skysight-inc/HackerNews huggingface dataset:
Inkstone is Hong Kong-based and independent. We're only a little more than one year old but have published countless stories about all of the topics you mentioned. I'll give you a few examples, below. Try searching the site with site:inkstonenews.com if you want more.

> Well, I only trust a news agency that would also report about the people in captivity there ( a couple of million Muslims).

The two most recent pieces on Xinjiang:

US lawmakers want this man punished over China’s treatment of Muslims
https://www.inkstonenews.com/politics/us-lawmakers-urge-sanc...

US condemns Muslim camps that China calls ‘boarding schools’ https://www.inkstonenews.com/politics/us-highlights-mass-det...

> Or about the digital credit system.
‘Worse than doing time’: life on the wrong side of China’s social credit system
https://www.inkstonenews.com/china/chinas-13-million-discred...
Got bad social credit? Your son isn’t going to college
https://www.inkstonenews.com/society/chinas-social-credit-sy...
Mint Mate. It's spartan, but it just works.
I would guess that 99% of users would click ok for "Allow typing with this keyboard?" when they plug in a USB storage device.
It is a very popular request.
When Daily Scrum Goes Bad
What you described is essentially how Android works today. You whitelist specific apps, like the Amazon App Store or F-Droid, as allowed to install other apps.
So how would it work if - like in the 2016 election - nobody actually got the majority of the popular vote?
>I am just very tired of “designers” doing “pretty” stuff instead of solving a problem

Rewording, I am tired of "pretty" being an add-on or, worse, the entire product.
Have you considered moving?
Are there any open-source or commercial systems that do anything close to this? Does there exist such a forensically sound OS that should be used?

The best I've found for disk imaging is using Windows Enterprise (or similar, stripped down) with SafeBlock, but that seems less than ideal. I'd love to find a *nix alternative.
And the real tuition is that high is because there’s an endless supply of students willing to dump insane amounts of money into a degree program that will, at best, lead to a $40k/year job. Cut the head off the snake and things will come back to earth.
iOS apps can use whatever rendering engine they want. The restriction is on JIT -- Apple doesn't allow apps to compile native code on the fly, which modern JavaScript engines like V8 do. The exception is Apple's own JavaScriptCore, which works with WebKit.

In theory you could have Firefox Quantum as a tenderer with JavaScriptCore as the JS engine, but that might be more work than it's worth.
Kind of. Are you unaware of how much shit we're in?
I don't care if you object, I'm not going to stop.
Note that it's not that Microsoft's implementation in IE 11 was resistant to the attack it's that IE 11 didn't implement the feature at all.

Also note the paper is largely overblown and possibly just plain wrong https://love2dev.com/pwa/marionet-attack/
Social Security is so popular that either party trying to cut benefits will be voted out at the next election, especially if the other party runs on restoring it. So instead of cutting benefits to those currently receiving it, instead there will be a call to increase the retirement age. This is already happening in Denmark where the retirement age will be 67 by 2022 and after 2030 could be increased 1 year every 5 years.
It's sort of an open secret that google's data is not nearly as anonymized as they would like you to believe. I'm only familiar with how advertising data works, and I can tell you that many of their large customers know exactly who they are targeting. It's not anonymous at all.

They are combining google tools and data along with their own in ways that often violate the TOS, but everyone does it anyway. I think some companies have backtracked on this in the past few months, but it is still quite widespread.
I think that's the point your parent was trying to make, in a 'between the lines' kind of way...
doesn't wolframalpha give you something like this?
> My wife firmly believes the US healthcare system is a giant scam where insurance companies leech off people without actually providing any value.

Health insurance in the US is built around providing value to employers. Most employers are concerned about which network is going to upset the fewest key employees and cost the least amount of money for the employer, while fulfilling all legal obligations, without making the employees spend too much time dealing with the insurance company when they could be working. Nicer employers may want to cover more of the cost, or want to upset fewer employees, or have specific things they want covered that aren't legally obligated.

