linux - Win/MacOSX replacement

* f-droid.org - Google Play Store ALT

* Mumble - Discord ALT

* Gitlab (Github alt)

* spreadshirt - shirt merch alt

* imgtc or tineye - free image upload site

Regards
Charliebrownau
I log into HN almost everyday, each time from a different location (Tor) and I've never seen a reCAPTCHA on HN.
A microservice doesn't have to be micro! They are oftentimes a single bounded context in domain driven design, which can be huge.
> Every "cryptocurrency bank" is a potential Enron.

Yeah, these institutions are antithetical to the whole cryptocurrency model. Regulation isn't necessary, education would suffice. The public is not yet ready for this paradigm, and perhaps never will be, but I'm hopeful.
"Stop missing the complex issues and relying on the simplified pipeline cliché" but then immediately invoke the basement-dwelling, hoodie-wearing, male neckbeard stereotype?
Mac is not a better comparison because we're talking about the Microsoft Windows Store in particular here, not "all software that can be run on Windows computers."

You are still free to circumvent all royalties to Microsoft by not listing your product on their store at all and marketing externally and keep 100% of the revenue, which is similar to the Mac, but the Windows Store is more akin to iTunes or Google Play.
Yes. I'm in adtech. 60% of browsers are mobile/tablet which are already fixed. The rest are almost always fullscreen. Maybe 2% have non-standard sizes.
I know exactly how many of my friends don't use Facebook, because I specifically remember which ones they are, so I can message them separately.

It's inconvenient for me, but I'm happy enough to accomodate them.
In a general sense, I'd agree, but from the description in that article, it's interaction with native files or file dialogs. Even if you use Java, you're susceptible to this sort of bug, because your Java code calls into layer of C code to handle the native interaction.

Realistically, any browser is probably going to have a decent amount of unsafe code surrounding the native windowing, files, graphics, and so on.
Sorry just being short on a comment that starts with lol. Look at for instance SAR mapping. I can have a “certain curr gen aircraft” SAR map a zone or AO for me and tell me A LOT (UNCLAS/open source).
That's true. Good point.
Also I really like this book. It's just not really what I think of when I think of theory.
Facebook's investor presentation shows MAU stay flat at 242 millions in Q4'18. I don't see a 15 millions drop.

(The numbers for DAUs and MAUs do not include Instagram, WhatsApp, or Oculus users)

https://s21.q4cdn.com/399680738/files/doc_financials/2018/Q4...
Does "indentation error" immediately scream check for a whitespace mismatch to you? Because it doesn't to me.
When you put out a gas fire, it's done. Try that with a lithium battery fire.
Maybe, but from a user perspective steam is incredible. They were the first major game distributor to introduce a 2 week no-questions-asked refund period, in-home streaming works amazingly (even shooting games work at an acceptable level), their DRM isn't egregious (for example, charging back only revokes the licences that were charged back on, it doesn't close your entire account like on Xbox), and the updates Valve releases for the client are consistently good. The only problem I can remember them having is their entire lack of support, and apparently they have great support now. Unless people stop offering games on Steam, I don't plan to buy them anywhere else.
> Kids these days don't give a shit about privacy.

I'm not so sure that's true. At least, it's not true among the kids that I personally know.

What is true is that they have a more pragmatic view of the issue than us oldsters -- they view it as more like a monetary exchange: they understand and care about privacy, but they're willing to pay for a service by giving some of it up if they think the value they're receiving justifies it.

That's not the same as not caring. Just the opposite, it's caring enough to make conscious decisions about how to valuate it.
The author is being disingenuous for the sake of a blog post or does not understand the material.

For example:

"Personally, I think the $1,000 emergency fund is just too low. I understand why Dave advocates $1,000–it’s a small sum that most people can save in a short amount of time and is, in many cases, more money than they’ve had in savings ever. But, taken in the context of the next step, which is to pay off all debt using the snowball method, that $1,000 is probably not going to cut it, especially depending on how much debt you have and how long it’s going to take to pay that off."

