skysight-inc/HackerNews huggingface dataset:
tldr: drawings aren't pixel perfect.

Longer: this is actually a viable way to do many types of fingerprinting, not just canvas. I'll give an example. In a graphics class I took our professor gave us output images to compare to. Two people with the same model computer, same specs, would frequently have a pixel or two different from one another. Change the specs and you're easily a dozen off. Worse than that, the pixels that are off from the original image can be different pixels. This comes down to the silicon lottery. So if you can think of anything that you can access where you can get the user's computer to do some sort of floating point calculation, you can probably get a fingerprint out of that.

So to fix this problem, you'd have to figure out how not just to make pixel perfect images, but for two CPUs of different types (which even same type doesn't currently) to always calculate the save answer to the same precision, every time. There's tricks that can be done like rounding, but it gets hairy really fast and becomes unpractical. But if you do know how to solve the problem, I'm sure people would really appreciate the answer.
1. They're mixing a Bourne-ism (backquotes) with a Bash-ism (dollar-parens). I don't know why.

2. This could be an attempt to normalize and reduce whitespace, including eliminating newlines (though you should prevent injection of arguments to `echo`):

bash$ Temp=$(echo " a b c ")
bash$ echo "[${Temp}]"
[ a b c ]

bash$ Temp=`echo $(echo " a b c ")`
bash$ echo "[${Temp}]"
[a b c]

bash$ Temp=$(echo $(echo " a b c "))
bash$ echo "[${Temp}]"
[a b c]
If it is in the ocean that would be a disaster.
Meh, 1Gbps over cable is nothing, really. Switches with 10g uplink ports cost almost nothing now. Problem is that most software and hardware on user’s side can’t deal with that speed :) 5G smartphones probably won’t be able to give you 1Ggps either.
Sure. Though as a firefox developer, I also appreciate those bugs and reports of performance problems!

A good bug report with solid reproduction steps can often be more useful than a mediocre patch.
What’s New in Ubuntu 19.04 “Disco Dingo”
> I'm just not clear why this process is allowed (or more importantly, why it can't be removed).

Because we don't know how to make CPUs do pixel perfect images every single time. (I wrote a little more above)
Is Hacker News now political news?
Agreed. To narrow down some of the details: There are n*(n-1)/2 = roughly n^2 / 2 pairs. If each pair has a 1/k chance of matching, then the expected number of pairs that match is (n^2 / 2) / k. Therefore, if we set n = √k, we get roughly 0.5 pairs on average.

Now, if it were impossible to ever get multiple matching pairs, then "the chance there's at least one match" would be equal to "the expected number of matches". Specifically: "chance of at least 1 match" = "expected number of matches" - "chance of at least 2 matches" - "chance of at least 3 matches" - ... . Since it's possible but unlikely to get multiple matches, the approximation should be reasonably close.
I think you can read Wikipedia and its references as well as I can.
I think the interest comes from the fact that it is the last "home" console by SEGA before going software only. It's also due to the fact that Sega gave its approval to release disc images that allows emulation. A big Japanese company approving this kind of work is kind of unprecedented.
>keto diet is used as a treatment of epilepsy in children or infant

God I love being a kid. Iget ez in ketosis
it will never be implemented
Three-Factor Authentication Using EEG Earbuds
I kind of am extremely weary of any kind of alien talk. Heaven's Gate and Scientology all revolve around some form of alien-worship, and they were and are extremely destructive and evil religions.
I would like to know more about the long term stability of the glues involved and how the entire structure as a whole decays / fails over what timeframes under what exposures.

Most other building materials in use today, the actual core structural elements, have withstood the test of centuries of use and are well proven and stable technologies.
The Montreal subway is my favorite in North America. Anyone have any recent numbers on how much it cost to build it and run it, per mile?
Along these lines, how much do various cognitive biases and false beliefs contribute to deaths?
Where can one take a look at those specs? Are there RFC like things available?
"Democracy is two wolves and a lamb, voting on what to have for lunch."
I give it a day before people start claiming (seriously) that this is how he’ll make Mexico “pay for the wall”.
I switched to Windows Chrome, from FF Linux and it actually increased my score by 0.02 bits.
Unless I’m misunderstanding the question, many http clients would pool http(s) connections. Most of them do that by default. So connection establishment cost gets amortized over large number of API calls.
I doubt that would be the intention. At least not only that.