There's also the problem that different groups of people want totally different things from the system. I like integrated care, because it provides me with a single place to go, that handles everything, even though it may not always be the best care. Other people are more focused on getting the best care, and are ok with (or prefer) to pick the individuals who provide each service, even though it means visiting multiple locations. Nicer employers offer you a choice of providers, but it would probably be less expensive for them if everyone was on one plan, at the cost of upsetting more employees.
USB doesn't work without a driver and sometimes you don't want to (or can't) install a driver. This sounds like the kind of hack that a clever (but arguably unwise) engineer would shove in to help them remotely troubleshoot a device.

"Sensor not detected? OK, open up Notepad and hit Caps Lock three times quickly. Did some text appear? The sensor is fine, the problem is with your computer."
Prince Harry? The advice of a Royal who will never need to work at anything about what is or isn't a waste of time is about as useful as a codfish's advice about mountain biking.
I once had a conversation with a manager at a fairly famous software company that I was working for. I asked, "Is it an imperative for us to make as much money as possible, no matter the ethics". He answered in the affirmative. I followed up with: "Then why aren't we selling drugs?" Interestingly, he understood what I meant.

It's easy to say that you won't sell heroine to addicts, you won't murder people, you won't poison entire cities because we sell software. But we don't have to sell software. There is no law saying that although we are a software organisation that we can't do something else if it made us more money. So why are we selling software? We've already arbitrarily built this wall of ethics around ourselves. You're lying to yourself if you say that "We need to do whatever is necessary to make more money". The reality is that we need to do what ever is necessary to make money within the boundaries that we have set for our company -- and those boundaries are whatever we want them to be. We choose.

It was interesting, because after I explained this to the manager, he was a lot happier. I honestly think he originally felt that he had no choice but to do horrible things. It was his job to optimise for profit at the expense of everything else. I don't think he wanted that job.
> This is how the crazed Marxists of the left, ever since Karl Marx himself and Friedrich Engels, think capitalism works. It is not how it actually works in a non-pathological economy and it is certainly not how it should work.

Good grief!

Yeah, why can’t those crazed leftists see the truth.
Yeah, like did you know that 18 is the legal drinking age in the US? That's why 18 year old soldiers can drink alcohol in the military. BUT, if a state increases the drinking age to 21 in their state then they get sweet sweet federal highway funds. For a long time Louisiana was a holdout, so 18-21 year olds would go there to party for mardis gras, and the road quality showed it.
"main" is not CSS, it's an HTML element introduced as part of HTML5. All modern browsers support it, Firefox since 2013. No version of Internet Explorer supports it but all versions of Microsoft Edge do. Browsers ignore elements they don't recognize (they don't ignore what's within them) which does mean they will ignore CSS statements that only uses "main" a selector.

Modern browsers that support the element will present it as a "main" landmark to assistive technologies. Landmarks (header/banner, footer, main, navigation, etc.) are a useful way for people who use assistive technologies (mostly screen readers for the visually impaired) to get a sense of a page's layout and to move around within a page's contents.

https://developer.mozilla.org/en-US/docs/Web/HTML/Element/ma...
It's nothing to do with monopolies. It's just that it's an unworkable idea.

The worst a website can do is trick the user into downloading something. The worst an app can do is steal their data, capture video from their mic/camera, wipe their computer, turn it into a DDOS bot etc. It's night and day.

And so trusting third party certificate issuers who currently don't verify websites or their owners and having them now certify apps is a pretty big leap.
> IIRC only ~10% of prisoners are held in privately run prisons. It's kind of a red herring.

I disagree. Even if only 10% of prisoners are held in privately run prisons, the corporate leadership of those prisons has a disproportionate effect on policy-making for all people. CCA and GeoGroup are the largest recipients of federal contract award grants (for ICE), and they collectively make over 1bn / year from these contracts. They also sponsor legislation that _increases recidivism_ and makes it easier to put undocumented immigrants in their own jails. Just because a small % of the population is housed in private prisons, doesn't mean that private prison's have no impact on our society's relationship between profit and punishment.
It did for a few different devices, they could have mimicked one of those.

