skysight-inc/HackerNews huggingface dataset:
Soon, we’ll have a new crime called “bit smuggling” and it will involve buying a light switch fixture from the hardware store, and flipping it to the wrong on/off position, and then putting it in your pocket, and trying to cross an international border with it in that position.
I have it set up so that the tab bar is only displayed if the menu bar is visible, and I can use the Alt key to toggle them together.

https://github.com/eoger/tabcenter-redux/wiki/Custom-CSS-Twe...

#toolbar-menubar[inactive="true"] + #TabsToolbar {
visibility: collapse !important;
}
> deregulation has been common across presidencies for 30 years

I think by any objective measure the US has seen an explosive growth in regulation the last 30 years.

I really wish I had an objective measure around to demonstrate this with...
Welcome to Michigan. Or anywhere else that uses road salt.

Newer vehicles are a lot better, but cars age quite a lot faster with salted roads.
The headline is incorrect. The Guardian recorded positive EBITDA, but did not record positive Operating Profit (almost universally used to refer to EBIT).

The original source[0] seems to deliberately conflate the two measures: "GNM has achieved its break even goal delivering an operating profit at EBITDA level of £0.8 million"

The BBC article then parroted the 'operating profit' part, leaving out the 'at EBITDA level' qualifier, thus turning a slightly misleading statement into a factually incorrect one.

[0] https://www.theguardian.com/p/bcd4a
Sometimes there will be a movie or TV program where nobody is subbed, except the one person with a completely understandable foreign accent. That is a phenomenon I have seen. Usually in media for an American audience, from what I've seen. (A lot of Americans have trouble even with native speakers from the UK, Ireland, Australia, New Zealand, etc. We as a nation seem to have very little patience or habituation for accents.)

It's the broadcast equivalent of your first scenario.
protecting 99.999% of the users

It is horribly paternalistic to advocate for keeping users ignorant, unlearning, and --- dare I say it --- easily manipulated.

I will refrain from mentioning again that infamous Franklin quote. I am frankly very fucking pissed off by this authoritarian walled-garden trend, and vehemently oppose anyone who helps this industry put the nooses around the necks of others as well as their own.
DAMN! That's quite something!

For a piece of open source software you really have very little control with firefox. It really sucks that the alternatives are worse.

This, likely for almost all of their users, creates more of a security problem than signature checking actually solves. For me noscript no longer works which is (IMO) a critically important extension (between mozilla taking away the disable javascript button and spector.)
This is a good product. Would love to use this on my other projects.
AWS in general are not fans of Anycast. Interesting thread from one of their principal engineers on the topic.

https://twitter.com/colmmacc/status/1067265693681311744

Google Cloud took a different approach based on their existing GFE infrastructure. It does not really seem to have worked out, there have been a couple of global outages due to bad changes to this single point of failure, and they introduced a cheaper networking tier that is more like AWS.
It's a bumper-sticker catch phrase, and like everything that can fit on a bumper sticker it lacks nuance and value, ie it is sloganeering bullshit for the tech set.

Best to ignore it.
GCC extensions in particular tend to support multiple spellings of the same keyword with different numbers of underscores, which usually do exactly the same thing. For example, you can write asm, __asm, or __asm__; typeof, __typeof, or __typeof__; __attribute or __attribute__; etc. The versions with no underscores only with with a setting of -std that includes GNU extensions, while the versions with underscores always work (because names starting with underscores are reserved by the spec).

Even alignof has __alignof and __alignof__ as two spellings of the GNU variant. But unlike with typeof, for whatever reason, plain "alignof" was never supported in C as a GNU extension; it only ever worked in C++ mode, as a standard feature from C++11. That makes it slightly less weird to create a difference. But only slightly; I'm more familiar with GCC esoterica than most people and I had no idea "alignof" was C++-exclusive until I looked it up.
All three of my devices on three different operating systems still have their add-ons (for now), so it's definitely not universal.
Would this just be like using RocksDB or something like that with extensions to auto-shard and balance between instances? That's what it looks like to me, but I could be misunderstanding it.
> Pay off every world power hard up for money that comes along?

I have not proposed any such thing. Being willing to pay money for a specific valuable objective--independence for the American Colonies, freedom for the slaves of the American South--is not at all the same as being willing to pay money to anyone who comes along and asks for it.

> You can try paying off bullies

So you think the British were bullying the American Colonies? You think the South was bullying the North before the Civil War? On what basis?

If you look at the historical record, you will see that, if anything, it was the Colonies bullying the British until the British got fed up, and the Northern abolitionists bullying the South until the South got fed up.

> You're being a bit naive man.

No, I'm simply taking to its logical conclusion a premise that seems obvious to me: that paying for something with money, if you can, is better than paying for it with human lives.
Society in the United States is in no way reliant on that platform. If it were, then we would be in agreement.

