skysight-inc/HackerNews huggingface dataset:
The only reason the valley has trumpeted the "we're just a platform" is that it was better for the bottom line and shareholders. Now it no longer is.
Where do you work? Are they hiring?
As someone who is doing exactly that I can confirm!
OK you answered a few of my questions and I still don't see why WASM is a requirement for any of this to happen.

No matter what language I use, no matter what platform I deploy to, if I want to interact with a service or with infrastructure, I'm going to have to use the provided API(s), WASM included.

If I deploy a pre-compiled binary to an AWS Lambda and an Azure Function, and it works on both, it's because I had to have that in mind when I wrote that software. Will that not be true for a runnable WASM binary? It sure seems like it would be true that I would need to detect which platform I'm running on and then execute the proper stuff for the detected platform.

If all APIs are going to be compatible with each other, so that, say, storing a file uses the same API call no matter what system or platform you're on (never going to happen; bear with me) implementing that in WASM outside of the browser does not suddenly make it possible.

This is an opinion, and on HN this is likely to be a very unpopular opinion. I don't expect anyone to adopt this opinion, nor do I expect to sway anyone's thought with this opinion. This really (really, really, really) feels like JavaScript/web people wanting to do things outside of the browser, with performance better than JavaScript alone can provide, and then, rather than simply using an existing language and runtime, deciding that the best route forward is to pave their own road to this destination with web technologies. This does not feel like the best route to take if you want to write software that performs well outside of a browser.

There are lots of other languages, runtimes, and platforms, that allow this today. And the web is a bag of chaos: I can't even get a consistent design or UI language across major websites, today. Buttons sometimes look like links, links sometimes look like menus, and buttons sometimes look like any of those, but somehow WASM outside of the browser is something everyone (except me) can agree on?

I'm skeptical that this is a good idea for anything serious.

Just like there are implementation problems with Java, there are going to be implementation problems with these runtimes that every platform is going to need in order to run this code, now. There are going to be many security concerns because (warning: incoming opinion) nearly all developers are terrible at thinking about preventing security vulnerabilities. Those same developers are usually OK when it comes to fixing them, and terrible at thinking about vulnerability prevention.
Already has. https://www.theverge.com/2019/3/27/18284042/apple-macbook-ke...
I'd encourage people to please read the post before they comment. It seems that this isn't actually Facebook targeting a specific ideology, it is removing a previous rule that excluded that ideology:

> We didn’t originally apply the same rationale to expressions of white nationalism and separatism because we were thinking about broader concepts of nationalism and separatism – things like American pride and Basque separatism, which are an important part of people’s identity.

I've been plenty critical of Facebook in the past, but this post is refreshingly honest. I hope it's followed up by some discernible results.
Ask HN: What are the best questions to ask a CTO during a job interview?
What do you ask beyond "what does your stack look like?"
Facebook's rules have always been a bit bizarre here.

https://www.propublica.org/article/facebook-hate-speech-cens...

> One document trains content reviewers on how to apply the company’s global hate speech algorithm. The slide identifies three groups: female drivers, black children and white men. It asks: Which group is protected from hate speech? The correct answer: white men.
This is misleading. This had more to do with internal audit tools and guardrails available than it did the services themselves.
Actually I was referring to the cost to the user who wishes to protect themself. Signal is designed to be fairly low "cost" i.e. easy to use. If they can find a way to make it more secure without making it harder to use they should and probably will do it. For most cases, the benefit of privacy probably doesn't warrant going through more trouble than this.

For those cases where somebody needs more protection, there's a way to go through a little more trouble to use Signal more diligently (agree with important parties not to change keys for a period of time).

To your point though: the cost of executing MITM doesn't just include the equipment, it includes showing ones hand by being discovered.
They also have no (as far as I could find) way of installing Keybase without root permissions on Linux. I tried looking for a way to install keybase without "sudo dpkg -i keybase.deb" but had no luck. In the end, since the people I'm working with use it, I had to spin up a VM to install it in so that keybase wouldn't mess up my Debian installation.
While that was true twenty years ago, it was more like ads were the only service they had and buying their [only] service made a customer. Purchasing their goods and services is still what makes you their customer in most countries where the term is defined by commerce departments or similar, and now Google offers much more than just ads.
If your parents get old and sick, you have to go back to your home country to visit them more frequently. It is much better to have a green card. You don't want to worry about your visa, your job security, and your parents' health at the same time.
Protection against passive scanners and the unskilled is complete enough protection for 99% of people.
Why not ban all racism, all hate, everything? Doing just one is PR only.
The latest dark web cyber-criminal trend: Selling children's personal data
It does but leaves critical questions unanswered without already having an in-depth knowledge of the system.

