skysight-inc/HackerNews huggingface dataset:
The question is how you want to characterize an iPhone. If the phone is Apple's property that they're letting you use, then Apple's app store restrictions are analogous to McDonalds deciding what going on their menu. If the iPhone is a product that you bought from Apple, then Apple's app store policies are equivalent to GE selling me an oven that will only cook food purchased from GE's grocery store.

Luckily, oven technology doesn't really make that business model feasible so GE doesn't try to do it. But I think there are reasons for antitrust authorities to take a careful look at the behavior of companies that do have this kind of power over their customers.
A standing general reminder for anyone new to Rare Earths - they are rather humorously mis-named. They are not especially rare.

They're not as common as iron, but more abundant than silver.
Double check it's not using or trying to autodetect a proxy?
ⓘ
Former pet parrots breeding and thriving in 23 U.S. states
You should use the tools that work best for you. If your Python script is that, then I say that's excellent, run with it!

Myself, I've moved through trying several different make replacements (including custom-built ones) but moved back to make a couple of years ago. It offers benefits that matter in my situation that I've not been able to reasonably find elsewhere.
Do you have some kind of a script for these CF threads or do you just spend that much time on HN? :)
Firefox has ~250M users as of about 9 months ago and $562M revenue for 2017.

I'd honestly pay $2 per month (12 times "my share") for a Firefox that completely disavows the ad model and produces a truly user-centric experience sans ads, fingerprinting, etc. However, given that over 95% of their revenue comes from Royalties, I don't see that turning around any time soon.
There are guidelines for just passwords that don't involve MFA. Very important ones few people do, because it is not trivial to implement.

- No password that is part of a leak. It requires maintaining a database, or using an online service.

- No upper limit on length and character set. It requires full Unicode support and proper string processing.
OT, but their website looked like this for a few seconds before it assumed its final form: https://i.imgur.com/f2PHTWA.png
Human trials are expensive and involve a whole lot of being careful beyond "the wikipedia page says it's fine so let's do it!"

Part of that being careful often involves mice.
So why did Apple decide to make its own SOCs but not its own modem chips?

I would expect making CPUs and GPUs to be a lot more difficult than modems, no?
Interesting. Every browser than firefox is useless to me as they have no good support for plugins (addon api's) like tree style tab.
Is it just a coincidence, then, that every time I refreshed this article, literally every single user listed under "who to follow" was alt-right, a white supremacist or a Nazi?

Or that the company itself has repeatedly made anti-Semitic statements?

Or that there are photographs of the founder making white supremacist hand signs?
Hey! Implementor here.

> As far as I could tell, the only way to provision an application was through a mobile phone app.

Any application that knows how to ingest an otpauth:// URL and generate TOTP tokens will work. I know that 1Password on macOS does, and I suspect that other desktop password managers also have TOTP support.

> I don't have anything that can scan a QR code.

If you open the HTML for the TOTP provisioning page, you'll find the raw otpauth:// URL in an "aria-label" attribute on the QR image. That's obviously not very user friendly, and will be improved upon.
Serious question: what do you think would be the better alternative? Especially when factoring in ease-of-upkeep (for the creator), convenient and familiar interface for the majority of users, Google's generally good uptime and server performance, and that a Google Sheet set to public access is not closed by a reasonable definition of that word.

I was going to quip about how I am annoyed that Google removed download-as-a-CSV as a URL endpoint, but it appears I misheard about this because /export?format=csv still turns the Google Sheet URL into a direct download link:

https://docs.google.com/spreadsheets/d/1wZhPLMCHKJvwOkP4jucl...
> easily cracked by brute-forcing concatenations of dictionary words

This is probably misleading (and possibly confused).

Diceware style passphrases are easily brute forced relative to a random passphrase of the same length but that doesn't mean they're "easily brute forced". Assume your attacker knows how you're constructing your password, estimate the amount of entropy, and be sure it's enough.

