skysight-inc/HackerNews huggingface dataset:
My favorite: Controlled Sunlight Blocking System (CSBS)

aka: window shades
I have been highly concerned about this after I opened a certain iOS app, and was immediately greeted with a system alert saying "Pasting from Mac..." even though there was NO reason whatsoever for it to access the clipboard (it was basically the first-run splash screen.)

Thanks to Apple's Continuity feature [0], you can seamlessly copy/paste across iPhones, iPads and Macs, and indeed it can be handy.

But if my network (or something else) hadn't been laggy at that time, I would have never caught that app trying to obviously snoop my clipboard's contents. I'm sure many more apps do this and they must be exfiltrating it.

And yes, I often copy/paste sensitive data to avoid retyping it, so this is practically CROSS-PROCESS, CROSS-DEVICE SPYWARE in an innocuous way that very few people would even think of, or should ever have to worry about.

The solution is simple: Don't let any process read the clipboard unless the user explicitly chooses to paste.

Apps that need automatic clipboard access to offer added convenience (like autofilling certain forms) should require explicit permission, just like we have for camera/microphone/etc., and preferably only while the app is in focus.

After all, such "intent-based security" is the reasoning behind the existing macOS "PowerBox" [1] which lets apps access only the files that the user manually chooses in an open/save dialog. Extend it to the clipboard too.

[0] https://support.apple.com/kb/ph25168

[1] https://developer.apple.com/library/archive/documentation/Se...
WhatsApp Cofounder Tells Students to Delete Facebook
So let's incriminate engineers for building a faulty airplane too.
They come from a regular internal audit and QAR data. They can set triggers on certain items. For example, certain configurations (or lack of) at certain altitudes can trigger a data point for the safety department.
Here is a comment from the article (not me)

Cheri Hofstater JULY 20, 2018
Unfortunately I am the granddaughter of this women. My mother, (Lana) was lucky enough to get sent to live with her grandmother on a farm in Wisconsin. At the age of 12 or 13 I believe, was when her mother came back for her. I remember my mom telling the story like it was yesterday. Her mother loved to drink and play bingo, but with four new children now she found it difficult to maintain her social life, so when my mother was old enough Lucille went and got her for the sole purpose of babysitting. At least that's my mother take on the situation. With no place else to go, my mother stuck around and eventually married and had 7 children. Me, I'm right in the middle. I don't remember much about my grandmother except that she was a strong and demanding women, and I feared her. I remember my half aunt's who were always wonderful to me and my siblings. My mother eventually left her abusive and alcoholic husband and we moved away, never to see them again. Until after my mom died that is. We reconnected, breifly, with some of my mother's half sisters and there view of the situation is totally different. Because of that we never really talked about the relationship between my mother and grandmother, we were just glad to have the time together. I suppose being raised by your mother and being given away by your mother would have a tremendous impact on your opinion and thoughts about your life and the people in it. My mother never seemed bitter or angry at her, just afraid, of being hurt, I suppose. I thank God everyday for giving my mom the strength to endure her life, as lonely as it was. I guess you could say the pain, and or love, we receive throughout our lives doesn't have to dictate who we will become. My mom was proof of that.
Thanks for listening.
Respectfully,
A tender soul.
Honestly, this is tantamount to negligence by the FAA. This plane should've been grounded immediately and all of them checked for maximum safety. But the US, as dumb as always, just goes "nothing to see here", "we're waiting for data despite the data being 2 crashes where everyone died in 5 months".
> even when that data never left the end user devices

Do we know that to be true?

In any case, I'm pretty sure they don't bring criminal cases like this frivolously. There's obviously something here.
That sounds like a good idea. As long as the originator has the option of having the last word, internal attempts to verify can only help.
Affecting more lives than any terrorist act.
Yeah, the external storage permissions are going away altogether according to https://developer.android.com/preview/privacy/scoped-storage - apps will no longer be able to get access to them.
https://stellar.stackexchange.com/questions/160/how-does-the...

