skysight-inc/HackerNews huggingface dataset:
Like with tobacco may be privacy invading permissions need to be regulated a bit. May be a clear warning on what happens with your data will make consumers think a little bit more about prompts to handover your data.

Also, it might be interesting to see if certain permissions can have parental control. That is you need to be with your parent/guardian to allow certain data access.

Might be great to make it slightly difficult to gain sensitive permissions for everyone. Requiring to input your password/pin at the permission box. We already has these on desktop computers where you need to be able to input your password for admin access to apps. This may not deter companies to ask for permissions, but my hypothesis is that it will show up in their conversion funnels and eventually they will stop asking for blanket permissions to all your data.
I quite like the plugins that remove the newsfeed too - or unfollow (not unfriend) everyone. It's a nice intermediate step so you can still use events and messages, but the most annoyingly addictive bit is gone. The light versions of the apps can be a useful step too.

Finally, after logging out - deactivating your account, and then deleting your account (or better, getting a trusted friend to do so for you) are the last steps. (If you're interested in UX, are you a little bit curious what the UX for those two is like?)
How I learn a new skill (using Go as example)
I wonder if Amazon will get into the wholesale game i.e. massive warehouse stores to compete with Costco and Sam's Club that you can get into with a (super) prime membership?
once you link in someone else's code, you can no longer be sure your program is "safe"

This also fits in with the "keeping a secret" analogy. Good luck keeping something secret, if it has to be shared between organizations.
Yes.

Because the focus of the article is about how the gender gap/discrimination in tech issue is nuanced, and the other is literally talking about default stereotypes in tech and how they are damaging.

Literally, the article invoked a stereotype, because the overwhelmingly common stereotype is damaging.
I don’t know about now, but in the past accessing an account was as easy as resetting the password in safe mode. I have done this numerous times when I worked in IT for people who forgot their passwords. It was such a stupid simple workaround. It wouldn’t surprise me if such workarounds still exist in win 10 and previous.
randomly clicked around there and saw the following about E&Y being ordered to post

"a copy of the Order on www.reddit.com/r/quadrigacx"

https://documentcentre.eycan.com/eycm_library/Quadriga%20Fin... p.10

i thought it's interesting how a third party, reddit, is used in such an official way. the other two channels to be posted on are E&Ys website and quadriga website
If it's all gambled away on the crypto markets (quite likely to have happened), then it's just as gone as if on a lost address, only that some entirely unrelated market actors happened to get (temporarily) richer in the process.
To be fair, you’re saying exactly what was claimed before Snowden proved that it wasn’t nonsense, but day to day reality. Good luck trying to unspill that milk.
No. My home loan is well over $2m. If we were married we could only deduct $1m (half the interest). As 2 single people we can deduct the interest up to $2m. It’s a wrinkle in the tax code.
Haven Healthcare
As trollish as that sounds, there's a painful amount of truth there.

Program in GNU Pascal or some such thing? Not us. Pedal to the metal!
It's partly that, but it's also partly that the pace at which new standards of useful things get implemented (pre-ratification and post ratification) entails patchy support plus differing implementation decisions from under-specified standards. My favorite example area right now is all the fun that is CSP. Firefox supports the SecurityPolicyViolation Event, which is useful so that you can let non-power users know about CSP issues without having to open the console, except it's gated by a setting in about:config that is off by default. Additionally for CSP's report-uri endpoint, Firefox won't send up any cookies with a request to that endpoint (https://bugzilla.mozilla.org/show_bug.cgi?id=1506992) which sucks if the endpoint relied on authentication that way. Chrome just works, meanwhile, on both of these issues. (Of course personally, if something doesn't work in Firefox, then I just don't use that something, or if I really need to (e.g. test business feature), I use chromium for just that one thing.)
Could this scale, is the question?

In a way, it would be like shadowbanning, but more open.
Maybe the segment of in the industry in which the cheapest outsourced devs work, anyway.