If I want to use Vault and Nomad, should they share the same Consul cluster?

Should I deploy my Vault and Consul servers via Nomad?

The guidance on server/cluster size is hard to use. They only have 'small' and 'large' with no reference for what constitutes those sizes.

I have more questions as I'm going through this right now, but those are just a few off the top of my head.
I don't know as much about hate as I should, perhaps, but it seems arbitrary to make rules about what's hate and what's not.

This part, especially, from the article...
We also need to get better and faster at finding and removing hate from our platforms. Over the past few years we have improved our ability to use machine learning and artificial intelligence to find material from terrorist groups. Last fall, we started using similar tools to extend our efforts to a range of hate groups globally, including white supremacists. We’re making progress, but we know we have a lot more work to do.

My question is, how are you going to know when you're done? What would Facebook look like if they didn't have any more work to do on hate?
I'm honestly asking this.
The wealthy don't live in Napa Valley, new money does. Totally different thing. Napa Valley is to San Fran what the Hamptons are to New York. IE - the place boringly nouveau riche go to emulate the rich of yesteryear.

The wealthy have their own very large islands. Islands that are very likely nature preserves. They don't need Napa Valley. I can assure you though, that the wealthy also have homes all over the world. And I guarantee you that crappy cities that smell like pee, such as London, San Fran, and Paris, are on their holdings list.

That's just the way it is, cool kids want to hang out with cool kids. And when they're not, they want their privacy.
Golang Software Licensing
A big benefit of end-to-end encryption is that it makes it impossible for the service provider to suddenly start doing silent mass surveillance of their userbase. A solution doesn't need to be 100% perfect to achieve this goal.

Somehow, nearly every article on the subject completely misses this, and instead keeps moving goalposts on reasonable endpoint security.
POSIX != C and from what i understand from the official docs, they already have a (musl derived, even) C library.
Where should people who are good at software development but don’t have physics degrees look for jobs where they can use their expertise to help science/academia rather than dating apps for dogs?
What do you suggest in situations where you can’t do that? Last summer, I travelled on a sleeper train from Lisbon to Madrid, which are in different time zones. At the time that I set my alarm, my phone had no way of knowing that it would automatically jump an hour ahead in the middle of the night.

In that specific case, it woke me up according to local time, which is what I expected. But what if I had crossed the time zone boundary less than an hour before I wanted to be woken up?
The argument is that rent control is a poor bandaid over the long-term problem of housing supply, because it reduces political pressure to build more houses. It's not the same longterm fix that changing zoning laws would be, for example.
If this sort of thing leads to Section 230 repeal though, are we really any better off?
Clearly distinct meanings are usually fine, as there’s little chance of context overlap causing clashes. The subtle distinctions can cause more trouble, but those tend to occur in situations more refined than we expect systems like these to handle anyway.
The section on interchangeability versus context might be helpful for illuminating this idea.
Hackers abuse Magento PayPal integration to test validity of stolen credit cards
But postgres actually is that with json and jsonb. The postgres developers are also very focused on providing a better alternative to mongo.
Afaik similarly configured postgres also challenge or beat mongodb in performance.
Much of the criticism of how gently WhatsApp and Signal handle key resets misses the mark. Widespread adoption of end-to-end encrypted messaging is an effective countermeasure to passive collection and blanket surveillance. In order to get that widespread adoption, you can't be showing people skull-and-crossbones warnings every time they swap out a SIM card.

Speaking from my experience getting journalists and political campaigns set up with signal in 2017-2018, the early scary key change warnings were off-putting to people and made them reluctant to continue with the messenger. At the time, I was in contact with 100-150 people via signal and quickly ran out of patience with anyone who insisted on a safety number check. But the UI at the time encouraged that level of paranoia.

I continue to believe that making key changes as painless as possible for users is the correct approach as long as there are ways to harden this behavior in the settings, for the benefit of the far smaller set of people to whom MITM attacks are a credible threat.
There is merit to maintaining an open environment. Censorship makes the censored content seem lucratively dangerous; it looks like the powers that be are afraid of what some people are saying. I think it is best to let bad arguments fail on their own merit. The problem is that most people are unable to recognize a bad argument.
I think fascism is resurgent (minimally) because democracy is failing some people. Not because China is doing anything.
Advancing your countries technological capability and dealing with one of the largest populations living in poverty are two separate endeavors. Expecting a country to abandon growth in one sector to improve another is not really sensible. Both challenges are being tackled simultaneously. The US conducted Apollo and the Mars missions, spending billions while people in Skid Row or Detroit live in 3rd world level poverty.
There was a good Intelligence Squared debate about this recently “Constitutional Free Speech Principles Can Save Social Media Companies from Themselves”: https://www.intelligencesquaredus.org/debates/constitutional...
Java is no longer a valid deployment platform for dynamically executing untrusted code.

https://www.java.com/en/download/faq/chrome.xml

The Java Plugin for web browsers relies on the cross-platform plugin architecture NPAPI, which had been supported by all major web browsers for over a decade. Google's Chrome version 45 and above have dropped support for NPAPI, and therefore Java Plugin do not work on these browsers anymore.