Seems like this has been discussed before.
I knew HN would remember it! I remember reading a blog post that linked to that thread in 2012 and it totally blew my mind (actually I think it was submitted here).
Ordinary civilians with guns don't have a great track record in modern history. They lack logistics and organization, so they are usually just slaughtered. Admittedly it's a bit better when the army is domestic, because domestic armies have sympathizers and has less appetite for killing, but the odds are not great.
Censorship Resistant Domains Live on Zilliqa Blockchain TestNet (Demo)
That page reads like a mishmash. Fake sites is it? "Plainsite not so plain," it would be helpful to provide some kind of flashlight.
Making the Profitable Choice Tool Part I
Watch this to understand the problem better : https://www.unrest.film/

And this :
https://www.ted.com/talks/jen_brea_what_happens_when_you_hav...

I study neurology and metabolism. If any of these patients are delusional, its an exceedingly small fraction of them. Same goes for people diagnosed with "conversion disorder", which is the idea that they are exhausted because they are dealing with some buried repressed childhood trauma.

Some psychiatrists can have a real discussion with you about the intricacies of the hypothalamus. Others ..... really not..... they will try and deal with your systemic inflammatory problems with Fruedian psychoanalysis. Worse yet is that many patients dealing with these deep fatigue and metabolism issues have been institutionalized because people think they are just faking it.
FB Response: https://twitter.com/fbnewsroom/status/1105993038671691776?s=...

> It's already been reported that there are ongoing federal investigations, incl. by the Dept of Justice. As we’ve said, we're cooperating w/ investigators and take those probes seriously. We've provided public testimony, answered questions, and pledged that we'll continue to do so
Or creating their own recommended design principals and then never implement them into their own flagship apps.
I don’t understand your answer, that’s basically what wmf described. Put a proxy or load balancer in front of your service.
Just seeing the headline "Children for Sale" drove me into a panic. I could never imagine selling my children. Perhaps if I was in distress I would give them to someone willing to do some form of open adoption, and only until my personal situation recovered.

The whole situation was formidably cruel.
Failover Architectures: The Infrastructural Excess of the Data Centre Industry
Totally agree. And a non-human issue with your example:

We had #EEF as a subtle light-blue 5px resizer handle on a #FFF background. However the resizer handle was invisible on a newly unboxed monitor the other day (benq 32 inch 4k monitor) - because it was showing up as white on white.

It was fixed by replacing the HDMI cable.

I think the HDMI connection was dropping back to a lower bitrate. Screenshot, and displaying the screenshot on another monitor, showed that the blue resizer line was there but it was not being displayed correctly.
Could you please not post dismissive responses even when another comment is over-the-top? Users here need to post civilly and substantively even when someone else isn't.

Also, while I have you, could you please stop creating accounts for every comment or two you post? This is in the site guidelines: https://news.ycombinator.com/newsguidelines.html.

HN is a community. Users needn't use their real name, but should have some identity for others to relate to. Otherwise we may as well have no usernames and no community, and that would be a different kind of forum. There are legit uses for throwaways, just not routinely.
https://www.artsy.net/article/artsy-editorial-bob-ross-every...
Errata: I stated UTF-8 decoding was 1–3 bytes per codepoint. It's 1–4.
Nice. This is a space that has long needed some players. I travel a decent bit because of my remote job (and friends all over the planet), and except for a few long-time travel buddies, I find traveling with others frustrating because they are either over-planners or flaky and hard to coordinate with.

The conflicts of interest across all the traditional providers (airbnb, hoteliers, flight providers, credit card companies) left this space packed with dark patterns by default too, so we're all stuck with Google Spreadsheets with stuff scattered all over the place.

Some things I love so far with Travelchime:

- not assuming too many things about how i want to organize (not forcing a calendar, or map pins, etc)

- the entity recognition is fabulously implemented and feels great, excellent usage

- the space dedicated to the map, suggestions, empty fields is perfect

- the dynamic map focusing on what i've entered so far is great

Some suggestions:

- add a checklist per traveler, which anyone can add stuff to (like assigning tasks): so each traveler can see everyone else's progress on things like

[ ] apply for visa

[ ] buy tickets

[ ] pack luggage

[ ] reservation at fancy restaurant

- while the flexibility of not depending on a calendar is nice, having a calendar to annotate would be nice too, where we can drag in stuff from the other fields. It's important to do this right so that the whole thing doesn't have to be shoehorned into a calendar

