skysight-inc/HackerNews huggingface dataset:
I feel like security for CLI users is generally falling behind other systems.

On Android and iOS, any application is supposedly running in its own sandbox, where it can't just randomly access files used by the rest of the system (including other applications).

The web is obviously strongly based around a security model where a website ultimately can't do much in terms of information access (eg, a properly designed website's information is protected from other websites) .. as I understand it, this was not always the case (we're not using ActiveX anymore, right?).

In the desktop space, this pattern is supposedly supported by Flatpak, and I think the macOS store (though I'm not sure about this—I haven't actually used either).

Meanwhile, when a random developer decides to run `make` or `npm install` or `mvn install` or even `vim foo.txt`, they're essentially trusting their entire computer to whoever created the content in their working directory.

Will there be some revolution at some point that encourages people to somehow isolate their commandline activities to different realms, thus limiting the scope of any attack like this?
Not sure if it's a direct causal relationship. dang can better tell.

The graph in this case ended up being just a base layer for some interesting internet stories, while paying some tribute to HN for the great place it is.
It's because light water reactors use thermal (i.e. slowed down) neutrons, which can only fission U235, and that's 0.7% of natural uranium. We enrich the fuel to at least 2% U235 and that's mainly what the reactor can use.

The reactor also gets about a third of its energy by fissioning plutonium, which is formed when U238 absorbs a neutron.

Without reprocessing, a light water reactor can't even fission all the U235, because some of the waste products of fission reactions are strong neutron absorbers. (If you're in France you can reprocess the waste to remove the fission products.)

Molten salt reactors remove most of the fission products continuously. Some MSRs, like Terrestrial Energy's, are still thermal reactors using uranium, so they're about as efficient as France.

Some MSR designs use fast neutrons, which are able to fission more plutonium along with other transuranics and U238. Others use thorium fuel, which can be completely fissioned by thermal neutrons. (First thorium absorbs a neutron and becomes U233, then that fissions. Heavier non-fissile isotopes aren't created in the first place.)
I use them in Emacs occasionally. It's handy for stuff with ambiguous names. Makefiles (which dialect?), whatever.pl (Perl? Prolog?), whatever.asm/whatever.s (which architecture? Which assembler?), etc.

Also comes in handy for working with files that have an incorrect extension, for whatever reason, or different formatting from all the other files of that type that you work with. (Per-project formatting stuff can often by solved with .dir-locals.el, but not always.)
A good spinlock, as Linux uses internally for example, is much more complicated. But, if you know there are only two relevant threads, you can get decent performance with a simple spinlock.

However, do not use AtomicExchange in a loop like this. When you are waiting, you always want to wait with the target cache line in the shared state, and AtomicExchange will force it to be exclusive. Performance will go down the drain. Instead, do something like:

if (value looks good)
AtomicExchange;
Loop again if you lost the race;
else
Loop again;
Well, it won't be. Let the USA kill it's own residents 6 years younger than British people, the UK will not
I'll second the multi device functionality. I use Firefox on desktop and iOS and all of my history, autocomplete, and tabs follow me and everywhere. It's incredibly convenient.
No, that's a much different situation. Kik could have acted legally and still made a profit on this idea, although maybe less. In your example, clearly there is no "legal" way in which you could have robbed the bank
Cheers for sending me down this reading rabbit hope, very interesting https://skepticalscience.com/co2-lags-temperature-intermedia...
Not if you use lists. They are one of the most underrated tools in Twitter; allowing you to clean up and arrange your feed, Not having people you're not following injected into your feed is just another bonus.
How come? It's quite clear. Did you try downloading the image? It's a relatively big one
Not sure there is.

You need someone to make the call between truth and lies. That person then has all the power.
> It’s been several weeks since I was promoted to Senior Vice President of Firefox

Awesome for you?
If you have spare time, the Pikus talks at CPPCON talk about the performance hits associated with various primitives.

https://www.youtube.com/watch?v=9hJkWwHDDxs

This is the one you want, with benchmarks associated with everything. Of course, benchmark on your own system too, and learn hardware performance counters (!!). This sort of stuff gets into nanosecond-level measurements, so learning to use the hardware profiler of your CPU really, really helps to see these details.