Source: Have plugged several brands of USB-to-COM adapter in to Win 7 / 8.1 and they've "just worked".
Did you pay the bill outright without negotiating?
Yeah, there's almost zero connection between the games besides some background lore or easter eggs that are not important for the main story of each entry.
I don't think that's a good idea.

The problem is that most of replacements are of lower quality than request.

I just moved to request from axios about a week ago. Axios has multi-year persistent bugs around proxy support, modifying https agents, and unhandled promise exceptions. Probably due to low contributions (the code base is quite complex). You only find these out after investing into axios heavily.

To new users axios looks superficially as good as request (similar number of users, promises by design, etc)
Web fonts are very slow
Are you perhaps a strong supporter of Xi Jinping? Or are there areas where you are critical of his policies?
NO

It's a disaster. It is slower has worse UX than the old Reddit. Whoever thought making a SPA with React was a good idea was wrong. Reddit is a terrible use case for a SPA.

Design wise it's not terrible, but the chosen fonts have less readability than the previous fonts (I believe good old Verdana).

I will keep using old Reddit with RES for as long as I can.
There is a base income level not taxed at all (~12k CAD), after that it is up from 15% + province tax.
Safari is a fantastic browser, actually.

It's as fast as Chrome and Firefox. (Firefox is curiously sluggish on the Mac, even when the latest Quantum improvements.)

Sure, it tends to lag behind when it comes to adopting certain newfangled web technologies, but it supports everything that's important (even web workers now? I think?), and it's super stable.

I use Chrome for web development, though, because of the built-in dev tools. (The tools are pretty gnarly for 2019, but they get the job done, for the most part.)
Yeah, that's the thing. The true cost is somewhat hidden because of the employer part of the premium. And the costs you pay out of pocket when an actual health event happens.

I imagine you can still pay $1000+ out of pocket to have a baby in a US hospital, even if you have great insurance.

Also, the article talks "average", while I imagine US health costs are highly variable depending on whether you are young, old, smoker, non-smoker, fat, skinny, pre-existing conditions, etc...

Some people pay $1500 per month in health care. And some, $400.
On the "determine if anything suspicious is happening" front, you can configure Wireshark to capture USB packets and show you what is going over the wire.
In the Materials section: "To assess participants’ level of NFC, we used the NFC scale (Cacioppo et al., 1984)."

It's a pretty well-accepted standard scale.
Why is the secret service using Windows, osx or Linux to do USB analysis in the first place?
Thats not really what I meant.

I am just saying that they should have a pre usb meter that prevents the usb stick from being attached to a device directly such that they can screen it off ...
That's interesting. The Android on my phone mus be old enough that it isn't using that, or it's changed since I last bothered with it. Last time I did anything with it was a couple years back with the Humble Bundle app, and I believe you still had to toggle in the settings to allow untrusted sources for that to function. Good to know there's been some progress on this.
Adolescents are not, as a general rule, expected to have the cognitive faculties of adults, which is why they aren't usually tried as adults, why they can't vote, why they can't buy alcohol, and why they can't drive cars without additional rules (in graduated license states).
This whole situation is absurd on so many levels.
I haven't played fortnite, but Folding Idea's analysis of Fortnite [0] suggests that it does. As a specific example, it presents only a small subset of the items available to purchase any given day. This allows them to obscure the relative prices in a way that would not be possible with many more viewable for comparison. A microphone hammer is 800v today. How does that price compare to a gold hammer, or what was its price two seasons ago ?

[0] https://www.youtube.com/watch?v=dPHPNgIihR0
The Secret Service reports to DHS. Mr. Alles was an ally of Ms. Nielsen, who just resigned/got the boot. Stephen Miller reportedly got the go-ahead to clean house at DHS, so all the leadership that isn't in line will get cleared out.
> feed into other industries

... that make products that we buy?
It seems pretty straightforward to me to say that has been disproven, for reasonable values of disproven, because you'd have to adjust it one way here and another way there.
A comparison to the A320 is in order.

