skysight-inc/HackerNews huggingface dataset:
This list seems incredible helpful. As a security-conscientious CTO, one of the challenges I faced was determining how much we should be doing now (during YC and while raising our seed round) versus pushing down the line. For example, we obviously should be monitoring outdated and insecure dependencies from the outset, but when is the right time to switch our servers and external tools to centralized account management, or to pay for an external pen test.

Now, I would probably move the external pen test up to seed if the company is well-funded (e.g. post demo day) and holding PHI. But that’s personal preference and my security paranoia talking. Overall I think this list really gets it right.

I also liked seeing a recommendation against sharing your WiFi network in the seed stage. Network segmentation to separate your computers and IoT devices, printers, etc. should probably appear somewhere in series A/B.
Unfortunately I suspect the Chinese -- coming from a culture with one party and zero dissent -- take all the anti-Trump rhetoric in the American media as a sign of weakness, and this emboldens them to drag out a trade war that they have no hope of winning.
wait, they bought the company with the pattent? that's exactly what american capitalism is about!

apple bought fingerworks(?) and sat on top of their patents, refusing all license requests, until 20(?) years later they started working on the iphone. How exactly is the chinese abuse of patents any different?

you can't cry for solowheel without also cursing apple for the death of palm pilot and all other portables before the iphone (not to mention the awesome keyboard+touchpad fingerworks was delivering the months apple shut them down)
> The classic liberal position was also to support the rights of Nazis to march down a Jewish neighboorhood.

Well then!
What are the advantages over the pair just sharing a tmux session?
And how does the user then get their relinked app onto their phone?

(There are plenty of App Store apps with LGPL code in them. The question is, should they be there? And VLC is not a good example, since presumably, I don't know - but I think all of it is LGPL or in any case, open source. The user can rebuild all of VLC in that example. The situation with Boden is going to be that a an app, probably proprietary, has a Boden library in it.)
they don't let you run in browser contexts normally but they definitely let you set your own new tab page(with webextension privileges) as part of the extension which lets an extension do whatever they want.

see: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...

they also have most requested urls as a privilege too so it could be recreated and extended with a little effort.
FWIW, our Workers product is pretty good at allowing you to define custom caching rules. We have a section in the Workers docs specifically focused on the Cache API: https://developers.cloudflare.com/workers/reference/cache-ap...

If that doesn’t help you build what you’re looking for, happy to chat via email and hear more about what you need: kristian@cloudflare
It’s probably wise not to encourage interstate advertising fraud that the FBI might decide to investigate and arrest you for knowingly participating in.

https://www.fastcompany.com/90273549/fbi-and-google-take-dow...
I’ve cut off all family and friends for a long period of time now, and discontinued my career/work after finally reaching a cynical point of no return a few years ago. My only interactions at this point are with food service workers at the store or coffee shop, or other shopping/errands. Perhaps this is a variant of Hikikomori. In fact, the characteristics of one for me are essentially spot on, except that I’m more of a shut-out (in public alone often).

I’ve given away my retirement and am preparing for suicide. I’m not in search of advice nor assistance regarding my situation. I smile in public, but inside I’m meditating in preparation for the unknown void of the afterlife. There are almost certainly many others like me.

For a long time, I wondered if it were possible for people to treat each other better and whether that would have changed anything for me. The reality is that I was unequipped to build a healthy place in society because I decided a long time ago that I hated being alive and hated people. It’s my own shortcoming, and suicide is a valid way to remove a weak seed from the gene pool, if not controversial or taboo in Western society. My understanding is that it’s not as frowned upon in Japan but not sure if that is still the case.
Danny DeVito upsets The Boss in Asbury Park! Did not see that one coming. Any other notable upsets?
Apple bought SiByte who were a lot of ex-DEC VLSI design engineers.

