skysight-inc/HackerNews huggingface dataset:
I had never heard of this Normandy nonsense. I have certainly never willingly enabled it. Yet according to my preferences, it's enabled. And apparently it's a feature that lets Mozilla remotely mess with my preferences. What the actual fuck? When did Firefox go from being a privacy-conscious browser to being this pile of nonsense? I'm not amused.
Librefox isn't exactly what you described, but it's close. It's a set of configs that disable a bunch of telemetry and other unauthorized mothership connectivity and settings pushing.

https://github.com/intika/Librefox

However, Librefox is only Firefox with some configuration changes. It is not a whole new build, and it wouldn't have protected you from this problem since the problematic addon cert checking is still there.

Note that this would have happened even if the browser never communicated back home - this problem was triggered via an unwitting time bomb of sorts, not because Mozilla actively took an action that inadvertently broke something.
I'm not claiming that I know the exact numbers; I don't. But this was reported by the same news outlet:
https://www.rfa.org/english/news/uyghur/millions-08032018142...
Reitz controls the Requests project. He accepted donations through a money transfer service that disclaims any responsibility. Smith has no grounds to sue Reitz. Government authorities are unlikely to investigate an uninvolved party's concerns about a possible $30,000 fraud with no known victims in their jurisdiction.
The bug is that plugins can't be manually enable. Nobody is working to fix that.
So, Tumblr will soon become the twitter for pornstars.
Eclipse was slow and had the usual non native Java smell that all cross platform GUIs have - especially on computers back then. But even now, Eclipse is sluggish compared to Visual Studio.
I believe you are accidentally describing equanimity. Which I think it would be a much better function to optimize for than happiness, at any scale.

The article has some interesting points but I believe it lacks a reflection from the eastern point of view and a critique to capitalism as it does for socialism.

Without them the discussion seems incomplete.
The interesting part of the article comes in the 3rd paragraph. The first two paragraphs just hijack the idea with a meme.

> In the last several years, two writer friends of mine have told me the same story: Their (very savvy) editors advised them to change the age of the protagonists in their novels-in-progress, making them considerably younger; otherwise, their books wouldn’t be publishable.

The "golden years" is the first time in our lives where we are free to be ourselves. We no longer have to bend to the ideas of others to get funding. If you are a writer then self publish. You no longer has to take ideas from marketing departments who dream up book ideas. You can say what you want to say.
They'll bury it from HN front-page just by making adversarial comments, and that's the goal.
Icons of a Radical Reform
London had the largest trolley bus network in the world until about 1960 when about 2000 electric buses were replaced with diesels.
If you say what exactly is wrong, I'll update the page.
Wow, this is crazy -- I didn't realize others experience this as well.

I feel this way about many things in my life that I used to care about that now seem insignificant due to that "big picture" feeling, e.g., all of social media; but if I focus I can enjoy the "little details" when, for example, my SO shares a meme. Also accompanies is that nothing is new, everything is a repost, etc.

It's a weird new sensation for me that I'm still learning to deal with, especially with regards to enjoying previously enjoyable activities. Or do I just drop them and search for better endeavours?
why is it that when the input is (excluding all quotation marks)

"obj = {};"
the last token is ";"

but when the input is
"obj = {}"
the last token is "x;"

does "x;" mean an implicit ";"?
Ditto. The best notes are the ones you have with you.
InspIRCd v3.0.0 Released
So the studies update has hilariously enabled my essential legacy extensions while leaving my more modern WebExtensions still disabled. Way to go, Mozilla.
>You could also enable loading of unsigned extensions, that would “fix” the issue, too.