The A320 (as well as modern Boeing Airliners like the 777 and 787) has a comprehensive system of "flight envelope protection" which automatically acts to keep things like a pitch runaway from happening.

In a modern aircraft, flight envelope protection is closely integrated with the fly-by-wire system in normal operation. If sensors are degraded, the system reverts to a "control rule" which has less protection.

In the case of the 737 they retrofitted a partial flight envelope protection system onto an old aircraft. Thus it wasn't properly designed, tested, and pilots not trained how to use it.
In this analogy, they’d be different departments or subsidiaries with different balance sheets, so there’s no need for the scare quotes: they really are selling the bonds. And they didn’t issue $3 trillion in bonds, they issued $20 trillion and sold most of them to other parties on the same terms.

At the very least it indicates that the company prioritizes the finances of that one department much more than any other.

The other problem I have with this complaint is that it implies that things would be different if it didn’t hold treasuries. If it had $3 trillion in a bank account, would that make it “real”? The US government issues dollars too, and can devalue the currency at will, so it’s not really better.

Ultimately, it’s a commitment mechanism. If SS were paid out of the general fund, it could be cut off to fund other projects at will, as long as Congress were willing to piss off old folks. (Which is already a big obstacle, admittedly.) By funding benefits from a gigantic trust fund holding government debt, cutting off SS to fund something else would require imploding the world economy.
Barcode-as-a-keyboard was one of the vectors that researchers at last CCC used to hack ATMs. End result: show two barcodes, cash gets out.

https://media.ccc.de/v/35c3-9761-truly_cardless_jackpotting_...

USB is trash for security.
I thought Padmapper got their start that way, by essentially providing a better apartment hunt interface than CL had at the time.
As someone who has used Gimp on/off since the pre 1.0 days ie. when it was a Motif (Lesstif?) app, it certainly has come a long way.

One of the things that held it back (for me) for a long time was the lack of 16/32-bit colour processing, which it didn't get until the 2.9 (development builds) in 2015:

https://petapixel.com/2015/11/29/gimp-version-2-9-2-brings-1...

And of course this didn't make it into stable builds until around a year ago. I am very pleased with 2.10 overall, and these days I only start up Photoshop if there is something I can't do in Gimp 2.10.
A snapshot/article summary?
/* Co-author of Nancy CLI is here. */

Michel, I'm sure you mean pgbench, since you've added its support to Nancy CLI (thank you!) :) It's easy to mix though, since we embed both (pgbadger is for log analysis when during experiments we are "okay" to turn the full query logging on -- it's a great tool being developed for years; it can produce JSON, so it's machine/integration-friendly).

And yes, it's quite convenient in many cases to use pgbench, when logs collections is not an option due to some reason -- instead of workload replay we can use workload simulation, based on underdtanding how every query group from pg_stat_statements looks like (first of all, the main important thing is % of calls in overall picture). It's good that pgbench allows to set "weights" for every workload "piece", using multiple -f options and @weght (for example, "pgbench -f tx1.sql@20 -f tx2.sql@80", etc). We use this approach a lot.

But I also believe in workload replay approach. Cool to see pgreplay-go, we'll definitely check it out and try!

"Database experiments" is a very important and underestimated topic. Database change management methodologies (for open source products) are very weak compared to CI/CD, and other tech areas -- I hate to see how changes are being made without proper preparations and thorough testing. Improvements are definitely needed and it's great to see new tools!
> otherwise they would view these wars as just and support them