- ownership of events by an individual or subgroup that doesn't have to involve the entire group (a couple from a larger friend group wants to go for a private date) that they can mark off on said calendar

Feel free to PM if you want to discuss the product more, I love this space and have many thoughts :)
I still use http://tinyurl.com/ out of habit. Afaik it was the first on the market (2002).
this has a lot less to do with rendering quality available, (features) and much more with the skill level and polish put into the final product by the artists. (the TV movie, likely had orders of magnitude less time to concept, model, rig, animate, render and composite in comparison to the peter rabbit movie. and this clearly shows when you google the budget $50 m for peter the rabbit for a 90 minute movie vs 25 million in 2018 for watership down for an entire miniseries.
Can Boeing Trust Pilots?
The Motorola phones of a few years ago were much more reliable than the two I've been stupid enough to buy since then.
Obama's last FAA director wasn't even a pilot. He had a degree in political science. At least Elwell has actually flown airplanes -- including 16 years flying airliners for American. He also has combat aviation experience. Elwell is far more competent than Michael Heurta. Huerta's background was in politics, working for New York City and Later the Port of San Francisco. No flight experience, no airline experience, no general aviation experience.

People criticized Trump for putting a non-scientist at the head of the Department of Energy, however, where is the criticism of Obama for putting a non-pilot as the head of the FAA? When Trump does something wrong, sure, criticize him, but Elwell is an experienced, relevant choice to head the FAA -- especially compared to Huerta. Reducing Elwell to "Lobbyist" is silly, if one actually looks at his background.
It sounds like you're paraphrasing the great Steven Jobs: "You're holding it wrong"

Be that as it may, I believe mirkules's issue is not an uncommon one. Perhaps saying "building a microservice architecture 'the right way' is a complex and subtle challenge" would capture a bit of what both of you are saying.

Something being complex and therefor easy to mess up does not mean it's a great system and the users are dumb, especially if there are other (less complicated, less easy to mess up) ways to complete the task.
Here's one example https://rachelbythebay.com/w/2019/01/20/quiet/
I suppose we’ll someday hear that many of the companies who got people’s data have themselves been hacked, and that privacy is ended for many people. Surely Facebook must have some responsibility in such cases.
It can never be too late to benefit from proactive protection of one’s own data; isn’t that why people have been leaving Facebook?
I had a mass-manufactured knockoff years ago:

https://www.google.com/search?q=i+took+a+lickin+from+a+chick...
Yeah I know what you mean.

I've started playing games at lower difficulty than would be "right" for me, so that I can get through the story.

>I've been thinking a lot about finding a genre or mechanic that would still "work"

Have a look at planetary annihilation. Plus the community mod legions. No microtx, games against AI are decent fun etc. Well worth the price without being a crazy time sink - a quick AI game is like an hour.
How to Reduce Website Down Time
Correct. https://www.wired.com/2013/11/minecraft-book/
Simple:

If X is a technology I don't like, and it's not working for you, then it's the wrong solution.

If X is a technology I don't like, and it is working for you, then you simply haven't scaled enough to understand its limitations.

If X is a technology I like, but it's not working for you, then your shop is "doing X wrong".

If X is a technology I like, and it's working for you, then it's the right solution and we're both very clever.
Invisible Technologies Inc. | Delivery Manager & Relationship Manager | Los Angeles, CA | Full-Time | REMOTE | https://www.inv.tech/

Who are we?

We are Invisible’s Technologies Team. We solve problems at scale so they never happen again. At our best, we solve problems before they happen.

-- Website - https://inv.tech/publications
-- Deck - https://www.inv.tech/deck

Who are we hiring?

We are hiring Delivery Managers. The right “Delivery Manager” doesn’t need this job description, and won’t wake up in the morning with the thought “I am the Delivery Manager at Invisible,” but with the thought: “Have we taken over the world yet?” The right person already called me, and told me these words:

You should hire me because I will build and lead an elite army of agents to deliver any possible request our clients can have, with the desired outcomes and at ever increasing speeds. Without me, you will never become better, faster, and cheaper. Without me, you will lack the proper project management and coordination systems to deliver the complexity and quantity of work that is needed for you to succeed. Without me, your agents won’t see what it’s like to be lead by an Achilles and Agamemnon. You need me as your thinker and as your warrior, to strategize and to fight.