So, "Apple" designing a CPU is technically correct, but its a design team from elsewhere.
I've seen Hadoop and HDFS dying off, and being replaced by Spark, S3, and Azure Storage. There is also a lot of good work being done by DataBricks in creating an easy to manage spark platform.
Over a ten year period, terrorism still wouldn't justify it's ~35% share of the press stories. As it is that rare.
If you’re switching to full time use or Firefox, I cannot recommend going with Nightly; developer edition is a good choice.
Really? We didn't publish it in the store (iirc)... As a pwa it should offer an install though.
Flipboard: Notice of Security Incident
How do braille displays deal with pages containing these unicode characters? Could something along these lines offer a way to make diagrams accessible to blind users? (a few lines at a time, anyway...)
> cellular radios where the only (working) ones seem to be made by Qualcomm.

Seems strange, given that plenty of manufacturers are making the radios on the other side of the cellular connection. Can't, say, Ericsson take the radios in their cell towers or picocells, redo their tape-outs for phone scale, and end up with a workable mobile radio?
Yeah reading what some people say online, it sounds like in some countries programming is seen as more like grunt work or the same as IT work. Whereas America really glorifies the hacker/startup mentality, for example in stuff like The Social Network or HBO’s Silicon Valley.
NoScript is likely a valuable fingerprinting indicator, given that the vast majority of browsers have JavaScript enabled but you don’t.
At least 8 characters, upper and lower, numbers and symbols... that advice is from the 70s [1]

[1] - https://security.stackexchange.com/questions/33470/what-tech...
Canada Uses Civil Anti-Spam Law in Bid to Fine Malware Purveyors
Another suggestion: why link the GitHub profile on the homepage if there aren't any public repos.
> Isn't that entirely your responsibility?

You can argue that, but as I said, that would require everyone to be a lawyer in order to properly analyze and understand those agreements. I think that's an unreasonable expectation.

What I wish were different is three things:

1) That I am clearly and correctly informed what would happen to my data if I agree (and that those terms will not change without me being clearly and correctly informed of the change before it happens and my consent being obtained again).

2) That I have to explicitly consent rather than having consent "implied" by, for instance, just beginning to use a service. And if the data is going to be used or handled by an entity other than the one I'm directly dealing with, that entity also has to get my explicit consent.

3) That no data is collected about me in the absence of my overt consent.

To be honest, it's #3 that angers me the most. My data is constantly being collected without my consent merely by doing things like going to a web site, or playing a game, or that companies like Facebook and Google get data about me when I buy something in a physical store using a credit/debit card.
I agree that a universal canvas fingerprint is better in principle, but practically who is going to write a script to search for all visitors who only differ by their canvas fingerprint and then identify them as one browser because the fingerprints are non-standard?
Of course no script increases the entropy. Most people don't run NoScript, so you are more identifiable when you run it.
If a person wants to test a website using several accounts in Chrome, they need to open and manage several windows. Lame.

If a person wants to access an ad-ridden website using several accounts in Chrome, they need to install, configure and maintain all of their favorite ad-blockers and anti-tracking extensions in several Chrome profiles. Lame.

In my experience, people who prefer profiles over containers are mostly casual users who don't configure profiles and use maybe one or two extensions.
Yup, I tried the context aware history for couple of days and it got annoying pretty fast. I have everything in one file which I can just FZF reverse search and bam. No need for infinite up arrows.
how does a 2 year old reach the brake pedal while shifting the car into gear?
Well if HN users do want to try to lessen that percentage here's the donation page: https://donate.mozilla.org/
Congrats on launching!

Some questions that perhaps could be clarified on the landing page:

How does it work? Is it screen sharing or more like VS Code Live? Does it work with all editors? What’s the edge over other standard screen sharing solutions?

And maybe it’s just me, but I think I use the term “pair programming” or something much more than just “pairing” (but perhaps that’s because the direct translation of pairing in Swedish essentially means mating)
You can license the primary CPU cores from ARM. There is no equivalent in the modem space (that I'm aware of).
I write in all kinds of languages.

