skysight-inc/HackerNews huggingface dataset:
Bullshit. Those extensions protect against both. Javascript being an important criminal vector. This fail-closed behaviour is disabling certified code because of an arbitrary date. At time of install the code was verified.

The code didn't change since. Mozilla is stupid for doing this.
Sounding Rocket MOMO-F3 Flight Experiment (Digest)
The law of large numbers stipulates that given sufficient volume of data points, there is always a mean value that generaly gets converged upon, with a standard deviation of course.

I fear that public online presence is subject to a similar law of social interaction wear the audience is more prone to malicious tone and judgement in an online environment.

Every forum i know has a favorite hate child to harp on, from the safety of ones chair. Any one willing to let their online presence affect their mental health is in for a bad time
Are you saying that in the sense of putting on a persona?
Just trying to understand...
Show HN: Komiser – Detect potential AWS cost savings
I don't mind stealing bread from the mouths of decadence. But we don't get that decadence without seeds...
Some of us have bills to pay. This generally isn’t a hobby, but a profession. Until rainbows and good vibes pay the rent, then yes, monetization is important.
Another way to pull them: http://rammb-slider.cira.colostate.edu/?sat=goes-17
Absolutely agree — a computer algorithm can never capture the complex motivations behind human decisions. Two humans can have exactly opposite reactions to the same situation.

Any algorithm under which decisions are not random can be deceived — see also Google’s search results which are full of garbage for any topic outside popular keywords. The history of law is effectively the history of humans trying to game the rules of whatever systems are in place; and I fail to see how AI would function any differently.
I'd love to hear some feedback on how to improve Komiser.
I would settle for a little self-awareness.
Not so in Firefox for Android. No normandy to find.
Just add a monotonically increasing number (like milliseconds from the big bang) that will eliminate the collision, but not add much entropy.
Presumably those planted grapes are predestined to become raisins, with different growing and harvesting techniques than grapes used for other purposes, so it's not too unreasonable to refer to them by a name that encodes that info. Would be interested to hear from a raisin/grape farmer, though.
I updated my previous comment. They say there exist crapware installers that use elevated privileges that do inject stuff into the browser and that's why we can't have nice things, yes.

But I disagree with their value tradeoffs. They want to add a little "protection" - which is really flimsy since there is no privilege separation - for users who already compromised their systems with adware at the expense of the freedom of everyone else.
With a changing of the guard, the honor system can handily disappear. We saw this transpire with the burying of the JavaScript toggle. A new guy showed up, and decided that disabling JavaScript was “an advanced feature” and just too dangerous for ordinary folk. [1, 2]

Of course it begins with good intentions, and promises to leave explicit privacy options alone, but new devs show up with different opinion and the old devs are gone, and suddenly privacy options are getting toggled any old time.

Beyond even that, we all know that the realities of privacy are never ever cut and dry. Leaky details can expose people in peculiar ways. Fingerprinting preferences and hardware facts for forensic purposes has taught us that much. Viewport size, OS, connection speed, graphics capabilities, hardware acceleration profiles. Even stylometry, choice of words, manner of speech can give people away. In that sense, exposing any user choices might prove to compromise identity to some degree.

1. https://bugzilla.mozilla.org/show_bug.cgi?id=873709

2. https://limi.net/checkboxes-that-kill/ (seriously breathless persuasive writing about how urgent it is to hide the toggle for javascript, among other things, but make no mistake, the high value target was the javascript checkbox)
Java cards
Consider barbed wire around them, or even electrified fencing if you have power nearby.
Armatron – ETL Done Well
Yes, that's right, if you install software that had a bug, then if you give someone permission to modify your software, you can get a bug fixes faster.
Audio: Tupi Runo Ft. Akpororo – Papa God
I agree with the criticisms in this article. I currently have a 1.012 day streak on Duolingo, which I’m using to learn German, Esperanto, and Greek. I’ve “completed” the German course several times as the course was expanded, and even with the help of Clozemaster and Memrise I’m still only a B1 on an online CEFR test. It’s fine for the basics, but there’s no way it’ll make you good enough to, say, start working for a German-language software development company.
> This seems equivalent to not running random applications but letting trusted vendors ship you automatic updates.