Honestly, because of how intricate the L1 / L2 caches can be on a modern system... learning hardware performance counters while you're measuring benchmark code / benchmark tests like this is helpful.
64 bytes is the false sharing boundary of modern Intel CPUs. Heavily contentious variables will produce different synch behavior if they are not in the same 64 byte segment. This is documented in Intel's CPU manuals.
What is less sure is that AWS would come and ask for a license, instead of cooking their own to get customers more locked-in to their platform.
Sure... See this is the whole problem with upgrades: upgrades are supposed to improve things but more often than not they break things. In this case the fact that stuff would break was quite predictable. The options to continue to support the non-javascript based branch of FF with plug in support with security updates but for some reason the decision was made to totally ignore backwards compatibility and to forcibly migrate the userbase to a new version without taking into account the problems that would cause. In some cases those problems are substantial, and the security risk then is outweighed by the damage.

This is one reason why the software industry as a whole sucks, we just do not give a damn about the users.
Hey man, oxycontin was prescribed by doctors; how can we possibly blame the Sackler family?

FB employees: pretty close to Purdue pharma and the tobacco companies. At least tobacco prevents Parkinsons. I know, people got kids to feed and ex-wives to pay off, but FB is complete and utter garbage, and anyone who ever worked there carries a badge of shame forever.
Thank you for your dedication on this. Now on the subject of energy use, how about the patch for the following critical macOS bug landing in a Firefox 67 point release?

https://bugzilla.mozilla.org/show_bug.cgi?id=1551990
If I just want to spend the time at it, I’d build another bandsaw.
An interpreter directive is far more common than a piece of configuration specific to an editor. It also serves a practical purpose on *nix style systems whereas editor configuration is a matter of preference.
In what way do you plan to "break up" the big players? I'm not super familiar with prior ideas, can someone link to a few that have more specifics?
If funding was a measure of success Theranos would be A-ok.
How to add Flattr to your GitHub repo’s Sponsorship button
Amazon is just a mess. Search for "apple watch charger cable". Among the results is one "Amazon's Choice", this one by ATETION [1], sold by ZDAGO and fulfilled by Amazon, with Prime shipping. Amazingly, all the reviews in the listing seem to actually be reviews for an Apple watch charger cable, which is a rarity for that category. Almost every other third party cable listing is rife with reviews and questions for other products.

So, in this case, the "Amazon's Choice" label seems to be very useful--it is marking pretty much the only third party Apple watch charger cable on Amazon that doesn't show obvious signs of being sold be a scammer.

However, if like me before you go look at the search results you go over to the side and check the "Prime" box to refine the search to just listings with Prime shipping, the "Amazon's Choice" ATETION listing from ZDAGO goes away! This makes no sense.

The results still do contain what appears to be the same ATETION cable (at least the specs are the same) [2], except now it is sold be WEIZY and fulfilled by Amazon, and is not an "Amazon's Choice", and is slightly cheaper. The WEIZY listing is a cesspool, like pretty much everything else in the category except the ZDAGO listing. It's full of questions and reviews that have nothing to do with the charger cable.

[1] https://www.amazon.com/ATETION-Charger-iWatch-Magnetic-Charg...

[2] https://www.amazon.com/ATETION-Charger-iWatch-Magnetic-Charg...
Amazon Consultants understand brand economics and translating those into Amazon retail economics.

By the time brands are talking to us, they already have products developed OR are actively launching them every year.

I am a software developer/eCommerce marketing guy, so I understand SEO and all the different levers that Amazon offers to get sales momentum moving faster and faster.

