skysight-inc/HackerNews huggingface dataset:
The brand risk of having firefox associated with the free version would be horrendous.

To have a premium product, you need to have a non-premium product, and given that most users would use the non-premium product, firefox would quickly become associated with a browser that has the actually desirable features turned off...

Which would probably be even worse than their low market take up at the moment (and I am typing this on firefox).
Thank you for this. It always amazes me when I come across something that would be so useful to me, and yet so obvious in hindsight.
> They don't naturally gravitate to any place that lets them spread their ideas.

Why wouldn't they? Everyone else does, you and me included.

Voat was a tiny site of 30,000 users in April 2015. Two months later, Reddit banned r/ShitN*ggersSay, and Voat's user base exploded. That was four years ago. Go take a look at the front page of https://voat.co/ right now. Don't do it at work, though.
Thank you for this link, I'll start watching it too
Very interesting that gitlab is standardizing on the de facto standard of patch requests! How ironic it is that the existing git-request-pull isn't used more than needed thouh
Which has to be a gut punch because EMR feels like a bag of bolts rather than any kind of polished system.
Skype is now owned and maintained by Microsoft.
I don't see goodwill in either company.
Perhaps, but then a lot of other software doesn't either. For software that does, obviously a strategy of maintaining multiple versions with potentially conflicting data models isn't going to work.
Immunity's Aitel accused of conflict of interest by security expert
The Birthday Problem [1]:

How many people do you have to put in a room
before there's a 50% chance of two having the
same birthday.

Assuming a uniform distribution of birthdays. The answer turns out to be about 23. In general, for M possible birthdays (other than 365, say), you need about sqrt(M) people before you get a 50% chance.

The article is a standard introduction to the Birthday Problem with some real world data thrown in. The 'paradox' comes from the surprise that the number is so low (23) compared with the number of days in the year (365). As the article points out, one short description of why the number is so low is that you're comparing each new person with every person already in the room instead of drawing two numbers at random and seeing if they're the same.

For the curious, I have a minimal post on how to derive the Birthday Paradox and other canonical probability problems [2].

[1] https://en.wikipedia.org/wiki/Birthday_problem

[2] https://mechaelephant.com/dev/Assorted-Small-Probability-Pro...
Missing the cheats for division (how to rapidly tell if a number is divisible by 3, 7, 2, 5, etc. for prime factorization.)
Silica was probably sourced as a refined product and was likely pretty pure and free of things like bacteria.
I had never even heard about this product until just now. I guess it was just too irrelevant.
SF shouldn't be associated with SJ in my opinion. He lived and worked in the peninsula and just came up here to give talks.
Dropbox Plus Doubles Storage to 2TB
I guess I'm still trying to figure out why Spotify and Apple Music cross some new line. The iOS app store has been around since 2008 and the macOS app store since 2011. The entire time Apple has sold their own apps side-by-side with competitors. Aperture, Logic, Final Cut Pro are all professional apps sold side-by-side with third party apps. You also have ebooks and music stores, too.

How would you classify iMovie, Pages, etc? They were sold on the store and now offered for free and compete with others.

> With Apple, there's no option to provide Spotify to iPhone users except through Apple's own store.

Kindle, Audible, Netflix, HBO and a bunch of others have been on there for years. Netflix tested the waters with subscribing through Apple and went back to offering it outside of the store. I don't think Kindle ever has.
FWIW, I believe most if not all of these settings are also available under preferences | search.
I remember being in a pitch meeting with MapR a few years ago. It was for a large academic institution’s HPC group. We were all very interested in their NFS/HDFS tools, which would have met a very critical need. They just kept talking about the Hadoop workflows, which wouldn’t have flown at all for this group. Most HPC workflows/tools don’t map very well to Hadoop or at the minimum would have required tools to have been rewritten.

We really wanted to spend the money, but as far as I remember, we didn’t end up doing anything more than a test install.