Amazon has some incredible network effects that would create a compelling cellphone service offering. They could bundle cellphone plans as an extra in Prime an undercut competition while giving unlimited access to Amazon.com, Alexa, Twitch etc.

Having a cellphone company makes a lot of sense for any of the big tech companies. It allows them to create end-to-end experiences that are compelling just because they can vertically integrate different moments of their customers journey.
Is there then a business model in a commercial license for Boden if a company can use it as LGPL? In general are there many companies who pay for a commercial license to avoid LGPL?
I don't know what these commenters are talking about. I've been using FF on Mac for over a year now on 3 different Mac Machines. It's super fast, as good as Chrome. May be you need to reset it or something to get it working properly. The only issue I had with FF is Developer Tools, which are also have improved a lot with latest release, and continuing to improve.
Not sure what you mean. Glendale isn't in the East Valley.
Hmmm... I think Chloe, and anyone in her situation, could use a prefix when they call to not show the number at recipients phone. I think it is #31#

Will improve the situation somewhat
I'm curious about the difference between things like NoScript and native Brave script blocking.

In particular I was going to make a snarky comment that the site seems to, appropriately, not work when script blocking is enabled on Brave. I do get the site to do the refresh business a couple of times, but no results are ever displayed.
Works for me with FF 68 on Mac
Solder Alloys and Metallurgy
Why does he need emergency powers to set tarrifs? That is already under the normal purview of the executive.
> Not by default it didn't, but if you had any sort of technical know-how it was fairly easy to sideload it on.

And it was a super outdated Android runtime that ran like dogshit compared to the native BB10 apps.

Also, if you wanted any sort of Google Play services stuff, you had to have an app on a laptop/desktop to sign all your apk's the same and remove a specific check... and you'd have to do it all over again every time you wanted to update an apk with play services.

Not ideal.
In kind no, but in degree yes. The US has lower social mobility than many other 'western' countries.
Can anyone summarize what the attack vector is? Fake repositories? Bad maintainers? Fake tutorials?
You would need to put real money into the storage though, and you would want to spend real money getting the emulator tuned up so that the end result is good (Nintendo showed how nice things could be, although maybe sales from the Playstation Classic might show it doesn't matter?)
If you're a non-user and do not wish your information to appear on the app, you can unlist your number here - https://www.truecaller.com/unlisting

Though I do not agree with the method where as a non-user I need to manually opt-out of the service, it does seem to work. My number is no longer visible on the app.
Theres that, plus who could reasonably expect a nation to deal with a problem like this in such a short timeframe. If the US can't stop illegal immigrants after years of trying, how is Mexico going to do anything in a matter of weeks?
A lot of people here equate advertising with tracking.

A lot of people here also have huge double standards regarding Mozilla.
AOC and Ted Cruz agree on bill banning Congressmen from becoming lobbyists‬
Considering your first two, loneliness and broken heart, these would probably fall under suicide, which is 1.8%.

So I am not sure you'd be getting a significant new insight into major causes.
The patents should be pretty close to expiration. We're coming up on the 20th anniversary of US launch, although I think that may have been the end of the era of submarine patents.
Twitch is more than just game-streams and overall works well now. What relevant difference can stadia make? AFAIK it's just a cloud-service, not something that fundamentally would change the game-experience?
It seems like this could be prevented by cooking fruits and vegetables.

I always knew salads weren't really healthy!

On a serious note, I may actually avoid salads and try to find a way to cook fruit quickly instead of eating it raw.
Im certainly no expert, but as far as terminology, mass timber seems to be a category that includes CLT as well as others:

>Katerra's mass timber product line will include cross laminated timber (CLT) and glue-laminated timber (glulam) at both architectural and industrial appearance grades.

https://www.katerra.com/en/what-we-do/products/mass-timber-p...