Our target market are the large brands, where sales to Amazon is still a rather small portion of their total GMV sales. Them hiring a sales consultant is better ROI (results / investment) than hiring an employee/team full-time internally.
Brave is great for those "it only works in Chrome" sites
A tonne of gasoline occupies about 350 gallons and contains about 85 percent carbon by mass. At $300 per tonne of carbon that translates into a tax of about 73 cents per gallon.
Try driving it in their bomb-shelter parking garages or turning around on one of their raised agricultural dirt roads; it's like driving a big black snake. They don't look real big in America, but for Europe an A8 is bloody hyooge.
How do others feel about this when they open the files? Or are they not part of a shared project?
While I see worth in twitter the idea that in order to succeed in academia one needs to participate in that stuff is stomach turning. It should be something we resist, not encourage.

Academia shouldn't be a popularity contest. Social media is.
There are plenty of professionals working in content creation everyday that don’t have that kind of budget to spend $43000 on a monitor or even the budget for a well specified new Mac Pro.
I'm a generalist as well. I can't help you out too much. It's mostly luck.

If you study Cracking the Coding Interview, and you know that book inside and out, and you feel confident you can solve all of the questions in it (you can ignore the Java/C++ stuff if you're not applying for one of those jobs) -- you have a /chance/ to get hired.

But there's lots of smart people with those skills who fail the interview every day.
I see two problems. First, the Amazon rating system is untrustworthy. There is simply far too much counterfeit reviewing and far too little done about it. This is a systemic problem that just needs to be fixed for the platform as a whole.

The more nuanced problem, I think, is the fact that it can create a feedback loop. Something can be popular simply because it's cheap, but "Amazon's Choice" implies quality, which makes people think they're getting a deal because it's also cheap. What sprung to mind for me was LockpickingLawyer's[1] series on Amazon's Choice for things like "padlock", lock, and safe, all of which were of fairly low quality, or at least lower quality than "Amazon's Choice" would suggest.

The problem is that, most of the time, people aren't going to know that what they have is low quality because it will almost never get tested and most people don't know anything about lock security. So they trust Amazon to tell them, when really it's the blind leading the blind

[1]: https://www.youtube.com/channel/UCm9K6rby98W8JigLoZOh6FQ

[2]: https://youtu.be/kJ1_P5oqf6Y
Annotated Guide to the SEC's Complaint Against KIK
Yes - in my building I only have one provider option. And I pay $60/month for crappy internet.
RES and Imagus are the main ones.
Developers Sue Apple over App Store Costs
Starting to look forward to July when the next ESR will be out. Really tempted to just go ahead and upgrade to FF67 now but have grown fond of the stability of the ESR releases.
Net Pure Product Margin after cost of goods sold and various agreed services such as damage allowance are deducted.
A local struggling theatre company has a new president and the theatre is thriving under him. He told us in private that everything about his public appearance is curated in order to give the theatre a face, and that its an important part of saving struggling theatres - to attach a face to it.

Maybe it’s the same thing?
I did the calculation myself due to multiple conflicting numbers in this thread: I get 2.6 dollar per gallon of gas (8.65kg CO2 produced by complete combustion of 1 gallon gas):

300$/ton * 8.65kg = 2.6$ per gallon (0.6$ per liter)

100$/ton * 8.65kg = 0.87$ (0.23$ per liter)

30$/ton * 8.65kg = 0.26$ (0.07$ per liter)

7 cent per liter seems quite acceptable. And people are reporting that some companies are targeting that price point for sequestration. Please correct my if I miscalculated something.
They can be motivated by acquiring stake in the success of their research and development. But the only way I can picture that working is if there is way to capture the value that is compatible with developing it in the open, hence the question.
It has helped that in the last 10 years most of the languages have converged to an extent.

Like before things like generics and lambda expressions C#/Java were quite different to Python/Ruby, and js used to be quite an abysmal language but with some nice features nothing else had (still is an awful language to an extent). I think C# 2.0 and 3.5 really changed that language for the better, Java spent a lot of time getting to the C# 3.5 level.

And I remember a time when C++ was almost incomprehensible if you'd never worked in it, but now it seems to be a lot less daunting as you've got bridging languages like Rust and Go.