Which is impossible unless you're either running Linux or running Nightly or Developer Edition. That setting is willfully ignored in normal Mac/Windows/Android builds most people are on.
Honestly, that all sounds rather exaggerated.
I believe it's set up this way specifically to allow revocation for addons that are initially approved but later found to be malicious.
I found 5 replies mentioning it, the earliest on page 3. It's more likely it wasn't mentioned as often as it only works for the minority of the install base:

"The Nightly and Developer Edition versions of Firefox have a preference to disable signature enforcement. There are also be special unbranded versions of Release and Beta that have this preference, so that add-on developers can work on their add-ons without having to sign every build. To disable signature checks, you will need to set the xpinstall.signatures.required preference to "false"."

https://wiki.mozilla.org/Add-ons/Extension_Signing
Oh yes absolutely, and it's not the current sun, it's the 8 minutes ago sun, and the photons may have spent a lot longer getting to you maybe 10-100 thousands years bouncing around in the sun before it escapes, shoots through Space, maybe bounces again and ends it's journey flexing a molecule in your eye.

It's mind blowing to me.
And how does it become the "society" ? It starts from the individual.
Would a strong psychedelic experience not take you to a different realm of thought? I'm curious why you say it gets old fast, most psychedelics aren't habit forming.
Clearly, downstream distributors need to create a patch which causes their distributes Firefox builds to only check certificates on add-on installation (and to check revocations too, sure): it should never be possible for a browser to fail into an unsafe configuration.
OMG. "Don't trust Mozilla to install something on your machine. Click this link instead!"

Has the "privacy" community finally jumped the shark?
How do you know if it has not been changed?
This is why you always have one of your employees keep their clock 30 days in the future.

Preferably someone who doesn't go to meetings and installd updates.
Russia killed whatever plan the EU had for Ukraine. There is no way EU let's in a state where russian troops operate.
Except S3 storage isn't actually all that cheap anymore. Amazon has literally never changed the price of S3 storage over the last decade even though storage costs have plummeted over the same time period.

There are other providers out there like Digital Ocean Spaces, Wasabi, and Backblaze that offer storage solutions for much cheaper than S3 now.

Digital Ocean Spaces and Wasabi in particular actually use the Amazon S3 api for all their storage. This means you can switch over to either of those solutions without changing the programming of your app or the S3 plugins or libraries that you are currently using. The only thing you change is the base url that you make api calls to.

Backblaze has their own API, but they also offer a few additional features not offered under S3's api.
>All of which may also be true but there is simply no need.

I don't understand this logic. If all may be true, then there is absolutely a need to alert the community of a prominent member who may be damaging that very community.
> Also why it took 6 hrs to assign P1 to the bug

Because people were staying up until the wee hours of the morning working on fixing it instead of toggling priorities in Bugzilla. This was treated as a five-alarm fire.
Equating kernel design with choice of implementation is a stretch.

Also, Unix is not X11, and weren't the other ones running on top of Unices as well?
To be perfectly clear I trust Mozilla... this link is a link to code signed by Mozilla that I personally didn't even bother to audit because it was signed by Mozilla.

I just don't want to enable shield studies, because it looks to me like they haven't disabled the other shield studies while distributing this fix, and I don't want to install the other shield studies.
Some of people i know, earned money by just stealing other's people products, and they're happy about it.

Happiness is not about morality, it's about $$$ stealing. (Mean you can earn more than you can spend).

That means, in general, if you're moral to be happy, you'll in the chance of being fucked by robbers.

Fight for your safistation and goals, and you'll find happiness.
Not yet. This is in our roadmap however.
That it'd be a mistake to not use PostgreSQL.
Check out https://github.com/eugenehp/trx for Opus streaming inspiration, I've played around with their code and found it easy to work with. Opus would be great with ROC because in case of buffer over/under runs the codec provides features to mask dropouts based on previous content. This is critical when using Wi-Fi.
Graph Algorithms in JavaScript
If you can disable all my addons by having a certificate expire, you can effectively remotely disable all my addons. And that's exactly what happened. The fact that this was (presumably?) not intentional is irrelevant. The switch may not be an actual switch, but it's there nevertheless. And it shouldn't be.
That switch is ignored everywhere but dev/nightly builds and on Linux builds.
You can get 6-8x compression by running on TimescaleDB on ZFS, but compression in general is also an area where we are investing a fair amount of R&D.