I’d still love a middle option that could handle petabyte scale storage without the Isilon price tag.
RIP Inbox. You won't be forgotten.
Denying access to US markets in turn, or refusing to do business on terms we don't like would be pretty fair. Trying to cripple Huawei in Europe is a bit of an escalation. Imprisoning their CFO is ridiculous.

All's fair in love and war, of course, but I tire of the moralizing from people who don't know any history.
Happened in Australia just weeks ago.

Various pages belonging to the main Libertarian party ("Liberal Democratic Party") started getting shutdown[0] about a month before elections.

[0] https://www.facebook.com/davidlimbrickldp/posts/209817440381...
The subscriber + hours viewed restriction to monetize combined with rampant copyright take down trolling, an algorithm that hides your content from viewers and adpocalyses just made the Youtube gaming platform not worth anyone's time.

Why would anyone put up with that mess when Twitch is simple, works well and is designed from the ground up for game streaming?
No, "characters" is the correct term; U+1C4 is two characters: latin-capital-d followed by latin-capital-z-with-caron (or whatever you want to call the little v thing). As you note, this means that non-buggy fonts will generally use two glyphs to render it, but that's a implementation detail; a font could process the entire word "the" as one glyph, or render "m" as dotless-i + right-half-of-n + right-half-of-n, but that wouldn't affect how many characters either string has.
Plus many content creators in games have been driven off youtube proper by DMCA accusations. So some twitch streamers have completely abandoned their YT side simply because it is far easier to harass them on that channel than within twitch itself. Youtube is a damaged brand in many of these content creator's eyes

then throw in that twitch pretty much hit a home run last summer/fall with the ability to easily gift subscriptions and many streamers saw their numbers explode. Once you have an audience if you are in popular categories you can get sponsorship for playing specific games and that is money not easily recouped by changing platforms.
Tom Chi: How to Address Our Carbon Debt to Heal the Planet
People don't want that. You're describing a solution in search of a problem. We have the technology to execute on this right now but nobody does, because people don't want it. If they wanted it, we'd have it, and we'd be iterating in the problem domain not the solution domain. There's no pent up demand for a world in which you're constantly forced to make tons of individual purchasing decisions.

More importantly though, people have learned not to value content. This is a huge problem for the media industry. Nobody wants to pay anything at all for what they create, they want to pay with their time and attention - through ads.
Ask HN: How do you handle performance monitoring at your tech startup?
I've purposefully made this question open ended, so feel free to answer however you see fit.

For some background, I'm a software engineer currently working with a seed-stage startup. We are developing a web app built on PHP Laravel, hosted in AWS Elastic Beanstalk, with a few dozen paying customers using it.

We've decided to invest in some performance monitoring, focusing specifically on page load times. We'd like to:

1) be able to measure and store page load stats from both the browser and server perspective.

2) set up alerts in case load times are getting worse over time or if they go over some threshold.

3) have some reasonable dashboard for displaying and drilling down into the data.

4) leave the door open to instrumenting/taking advantage of any other sensible monitoring/alerting needs moving forward.

It's been challenging for me to really gain any sense of what the best practices are right now for small-ish (less than 50 employees, seed/series A, etc...) tech startups. There seem to be a good amount of APM providers out there, but their pricing seems aggressive. There are a ton of other options. For example, I've considered setting up an ElasticSearch cluster and sending metrics over with some simple home-rolled middleware, and wedding that with New Relic Browser/Google Analytics/Simple Analytics/etc... in the browser.

So, how is everyone tackling this problem? I'm looking to start a conversation, hear some war-stories, and ideally learn about some setups that are working really well for your specific context/startup.
https://www.latimes.com/business/la-fi-china-counterfeit-201...
.in avoid. Depends on the space. If ai use .ai. .io .ly could work as general hype tld
Yeah, but given that Tesla still needs to massively grow the number of actual owners, the consensus of current owners doesn't matter as much as what potential buyers are thinking.