If we're talking about internet providers, that's a different issue, since they are a user's conduit to the entire web. Those absolutely should not be able to choose which accounts to favor.
Can someone explain exactly what went wrong? I don't think I quite understand, but 7/9 of my extensions have been disabled.
I have to assume you are doing some kind of very strict resume screening or your application form is behind a puzzle or something - I 100% guarantee if you post your job broadly and interview everyone who applies you will have a very bad fizz buzz rate (and probably go insane), and I believe that if you do filter but try to keep an open mind to non-traditional backgrounds you will have a pretty significant fizz buzz fail rate. (I too oversee the screening of hundreds of candidates out of thousands of applicants.)
"...how does an organization ensure the task still gets done?"

With something almost stupidly simple and low-tech: checklists.

(I'm reading "The Checklist Manifesto" right now, and the points it makes seem to fit perfectly with everything you mention.)
Imagine the auto ML built into Excel. Now that would be awesome.
Same problem here all my extensions now are gone. I just encountered that issue early in this morning. Tried to find a solution on how to fixed it in the internet but issue stil there i format also my laptop but nothings happen. FF should make a move about this problem they will lost a lot of customers about this one.
The ADA grants rights to disabled people. If accessibility made pure economic sense, the ADA wouldn't need to exist in the first place. Lyft enjoys a profit by being allowed to operate on public roads, serving hundreds of millions of able-bodied people. The state grants Lyft that privilege under condition that they comply with the law, and ensure ADA accomodations for a small minority of disabled people.

Rights are a question of whether a trade-off is worth it. A small loss center is worth the major improvement in life for disabled people, which is why Congress mandated the law.
I live in Iowa. No stranger to road salt.
The UI is good and more appealing to make me use this app. Overall it's a good product. Will try it out while working out.
Your upstream needs to be able to handle 100% of the load, which could be several orders of magnitude more traffic than it normally has to handle. Handling that huge spike in traffic for, what might not be more than a few minutes a year, can be insanely expensive.

Also, you're potentially giving users a noticeably worse experience as you rebuild the cache.
Nobody is going to stop you from eating these guys

https://en.wikipedia.org/wiki/Psilocybe_semilanceata

If you only want to microdose.

You might do better off eating a morning glory seed, however.
Good news! The privacy policy is specifically listed in our FAQ on our website

Unfortunately, if you go down that rabbit hole (which we did before) it follows various redirect links and ends up at https://privacy.microsoft.com/en-us/privacystatement, which is a generic document that changes frequently and includes by reference ambiguous additional product-specific documents that may or may not exist.

What you need here is an absolutely clear, unambiguous statement to the effect that you will never under any circumstances upload our source code or other proprietary data to any external system without our explicit opt-in. It's really that simple. Otherwise, I'm afraid those of us working under commercial confidentiality agreements or other legal controls are just going to run away.

Again, to reiterate, we would never collect data if you didn't consent. It's the law!

Perhaps you could explain to me how to turn off the telemetry in Windows 10 then? Or for that matter how consent was obtained for the telemetry that was silently added to earlier Windows versions after release by anyone who installed Microsoft's recommended updates?

I appreciate that your personal intentions may be honest and good here, but the simple fact is that your organisation has a very clear, very bad track record at this in recent years, and its senior leadership has not only been entirely unretentant about that policy despite widespread criticism but actively doubled down on it. Anything Microsoft does will naturally be contaminated by that history now, unless as a minimum it makes a clear, legally actionable statement and/or imposes verifiable technical measures to guarantee different behaviour.
They have acknowledged the defect and are working on a fix. While this is a severe impact, I am still with Firefox. The are enough alternative browsers to tide over the problem for now. The fact that alternatives exist is the reason why we should support projects like Firefox.
Adobe Double Price for Its Cheapest Software Plan
It is only solvable by architectural changes external to the CPU. Even at 40Gbps, which we live with now, that's 20 ns per packet, or 80 ns at a pokey 10Gbps, certainly not enough time to do a system call per packet.

So you need the hardware to divvy traffic up to multiple queues -- rings, really -- and a core for each ring. The packets just show up in memory, and the cores had just better keep up. If that looks to you like the same old POSIX architecture, I don't know what to say.

It was around 2010 that the network pipes got faster than the SAN file servers, and suddenly file output capacity had to be incorporated into network flow control.
I'm generally not a fan of firing people for making mistakes. This one is so monumental it may require it though. This breaks most FF installations.
I was with you up until you said someone should be fired.

The fundamental problem here is the system (code signing.) It's a political thing with security being the excuse. They want control of a platform for business reasons.
I’ve been in software development and operations for 25 years.