That would be equivalent only if you were running applications from trusted vendors each in a sandboxed VM that can't access anything on your system and only provide narrow functionality, not platform-like stuff.
> Yeah check your privilege. Reading this makes me feel

> nauseous.

Is this sarcasm? I feel like this could be read from either side of the fence.

Personally I think that the properties she has ("white, straight, wealthy, beautiful") have played some role in her path, but I don't see any problem with her reaching out to some particular demographic. It might not be one I can relate to, but the content just isn't for me.

> Armstrong no doubt had privilege

I think that bringing up "privilege" should only be done when it has some actual relation to the content. There are people from less "privileged" backgrounds who are successful parent bloggers [1], so in this case I don't think it's really relevant to her success. She made content for a while that people enjoyed and the money train run out.

[1] https://www.ladbaby.com/#!
I just looked at the first most recent https://ask.roboflow.ai/question/30954728 and the answer is total nonsense. Left unimpressed.
I can't figure out how to read this comment. Do you think she actually needs to check her privilege? Or are you disgusted by privilege being brought up in a context where it shouldn't be?
So let's say I'm the IT department in my company. I've already got my root cert on every employee's PC(including Firefox because they can't browse otherwise). Can I act like the Normandy endpoint and let's say remotely disable the ability to install any extension including those pesky VPN ones and also do a lot of other such things I would like, you get my drift? Am I right? Am I right?

Please tell me I'm wrong.
Because software companies never charge for features?
Oh, I get it now.
"Look how fast we could fix an issue with our Normandy preference rollout feature!" Best keep Normandy activated at all time, eh?
If I understand correctly, OpenJDK is licensed under GPL with classpath exception - and the only thing that is preventing openjdk from being unusable in any commercial settings is a few lines of legalese, controlled by Oracle, on handful of source files in various packages. If Oracle removes that classpath exception legalese in some upcoming jdk version from these source files (which they are fully in control of), openjdk essentially becomes GPL-only.

I guess then openj9, coretto etc would be more appealing but soon enough it feels like there will not be Java left - since those distributions don’t/can’t call themselves java unless oracle allows them to... and I’m not sure why they would - as apparent by OpenJ9 not being called java.

So is it Java EE is dead, soon followed by Java?

Am I mistaken about any of this?
Please explain how profit motive makes better journalism and holding the powerful to account.
I was an early duolingo adopter but I feel that the app went nowhere if not down-hill. The main drive force at the beginning was learning a language just good enough and moving onto translating articles and comparing translations with other users and discussing these - that was a very intersting way of learning. Today you just grind simple questions on terribly designed courses. The writte material is an absolute joke and for the longest time wasn't even available on mobile.

Also this obsession with streak really killing motivation for learning. Someone should send duolingo the article that was on HN front-page few days ago about learning being more effecitve when taking breaks.
This is the slippery slope that started with the idea of DNA testing criminals only.
Why in the hell is this posted--and upvoted--on HN? Come on, people.
At a the UK university I attend I know a sizeable group of people who think exactly like this and have probably already read this exact article. Diligent people dead set on making the most change they can with their skills.
I'm sorry to break it to you, but a fuckton is not actually part of the metric system...
There are already channels for bug fixes, and some of the friction on those channels is intentional, such as for visibility and oversight/approval.
when is the fix?
Thank you for answering questions I didn't know to ask.
I agree with your thoughts on siloing being a poor decision by Apple, but I see nothing here that couldn’t already be done all on device using existing APIs.

Apple already added drag & drop between apps, you can drag text/images from safari straight into notes (or any app that implements drag/drop.) The web clipper could be implemented as a safari extension and work in a nearly identical way.
In the UK, GMT is often used to refer to "the current British time" both GMT/BST. I've seen the same in the US where people say EST but mean EDT.
Considering that JavaScript has been used in the past to unmask Tor users, this is a frightening security bug and is not "fail-safe" behavior. The extension should remain enabled, but with a warning.