Also worth noting that TimescaleDB is far more memory-efficient than other time-series databases (eg InfluxDB [1]), and for some folks the memory cost savings is significant (b/c memory cost $$$ >> disk cost $).

[1] https://blog.timescale.com/timescaledb-vs-influxdb-for-time-...
Some systems (e.g., Debian, and derived Linux distros) make an exceptional effort not to randomly change user or system settings (via debconf, and governed by Policy).

This has some limits -- it largely applies to systemwide, not user settings, user dotfiles are generally outside of scope (though are also typically unmolested), and some packages, including Firefox, manage to introduce their own configuration management schemas and misbehaviours.

But yes, the general idea that software updates do treat user and local configuration as sacrosanct is well-established, decades-old practice, in at least some parts. And goes a long way to establishing and sustaining user trust in those systems and their update processes.

Mozilla face numerous challenges, including a large multiplatform largely non-expert userbase operating in an overtly hostile environment. The whole browser extension regime is a very unsatisfactory compromise itself. There remain lessons which might be applied from Debian.
China isn't invading any Western countries and so we will take no action that could threaten our wallets. We've spoken to the Council of Wallets and they've said relations with China are excellent.
One day someone woke up and said "wow, those k cups are an environmental disaster"... I wonder if a similar thing will happen with dry erase markers. As a professor, I go through far more dry erase markers than chalk... When I am done with chalk there is just dust. Not sure if those dry things recycle, but no one I know puts them in the recycle bin.

Also, there are very, very good chalks at jetpens from Japan still being made.
Huh, doing this re-enabled my add-ons but nothing is listed under about:studies.
While I agree both of those things are repulsive - the scales do not match up. There are 3 million people in camps in china, vs about 1000 at the height of gitmo. The border camps come a little closer in raw numbers - somewhere around 0.5 millions people per year, but they are detained for short periods of time. Estimates vary but we’re talking a few days.

Scale matters. Don’t try to downplay how completely fucked up these camps are.
Most things worth learning about have a qualia-like quality where you don't understand the value of learning them until you've learned them. Travel also has this quality.

Learning languages helps you with all of the things you'd prefer doing. I don't know anyone who studies comparative (or increasingly, American) politics without knowing at least a second language and ideally more. Learning other languages helps with knowing your own, or at least it did for me. Knowing languages clearly helps with knowing cultures, and that helps with socializing -- it's amazing what an ice breaker even, like, two weeks of training in a language is when you meet someone who speaks it. I've found multilingual fluency has helped me with coding as well.

Most immersion during language learning is essentially passive. Instead of reading the news or watching TV in your native language, do it in the language you're learning. Very little additional investment, huge reward.
Moving the engine backwards or forwards along its thrust line does not cause changes in its moment around the plane's center of gravity.

The pitchup is caused by aerodynamic forces on the engine at high angle of attack.
I know Firefox isn't being malicious, but ugh, this seems like the worst possible PR move for this, optics wise. "Hey so uh, we accidentally broke your browser, so you need to opt-in to becoming a guinney pig. But don't worry! You probably were already opted in anyway and just didn't realize it! Also it might take six hours to work."
keep in mind the retail cost of fuel is massively subsidized ... after you factor in global military budget spent subjugating oil rich countries, say nothing about the hit western global big oil would take if those same countries nationalized their own oil ... everytime people step on that pedal they must be reminded of the implications
Another workaround if you don't want to enable "studies" is to manually re-load the add-ons in Debug Mode. I don't know the full consequences of this, but Firefox seems to be behaving normally having done it.