Their conclusion states as much (hiring more expensive devs on freelancer.com got them more secure solutions):

"In addition, we found a significant effect in the freelancers’ acceptance rate between the €100 and €200 conditions for the prompted task and examined the effect of different payment levels on secure coding behavior. We saw more secure solutions in the €200 conditions, although the difference was not statistically significant. However, this result might be due to the small sample size and we believe this is worth following up in future work."
It's insane to me that it's not "common knowledge" to AT LEAST hash the passwords.

It's also interesting because 6 used an encryption algorithm, 10 used MD5 which is as good as plaintext nowadays IMO, and 8 used Base64, so even though 24 people thought they "secured it" the passwords are trivial to recover.
OpenCensus seems like it's really a Google-only project. OpenTracing and OpenMetrics appear to have more community and vendor engagement.

E.G. Datadog is basing their newer tracing libraries on OpenTracing, and Prometheus devs are behind OpenMetrics.
I can't help but see that as entitled. "Give us all your driver code, and then do all the work of maintaining it for us".
That is a really good question - whats more likely, they fully pivot and really don't gobble up all this user data and keep conversations private and take a hit on mainline revenue, or they SAY they're going to do this stuff, release something that looks slightly more private but don't do any of it?

The market right now isn't shook at all, no change after hours. If it had anything remotely to do with the magnitude of what they're suggesting the stock would be down quite a lot.
I Make over 50k Human Visitors to My Website Monthly
I think in most cases you're correct, but store exclusives are somewhat common right now, and users tend to hate it (google "metro exodus controversy" and you'll see what I mean - and that wasn't even exclusive to one store, you just got a discount for buying it from Epic).

That said, I don't have access to any data about sales - it's possible that just as many people buy it regardless of what store it's sold on. But I would suspect that is unlikely given how easy it is to pirate something and gamers' tendencies to believe they're owed a game.
> some employers (fewer and fewer these days) want to see my online presence.

That's a really huge red flag. I don't think that I'd be willing to risk taking a job with a company that asked for this.
Experiments with a Hydrogen Thyratron
But to what end? Pure-java apps get owned all the time, too. If you look over there you'd just give up on ever trying to transmit data, as the number of Java de-serialization exploits is nothing short of stunning.

The only semi-proven way to not get owned at this point is to never go online.
just grab them all... not a huge deal, they are so small.
https://www.bbc.com/news/entertainment-arts-29727632
They also state it's not statistically significant :P

(Although I agree that seems likely because of the sample size)
> In the US, most home buyers will qualify for a much lower than 20% down payment for their primary residence.

Well, that's true in the US in that, so long as you have sufficient income to make the payments, you can probably fine subprime financing for purchases with less than 20% down, but you'll pay more for it than you would for the same size loan with more equity (whether in PMI, interest, fees, or some combination.)
5G: The Complete Wired Guide
After reading this, I'm rethinking using my own domain email as an ID on websites.

I trust that Gmail will be around a lot longer than me paying my own domain. I've been paying for my own domain for years but at some time I'll stop and someone else will own it; this gives them ownership of my email address.
This! So what’s the answer??
Awesome initiative, would love to help out!
But why WhatsApp is one of those 3 and Signal is ANOTHER app? Not so long ago WhatsApp was ANOTHER. Now it's not. What changed?
When you two say fullscreen, surely you mean maximized? I imagine a sizeable fraction of users don't even know how to fullscreen a window.
> Girls in elementary school show equal interest and aptitude as boys when it comes to coding

That might be true today, but it's a steaming crock of made-up bullshit if they're saying it was that way 15 years ago. You know... At the beginning of the pipeline that would have produced an even distribution today.
Mindforger Markdown IDE Now Available on Windows
I think you could also identify similar negative consequences from any entity the size of Facebook. I think it’s a side effect of being big, and fb is no different than any of the F1000 or just about any government on the planet.