I must admit I've still no interest in Haskell/F#/etc. I tried Lisp about 10 years ago and it just seemed such a pain, for me I find imperative programming so much easier to map out complex interactions in my head. I also find set based programming like SQL very easy. But functional, ugh.
Why don't they only let you review items that you have purchased using the same account? Too simple I guess.
Nobody seems to care, and I can easily put them back in if somebody deletes them.
The only thing I like about Chrome is the native personas.
Please tell me I'm misunderstanding something!
By enabling by default the blocking of those third party scripts: https://disconnect.me/trackerprotection/blocked

This Wil have three consequences:
Many websites will partially break? Which ones?
webmaster will lack many data necessary to understand what users do on their platform, where they missclick, what they don't use etc, thus diminishing the ability of webmasters to make great products.
*the most dramatic one:
People will see ads but the owner of a website will no longer earn ad money, because those are the third party scripts that allowed to prove to the ad platform that a user had effectively seen X ads.
My presentation is here: https://www.youtube.com/watch?v=Hyq6_IZ-2fE

I presented this at CircleCityCon, a hacker con in Indianapolis IN. https://ccc2019cfp.busyconf.com/activities/5c3a57314808fac10...

The pictures of this device: https://pbs.twimg.com/media/D4cOL0DWAAIiD2P.jpg:large

https://gitlab.com/crankylinuxuser/siginttablet/raw/master/C...

The details are as follows:

Rx: 24MHz-1.7GHz (antennas 50MHz-1.2GHz)
Tx: 100KHz-1.5GHz (antennas 50MHz-1.2GHz)
CrazyRadio: non-BT 2.4GHz keyboards/mice
802.1abgn wireless usb
BTLE onboard bluetooth

I designed, build, and scripted its full build to a comprehensive defense/scanning and attacking platform. My repo linked contains the complete build instructions to build your own device.

Everything is under the GPL 3.
Will be interesting to see how other open source projects like ArangoDB (Apache2), Timescale (Apache 2) or Scylla (AGPL/Apache2) will react.
On Sky here in the UK it does say that it is a co-production with HBO Miniseries.
Sorry for my ignorance, but is he working on HN? It's confusing because he wrote that he has no affiliation with YC.
But Tim Cook said they were a Health Services company. What if privacy is part of human health?
Is There Room for a New Desktop Operating System
I've been a Mac user since 2006 when I bought my first Mac: a white MacBook Pro with an Intel Core Duo processor running Mac OS X Tiger. My current Macs are a 2013 MacBook Air and a 2013 Mac Pro, both running macOS Mojave. I prefer macOS to Windows and desktop Linux environments due to macOS's Unix environment, support for commercial software such as Microsoft Office and iTunes, small but essential programs such as Dictionary.app, and the overall fit-and-finish of macOS compared to other desktops. However, from a hardware standpoint, I feel abandoned by Apple. I value user-serviceability and upgradability in my hardware (the only reason I ended up buying a MacBook Air in 2013 was because I still wanted to stay on macOS in the days of Windows 8 and GNOME 3), and I was waiting for two years for yesterday's Mac Pro announcement, only to be disappointed by the pricing of the Mac Pro, which is twice as expensive as the previous model.

Since the demise of BeOS in the early 2000s, there hasn't been any commercial competitors to Windows and macOS in the desktop computing realm other than perhaps ChromeOS. However, unlike the early 2000s when Windows' marketshare was in the 90+ percent range, today there is more diversity of personal computing platforms thanks to the popularity of smartphones, tablets, and Chromebooks. Given this new diversity of platforms in 2019, I am wondering if there is room for a new commercial desktop operating system to emerge, one that attracts users that are frustrated with Apple's direction of the Mac but who don't want to switch to Windows or the Linux desktop.
First, it's their site. If they don't want it to be scraped (even if their reasoning sounds silly to you), I'd advise you to obey their IP. (That's the moral pov)

Second, IANAL, but the hosting location should not matter as much as you might think (YMMV depending on your jurisdiction): It's you who is responsible for the (probably unlawful) scraping. So, they will sue you in your jurisdiction, not the machines hosted anywhere. So, your question boils down to finding a hosting provider which basically ignores abuse complaints and protects your anonymity. (That's [probably] the legal pov)

Third, even if you found a provider and they are unable to effectively take your site down and/or sue you, they might just block the IPs they identified the scraping originates from. So you'd have to use IPs from different subnets to obfuscate what you're doing. (That's the technical pov)

So, in conclusion, why not scrape their site, build whatever product you have in mind on top of their data and show it to them (and only to them) to arrange a deal. More often than not, you can convince people more easily when they can visualize what you're talking about. So, show them your prototype.