We are hiring Relationship Managers. At Invisible, customer success is the core company strategy for Growth. The relationship manager will understand client goals and success state through ongoing collection of data and feedback and ensure that clients achieve their success state using Invisible. They’ll be involved in all aspects of support, account management, demonstrating the product, educating customers and more. All team members look to customer success for input across all key decisions.

For an in-depth look on the positions & to apply, check out our company recruiting portal:

Delivery Manager

https://invisible-technologies.breezy.hr/p/41030f57d3f8-part...

Relationship Manager

https://invisible-technologies.breezy.hr/p/454b5b6dcaf5-agen...
We detached this subthread from https://news.ycombinator.com/item?id=19378498 and marked it off-topic.
Very Surprised if Apple don't have a patent for a modal box :-)
Should rewrite it in rust
Some recent favs:

- https://www.youtube.com/watch?v=w5eQuhBfDE0

- https://www.youtube.com/watch?v=uHlZA5OYj2I

- https://www.youtube.com/watch?v=1WeeMHq3I3Y

- https://www.youtube.com/watch?v=bsFM7kj0RII

- https://www.youtube.com/watch?v=6ekRLVXIIpw

- https://www.youtube.com/watch?v=wlFeOy-I2MY

- https://www.youtube.com/watch?v=87Qqk_wNFOk
But for someone who runs a business that relies on Instagram for marketing, and pays for advertising on that platform, it's a bit scary when the whole thing is down. Obviously this was only temporary this morning, and sure, no charges while down, but doesn't do me much good...
I'd like to check that out. Unfortunately, like other projects that idiotically adopt a generic name that can't be Googled without returning an endless swamp of irrelevant results, I can't seem to find any info on "duct tape" as it relates to JavaScript interpreters. Any good pointers?

The use case in question: a few years ago I embedded V8 in a Win32 app with a single .DLL and header file, but V8 has exploded in complexity since then and no longer appears suitable for lightweight applications, meaning anything smaller than a full-fledged Web browser. I need to upgrade that interpreter at some point, so I'm definitely in the market for something comparable to what V8 used to be.

Kind of unfortunate, but I'm hardly the user the V8 team has in mind.
Huh. I never before considered that liberal meant "city dweller" and conservative meant "farm boy". I had always assumed the terms were used to describe the different ends of a value base continuum.

I stand enlightened.
It has always been the advertisers that are asking for the sort of tooling that can be taken advantage of during the election cycle. If you don’t think Russia should be able to manipulate the black voting populace then maybe it’s worth thinking about whether Unilever should be able to specifically target and market axe body spray in the same fashion. The tools only exist because advertisers are paying for them. Blaming Facebook is akin to being mad at a Martin Shkreli, both are playing within the rules of a bad system.
Do you actually use your computer unplugged?
I have a related question. YC has a rule of thumb of $15K per engineer times 18 months [1]. Any "rule of thumb" for how much to add for manufacturing?

Say, in their example, a software startup asks for $1.35M for a team of 5. What would be an equivalent ask for a hardware startup that includes manufacturing?

[1] https://blog.ycombinator.com/how-to-raise-a-seed-round/
And they have been using the USS Jimmy Carter sub with the front huge cable splice bay for decades to compromise all undersea cables.

>>>The New York Times reported in 2005 that the USS Jimmy Carter, a highly advanced submarine that was the only one of its class built, had a capability to tap undersea cables. An Institute of Electrical and Electronics Engineers report speculated that a 45-foot extension added to the Jimmy Carter provided this capability by allowing engineers to bring the cable up into a floodable chamber to install a tap. But it is unlikely that the USS Jimmy Carter routinely taps cables since U.S. intelligence agencies can much more easily (and lawfully) obtain cable data through taps at above-ground cable landing stations.

https://www.lawfareblog.com/evaluating-russian-threat-unders...
Famous, well-marketed schools should increase undergrad enrollments
I know almost NOTHING about the people mentioned below. They're just names that I happened to catch in the news about their accounts being closed or they came up in a google search I just did. I'm certainly not implying support for them or their ideas.