What I do see internally — executives down through rank and file acknowledge the problems and work really hard to address them. I haven’t seen the same level in introspection elsewhere, even when I worked for the DoD.
And an 12 character password only giving you ~500 possible subselections means if the 4 character string was stolen, you could brute force in within a few minutes. This is hardly better than than just leaking the entire password.
If you're eating a lot of spinach, you could just be experiencing the well-known effects of dietary fiber.
I agree with you. It's frustrating when we focus on symptoms instead of the root causes, which are deeply encoded in our culture. It just makes it that much harder.

It's also frustrating when it's not discussed at all. It's hard to bring up the biases and subtle discrimination that occurs as a PoC without making a privileged person run for the hills.

I applaud people whose job is focused on bringing change to organizations. I can't imagine how difficult it is to do this work effectively.
It's not difference of opinion that is the problem - it's often quality of argument. Political discussions generally these days are very low quality - not actually trying to work out the best policies that will work best for society. Just posting memes. Little listening. Each side in an echo chamber. People unable to explain why they think things.
Also remember that in the US it's perfectly legal to be a monopoly. What is illegal is abusing your monopoly position by engaging in unfair practices (which is a rather fuzzy and hard-to-prove thing).
First Blockchain-Based Game to Disrupt a Centuries-Old Industry
> Seems like an odd restriction to impose here. How many C++ exploitable bugs arose from a C++ compiler bug? I think the answer to that is also zero. Doesn't really seem like a useful thing to consider?

Right, and that's why the fact that the Rust compiler has bugs is irrelevant. The language is meaningfully more memory-safe than C++.

> But in terms of Java runtime's security it's not particularly stellar. The entire category of "Java deserialization" is the never ending fountain of remotely exploitable security bugs in Java apps that don't run untrusted code.

Java deserialization RCEs, while pernicious, are nowhere near as common as use-after-free and related bugs in C++ code. Furthermore, you can effectively mitigate them by statically banning OutputObjectStream and whatnot. There's no such easy foolproof static mitigation available for C++ UAF.
Some time ago, I stumbled across a YT channel of some guy, a self-professed studio expert, who "remasters" some 80's metal albums to give them a big, "modern" sound. The uploads are heavily commented with positive reviews.

Basically, to my ears, it just sounds like a bunch of early reflection reverbs were added (an effect that was mature in the 1980's in its high-end implementations and used in studios to get "bigger" guitar sounds and whatnot.)

Of course, it sounds great for all the viewers who are using cheap (or even not-so-cheap) earbuds, or computer speakers.

What these nincompoops don't get is that these albums were made to be cranked up on a powerful stereo, with full sized speakers, in some kind of room. That guy is basically just ruining great albums who were actually recorded and mastered by people who did know what they were doing. Like, oh, Detonator by RATT and whatnot.
New California Legislation Takes Aim at Local Zoning Restrictions
If they surveyed 3K “ai” startups the likely answer is some tiny fraction have any genuinely unique IP and the others at best are likely using ML libraries and services from other parties. Again it will probably devolve in to a discussion around the boundaries for what IP is actually “AI”, but yes, it’s mostly sizzle with no steak in the market.
Also, any methodology problems can be mitigated by the fact that they did the same survey with the same methodology in 2017, and compared their results. You expect to get better accuracy by asking people then and now "do you use Facebook?" than by asking them now "do you use Facebook, and did you use it two years ago?"
You can't steal in the course of an investigation what was already stolen as part of the crime.
I wouldn’t be surprised to see anti-anxiety anti-depressive type yogurt being made.
Not sure what you're saying, but it sounds like we're kind of agreeing, maybe? It just seems pointless to urge that we quit using tired tropes to solve a problem, but then immediately invoke another trope to make your point.

Are men coding alone in their basements really the problem?
Some have mentioned they were transacting when their deposits withdrawals stopped working. It wasn’t a matter of storage.
Here's a specific example for a C++ compiler: CVE-2019-0546

I have a feeling you could find Java ones too if you looked hard enough. Compilers are complex beasts.