I still don’t want to have to understand everything I ever touch, even if I could.
Because in GCC's confusing versioning scheme [1], "GCC 9.0" was never a stable release; that version number was used exclusively for development builds. So GCC 9.1 is the first GCC 9 worth packaging, and it just came out. (And by the time of my comment, the Docker page you linked has already been updated to mention it.)

[1] https://gcc.gnu.org/develop.html
Other users have already answered this, but I have a question: what made you think we haven't?

(I often link to earlier discussions from comments in the threads, but that is purely to satisfy the curiosity of those curious to look at them.)
It’s at least somewhat related, all else being equal...
Use-Phoenix-Channel: A React Hook for Phoenix Channels
Yeah, putting programs in commit messages isn't too impressive.

I expected something like ‘git commands turn out to be Turing-complete.’
Have you set up a bot that copy-pastes this every time 'PDF' is a substring of a post's title? Seriously, stop spamming.
He also put the equivalent of a scientific hit out on Shechtman for quasicrystals
Come on, people make mistakes. Things fall through cracks. Shit happens, etc.

No one needs to be fired for a single instance of a particular mistake. If this happened multiple times, then I would be on board with firing someone.
> Still, this type of oversight seems all too common even in large companies. (...) Has anyone developed a tool designed specifically to avoid certificate expiry disasters?

LetsEncrypt renewal is supposed to be automated. [1]

I know of a company that hosted blogs for thousands of customers. They used LetsEncrypt, but the CTO considered automatic renewals a possible security risk, so they did it manually. Problem is, the expiration happened in a weekend and they "forgot" to update the certificates before that. Suffice to say that the next Monday wasn't pleasant. They automated after that.

[1] https://letsencrypt.org/about/
By the way, I can see a massive adoption of this in consulting. Often we develop ‘quick and dirty’ model to test variables or do a high level regression / predictive model. Having this without the need for Python code is extremely useful, especially when you work in short term, high burn projects and just need an 80/20 answer.
"I think the parent's point is that for a lot of people, especially those outside of SV, $20/h is more than a token payment."

In the Tri-State Area (AK/TN/MS), many people will say $20/hr is a great wage. Companies down here try to pay people minimum wage as much as possible. As close to it as possible anyway. We also have a low-enough cost of living that the ripoff isn't as obvious for skilled labor. They're ahead of most people they encounter even at $15/hr. Especially if it's steady work with benefits.

"but if we think to happiness instead of just money - it could well enable someone to make a living doing something that makes them happy."

Another great point. Some businesses even optimize for this.
I experienced this and I am looking for someone to punish.
I'm not understanding the relationship. Of course users aren't going to understand all the underpinnings of how software works.

I do think that in the future, it will be imperative for everyone to have some level of technological literacy above what is currently the average. And I'd like to work to get to that point, instead of taking all the tools away because they're too dangerous.

Also, sensible defaults are good! Hiding dangerous settings is also good! What's not okay is making those settings completely unavailable. At least in Firefox's case you have the option to recompile the source code, but that should not be the only recourse...
adblocker seemed stop working, no idea why, anyone know how to fix them or just wait?!
I haven't used any recent versions for obvious reasons but the interface was horrific and it had all kinds of odd connection issues.

I was only using it to help someone who couldn't work out how to do something really basic, just get music from their PC to their phone or whatever.

It felt to me like Apple was deliberately making things overly difficult to force less-patient people into their ecosystem of paying for songs on every device separately and not downloading drm-free mp3s that you actually own. This was a long time ago.

I was left thinking that there's no way a billion-dollar company could put out something this unintuitive and shitty unless they had an ulterior motive.

I forget the details but it was super painful and I will lead a happier life if I never have to deal with it again.
But it's easy to override broken https certificates. Worst case you have trust on first contact style security.

This is just plain bad.
Yes and I am looking for someone to blame and punish.
You didn't answer my question. What does firing achieve? You fire a person who learnt their lesson and will never make the mistake again? And then hire someone new?

Or you fire the scapegoat because of a broken system that allowed one person to make a mistake?
> Sure it will. It will help cause more bad policies to happen, at the margin.

Very unreliably. You will only be able to influence policies that are nearly 50/50, but if they are 50/50, that is because there is widespread disagreement over which option is better. This means there is a fairly high chance that your "sabotage" vote ironically results in better policy. Think about it: the issue is 50/50, and you have the decisive vote. Half of the voters are wrong. What do you think the odds are that you're in the half that knows what it's doing?

My analysis is that odds that the average saboteur would vote for a bad policy ought to be roughly proportional to the proportion of honest voters that pick the good policy. Unfortunately, these odds are a toss-up when the saboteur's influence is maximized.

> Why do that, when we can just sabotage things?

To get results. Your gripes are understandable enough not to be dismissed, and if you can make a credible threat of sabotage, you may be able to cause a reform and perhaps get your freedom back before the end of the term. Sabotage can be a valid tactic to get what you want, especially if you're in desperate straits, but I don't see how your stunts are supposed to achieve anything at all, let alone anything that cannot be achieved more efficiently through collaboration.