It is doubtful that Mozilla will change this behavior, as they will likely consider it a niche case, but the Tor browser should probably look into alternate means of changing the behavior (patching).

Edit: apparently the packaged versions of NoScript and HTTPS Everywhere were not affected. See thread here https://old.reddit.com/r/TOR/comments/bkg7vf/due_to_a_bug_in...
when might the fix be?
Get an 8 bit microcontroller dev board for a few bucks and learn how to control the peripherals. AVR are good and there is a lot of material online to learn from. Sorry I don't know any books.
> the exercise you get most of the time is just "sort these English words to translate the sentence". You can get it right all the time just by looking for a grammatically correct sentence with the most superficial of understanding.

I think this is just a regression that came in as a result of their mobile app push. They expected it to be difficult for new users to get started with input methods, so they replaced typing exercises with word arrangement exercises, this means that the whole answer is just sitting on your screen, which defeats some of the point.

You can fix this by configuring these exercise types to be typing rather than word rearrangement, there's a little toggle IIRC at the bottom of each of this exercise type.

I agree that in the last year or two they seem to have optimized for metrics which do not map well to linguistic attainment. IIRC they used to have speaking exercises, and as far as I'm aware those are gone (maybe they couldn't make them good enough that they weren't making some people worse at speaking).
How do you enable Normandy on Firefox For Android? There's no Normandy in the about:config.

This is such a gigantic mess, even for a very loyal Firefox user it's to swallow.
I see you've got Opus on your to-do list. I would really appreciate that! I find Opus (appropriately configured) to be audibly indistinguishable from CD audio, and it would really help with the bandwidth requirements.

I've always been really excited by the possibilities implied by PulseAudio's network capabilities, but disappointed by their latency and bandwidth requirements. Roc + Opus would be amazing.
I usually attribute it to mild ignorance, not in a bad way.

For a long time GMT was a good reference point. Times have changed.

I used to work with a gentleman who would always schedule meetings on the phone as:

> Great, let's put that on the schedule for 2:00 o'clock Eastern Standard Time.

There was always a bit of officiousness to his tone and I think he just liked the idea of being precise.

And he certainly was precise. He was also off by an hour for half the year. Somehow no one ever missed a meeting, though.

I always sat on the other side of the room and ground my teeth.
Can you elaborate on what 'other spying' Mozilla does? Do you mean their telemetry?
You realize that this is why you wont see a dime from it, right? Because you think you shoild dismantle it? There is no other problem with social security other than people who want to kill it. Its funded by a fucking payroll tax. It isn't going anywhere.
I have used TimescaleDB for several purposes. As it is built on top of Postgres, all the existing tools, libraries and processes work out of the box. This is a huge advantage if you are operating Postgres anyway: Your existing backup tools will work, as does your user Managment.

Scaling out is a more complex story: Read Scaleout works seamless using read replicas (another existing Postgres mechanism). Replicas can also help you for high availability, Write scaleout is difficult with TimescaleDB (same for Postgres): Sharding can be an option, or buying bigger machines.
> I'm just getting old and curmudgeonly maybe?

You're not. You just have standards.

We need people with standards in this industry, because that's the only source we have of market signals that prevent the market from going full user-hostile.
What's wrong with a lifestyle piece on a Saturday?

If it were about a twitch streamer rather than a mommy blogger would you say the same?
> Okay, so, youtube targets a small subset of users, and changes their experience capriciously, and to suit their own purposes.

They added a dismissable banner. That falls far short of "changing their experience", in my mind.
It also resets all your default apps to the Microsoft apps (edge, photos, music, etc.) on almost every update.
I'm one of those users who had data collection (including studies) disabled. Changing `app.normandy.run_interval_seconds` to 60 (via about:config) didn't work until I restarted Firefox AND enabled data collection including studies (via Preferences).