Just because Wordpress generates it, doesn't make it a best practice. Do you think Wordpress websites are the best? It's definitely not the most popular language:

https://github.com/emmanuel-keller/github-language-statistic...

https://www.tiobe.com/tiobe-index

https://redmonk.com/sogrady/2019/03/20/language-rankings-1-1...

PHP is falling because it has major issues. It has poor idioms and is slow. It is trending down, not up.
Uber posts $1bn loss weeks after stock market listing
DevTools PM here. I did write about improved source maps in Firefox a few weeks ago on hacks (https://hacks.mozilla.org/2019/05/faster-smarter-javascript-...). Hope devs try it out again, as tools evolve and improve fast.
Why Show HN while in closed beta?
It would be prudent to advertise this expectation of the app developer hoping to use the LGPL version. (Whereas with for instance the MPL and other licenses, no such need exists.)
I think when it comes to superlatives and this particular author, he hit somewhere very close to the theoretical maximum a while back and it's still public and helpfully labeled.

https://dcurt.is/the-best

Although if someone has invented a mouthfeelier fork in the meantime and Curtis has written about it, I'd like to read that piece as well.
True, but today you also can hire a lookalike to some target person and record footage of them doing something terrible, or edit footage carefully enough that the edit cannot be detected.

Deepfake makes it less expensive to create fake video of someone, special signing cameras could make it expensive again in the face of that.
Discussed at the time: https://news.ycombinator.com/item?id=13850733
I've been using Firefox since 2005. When Chrome came out, I tried it, said "ok," and kept using Firefox.
Did they really 'strangle the company'?

Blackberry had a meteroic rise and they collapsed because of iPhone and (later) Android.
They arrested people for making money by generating fake clicks on their own site. AdNauseam isn't ad fraud any more than running a web crawler bot is ad fraud.
What does "redo their tape-outs for phone scale" mean exactly? Can Intel redo their tape-outs to make a Xeon work in a phone?

I suspect those high-power radios are not doing the majority of the RF in silicon.
So far it is a bad PR from America. Imagine some Chinese said :

“Your world is mine, my China is mine.

I can protect my market and none of you can access unless I approve it. Many don’t. Google, movie, ... security you know. But thous should not. you should not use security argument.

Or legal ... Try to sue government in court ... we are now in USA court but thou should not.

We have law on paper all Chinese are our spy. You should not.

You should free trade and you should not use national security or tariff like us.

As your song said Imagine there is no country ... I would not buy you should.

...”

Can we just use one yardstick. And not just make China great again.

Btw have time read about hk extradition law.
>there's no debate about that right?

Sure there is. Mozilla depends heavily on revenue from Google whereas Apple doesn't. For Mozilla it's life or death and for Apple it's not (to be the default search engine).

There isn't a single tech company where the business incentives are more aligned with privacy than Apple.
Correct, China would prefer to continue to not live up to its commitments for 20 more years.
>I don't have a smart phone (haven't felt like I needed one).

super off-topic but my phone and desktop both only have 4 gb of RAM. the phone seems to say "all right boys and girls we got 4 GB here let's try and make it work. Let's dust off these O() notations etc". meanwhile my mehsktop is like come on you're not really going to open another tab" and rolls it eyes at me, makes me feel like I should come back when I have 4 Tb of RAM and a 64-core monster. Right now I have 8 tabs open on my desktop and I feel like I need to be closing some. seeing the ;) sign instead of the tab count on mobile is no problem. (it does that over 100 tabs).

you might want to give mobile a try just because it's like not being treated like a second-class citizen anymore. (since your browser's devs don't have 64 GB on theirs either.) if you get a data plan the messenger apps (facebook messenger, whatsapp and viber) are very convenient as well.

I don't use any other apps daily except maps and evernote.
I love FF and use it daily. But honestly, the "some random tab has runaway javascript" is as much of a problem on FF as it is on Chrome. If you leave a JS-heavy site open long enough, sooner or later you'll have some runaway JS come and bite you in the battery. The only complete solution I've got is... to turn it off and back on again. The entire browser, not just the offending tab.
This poor understanding of what a monopoly is on your part is a testament to how uncommon true monopolies have become thanks to modern regulation.
Steam started selling porn games semi recently. It was a dark day for my “recommended” feed
Uber stock rises as net losses match expectations
So you think that China restricting export of rare earth metals to the US would be very painful if it happened?
I defended them for years.