> Explore the supply chain for cross-laminated timber (CLT), nail-laminated timber, glulam beams and panels, mass plywood panels, dowel-laminated timber, and laminated veneer lumber; and the opportunities and obstacles for mass timber in global manufacturing and construction.

https://www.masstimberconference.com/
This all sounds good to me. Punishing ad industry would be the best, but punishing dumb advertisers and punishing dumb ad networks also sound great.
Regarding India, They now have privacy as a right. Shouldn't they enforce it?
CTRL+F "debt" - nothing.
CTRL+F "interest" - nothing.

Lets take a quick look at some numbers.

[1] "The result is a massive run-up in debt. Though the MTA spent only $848 million on debt service in 2004, according to RPA, it is projected to spend more than three times as much, $2.67 billion, in 2014. Debt alone will eat up 17.6 percent of the MTA’s operating budget by 2014; worse, RPA says that an alternative calculation shows the 2014 debt load at 23.1 percent of the operating budget."

[3] "By way of comparison, Syria has $30.1 billion in debt. Cuba has $28.9 billion. Twenty-eight other countries, from Ecuador to Jordan, Jamaica to Kenya, have less debt than the M.T.A."

[1] https://nyc.streetsblog.org/2011/09/07/where-does-your-fare-...
[2] https://www.politico.com/states/new-york/albany/story/2015/0...
Not sure how much I can share without giving myself away but...

As an active participant in Playbook's entire development from (near) start to end, there were multiple reasons. They weren't good reasons (most of my colleagues had, eh, concerns which got override,) but they somewhat made sense.

What happened was that multiple teams (internal and external) screwed up, so much so that the thing's internal was completely redesigned half way through development ie. Switched to a completely different SoC .

As another poster noted, their power supplies were great. I still have a couple left around my house. They had to be great partly because of a design oversight....
I know it certainly has a photopicker but I don't know if you have to have filesystem access to pick one or if you can save photos.
I was a die hard Blackberry (my business phone, using a private iPhone) user, the last one perhaps in the large corporation I've worked for.

Then the Passport launched, LOVED the format, best format ever squared and large screen, beautifully fitting everywhere though being larger, loved the TOUCH keyboard, loved the unified messaging but had NO F* network connection ever. Just could't be called or call others. A second Passport the same. Then one got dropped and it totally broke internally, the "steel frame" didn't help in any way, I assume it contributed due to its weight and momentum.
The article says to examine 'ld.so' files, but I don't remember the interpreter being named 'ld.so' in remotely recent history.

Perhaps it's a Debianism, but it's been '/lib/ld-linux.so.$ver' for ages:

$ readelf -p .rodata /lib/ld-linux.so.2 | grep '/etc/ld\.so\.preload'
[ 2d9c] /etc/ld.so.preload
I get very different results from each. Some don't quite make sense to me. For example, amiunique says Timezone 3.37%. Panopticlick says 1 in 16, so half as bad. But how the hell is that timezone so identifying? I live on the west coast, how is that timezone so identifying?
> Choosing to migrate their default search to Google was a money grab by Firefox and that money is, in turn, 100% dependent upon tracking

Well it was not a bad decision to make since most of their users would set Google as their default anyway (no matter how privacy concerned you are, you still can't do without Google search unless you really really try hard, which most people don't).

In my opinion it was a sensible decision.
The part you quoted is not about scalability.
So much this.

If you make your security policies into a problem for your people trying to do their work, they'll find ways to work around it.

That either means 1) your policies are misplaced and you need to relax then, or 2) you need to fire everybody who creatively works around them.

If your adversary is Mossad, the option 2 is the right one. If your adversary is not-Mossad, you can almost certainly have a security policy that people won't feel the need to work around.

There are, of course, shades of grey below "Mossad adversaries", but in my opinion at the upper end of that you have policies that include providing every employee with a good password manager, TOTP apps/devices, and/or USB 2FA keys - and choosing services which integrate properly with them.