Some comic creator
https://boundingintocomics.com/2019/02/21/chase-bank-shuts-d...

Some Proud Boys leader
https://bigleaguepolitics.com/chase-bank-shuts-down-proud-bo...

In his most recent appearance on Joe Rogan, Alex Jones reported that he had an excellent credit rating and had several of his accounts closed. This is a statement of fact that, if untrue, the banks could sue for defamation. So it's likely true.

Paypal (bankish) has gone after "hate groups"
https://www.foxnews.com/tech/conservatives-call-for-paypal-b...

Mastercard banned Robert Spencer (white supremacist)
https://www.jihadwatch.org/2018/08/patreon-and-mastercard-ba...
Wow, she is 55 years old and will be 93 when completing the sentence. I would prefer a noose for myself instead of that outcome.
One of the strategies that I'm thinking of to advance accessibility is to tout it as a way of cost-cutting. Blasphemy! How? Well because the major pain point I see in a11y is over-designing. Managers are being a control freak on the UX and designers are already overwhelmed by the newer features and ever-changing requirements and standards. Just give it up! Go back to a website with simple features and focus on what actually matters - clarity, relevance and easy workflow. I don't know if this works for other people but this is my take on a11y issues.
“The capitalistic profit motive, or answering to Wall Street, is what’s driving the expansion of invasion of data privacy and driving the expansion of a lot of negative outcomes that we’re just not happy with,” he said. “I wish there were guardrails there. I wish there was ways to rein it in. I have yet to see that manifest, and that scares me.”

- what Berners-Lee meant to say.
AFAIK XPS 15 doesn't come with a Linux option (and for me, I bought it through a reseller who had a black Friday deal, so I wouldn't have had the option).
Eh, no. Dig deeper.
If you use code gen like gRPC or thrift, it is easy for a compiler to catch. Even if you're using microservices with a shared DTO library, its easy for the compiler to catch.
Appreciate the response!

First part: Makes perfect sense

Second part: How do you assess this beyond prior school/work history or how quickly they finish the prep course? I could see it being much more difficult to assess with older students/parents/people who struggled in school etc.

Third part: As a non-programmer, any examples of one of these steep curves?

I wasn't meaning to imply the demand isn't there, was just trying to picture LS at scale in 3-5 years (say 25k-100K students a year).
Do you think that 75%+ placement is possible at scale -- I'd assume abandonment/failing students etc would increase greatly similar to other "open enrollment" coding bootcamps.

Regardless, it clearly is a +EV decision for any student who is able to get in. Congrats on creating a great product.
> Essentially it's the same as saying that you're scared to pay for anything online and you only trust Apple for making online payments.

Strawman. That's not at all what the parent said.

> For instance, if the app asks you for payment, you could be first shown its rating in the store, if it's low. There could be even a separate rating judging the payment security of the app, if security is what Apple is after.

You think people should be shown a payment security score so they can judge whether they want to make an in-app purchase? You must be joking. I don't think you understand what Apple is after if that's your suggestion.

> You're allowing Apple to rip you off by 30% on all app transactions, it's as simple as that.

Your entire comment reeks of irrational anti Apple bias. It's as simple as that.
The new X1 Carbon is not a good Linux machine. Some hardware just doesn’t work (built in LTE). Then there is a bunch of manual configuration required to fix various things, e.g. throttling. https://wiki.archlinux.org/index.php/Lenovo_ThinkPad_X1_Carb...
In particular, Unicode codepoints 128-255 were explicitly defined to be the same as ISO-8859-1, which has a bunch of precomposed characters in it.
Depends on whether you are a realist or not.
I think a bigger thing here, is that each deploy should have a REALLY good reason to not be backwards compatible for some pretty long time period. If that requirement is painful for you, then you probably have two pretty tightly coupled services.
Some guy out there with no arms or legs must be getting nervous now :-)
U.S. Population Growth Is Not a Problem, It’s a Solution
A Design System Approach to Improving Usability Through Color