The emergency fund is NOT for paying off debt it is for unexpected expenses.
Hmm... Interesting point. I'm going to try that today and see what happens :-) Umm... Of course I barely see anyone except my wife and people on the street (because I work at home), but I wonder how it will make me feel (other than having a tired mouth...)
Tesla is hardly the only company that makes a car with lane following and adaptive cruise control. How do the other manufacturers deal with this issue?
Look at the patch; it's a use-after-free bug involving DOMArrayBuffer and ArrayBuffer, which are Chrome objects, not native OS objects.
> How many remotely exploitable bugs in Java apps (that don't run arbitrary Java code†) do you see that arise from Java compiler bugs? I can't think of a single one.

Seems like an odd restriction to impose here. How many C++ exploitable bugs arose from a C++ compiler bug? I think the answer to that is also zero. Doesn't really seem like a useful thing to consider?

But in terms of Java runtime's security it's not particularly stellar. The entire category of "Java deserialization" is the never ending fountain of remotely exploitable security bugs in Java apps that don't run untrusted code.
I'd love to run some math on the entropy this actually gives you... If you assume people are using common dictionary word passwords, you could even develop special tables based on common letter positions or substrings.

Assuming a character is 5 bits of entropy...

An 8 character password gives you 8 choose 4 = 70 possible variations it could ask. Each variation is 4 characters (20 bits of entropy). So, that brings it up to 20+log2(70)=26.1 bits of entropy for an 8 character password... Compared to 40 bits of entropy normally...

And that's not even accounting for using common words/phrases. This scheme seems to lose about 1/3 the entropy.

12 character password gives only... 28.9 bits of entropy instead of the expected 60 bits.

And that's not even including more obvious attacks like stealing the plaintext from the server, since it obviously isn't salted on the server side (and it reveals the length of your password on the front end too??)

Edit: I noticed I used "choose 4" instead of "choose 5" but the math is similarly bad. I leave it as an exercise for the reader.
The positive features you mention are related to network effects or essentially to Facebook's "first mover advantage". As I see it, you should consider Facebook as merely the incumbent in this "connecting" role, i.e. don't give the Facebook organization any credit for the market position they find themselves in. The software must be adequate enough but that's a separate issue from FB's immense asset, its subscribers.
Someone switching from FB to Instagram does not genuinely count as someone leaving Facebook; they are just switching to a different implementation of Facebook owned by the same company.

And the only reason most of them are switching is to follow the herd. They don't want to be left behind in some place where they are not able to obtain as much validation (fishing for likes and followers). That type of personality needs to be "where everyone else is".

Their lives are exactly the same, except with a different social networking application.
Koala chlamydia: The STD threatening an Australian icon
just for organisational purposes I feel whatsapp or wechat groups do a lot of what you're describing (except for the ease of photo tagging), and it leaves out all the stressful and annoying newsfeedy things you get on facebook. Which I think is pretty crucial, because that's all the social and data and ad driven stuff that facebook essentially runs on.

In general there seems to be, especially among younger people, a tendency back towards smaller communities, fewer strangers, less agitation and so on. Youtube, Patreon and Twitch creators seem to be particularly successful.
What's the canvas fingerprinting one do? From what I (very poorly) understand, Tor returns a constant number for fingerprint requests. Can this be done for other requests?
It's not about buyers, but publishers. If a publisher gets 95% of revenue by being exclusively marketed by MS, versus 70% on Steam, they might team up with MS instead. Surely if MS dominates the space after some time, they increase fee, but nobody thinks more than a quarter-two ahead in gaming industry.
Nobody "allows" wolves to eat. They do it unless they are stopped. As such, such system exists except in fantasy-lands where neither politics nor economics exist.
Parallel and Concurrent Programming in Haskell
Waymo to start selling standalone Lidar sensors