Then all my plugins came back, and I disabled data collection once again.
I read "Roadside Picnic" which is the Soviet sci-fi novel on which the movie is based. That has to be one of the bleakest most depressed sci-fi books of all time. It's up there with "A World Made by Hand" or "The Road" in terms of epic bleakness. It's weird that there is a literary style dedicated to exploring profund sadness and depression. It seems that somehow sadness has become obsolete in our society even though the statistics show that suicide rates have been rising sreadily since 2000.
I used Memrise until I got bored: being forced to learn and repeat ad nauseam words that I'm sure I will never use is stupid. Since then I use an Anki deck with selected words/sentences picked from a Polish newspaper and a cheatsheet[1], that I should update more often, for patterns and macro understanding.

[1] https://github.com/archimodels/learning-notes/blob/master/no...
What is the alternative aside from language immersion from living in another country? Reading newspapers, books, and watching movies?
If you don't trust your software provider, "studies" don't matter. The same but could come through a regular update. If you don't want to be on bleeding edge, that's fine, and if the UI for Normandy is bad, that's an issue, but it's nonsense to accept updates and then say you don't want updates.
There are specific varieties of grape that are grown to be turned into varieties of raisins.
How much of an update hazard is this? Does it break with every major java upgrade?
In the current media state the title should be: The Popeye Secret - How spinach will be the solution for heart problems!
>Because most people who want to write will have done so before 70, and a large chunk of them just want to watch TV (or rather, have nothing better to do in their minds, which is sad).

Still doesn't answer the question. Just means those that do want to write over 70 are fewer (and they could be writing for decades before too, it's not about writing only after 70, but about becoming a new published writer after 70, or just a new celebrated book writer after 70 -even if you've published other books before too). Besides it's not the "after 70" category missing, where's the "after 40/50/60" lists?
One result of this, when I use firefox from now on, I'll be disabling "Normandy"
You don’t get to freely acknowledge counter-examples and then magically say they “prove the rule” as if they don’t contradict your argument. THAT’S NOT WHAT THAT MEANS.

And it’s quite all right for me to respect the elderly in general while acknowledging the baby boomers didn’t heed environmental collapse, stole all they money from future generations, raised their cost of living/education while keeping their wages stagnant, and concentrated wealth while dismantling unions.

You don’t get to cry “respect the elderly!” as a response to say, getting a parking ticket. It’s not a valid response to criticism of your generation either.
What about a radioactive tracer, that is sprayed on the bees, you can make the tracers fairly unique and then if there is a dispute the tracer can be analysed from a bee?

Also a Vice news article with Buzz Landon and Officer Freeman busting a bee thief

https://www.youtube.com/watch?v=0Z7Te9mqO8o
I have to participate, it is part of my my responsibilities. However I am able to listen to the meeting, provide feedback and work on my laptop at the same time
> There's also a sense that nothing is really new anymore. Whatever someone throws at me, I can fit it somewhere in my worldview.

I find this hard to believe. Are you not surprised by traveling? Art? dmt experiences?
Between the several HN threads on this, this is just what I was missing. Thanks for clarifying it is the defaults which change. That is completely acceptable. It's like any other feature or aspect of FF that a developer can change.
Do things this way creates a single point of failure (the weather satellite), which is one of the thing cryptocurrencies try to avoid.
Related: https://www.bloomberg.com/news/features/2018-06-26/how-to-st...
In either case, the secret is already out whether the user wants to admit to it or not
That "someone" is the author of the browser you installed in the first place, and which you know is going to push whole software updates on a regular basis. That's right, "someone" isn't going to just RECONFIGURE your browser, they're going to REPLACE it! Quarterly!

That concern just doesn't parse. If you don't trust Mozilla to give you working software, why are you running their software in the first place?