44 bits is low for offline attacks, but (as the comic points out) still better than a lot of passwords people use even when they're trying to make a good password and following NIST guidelines. If you use 5 words and draw from a longer list, it's easy to be solidly out of the range that's crackable on modern hardware.
I'm sure it's fine for casual users, and you can't deny the battery life improvements when using Safari.

However as I posted in another comment, Safari is the new IE when it comes to bugs and standards compliance.

Here's an example that broke many many sites that use OAuth2 Auth Code Flow for login (including the main UI portal my company provides clients): https://bugs.webkit.org/show_bug.cgi?id=194906

This was also an issue in iOS, and since Apple doesn't let any other browsers actually use their own rendering engine on that platform (they're just wrappers around Safari's guts) this was broken for all iPhone users no matter the browser.

This is just one example. There's been numerous other issues such as disabling third party cookies by default.

I can only surmise that Mac users use Chrome/FF because the internet just _works better_ when they do.
I'm sure you're doing fine. If your weight's down, how aren't you burning fat? Concerns about burning too much muscle IMO are extremely overblown for most people. I would recommend the eye test (look in the mirror) or feel test (poke at your flabs). Progress pics might help. I think there's calipers and other measurement tools too.

Keep in mind your fat deposits will get smaller, but they don't go away. You'll likely still have some flab, even if you're pretty lean. The process is also very gradual. I'm 6'2" male and had a gut/tits @185lb, and even in high school @155lb. In either case, it was still quite noticeable, unfortunately.

If you haven't put on enough muscle already, that could seriously effect your results. There's still benefits to maintaining strength / muscle even during weight loss, but progress will be slow. Generally, you just want to get a balance of nutrients, and be at caloric deficit. You'll lose fat, that's it.
It was the CSE. That doesn't really happen in Canada.
From what I understand, whale oil is still one of the best choices in many machine applications (including cars) and wasn't really killed so much by synthetic lubricants as by the Endangered Species Act.
link not working for me :(
The YouTube Gaming app shuts down this week
The numbers don't make much sense to me. On FF I get 14.05 with NoScript active. Curiously the headers increase from 1.68 bits to 3.47 when NoScript is running.
About 60k words.
If you've dealt with electro-mechanical switches and displays you know

electro-mechanical switches and displays => expensive

touch screen => cheap

Both from a manufacturing standpoint and a design stand point.

So you are right it's not futuristic it's chintzy.
If 8chan, a clearnet site, is considered verboten, we are all a bit screwed.
A shared library isn’t really shareable across OSes or platforms. The neat thing about a WASM library is you can load it in your browser, in your native app or in your Python script.
How to advocate for things we care about
https://www.nationalgeographic.com/animals/2019/05/tropical-...
A war with China won't be a war fought on the ground. It will almost assuredly be a war of navies and cyber. The US can handle both in perpetuity. Neither country wants to use nukes and the US has 0 interest in occupying China.
I don't think so.

There was a port of node that used Chakra instead of v8, but I don't think it's maintained. And this is only one piece of the puzzle.. Electron also relies Chromium itself for rendering so this would probably be a pretty sizable effort.
I had a few reasons for picking Chromaprint. I was interested in building a media player with Scala (still working on that on-and-off). I noticed that Python seemed to be a more popular language for this type of thing and was frustrated that some key libraries I wanted to use, particularly this one, are available for Python but not on the JVM. The more I looked into Chromaprint the more it intrigued me; I wanted to understand how it works and in a way set the algorithm free as it's almost become a standard for audio identification. I found a few reimplementation attempts in other languages on GitHub but couldn't get any of them working, so I guess I saw it as a challenge, you could also call it a rabbit hole. Aside from that, I was looking for an excuse to use Scala in a project. Kotlin looks interesting too and I'll hopefully get the chance to work with it someday, I can see that it is probably easier to pick up and might be a better choice for a big team - but Scala seems more faithful to functional programming principles and I find the style more elegant.
I believe that was a reply to your question:

> Interesting, what inconsistency?
Reminds me of this:

https://en.wikipedia.org/wiki/Betteridge%27s_law_of_headline...
A couple problems with this statement is that there is no "engine" and there is no notion of turning the Tesla "off."
It depends on your definitions of easy to remember, hard to guess. 6 dictionary words with one random character is sufficiently complex to thwart planetary scale brute force attacks. It's much easier to remember than 20 random ascii characters.
Just curious, what is your concern? Is it privacy related? Or does it inhibit consumption of APIs you tried to host with them? I don’t like the header either and I have a public API with Cloudflare but it hasn’t caused any technical issues as far as I know.
Following this advice, I discovered an extension that automatically spoofs the user agent and does some other things. Haven't tested yet, but it seems to be actively maintained.

Since I'm on the topic, other two lesser known extension I have are CanvasBlocker (fakes canvas fingerprinting (or disables it)) and Privacy Badger (heuristically detects and disables trackers; complements ublock).
Support localhost subdomains (http://foo.localhost:8080) like Chrome does and I'll consider it!
Again, not sure about that local market, but modern townhomes of 1500-1800sf on a ~1000sf lot is a very common form. Alley garages make it even easier because then the front can look nice instead of being 75% driveway and garage.
This is what the climate disaster is going to look like in most places: No single apocalyptic catastrophe, just more extreme weather, poorer harvests, fewer fish. Things are only going to keep getting worse, and it's an open question what secondary effects this will have on human society.

Sustained droughts and famines have toppled civilizations in the past.
The purpose of news is to inform about current events, not specifically for holding the government accountable.
Cool idea! I like the self-assessment angle.

We wrote this for CTOs since prior to hiring a dedicated security engineer, security responsibilities in a company often fall to the CTO. But really, any more technical person in a company with some ownership or interest in security can leverage this.
Make Your GraphQL API Relay-Compatible
Huge number on parrots here in San Diego flying around the El Cajon area flocking from tree to tree. Residents hate them because they are very loud.
https://www.cbs8.com/article/news/local/your-stories/flock-o...
Highly depends on what your site is. If you're making tools for an industry where everyone runs on Google business accounts it'll be different than if you make something for a general international market, something where people do not want to link their real identity, ...

Personally, your thing would have to be really important or deeply integrated with Google for me to use Google login.
Google's reCAPTCHA makes it impossible to use large portions of the web once you take reasonable measures to protect your privacy. The challenge will continuously fail, despite you spending time to carefully solve it. This cruel behavior is described in a patent [1] by Kyle Adams of Juniper Networks.

[1] https://patents.google.com/patent/US9407661
It's not, don't listen to the bros. You'll burn some calories recovering from lifting, but this is overblown. Want result quickly? Do lots of cardio / hiking; just don't neglect your strength training. On the flip side, if you lack time, you may be better of just working on strength, and being very disciplined about diet.
I suppose that's when the cat falls of out its cradle.
You have to stick with known popular user agents. To mitigate tracking by UA you need a randomized user agent that changes periodically. Panopticlick won't be able to account for that in its stats. It's not a good idea to switch UA on every request since it will be hard to diagnose breakage caused by a site that rejects particular UAs.
> Or read commentary about it. Which exists in abundance.

Commentary about terms and conditions doesn't really help for a whole bunch of reasons.

What I mean by "actual consent" is that I've been fully informed what the deal is and I've actively said "yes".