All the other browsers killed it as well.

There's probably some way you can do it outside the browser, but I've never seen it used. Was it called Java WebStart or something?

I think it's because the sandbox had too many holes, and it was large and clunky. It didn't integrate well with the browser.

Java is obviously still extremely popular, but it's used in trusted contexts, like on the server, or "semi-trusted" contexts, like the Android app store. Although that is a different JVM which is probably easier to secure. And in that case there has to be a manual review process before allowing arbitrary code to execute (which is imperfect, but better than nothing.)
I'd really like to read an article written by you talking about Mongo limitations.
Because when your parents get sick and you have to go back to China, it might be hard getting back to the US AND still be able to meet requirements to get a green card.

Once you have the green card, you can travel freely back and forth.
But what are the kids going to do with it if they already have some place to live but sell it?
I found one picture of the Unix Room, on Twitter:
https://twitter.com/rob_pike/status/896161131894419457
Top dark web marketplace will shut down next month
This isn't the first line though–Facebook already bans things like ISIS propaganda. This is in a similar bucket.
There was a time when the FB newsfeed was chronological, and just showed what your fiends posted as they post them.

It seems like less blame for the world's problems could be put on FB if it was just treated as a dumb bulletin board. Why not go back to Facebook being a "dumb pipe?"
Good news: we fully agree with these goals!

On 1, the libc we're working on[1] is based on musl. It won't ever be 100% compatible with all code, because that runs into constraints imposed by our security goals, but the vast majority of code should eventually just compile when targeting this. (Eventually, because this is all early days.)

On 2, yes, that is explicitly the goals. I'd add that it's not just about OSes, but also about platforms and hardware form factors.

[1] https://github.com/CraneStation/wasi-sysroot
Yes, but this differs per country.

In the Netherlands this can be one or two months depending on the employment [1]. It is meant so either party can back out. After this regular rules apply. Which are _not_ as forgiving.

[1]: https://www.rijksoverheid.nl/onderwerpen/arbeidsovereenkomst...
oh no, those poor russian bots...
Or just click reader mode in firefox.
Sure it is, because it sounds like Facebook isn’t committed to getting rid of all hate speech, just the kind that isn’t socially acceptable. Same with Twitter.
Whether you go to work in the light or in the dark is determined by your work schedule relative to the local solar day/night cycle. Not DST. If you want to drive to work in daylight, negotiate for your working hours to start after sunrise. If you'd prefer some sunlight after work ends, negotiate for your working hours to end before sunset. Keep in mind that you won't get both year-round at most latitudes simply because a typical work day is longer than the length of visible daylight in winter. (What would probably make the most sense would be 10-12 hour work days in the summer and 4-6 hour work days in the winter, centered around solar noon, but that's likely to face strong opposition from both sides.)

The only _practical_ consequences of DST vs non-DST lie in whether we try to force everyone to shift their schedules all at once twice a year or leave it to individuals and businesses to set their schedules as they see fit.

There are no practical consequences for permanent-standard-time vs. permanent-summer-time. Either way, people will adjust their schedules to suit local conditions just as they do now, but without the complication of abrupt time changes in the spring and fall. My preference would be to place local noon as close as possible to solar noon (+/- 45 minutes, to permit one-hour time zone offsets without splitting up dense urban areas) so that morning and afternoon are approximately the same length, but I wouldn't call that a _practical_ difference, as long as the offset from solar noon is consistent. It's more a matter of aesthetics, in particular a distaste for needless complexity.
Separatism too? As a Spaniard I couldn't be happier about that.
Some elementary schools also have a non-trivial number of mainland children who cross the border every day for school. Birth tourism for mainlanders was big in HK (they've cracked down on it now) because Chinese born in HK automatically get HK permanent residence.
As an anti-racist conservative, the most fun I have on the internet these days is arguing racists out of their beliefs on the armpits of the internet. I relish my downvotes there. I would be bummed about these beliefs being banned everywhere because I wouldn't get to exercise my Internet debate skills to make a positive impact on the world without worrying about trampling on somebody's right to an echo chamber.
In an ideal world, I would love to use a really secure app for communication. However, my choices are limited when most of my friends are on WhatsApp or Signal. That is just the unfortunate reality of the way social networks work.
I consider myself a free speech absolutist. Or very nearly so.