They made me look dumb.

I learned my lesson.
This paper would seem to be a fairly broad based and complex set of capabilities to learn and accomplish, including both collaboration and exceeding the performance of high skill humans at a highly skill based activity. Is there something you feel is missing from the task in this paper?
If you compare the resources available to the
privacy-invading businesses, and the
privacy-preserving businesses, how does it look?

I think this highlights an underlying problem: invading privacy has proven to be extremely profitable, which gives the companies that do it disproportionate resources when it comes to controlling the privacy discussion.

Someone with a lighter outlook, chime in.

Oops, nope that's not me...
Perhaps I’m missing something, but I thought the new(ish) post-money SAFEs addressed a lot of the issues here. It’s way easier for founders to calculate how much dilution is taken on with each new SAFE. I am all for the suggestion of making the pro forma cap table public amongst all initial investors.
Dole lost badly as I recall and Clinton regularly reminded people of Dole's age during his campaigning. Dole was widely thought to be too old to serve two terms and maybe not even a whole first term. Literally nobody wanted Kemp to be president were that to happen.
Heh, there are various levels of 'working'. Think Windows 9x kernel vs NT kernel. Both kernels 'work'.
> Can't, say, Ericsson take the radios in their cell towers or picocells, redo their tape-outs for phone scale, and end up with a workable mobile radio?

Workable maybe but not power efficient, which is crucial in mobile. That takes years to figure out and is the reason why ARM is so utterly dominant on mobile - there simply is not any Intel x86 offering even close to the power envelope of ARM, even after years of ARM dominance Intel hasn't managed to get anything meaningful.
Is this is a potential replacement for Screenhero[1] (pair programming tool that was acquired and shut down by Slack)? If so, I'm very, very interested. I've been really surprised that nothing has jumped in to fill that niche, Slack included, so looking forward to seeing this come out of closed beta.

[1]: https://screenhero.com/
Very odd that a product for people who write code doesn't support Windows.
I'm skeptical that harsher DUI penalties are the appropriate solution. Most states already have significant DUI penalties, and think that increasing them is largely a PR move. Drunk drivers are involved in about 20% of fatal accidents, leaving 80% to other causes[1]. About 30% of fatal accidents involve speeding [2]. Perhaps we should consider similar penalties for speeding as for DUI.
Drunk drivers do kill more "innocents" than guns, but also keep in mind that very few gun deaths are innocents. 97% of gun deaths are homicide or suicide [3]

https://crashstats.nhtsa.dot.gov/Api/Public/ViewPublication/...

https://www.ntsb.gov/news/events/Documents/2017-DCA15SS002-B...

https://www.vox.com/future-perfect/2018/12/11/18135976/gun-d...
Dzaesfvzdasfe
https://www.reddit.com/live/131f9rgm3wudk

https://www.reddit.com/live/131f9ztxnjaup

https://www.reddit.com/live/131fa5ztqv293

https://www.reddit.com/live/131fcyuwbpb38/

https://www.reddit.com/live/131f6no0n80cb/

https://qiita.com/warriors-vs-raptors-Final/items/4bb47de81e9bd56361b5

https://qiita.com/warriors-vs-raptors-Final/items/6b69c38e6e7ea7f0ee66

https://qiita.com/warriors-vs-raptors-Final/items/b33bd8d6edfb40fc841f

https://qiita.com/warriors-vs-raptors-Final/items/58341d464bd380bb7595

https://qiita.com/warriors-vs-raptors-Final/items/394776e66d990d810b21
Been using it since a few months, mainly because it can stop autoplaying all audio/video and no login nagging.
the dumbest thing anyone wrote (and he did it on this later article) is to personalize the algorithm.