So the claim is that it is only possible to benefit monetarily from things that are ethically sound?
I was delighted about this when a client wanted a barcode scanner integrated with a web app. I envisioned major difficulties but instead it only took 5 minutes to implement.
Not really imploded, but people change and stuff gets re-arranged. It's ok. Like forgetting peeps. Also ok. No need to keep friends around forever like Facebook and social media imply. I maybe have 5 friends that I've known for more than 15 years... those remain. The rest can flow.
Yes. I couldn’t find an angle to negotiate with. I could afford to pay, so trying to use hardship as a lever to bring down the bill wouldn’t have been honest.
So, I share the same opinion as Prince Harry, as a teacher. My students only want to do Fortnite, or Brawlstars, or Apex or whatever the biggest craze is. They're completely addicted to those games, and it's near impossible to get some of the students off their phones. Like, it's definitely impacting these kids at school; I can't imagine what it's doing if they ever get assigned homework (most other teachers I know have just given up because they either don't do it or cheat).
The appearance of force costs money. If appearances were free, then hollywood wouldn't need so much money to make movies.
Here's how I'm understanding this:

Currently, you have three options to distribute software on macOS.

1) You register as an Apple Developer (which costs $100 a year) and distribute through the Mac App Store, where Apple will do their review/automated scans/whatever, resign the app with their certificate, and then distribute it.

2) You register as an Apple Developer but don't distribute through the app store, and instead sign your software with the certificate you get through the developer program. It looks like, starting in macOS 10.14.5, you'll have to upload your software to Apple to be "notarized" if you want to distribute this way. It sounds like it's only for new software at first, but eventually old software will stop working unless it's notarized.

3) You don't register as an Apple Developer, and you just build and distribute software however you like. Currently, if a user tries to run your software it simply won't run, and the user has to know to go into system settings and manually give it permission. What isn't clear (at least to me) is weather this option will remain unchanged. This sentence:

> In a future version of macOS, notarization will be required by default for all software.

kind of makes it sound like like all software will have to be notarized, which implies that you have to be an Apple Developer to distribute at all. But saying "by default" makes it seem like there's some kind of option given to the user, so maybe it just means that software that's distributed by a registered Apple Developer but isn't notarized just moves down into the third tier of software that has to be explicitly allowed to run by the user.

It seems like Apple's ideal model is that if a user wants to run software of any kind, it has to go through them (like iOS). I don't think that's what they're announcing for macOS, but it's a little hard to say for sure.
Canva | full-time senior hires | Sydney | PERMANENT, ONSITE, VISA https://about.canva.com/careers/

Australia's fastest growing startup. We're taking over the world of design and content creation with a product loved by millions of people around the world.

Come work with some of the best people in the industry doing the best work of their lives.

Recruiting across lots of roles (check out out our careers page above) - including Frontend, Backend, iOS, Android, UX Design, Digital Design, Product, Growth, Data Science and more.

Engineering stacks: backend = scalable Java services, web = React + TypeScript, iOS = Swift, Android = Java & Kotlin.

Feel free to ping me an email at scott[.]c[@]Canva[.]com for a referral, any questions on what life here is like, and the cool things we're doing in engineering, design & product.

Permanent & onsite roles only
Shouldn't preventing this be as easy as turning off autorun? In fact, I thought Windows had that off by default for USB devices.

(Of course, I'm assuming we're not dealing with a zero-day in the USB stack or filesystem drivers. But that probably is something that the Secret Service should be on top of, as well.)
Is it just me, then, that hates the "narrow strip of text down the middle of my large monitor" school of web design?

I don't understand why I'm being forced to scroll when there's all this blank space to the sides.

Even on my laptop, this looks strange to me, a huge wide expanse of nothing, and this little strip of text down the middle of the page.

What's the reasoning behind this?
99.9% of users are not capable of making an informed decision about whether to approve a third-party app store. That you are is statistically irrelevant to the security of their platform. Fortunately, Apple has to date and clearly intends to continue offering a way to disable this functionality for the "statistically irrelevant" subset of their users that have good reasons to.

EDIT: Users, given a way to sideload, will always be taken advantage of. At least the enterprise program lets them be cured quickly. https://www.wired.com/story/exodus-spyware-ios/
Good points. I didn't know about the credit cards part.

I stand corrected.