Go to about:debugging from the address bar. Right at the top is a button to "Load Temporary Add-on", with a checkbox "Enable add-on debugging". (On a Mac, the add-ons are in ~/Library/Application Support/Firefox/Profiles/«ID».default/extensions (assuming that you have only a single profile).)
They should stay enabled until Firefox relaunches.
This unit modifier was specified under RFC 69420
See my other comment, or https://en.wikipedia.org/wiki/Row_hammer#Mitigation

Edit: As gcb0 mentions, these may be theoretical only: https://news.ycombinator.com/item?id=19828147
>She didn't complete the full course, but has around 100-150 days of lessons

"Did wet streets cause rain or did rain cause wet streets" Did 100 lessons of treatment (duolingo) cause her to become proficient in English or are children with a natural proficiency towards language the ones that survive the treatment?

If only the strongest people survive having their blood drawn by leeches, it doesn't mean that leeches make you strong. Despite there being a high correlation in treatment outcome.
I'm also interested in the postmortem to explain the processes that failed to allow the certificate to expire, but let's not overdramatize the situation by nitpicking about filling in form fields on bugzilla. The fact that the tree was closed is equivalent to DEFCON-1, which is all the priority anyone needs to understand the severity of this bug.
They were effectively remotely disabled, there was a hidden dead-mans handle that's been triggered in order to effect the result; but it's logically equivalent from an end user perspective -- an external agency caused my add-ons to be disabled without my authorisation.

"A certificate chain has expired, do you want to disable all add-ons?"

How hard is that?
Sadly, this removed my settings for multi-account containers extension :(
What's the difference to the user between "to check revocations too, sure" and what happened?
Spying was the wrong word. But yes, the telemetry. The google analytics that are hidden on the extensions page, that only listen to the Do not track, but not the turn off telemetry checkbox. Sadly it just doesn't seem to stop.
Cloudflare Firewall Rules to Protect WordPress
For anybody who thinks this type of thing is "just asthma," it may help to remember that there's strong and growing evidence that air pollution has all kinds of health effects on everybody.

For example: "Our findings add to the growing body of evidence that air pollution may play a role in autism, as well as in other neurodevelopmental disorders." [1]

1 - https://en.wikipedia.org/wiki/Air_pollution#Health_effects
When a certificate is no longer valid, the authority it represents expires too. Grandfathering trust in various places would make cert management even more difficult to get right, because there'd be no hard deadline when a certificate is no longer in force.
https://coincircle.com/l/fzxDSBPmP6
https://coincircle.com/l/Q6LtdZDEe4
https://coincircle.com/l/sfX5us6vcQ
https://coincircle.com/l/HTgyczkpcY
https://coincircle.com/l/UFQeBdGEjS
https://coincircle.com/l/dhrwz0hfv9
https://coincircle.com/l/SNHAky12MH
> partnered with my employer

What a great idea! More companies should encourage employees to work on creative projects, and partner up on promising products.
Watch This “Police Robot” Pull a Car Over
So you are saying there should be no way for an installed addon to fail an integrity check?
FWIW I use the %debug magic command in Jupyter and it has been a great experience. I'm pretty ignorant of the enterprise debugging tools so take that with a grain of salt.
On “Irrationality: A History of the Dark Side of Reason”
Color me confused, but isn't this flood fill? https://en.wikipedia.org/wiki/Flood_fill
The U.S. says lots of things, especially about its rivals or targets. Meanwhile, literal, verified concentration camps exist on the US-Mexico border.
This is bad design. Installed software shouldn't just stop working because the clock ticked.

(And yes, I know browsers should stay up to date etc. etc., but come on, no software should just stop functioning because of a calendar)

And to the downvoters: doesn't this entire fiasco ENTIRELY PROVE MY POINT?
Some Muslim groups do similar stuff to minorities as well. It's all evil.
Object Oriented Wrapper of GitHub API
I'm new to this area of work, but has anyone stepped back and thought: "this is not the right way to build eBPF programs"? Would it be better to create a new high-level language and toolset? All this voodoo hackery to try to trick a C compiler into making eBPF-compatible code feels unsustainable.
> Maybe the author meant that having children don't make people happy (which may or may not be the case); but it's not what he said.