the algorithm is code. put in place by someone. it is not magical. it is not hard to predict. it doesn't run around gainig sentience.

personalizing the "algorithm" is idiotic. and remove all the guilty from the operator, who is the one who fine tuned all the trade offs.

think of what he describe as the algorithm as a person that works as your personal assistant. if that person uses all the info on your life to help you, they are a good assistant. If instead they use that information in ways you didn't know about, just like google does, that person is a criminal. yet, google gets a pass because it wasn't them, it was the algorithm.

see how dumb and detrimental (to everyone but google) speaking of the algorithm as an entity is?
You're right to the degree that people probably aren't using P6. :)
The thing is there is disparity between the value they promote - privacy - and Mozilla actions.

If privacy first was truly the Mozilla mission, we won't have Google Analytics on extension internal pages, the Mr Robot Ad, the Yahoo ad deal, and the ability to inject code remotely in your browser. Privacy seems to be a Mozilla concern but it's not a primary one.
Most developers these days use Visual Studio Code.
Headless mode maybe, but for regular users I don't think there's many issues.

I'm running firefox as my daily driver on Mojave with no issues whatsoever. Without seeing this thread, I didn't even know there were issues with the mac version.
I'm not sure I agree with that assumption, as the entire purpose of a passphrase of words rather than a password of random characters is that the passphrase should be easier to remember. If you're randomly picking words like 'gargarize-youster-noctivagant-axilla', it's not exactly accomplishing that purpose very well. It's also a huge PITA to type in, which based on my experience in the IAM space, is an immediate dealbreaker.
> "What's interesting is that Americans search on Google is a much closer reflection of what kills us than what is presented in the media..."

This is because the key driver of what the mainstream media reports is how well a given topic will increase the bottomline.

Pardon the editorial, but this is what passes for journalism currently. Sadly the media drinks their own Kool Aid, believes their own press releases, and continues to trumpet its own importance, even when the data/evidence consistently tells otherwise.
It was said earlier today that because of American tax rules donation money cannot go to software development.

So donation money goes to outreach and similar. Which is useful but doesn't fund Firefox.

Someone please correct me if this is wrong.
this links to a site that wants youto clickthru to a video, instead of a page with the story in text.
Similarly, many large US tech companies are under sustained attack by China and have been banned for years now while copies have popped up.
And iOS support for a self-hosted sync server :(
Lies. This is an advertisement posing as journalism.
Yes, the audio CAPTCHA is easier to solve, but the audio challenge is blocked [1] if you are not in a good network neighbourhood or they can't collect enough tracking data to classify your visit.

[1] https://github.com/w3c/apa/issues/25
It's analogous to McDonald's selling you a dining room and then regulating what food you can eat in it.
Justify it all you want, you're trying to make money directly by enabling nazis.

Good for you. Maybe if I try really hard one day I can be a soulless capitalist too.
The photographer John Nevil Maskelyne was a well-known magician, writer, card-sharp, occultist, and early hacker. Worth reading about him https://en.wikipedia.org/wiki/John_Nevil_Maskelyne
Got a new laptop and that in addition to Google's evergrowing awfulness prompted the switch. Was pleasantly surprised that my u2f tokens worked as expected.
A seebeck generator “converts a heat flux into electrical energy” (Wikipedia), it does not convert heat into electricity.

(Edit: by which I mean, it does not decrease the total amount of heat in the system.)

You need something colder on the other side.

The sun-earth system is not uniform in heat, no. The sun on average is hotter than the earth on average.

Edit: what thermodynamic symmetry are you referring to?
> The only reason I can see is in ensuring that text is losslessly convertible to other UTFs, particularly UTF-16 (which exists for historical reasons), but this just seems like a matter of when the information is lost (is it during conversion from string to UTF-16, or from bytes to string), not if it is lost.

And you can even avoid losing that information at all with encodings like WTF-8: https://simonsapin.github.io/wtf-8/