If they still reject a collaboration with you, they might have their reasons. It's not your cup of tea to judge them for their business decisions, then. Better find another business partner who matches your views and ideas.

tldr; Why would you build a business on a never-ending fight with someone you assume you share a mission with?
I think you’re just about right - it’s Options > Privacy > Content > Custom > “Block third-party trackers”.

(It is not “Block all third-party cookies”, make sure to select the correct one.)
It appears this would block pretty much all the major analytics tracking cookies (e.g. Google analytics, mixpanel, etc.) based on the linked Disconnect list, https://disconnect.me/trackerprotection .

While I realize that's kind of the point, in my mind there is somewhat of a difference between "the site I'm on is tracking me to figure out how I use their site" vs. "any site I visit is essentially aggregated data because all the sites use the same major trackers and ad networks". I wonder if the big analytics companies will need to change their business model, or at least their tech, to account for these kinds of changes.
In theory, yes. The actual main point of doing research, from the researcher's point of view, is to advance their career. Typically this means posting cutting-edge results in high impact journals using novel methods. Relinquishing control over crucial details allowing a researcher to continue publishing high-impact papers would increase the competition for the researcher in that academic space, making it harder for that individual to advance their career.
> "Nature" could also include humans. I haven't seen anything to suggest that the natural outcome of billions of years of evolution isn't some highly intelligent, dominant organism that ends up shaping its environment to an extreme degree.

I wonder if the narrative that humans are not of nature makes it easier for us to harm the environment, since we do not feel part of it (as evidenced by our use of the word nature as some _other_).
Fleetio | Senior Full-Stack Ruby on Rails Engineer | Full-time | REMOTE or on-site at HQ in Birmingham, AL | https://www.fleetio.com/careers

Fleetio is a modern software platform that helps thousands of organizations around the world manage a fleet of vehicles. Transportation technology is a hot market and we’re leading the charge.

Your work will be heavily focused toward high level, high impact areas. You’ll work closely with Product Managers and Designers to plan, design, and implement some of our more complex features. You’ll have a strong voice in the development and planning processes. You'll be joining a tight-knit team that's used to moving fast and taking on responsibility. That said, we have lives outside of work, and we know you do too. We are a family-friendly company that is still young enough for you to get a nice slice of equity but old enough to be a stable and healthy place to work.

Tech Stack: Ruby/Rails, AngularJS, Bootstrap, Postgres and Heroku - currently on Rails 5.1 and strive to keep our frameworks and libraries up to date.

Perks: competitive pay, meaningful company equity, 100% coverage of health and dental insurance, strong remote working culture, professional development budget

Apply here: https://www.workable.com/j/183C8EE373
The main UAC change in Windows 7 was just that it didn't pop up for changing of settings. But UAC on settings wasn't the problem (in fact, macOS basically has this and it's a non-issue), UAC on legacy Windows apps only tested on Windows 9x or on administrator accounts on NT systems was.
Once the law is in effect, that is. First, it needs to be passed - and then, not shot down as unconstitutional. Moving the burden of proof to the operator (a third party! Not even one of the endpoints) sounds...very brave.
Android Debugging Tools
I find Apple extremely annoying when you disable iCloud: they keep reminding you to enable it on every occasion (updates, freeing up space, going through photos, etc).
I agree about how good it is - I don't think anything on TV has given me the same sense of existential dread since I watched Threads on the BBC when I was a teenager.
For example, I cannot copy and paste text in Google Docs in Firefox.