"Change your password every X days" is an admission that you're going to leak passwords somehow, and that you only care about your data/systems enough to close the attack window down to X days. Which means you're screwed before you start, and may as well just turn everything off now.
I can't say that I could agree Firefox's privacy options are hidden/behind menus. I downloaded a fresh copy of Firefox today and the privacy features were quite encouraged and are even the main focus of the Security / Privacy tab.

Brave is an excellent browser but it is only a matter of time until the remaining features are brought over to Firefox. Not to mention some feel they aren't "out of the grasp" of Google until they're fully away from Chromium.
I suffered with the same until around december last year. Ever since I cannot distinguish chrome from firefox most of the time.
How to Improve Your Relationship? Peaceful Energy and Relationship, Vastu Expert
Note that Brave does not develop its own engine, piggybacking on Chromium instead. It's easy to play the righteous game when you're piggybacking on other people's work. DuckDuckGo and all alternative search engines are in the same boat.

It can be argued that Brave has a harder dependency on Google than Mozilla does. Because Mozilla has not outsourced their core competencies.

Just to give an example, with Manifest V3, Google is deprecating extensions like uBlock Origin or Privacy Badger. What will Brave do? Maintain their own fork? Well that can get expensive fast. So if it was a business-driven decision to piggyback on Chromium, I don't see why they wouldn't adopt Manifest V3 as well. Manivest V3 will offer mediocre means to block ads too and the average user will not know the difference.

When Brave implements its own engine, or maintains an actual fork of Chromium, or when DuckDuckGo implements a web crawler and stops leaking data to Microsoft, that's when they can play the righteous game.

> often hidden behind menus that your average user will probably never visit

The average user will not install Brave either so this point is moot.
I seriously don't understand why people have been gravitating towards Chrome for years despite Google being synonymous with surveillance, even on Linux. Google chrome is the fifth most popular download on Arch User Repository[1].

Alternatives like ungoogled chromium exist, but aren't as powerful/stable as the real thing, so why not use Firefox. Call me overly optimistic, but augmenting the firefox/mozilla community with participating/privacy conscious users can only lead to good down the line.

1. https://aur.archlinux.org/packages/
With this, VPC is no longer needed from lambda call to RDS, and this means that cold start time will be lowered from seconds to milliseconds. I made a ready to use recipe (source code+deployment script+demo included) here https://coderecipe.ai/architectures/77374273 hopefully this help others to easily onboard to this new API.
You're not giving anything to Mozilla. It's end to end encrypted.

https://hacks.mozilla.org/2018/11/firefox-sync-privacy/
Wouldn't a book on microbiology be much more useful to humanity?
Trying to summarize the parts I read:

Why? Everything. No one (or group) is in charge, no one (or group) has the power to wave a wand and get satisfaction, and no one (or group) seems to actually be doing diligence on figuring out why. Anyone that does have the power has no accountability, but does get to milk the process for political points and defer the costs as externalities from them to the system.

If only politics was about enabling better living and good stuff happening, rather than being a popularity contest.
> Sprint has a crazy amount of 2.5GHZ spectrum holdings.

Which gets stopped by walls and wet leaves. It's great if you're in line of sight of a tower and own a device that supports HPUA (high-powered uplink).

If both aren't true your experience will be less than optimal as the phone will have to fall back to band 25 and band 26 LTE which still isn't being provisioned on 15mhz or 20mhz. This means the fallback frequencies will congest easier. In most markets because Sprint either lacks the spectrum to go wideband or needs to use it for legacy CDMA2k since they only support voLTE on like 4 high-end phone models.....
Yay: Yet Another AUR Helper
These are fraudulent charges to occur after you've closed the AWS account. Cancel the credit card account, on the basis they have violated their fiduciary duty to the customer. Tell them you're filling a lawsuit.

File small claim lawsuit for the improper charges within 10 business days, if the bank hasn't made this right.

You have proof of cancellation of the AWS account? That's how you will win.
I never Switched to Chrome in the first place. It felt like an uphill battle sometimes when Firefox deprecated the old add-on APIs, which made add-ons like CTR die.