> You don't get to force me into this, and complain when I fight back.

Was I actually complaining, though? When I say your behavior in this situation would be sociopathic, I mean it as a statement of fact. Notice that I followed the remark with "that's part of the risk in the system," clearly indicating that I am willing to eat that loss. I'm not complaining. I'm accounting. (Also, I genuinely think you would be working against your own interests.)

> People do not have to react the way that you want them to, or that you find fair.

I know many people won't react the way I want them to. I know some people will act like sociopaths. This is a variable to quantify: if enough people would turn into madmen if they were forced to do this, well, that invalidates conscription, and it's back to the drawing board. Likewise, if a large number of people think my system is immoral, okay, sure, let's do something else.

I mean, I'm not married to the specifics: I think it is important to make sure that the sample is statistically unbiased, and conscription is the easiest way to do this, but if we can get close enough on a voluntary basis, hey, that's even better.

I do maintain that your reaction would be disproportionate and ultimately immoral. Again, though, I'm not complaining about it, because that would be pointless: you do you. But I'm taking note of it so that I can account for the seriousness of the threat.

Edit: And if the threat is serious enough, you win, really. I would oppose conscription and you wouldn't have to sabotage anything (well, if I had my way). Just want you to know I am listening, even if I disapprove of your behavior.
Lol, the liar is blocking people who call out his total fabrication.

Had someone told me I needed to pay $3100 to be an iPhone developer, I'd never have published my first app and wouldn't be a senior mobile dev today.

Steve Jobs was a billionaire that exploited his workers to enrich himself and a bunch of do-nothing shareholders.

But software can better the world, and making people believe they can't afford to start coding is seriously horrible.
I could say all the same things about text files or JPGs.

PDF is not the "lowest common denominator".

That would be the format that can be most easily converted to other formats.

With text and images, I can easily create PDFs and documents in myriad other formats.

Alas, PDFs do not convert as easily to other formats. To this day, no one has a PDF-to-text converter that is 100% reliable in preserving the proper line lengths. Not even a company with Google's resources.
I think not all mozilla users are having this kind of problem right now.I tried to install add-ons on my other laptop and made it. So i guess some users only are infected by this issue
This almost turned me into raging monster. How dare you mozilla disabling adblock? now i want an UNSEE function :D
You can find lots of programs like this one to monitor certs:

https://pypi.org/project/check-tls-certs/

I run one daily from cron and have it email me a report with the days to expiration for the certs I’m responsible for, even for certs that auto renew. I don’t filter the email. Daily is not too frequent for it to go to my inbox, but frequent enough that I’ll notice if it doesn’t mail me. YMMV.
He did pay nice respects to Solomon Golomb (whose death anniversary was two days ago) so I’ll give him that.

https://blog.stephenwolfram.com/2016/05/solomon-golomb-19322...
Thank you!

Saved me tons of ultimately pointless thrashing.
Because it's hard to tell the difference between "users" and "malicious software running on their computers".
What is a better browser I can use instead???
Solomon Golomb and linear-feedback shift register sequences
I'm a bit confused.

I thought that the way signing works in general is that the signer issues a certificate for the thing being signed (domain, code, whatever) that contains identifying information for the thing signed (host name for an SSL certificate, checksum of the code for a code signing certificate), the valid from and valid to dates of that certificate, and assorted other information, and either a reference to or a copy of the signer's certificate, and it signs the whole issued certificate with the signer's certificate.

Someone checking the signed thing is supposed to consider it validly signed if:

1. The date is in the valid range for the signed thing's certificate,

2. A check of the signature of that certificate against the signing certificate passes,

3. The signing certificate is recognized as being from an issuer considered trusted by the checker,

4. Neither the signed thing's certificate nor the signing certificate have been revoked, and

5. The signing took place during the valid date range of the signing certificate.

Note there is no "the date of the check is in the valid date range of the signing certificate". A signing certificate expiring should not invalidate things signed by it. It should just prevent signing anything else with it.

So why is a signing certificate expiring for Firefox breaking already signed extensions? Shouldn't it just be stopping new versions of extensions from being signed?
"don't run privileged code from people you don't trust." Is both critically important to understand for anyone using a network connected computer and not at all complicated.

If we're going to be authoritarian I would rather ban anyone who doesn't understand that from connecting to the internet then have a broken walled garden.
The “bad grandpas” and the last great British heist
> fall madly in love!

And he took that advice with a ferocious passion that not even Feynman could have foreseen. Stephen Wolfram is madly in love with Stephen Wolfram!
First ever AAA FPS game to be ported to the web (Not using streaming)
The guidelines state that I'm not allowed to post unkind comments. These people deserve harsh criticism, therefore I am happy to break that guideline.