[1]: https://nvd.nist.gov/vuln/detail/CVE-2019-0546
So are Mobileye/Velodyne pretty much going to go bankrupt because of this?
And HER conclusion... "Would I recommend someone read Dave Ramsey’s book? Absolutely. Will I be willing to read more of Dave Ramsey’s books? Sure. But, I’ll be taking his advice with a grain or two of salt."

Edited: "Her conclusion", I had it as "him" originally.
> guessing that it wouldn't be in Google's interests to add any feature that would thwart profiling users online

I would actually think the opposite. Wouldn't it be better because then only Google would have that information? Only Google would be able to fingerprint. This is of course under the assumption (which is currently accurate) that Google has the majority share of browsers. But maybe it wouldn't be, because it would teach others how to thwart their fingerprinting.
> I'm shocked by the decrease in twitter usage

I'm not. Twitter has degraded quite a lot.
The author is not saying the emergency fund is used for paying off debt.

The point is that the emergency fund is supposed to be sufficient during the entire process of paying off debt, which might be years. If you have more than a $1000 emergency during that time, you have to fall back on credit.

I’d argue the 1000$ number should vary with inflation and cost of living. Having a $2000 or $3000 emergency fund could make sense for a lot of people.
> Except that it's not.

Except that it is. Where else than facebook.com can I go to connect with 80%+ of my coworkers, family, and friends?

Like a stereotypical engineer, you're thinking about the software. People don't use Facebook for just the software. They use it for the network.
It prompts the user to decline a site from accessing data from the Canvas API. This data can uniquely identify the user's computer. The Firefox feature is identical to the one from the Tor Browser.

Screenshot: https://thehackernews.com/2017/10/canvas-browser-fingerprint...

https://www.torproject.org/projects/torbrowser/design/ (see the "HTML5 Canvas Image Extraction" section)

https://gitweb.torproject.org/tor-browser.git/commit/?h=tor-...

https://developer.mozilla.org/en-US/docs/Web/API/Canvas_API
Even if you feel like it is impossible to leave Facebook, the truth is they make most of their money from ads served while you are in their ecosystem. Just spending less time on their platforms is good for you and good for reducing their relative power in the market.

We are all better off in a world where Facebook and Google face an economic harm if they abuse their monopoly power. I don't think consumer action is the best way to cause that harm, but it is the way that is available to everyone on this forum.
> then appropriate signal processing should be done by playback.

Microchips for leveling audio gain existed in the 1980's and were found in consumer equpiment like TV's.
Thanks for the link, very interesting document, it really shows an impressive scale.

And for the metrics, it's probably coming from the fact that a lot of people use Messenger without using Facebook, but it's still considered "using Facebook".
I saw in WSJ that Amazon is planning to open an all-new "cheaper than Whole Foods" grocery-store business with the first store in Los Angeles to open by year-end.

https://www.wsj.com/articles/amazon-to-launch-new-grocery-st...
Sounds like you might have been going through some sort of proxy...
I would interested in anyones feedback of embracing and rolling out a service mesh/Istio in a non-GCP environment.

I apologize if this is a naive question but how come this wasn't included as part of the Kubernetes project given that it has the same Google origins?
Obviously you can follow celebrities on facebook and only follow friends on twitter but it doesn't feel like they're made for that use case, the 'reverse' of what I use it for.

Someone here not long ago on HN opened my eyes to the 'lists' feature of Twitter, it's been a remarkable improvement for me with the platform. "IRL" friends in one list, "Net" friends in another, sports commentary (because that's a thing I'm into), etc. etc. Crap is more or less 'siloed'.

I wish twitter promoted the feature more, to be honest, I think it can help with some of the gripes you have, if not for you maybe for others as it did with my experience on the platform.
I'm not even sure how to properly characterize how condescendingly out of touch your comment is.

I was on Facebook before it opened to the general public, and it wasn't some ivory tower of intelligent thought where the educated could avoid mingling with the dumb. It was full of stupid social media stuff then too.