As a someone in their exact target demographic, the giant screen is one of the major features I've been stuck on. Articles like these only support the feelings I've had about their touchscreens.
Hm. Should the news reflect what we die from...?

Glaring omission is deaths from airplane crashes. I would guess that is the most disproportionately covered of any cause of death.

I'm also skeptical of the data on drug overdoses. Seems like the opioid epidemic is pretty well-covered these days but listed as only .4% of "Media Coverage" and 1.3% of searches.
Robert Redford comes up ironically enough for Provo. I thought his house was in Park City, but I guess it’s a weird city limits thing. Hope he isn’t letting any unmarried couples stay over!
I'm pretty sure they're only killing this because it's going to compete with Stadia whenever it gets released.
Just to add to the pile of anecdotal evidence - same here...I switched to Chrome some years ago when the speed difference was just too much to ignore and switched back to FF a couple of months ago after I started realizing the growing firmness of the cold grip Google has on the web more and more...There's absolutely no noticeable speed difference any more, fans on the laptop are as always and it's been smooth sailing since (on Mojave). The only thing that still annoys me when developing is the lack of websocket frame inspection - but as a "regular" user, no issues at all.
I drive a Tesla. Not having haptic feedback has not been a problem for me. It took just a few minutes to become familiar with the UI and, after a few days, I found it easier and more intuitive than anything else I had ever driven. In comparison, I recently tried a friend's prestigious German car. This car had dozens of controls on the steering wheel, steering column, dashboard, etc. After a few hours, I still found everything confusing.
I don't understand what you're offering. "She" who? How will using this service bring back emotions?

Can you break it down a little please and walk me through the process? I don't quite new trust a website without a FAQ, About, or little bio about the people using it.
Neat demonstration.

I believe Faradays first motor was a magnet and wire suspended over a cup of mercury to act as a conductor.

There is also a telescope that uses a spinning vat of mercury to form a reflector.

Vintage mercury vapor rectifiers are really neat to watch.

https://youtu.be/5ftCS5wwiPY

Had fun playing with mercury as a kid; say what you will. Still have my 1 pound container of it.
I thought it had hardware acceleration? Alas hidden away in advanced settings.
Why should the price of the phone matter to Qualcomm? Did they have anything to do with the CPU, screen, memory or battery?
This was exactly my experience with MapR. They refused to sell you the products you actually wanted.

My first response to this news was "good riddance", my second thought was "I hope they open source the storage stuff."
I’m sorry, I didn’t read your answer right. I’ll try what you suggested when get some time on a Linux box
> experience

Developers care a lot more about this ‘experience’ than users do.

Yes it’s fun to play with the new shiny, but users don’t care.

User experience is an excuse, it’s double-talk.
What about the not-owners who voted the other way with their money?

I don't think current owners are the whole market Tesla is trying to reach.
So, fasting this long is only possible if you have a lot of weight for your body to somehow cannibalize?
The Sound of Data (a gentle introduction to sonification for historians)
After all the outrage I am sure they won't follow through.

Or so I hope...
What bothers me is that there are very few things that are not propaganda.

All Fox News article are propaganda, all CNN articles are propaganda, but yet they are accepted? Clearly a distinction is made between 'acceptable propaganda' and 'unacceptable propaganda', and this distinction is made by Facebook, an American company.

How acceptable is that?
Information Security Mental Models
I think there's not much pressure to get at it when they have hundreds of millions in the bank and have been funded externally their whole life.

I believe those backfired since all their marketing has been propped on morality. When they claim ads and tracking are evil, it bit them whenever they ventured anywhere near that stuff. Give many startups here an initial audience of 200M+ engaged users and they'll figure a way!
I'm not sure what URL is technically supposed to be the correct one, but they do seem to have updated through at least 60.5: http://devel.trisquel.info/repos/packages/icecat/pool/main/i... Trisquel in general seems to be pretty dead, looking at their git.