There are circumstances and concerns where you might want to limit things like software and preference updates. And both of those are and remain under your control. But the default is to allow updates, for obvious reasons.
So I have Normandy turned on and 'install and run studies' turned on and STILL my extensions have been disabled just now, hours after Mozilla pushed the temporary fix through Normandy which I presumably haven't got, despite having it turned on. Latest Firefox on Windows 10.
U2F token, which is supported by gitlab, would have stopped this
I don’t think anyone is denying that. In addition to actually using the language with native speakers, it can help build vocabulary and grammar.
These were like a rash in PDX last summer but did not appear to last the winter. I haven't seen one in months. I declare this fad dead.
That's exactly why we can't have nice things...

How about improving it instead of dismantling it?
Its interesting with the other thread about Java EE dying and Oracle politics. The ecosystem around Java and JVM is huge, so much cool stuff going on. Definitely a great platform.
It's named after a world famous beachhead of an invasion. The name isn't that obscure for a feature that invades the userbase with a takeover.
https://en.wikipedia.org/wiki/Great_Smog_of_London
The hardest thing in IT is naming things :D
And an additional observation. Many applications that allow a user to pick their time zone typically show offsets from UTC and a time zone name.

It bugs me to no end when I have to select something like "-5:00 Eastern Time (US/Canada)" in those dialogs. I think a lot of people just don't care enough to truly understand time zones and there is enough flexibility in human communication to just absorb the endless ream of off-by-one-time-zone errors.
Anime and video games are a powerful cultural motivator for me learn Japanese because I enjoy those things almost daily.

Russia no doubt has interesting items of culture as well, but I am not exposed to them at all and therefore have no desire to learn Russian.
No actual real real world computer is Turing complete. Only the. A problem is computable if it can be expressed in such a way that a Turing machine can solve it. That's theoretical result. The set of computable problems is not the set of problems that real world computers (or humans) can solve in some finite time and space.

Any problem that any human in history has ever solved could have been solved with finite state machine of sufficient size.
Why Zalando runs many “smaller” Kubernetes clusters
>No, happiness is the result of making others happy.

If only it was that easy. There are very self-content (happy) people who make others miserable.
I launched Firefox about 10 minutes ago and saw no change. I looked up at the window again a minute or so ago and saw that my addons were back. I'm guessing there's a timer for it to check for new studies?
Results of the WordPress Gutenberg Accessibility Audit
This is exactly what Timescale does with PostgreSQL. Timescale is an extension to the database, and all the existing database query planning systems just work.

I am not aware if MS SQLServer has anything equivalent.
Cross platform mattered a lot more when you were dealing with Sparc, MIPS, Alpha, PowerPC, Intel along with AIX, Sys-V, BSD, Solaris, HP-UX, etc.

Today your server is x64 and it's running Linux. Your client is a browser.
You are wondering if an IT admin can admin machines in its network? Yes, an IT admin can admin machines in it's network.
At least you didn’t say antisemitic. Assuming there’s anything “Semitic” about Eastern Europeans Jews (as per the above linked research paper).

BTW talking of which, it’s always fun to go back and read Arthur Ruppin's ideas about race.

That’s an ashkenazi eugenist whom couple of institutes in Israel are named after, including the Ruppin academic center.
A Legend of the Frontier
We're planning to deploy ClickHouse from Yandex[0]. Would like to hear from anyone who has it in production already, and what is your experience with it.

[0] https://clickhouse.yandex/
NOOOO I WILL HAVE TO USE CHROME FOR 24H :(
I agree that hatred would be increased. Peace would only follow from disease where:

1. one can avoid infection by avoiding proximity (so no waterborne disease for example),

2. knowledge of this is widespread,

3. avoidance of proximity is feasible, and

4. the increase in hatred is not sufficient to remove fear of death.

However, I think that most of these conditions are met in large parts of the DRC, apart from (1), where there is no such disease yet.

EDIT: Also (2) is endangered by the spread of unscientific beliefs; presumably political actors wouldn’t be attempting to convince others that Ebola doesn’t exist were there no possibility of succeeding in this venture.
When you have 3 kids, your asked if you are going to have any more kids.
Iter, a reactor in France, may deliver fusion power as early as 2045