But that runs both ways. Not only do I think that almost all (to borrow a mathematical term) speech should be permitted, but also that the onus is on the speaker to make themselves heard or to find an audience. No company or platform owes them anything.

In earlier times, that meant that no newspaper or printing press was required to print everything sent their way. Today it's the centralized websites that also don't have this obligation.

If FB decides to ban bigots, or YouTube wants to kick anti-vaxxers off their site, so be it. You can host your own video if you'd like, or maintain a personal blog site.* You are not entitled to widespread distribution. Never have been.

* Which leads to a place where I'll agree on obligations: root infrastructure like DNS or network connectivity. Those are the common carriers of our Internet.
Companies should jointly give CIFAR a big fat award too. :-D Without CIFAR's 10 million dollars back in 2003 to the research groups of 15 people, led by Hinton, the research groups may have dissolved due to lack of funding, and our history would be different.
Join the OpenJS Foundation
Discovery of life-extension pathway in worms demonstrates new way to study aging
The expose feature is supposed to be used for that. I had a hard time adjusting from Windows for a while, cause I kept going to the dock to do window management. It got a bit better when I started using the three finger swipe up and down (only this app's windows). I still use the dock more than I should due to habit though.
There is a clear difference between white nationalism and white supremacy.

I'm no fan of Britain turning multicultural and all the child rape and stabbings that it brings, but I don't think that the white race is superior to others.
You'll be disappointed here. They are specifically targeting white nationalism/separatism. They specifically exclude other types in the article.

> We didn’t originally apply the same rationale to expressions of white nationalism and separatism because we were thinking about broader concepts of nationalism and separatism – things like American pride and Basque separatism, which are an important part of people’s identity.
I didn't realize the internet or cars were created by the employees of advertising corporations for the sole purpose of furthering their surveillance and user manipulation capabilities.

Seriously man? Do you think you might be being just a little bit hyperbolic there? I mean, it's pretty darn clear that Deep Learning isn't "created ... for the sole purpose of furthering ... surveillance and user manipulation capabilities" when almost all of the papers on the topic are freely available on arXiv, and source code for nearly every important implementation is available as Open Source, usually in multiple languages, using multiple different frameworks (which are almost all Open Source as well). I mean, sure, Google use Deep Learning to display ads... great. But you, or me, or anybody else, can also use the same techniques for our own (presumably more noble) ends.
If you want a negative example, check out Voat. It started as a "less moderated/censored reddit" and quickly filled with actual nazis and other vitriol. A business cannot survive on "We accept hate speech" in the same way 4chan has never really been a business proposition; Nobody wants to look like they are supporting hate speech so advertisers won't go near it with a ten foot pole.

IMO, this is a good thing, and implies there is at least some decency in the world
The "WhatsApp Business API" client also offers the ability to backup/restore the Signal cryptographic identity, because it would be a bad experience for end-users to see identity change notifications from businesses every time their IT person decides to fiddle with their servers.

It would be nice if this could be done on smartphone clients, but that pretty much requires leveraging some sort of "trusted key store" external to the app. (Which I'll admit may exist on some platforms, to varying levels of trust. How feasible and acceptable it is for this use case, I honestly do not know.)
The definition of hate speech and its boundaries has been thoroughly explored by the US supreme court. A taste of it:

https://en.wikipedia.org/wiki/Hate_speech_in_the_United_Stat...
New Strategies Take on the Worst Cancer–Glioblastoma
For someone who cares more about freedom of speech and the free sharing of ideas, than what political stance people have it's a sad day.

However, at least Facebook now admits their political bias and people can make informed choices.

And no I do not support white nationalism.
Reddit went through this too.
I'd think of it not as a way for "perpetuating our roles as consumers at the bottom of the pyramid not as owners" but as acknowledging that the large picture is changing from a loop where nearly everyone is both a consumer a producer to an environment where large portion of people will inevitably be only consumers, because the economy won't need their labor anymore. And it's reasonable to assume that these people - who have little economic power now, and will have less and less of it - won't magically become the owners of the world. They might seize ownership with force in a revolution or they may get handed that ownership as a handout, but they can not trade for it or work for it or bargain for it, they don't have and won't have anything to offer to those who currently own the world's resources and means of production.

It's not a way of perpetuating the current roles, it's a way of treating the consequences of current roles so that the consequences are more humane. Of course, one may argue that keeping the consequences horrific is more likely to motivate radical change, which is true, but IMHO not a good way to proceed.
But I wanna be mad.
You forgot the part where you have to find a computer with a CD drive