The author at least strongly implied it by "if the only reason for one to do X was if it made one happy, a lot fewer would do X".
You might be able to speak colloquial phrases, but you will not be able to write correctly. For example, perhaps you will be able to order food from a restaurant, or say hello to a stranger.
Do activities stop being enjoyable? I suppose in a way, but normally I still get something out of having a little slice. I won't be immersing myself in another MMO like WoW though. The grind is in fact a grind that needs to be seen in a larger perspective.
Seeking 20 hours of work on a contract basis. Software maintenance or working on a variety of areas is where I perform best.

Location: Remote (USA citizen, currently in Latin America)

Remote: Yes

Willing to relocate: Not immediately.

Technologies: Elixir, C#, JavaScript, SQL.

Résumé/CV: https://docs.google.com/document/d/1CZRNjWzXHjEozyOp90JKLiWh2eyoGlviQnQ54iWmTA4/

Email: jon.hackernews@outlook.com

Hi, I'm Jonathan. I am currently living in Latin America (working remotely and learning Spanish). I've worked in a variety of roles with multiple platforms and technologies. If you're in need of someone to jump into problems without distracting your team from work, I could help.
The irony of people using fast Internet (often on a fast mobile network), using fast computers, on sites like HN/FB/Twitter, etc, typically with a full belly and in an air conditioned room, to speak about the evils of the capitalistic spirit, always amuses me.
At the end of Sept 2020.
No, I totally agree with that (I just edited to expand on this point). It was a bad user experience.
That's not reflected by the historical record of the U.K.'s post war pioneering computers, which I provided just one link to.

Per Wikipedia Tommy Flowers couldn't get a bank loan because he couldn't cite his cryptoanalysis machines as proof he could do what he claimed he could do. "False concerns of military secrecy" when we were in an existential cold war with international socialism? That put so much of Europe under Soviet occupation?

Or the cited severe lack of funding mechanisms and other things necessary for commercial success, going all the way to the concept of doing stuff outside the aegis of the government which included the public University of Manchester? The latter could and did make numerous record breaking computers, going at least as far as the early 1960s Atlas, a competitive microsecond cycle supercomputer that was the first to page. But this didn't translate into commercial success.
I am Bulgarian and I fall into the same camp. English is the only foreign language I'm striving to learn and improve as I'm considering it a window to the world for knowledge. It gives me access to a vast amount of information which simply isn't available in a language spoken by around 9 million people.

Many of my acquaintances are into German, Russian or French, but I do not consider it an asset unless I'll be relocating to these countries.
If people can see it externally it definitely has an effect, "oh moz aren't taking this browser breaking bug seriously". Which is probably why the parent said it's a management issue rather than a directly technical one, per se.
Samsung Galaxy Watch Active vs. Gear S3 Frontier vs. S3 Classic Compared
You could say it was remotely disabled by design. What other piece of software randomly just breaks because of the calendar date? I can boot up almost any 20 year old piece of Windows software and it'll work fine, it might not make sense in the current world but it won't go "2019? Fuck off!"
What?! How?! Why?!

This is the greatest thing ever.
I wish I could just write code for the fun of it. Every time I wonder whether people will use it and give up before I even get started.
I like Unsplash. They and Pixabay are what I use for apps I have developed in the past.

But simply, this floors me. I looked at their costs and with some developer muscle, you could find savings such as:

- Move Fastly to Cloudflare. They don't expressly say what the cost is for that. But moving to CF would eliminate it.

- Move Heroku to Digital Ocean. It's not difficult to create a fully redundant solution.

- Move from Imgix to having Golang micro services which handle the resizing of images and use something like Belugacdn for the CDN. Beluga is $5k a month for a PB. (Or some other cheaper CDN if you don't like Beluga, but damn... imgix pricing)

I'm pretty sure that a savvy CTO could save at least $50k a month with a well designed project that does this over many months and achieves the same result and keeps the redundancy concerns for the small team.

I do realise however, why the team have done this. In the same position (with very few resources) I would probably have done the same. But damn, when a cost of a service gets up to a years salary ($120k) for a good developer. Time to seek alternatives.