After Facebook opened up, my "poorly educated" uncle was content using Facebook to simply socialize with family and friends in 2012 when today he does nothing but share right-wing memes.
Programming Languages: PowerShell Nets More Linux, macOS, Windows Developers
I use the Instagram website on my iPhone with safari and no ad-blocker installed and have never seen an ad once.
Ah, I should've written a more generic "takes the place of" instead of space. I meant to ask something along the lines of whether the artificial sweeteners of diet sugar might be confused for nutrition by the gut bacteria. Basically, I was picturing a situation where the gut bacteria might try to "eat" the artificial sweeteners, but then don't end up getting enough energy from it and can't do the things they need to do.
That sounds horrific for whoever is going to be supporting that system...

The last thing I would want in a production environment is to have some 3rd party software monkey-patching the code at runtime.

What happens when:
- a bug only occurs (due to timing or some other extremely subtle issue) when this monkey-patching is applied.
- there's a bug in the monkey-patching itself (sounds like a fun debugging session!)
- a library is accidentally monkey-patched with a slightly different version, or falsely detected as a known library (maybe it is a fork)

Give me statically compiled, reproducible, dependency free, bit-for-bit identical with what has been thoroughly tested in CI, musl binaries any day. That's how you avoid getting woken up at 4am.

This kind of magic should happen at compile time, if at all.
But how can that be when "... the engineering lead owning conhost.exe: I can't find anything in our code that would trace user input, or data effectively derived from user input, to even a local event stream."
YouTube has YouTube Kids plus different levels of content filtering available to users. Similar concept, in a way.
Okay so I grew up with my Colombian step brother...who lets say was an active participant back in the day (see Narcos), he apparently thinks important people from that trade lost their money (like in Narcos),

Let me guess one of two things:

1) If he surfaces, it won't be the law that catches him.

2) He got a deal he couldn't refuse
> I think network effects aren't as compelling to users as is often assumed.

Tell that to the carcasses of Facebook's competitors.
Moreover, stereos had this in 1980 and probably a lot earlier.
Yep, and if I remember right, that was the same pattern that the prior dominant social platforms saw before they collapsed.
Mexican central bank in talks with Amazon about new mobile payments
At this point Facebook is so big that "millions leaving" could be people dying, people losing their accounts, etc. It's very small compared to their scale of more than 2 billions users.
> And his conclusion...

I could be wrong, but I think the author is a woman.
And the greatest?
The privacy.resistFingerprinting option will always launch your browser at exactly 1000x1000 size. It's probably preferable to your script.
Irish Colony in South Carolina Predates Christopher Columbus
> Joyce expressed the pride the NSA's workforce took in "delivering a midterm election that was free of malfeasance and interference" [...]

Oh, that's good. I was just imagining all the news out of Georgia, then.
n00b question, I always see service meshes used in the context of containers and mostly with kube. Would they work with more monolithic/traditional n-tier architecture deployed directly on host OS as well? Or maybe put another way, are there likely to be pain points that don't exist in containerized architectures?
Good point. I worded it very poorly and your answer would definitely fit. I meant to ask whether the artificial sweeteners in diet soda were taking the place of nutrition for the gut bacteria, but don't end up giving the bacteria enough energy/resources to live on.
I feel like this glosses over the first point of whether MMT is solid economics. This is probably the most important part of the discussion which likely controls the political controversy surrounding it. MMT is an incredibly fringe position in the economist community without very clear empirical backing. This seems much too nice to MMT as an economic theory.
Sam’s Club tests new Scan and Go system using computer vision not barcodes
I've listened to some Dave Ramsey and had minor differences of opinion with some of his suggestions, so I was interested in reading this.

Melissa's grievance #2 - She doesn't like that Dave Ramsey reprioritizes charity until you're well out of financial disarray. Melissa thinks you should keep tithing, because blessings can be bought.

Reading what I wrote to myself there sounds like an ungenerous way to describe it, but I can't bring myself to sugar coat it.

What a rough and tumble read that was all together. I'm laughing at myself for how appalled I am that people would just go on the internet and publish bad advice. Some of it isn't even wrong, it's just ham fisted with mittens on.