However, in the past few years, Firefox has been improving left and right, with it's Rust components, containers in core, and it's new dialect in design. The recent improvements alone should convince someone to switch.

The reason why I stayed with Firefox is because Chrome is from, well, Google. It boggles my mind to see someone praising a browser that is from a an advertiser. They never put ads on the browser (I'm looking at you, Opera), but systematically did a lot to track it's users and make money out of it.

You can clearly see the difference in motivation when Firefox removing a whole API of add-ons vs Google removing one particular API feature.
There is a lot of good information here: https://www.swedishwood.com/about_wood/about-glulam/
> no latency between page transitions

Not true, latency scales with CPU capacity on the client. SPAs now exist with client side rendering to mask the bloat in the site plus its dependencies.

If you have a SPA arch but you did a page load per click, you would die. But all sites creep up to 500ms page load times regardless of their starting stack and timings.
Came here to say this, I've heard it called 'glue lam' also.

Who the hell thought up the mass timber name though?! That just says to me a solid (mass) of unengineered wood.
Debt is part of the financing of a project, not a 'challenge in building them'.

Comparing the debt of one group to an arbitrary other doesn't help so much, because what matters are interest rates, revenue to pay principal and interest rates, stability of tat revenue, other covenants, penalties, and of course cost of capital.

FYI Jordan, Jamaica and Kenya would carry a lot more debt if they possible could.

If some agency in NYC has a huge amount of debt from credible lenders it might be a 'good sign' they they are actually worthy of it.

FYI, I think the article does a good job at it:

"“People will say to me, ‘Why are MTA construction costs so high?’ And the answer is ‘Everything,’ ” says Julia Vitullo-Martin, a senior fellow at the RPA and co-author of its 2018 report comparing New York’s construction costs to those in peer cities. “Every factor you look at is flawed the way the MTA does business, from the first step to the end.”

I love this level of candor in people who are willing to speak publicly.
New App for people who want to read faster and more accurately
The label "processed food" indicates not only that the food was probably made in a factory, but that its also full of preservatives and lacking in nutrients, generally. This article doesn't seem, to me, to be tying their argument to an appeal-to-nature.
Just sticking this comment here since I think most people would like to see how the site works. People are interpreting the numbers incorrectly, as I also did at first even though it says at the top exactly how they're measuring these numbers.

Your entropy is determined exclusively based upon the people that have used the site in the past 45 days. For now that number is about 204k. So for instance if you see something has an etropy of 9.08 (as my user agent does) you'd also see that it says 1 in 542.15 browsers have this value. 2^9.08 ~= 542.15. The ~ there only because the thousandths and onward digits are not showing. My exact entropy would be about 9.08254825596. All that means is that of the ~204k people that have used the site in the past 45 days, 377 had the same user agent.

The problem with this is that the people using this site are going to be a heavily biased sample. And so by tuning to reduce your entropy, you are not actually reducing your trackability but instead making yourself look more like the subset of people that are actively using this site. And this becomes an even bigger problem since I do imagine this site is actively shared on more technically orientated sites, such as this one. But the settings of technically orientated users are often going to vary somewhat significantly from the settings of the other 99% of users.

The point of this is that by working to reduce your entropy on this site you may, ironically, end up making yourself more trackable. So the numbers should be taken not as a measurement of trackability, but rather as an interesting insight of your browser/setting differences/similarities of other users with the site.

---

Also, 100% agreed on the silliness of them marking you down for not allowing cookies marked Do Not Track friendly. Until such things are enforced, in code and ubiquitously, they're meaningless unenforceable promises that rely on tracking and advertising corporations never lying.
The part at the top about having wealth leading to "better" and "kinder" societies was also interesting. It re-enforced a believe I already had that affluence allows people and peoples to afford to expend more on life not sucking and giving more and better opportunities. Please note: allows, as in it enables this as an option... not makes/enforces as in greed still exists in the world.
So anyone you ever bought something from with that credit card should be able to kill your AWS account with a simple phone call?