While I'm not sure whether that includes any backported security fixes or not, you're right that this is concerning. Perhaps building it yourself is the way to go.

>I use upstream ESR ever since FF disabled add-ons since they let their cert expire [5]

Unless I'm mistaken that bug would have bitten you on ESR as well. The expired certificate was an intermediate used to sign most of the addons on AMO. If ESR wasn't using that certificate then it wouldn't have been able to validate those addons. Correct me if I'm wrong.
This is simply not true. You can read SP800-63B Appendix A to see the rationale NIST provides for not enforcing password complexity; it has nothing to do with MFA, and NIST believes the old rules to be intrinsically bad.
I think Schneier is trying to say in both cases that it is not worth the risks, but I'll concede that we are arguing a very fine point. In any case, I agree with Schneier in this latest post and have argued along these lines myself.
For one thing, gamers who used to upload recorded game play to YouTube left _years_ ago to live stream on Twitch. Second, YouTube's treatment of creators I'd say has people primed to go anywhere else. So too little, too late, wrong attitude towards the people making content. Finally, Mixer at least has a few cool features, such as Hype Zone. Pretty sure YouTube gaming didn't offer anything appealing/innovative.
There's not much in this world I find more fascinating than sea life. I spend hours at a time free diving and looking at the same stuff, occasionally something new, and it's endless intrigue. When I find something special it makes my week. Finding species like this in person would totally make my year! So cool.
LaCroix was the Millennial ‘it’ brand. Now it has lost its way
Not as much as risk. More of not wanting to be seen as a monopoly. Giving up 1% of the browser market share and a few pennies is worth it to not be seen as the virtual dictator of the Web.
A long-lost vessel from the 1800s was found by accident as NOAA tested equipment
It's impossible, right? What could possible happen if you leave the engine on?
CF already supports this type of thing, workers and the kv store ...

https://www.cloudflare.com/products/workers-kv/
I get why someone might want Safari, what I'm asking is why the download link is on the front page of HN when there's no opinion nor perspective. I keep hearing "it's not an ad" but then...what is it?
The Talk Show: Cabel Sasser, Steven Frank, and Greg Maletic on the Playdate
> I would guess that is the most disproportionately covered of any cause of death.

1 death is a tragedy, 1 million death is a statistic. Nuclear falls into the first one, coal into the second.
I think this may be it. America has a ban on trade with Iran. I wouldn’t be surprised if American companies also are required to prevent them spreading information.
Do 2B users use uBO, or do most of them use ABP or uBlock? Because I don't see much pushback from the authors of the later, and it anything they have a vested interest in design choices that negate the power of their greatest competitor.
do you mind mail your iPhone/Xbox to me?
I'd argue that driver's license restrictions should come with more potent psychological screenings than guns, given the weight of mortality their statistics carry.

Guns are a majority fractional component of all suicides and homicides, not even the whole of either. And yet all other homicides and suicides (some of which may include misuse of vehicles) put together still represent a lower total hazard than accidental automotive deaths.

Vehicular deaths exceed all violent deaths, and yet there's only basic competence screening once, to confer identification, and then bureaucratic renewals periodically every few years, varying by state.

What if we treated cars like guns? Would fewer accidents arise?

Really, it's about the assessment of good judgement combined with alertness and reaction time. Only market forces and financial penalties serve to modify driver activity, in the form of insurance and fines. Suspension and revocation are only post-hoc remediation, usually associated with near criminal behavior.

So, what if we had obstacle courses, to test physical abilities, and psychological exams to probe for personality cues?

This would represent gross impingement on the economy and personal freedoms (probably well beyond overturning the second amendment), and economic zoning would have to redraw how we plan residences and design communities. With fewer drivers, and driving only conferred as privilege, more people would probably be pushed into different lifestyles, and suburban concepts of autonomy in America would almost cease to exist.

But, with reason, no? Is saving people from themselves (or more accurately, each other) a better path? Only if the drastic changes hold water. We've seen what redrawing a few roadways can do to cities.
> but I do think there’s value in adding native layers on the internet that enable the exchange of sensitive information.

SSL.
But the market isn’t iOS devices, the market is smart phones. And in that market Apple does not have a monopoly.

If you start declaring that the market is the specific store or product, then literally every single product and service is a monopoly begging for state intervention. Can I sue Netflix because as the monopoly holder of the Netflix network they refuse to carry my home made videos? Is Spotify abusing their monopoly over Spotify by refusing to carry my karaoke? Should I be able to sue them in order to bend them to my will?

Of course not. That’s patently ridiculous.
Another addition to https://killedbygoogle.com/
you can do the SSH with individual users even... :-) used to do this a lot.
CEO GitHub is asking for suggestions to improve GitHub profiles
The best indication that you need an external penetration test is that you have client prospects demanding to see the output of those tests. A less important indication would be that you (1) have product/market fit, (2) have implemented your core product, (3) can predict what development on that product will look like for the next 12 months, and (4) have revenue sufficient to eat the $20-30k cost of a penetration test.

I would not generally recommend that seed-stage companies contract out penetration tests simply because they've raised enough money to do so. You should be on a relatively stable, predictable path with regard to product engineering before you start asking contract pentesters to beat you up.

I feel like this is a pretty good illustration of how not useful lists like these are. It's simplified down to this "seed", "series A", "series B" thing in order to suit the format and make it punchy; the real, serious advice isn't as slick, and doesn't showcase their product, so it's nowhere to be found.
If the news does to proportionally show what we die from, then we all focus on the wrong areas, and vote in politicians who come up with solutions to the wrong areas.

For me, the most likely way I have of dying is a car hitting me. Heart disease is not an issue for me as I exercise every single day and eat, and cancer is not a concern as I do the above and anything else will not affect it significantly.
This could also be a boon to external ad-blockers like Privoxy.[1]

Using Privoxy, you could have ad-blocking and continue to use Chrome.

[1] - http://www.privoxy.org
Yeah!!!

That's the way to go!!!

A few years back a lot of brainiacs (myself included) decided to go just the IE6 way!!! And what a shi*ty that ended up being!!!

Firefox came up just at the right time to wake up most of us and get the day saved.

Now tell me of about history repeating itself...

The only detail is that I'm not seeing anyone waking up this time!!! No matter how hard the bell is ringing, the Google Chrome song is just too sweet...

Glad I never forgot who saved the day back then.

Firefox deserved more from today's users. But many are just not old enough or not techie enough to know better.

the funny thing is that all of the IT EXPERTS I know are all using Firefox as their main browser (chrome is just for compatibility check), but no matter how they warn others, no one cares.

Dark times ahead...
That's not just sad, it is really strange. Seems enterprise would never learn from the mistakes of the past. Javascript is new Java - it's getting bigger every year, its syntax almost confusing and often feels inconsistent, sometimes it doubtlessly does utterly stupid things.

Most experienced developers dislike the language. Beginner developers also find it confusing. Days of low barrier entry to JS are long gone.

Clojurescript, Elm, ReasonML, Purescript, etc. there are multiple better options.
Yet instead of embracing PLs that can fix many of the drawbacks, big enterprise keeps insisting on it. Sigh...
would be easy enough for a branch of "issues" containing a number, index.json and ####.md where the number is the initial issue and comments, with some front-matter to associate user details.
I've been using Firefox for personal and Chrome for work but this will make me start using separate Firefox profiles for both.
As an employee, application and infrastructure security work pays somewhat better than normal product engineering work (there are good jobs and bad jobs, of course).

There are lots of security jobs that don't pay especially well and are career dead-ends --- enteprise IT security isn't a good place to end up, nor is sales engineering ("security engineer") for security product companies, nor is malware analysis.

My feeling is that software/application security consulting is a reasonable route to go, if you want to work for a consultancy, but I'd be wary of any other kind of security consulting.