Legal consent is a lower bar than that. For example, if a service lays out the deal in a document that can't be clearly understood by a normal person and/or that is ambiguous (meaning that a normal person can reasonably understand it to mean something that it does not mean), agreeing to it is legal consent, but not real consent -- real consent requires that each party fully know what they're consenting to.
After clicking through, this was pretty obvious. I think there are just a lot of fired up hackers out there wanting to see WW3 between Github, Gitlab and the rest of the world.
Another nail in the coffin.
I'm a happy ex-evernote user - the lack of any coder friendly features and nothing but radio silence on the forums whenever mention forced my hand over to notion and I've not looked back
Nah, the people who care are happy. The problem is the guys who like to talk. It's the same with security. There's like an army of people who've learned about it from internet commentary exclusively and they bluster a lot as a substitute for competence.
If I read that correctly, it's about comparing the entire password, not portions thereof, so it's not really about "multiple English word" passwords (except that I assume "passwords obtained from previous breach corpuses" is likely to contain some specific examples of the breed, almost certainly including "correct horse battery staple").
ESB and Workflow engine for small Python focused IT dept
Hello, I am looking for recommendations for our small python shop, we would like to automate our business logics using a workflow engine, but things like mulesoft are overkill, we are trending towards microservices and RabbitMQ as ESB also seems a bit overkill in our case, not sure if Redis is any good for ESB? Google search result doesn't seem redis has been used for ESB purpose much. Can you guys please recommend the above tools?
Captchas. Lots of captchas.
> while that s not true in macs

If you're talking about Alt-Tab vs Command-Tab, you can rotate through windows within a single app using Command-Backquote. It took me forever to figure that out but it made a world of difference.
If you want the ability to save lists of Tabs, Firefox has https://addons.mozilla.org/en-US/firefox/addon/tree-style-ta... which makes tabs appear in the sidebar, which makes managing even dozens of tabs simple.

Installing is one click - as simple as the chrome web store.

If you want the ability to unload tabs, firefox struggles with it. The best addon is https://addons.mozilla.org/en-US/firefox/addon/unload-tabs/ but it admits that it is buggy. Haven't tried it though.
Maybe hit us up via GitHub or Gitter or Twitter if/when Hedgehog provides a fully decentralized option/s (as discussed above). At that point I think the Embark team would be really excited to leverage it in a new or refreshed tutorial series.
Vote with your dollars and your eyeballs, and retreat from the parts of the Web that are abusing you and everyone else. You lived fine before Facebook and Instagram, you can live fine without them now.
CPU design and RF stuff are both very difficult; I wouldn't assume one way or the other. I wonder if knowledge of CPU design is more widely dispersed (e.g. you can hire ex-Intel, ex-AMD, ex-IBM people) than cellular radios where the only (working) ones seem to be made by Qualcomm.
I run anywhere from 30 to 70 miles per week and I just couldn't follow a keto diet. I have a hard time even just picturing it. Just the other day I was reading about a recent study showing that low-carb diets affect your running. That already made intuitive sense if you had been in a marathon and hit the proverbial wall at mile 20, roughly when you have depleted the glycogen stores in your legs and start burning fat. Of course the general population is different and doesn't obsess over their 10K times.

There are other factors that play a major role. I don't like meat much. I'm lactose intolerant. I've always had a sugar tooth. Thanks to lucky genes, a very active thyroid and the running, though, my body fat stays around 8-9%. Over the years, I learned to crave carbs less and to pay more attention to protein. I do some form of intermittent fasting, by accident, in the sense that I have early dinner, mostly for sleep hygiene, and rarely eat again until after my morning run, about 14 hours later.

There's no single approach that works for everyone, of course. Worse than that, though, is that even if you find the motivation to try a variety of them, you probably want to spend at the very least several weeks on each before you can start extrapolating useful observations.
HISTFILESIZE and HISTSIZE don't solve the abysmal bash history file handling when you have more than one bash open.

I would also like to know which distro clobbers user settable env variables.
PSA: Tesla ELDA has steered me into oncoming traffic multiple times
Which it hasn't been since Reagan become president.
Outside of academia, I’d wager the usage of thesis in the article is more common.
Resist fingerprinting will also stop sensor data (e.g. accelerometer) from being exposed on mobile, which can be used to identify[1].

You can verify if it's exposed on this site[2].

[1] https://www.zdnet.com/article/android-and-ios-devices-impact...
[2] http://www.albertosarullo.com/demos/accelerometer/
This is a rather poor refutation of the claims made. I hope they can do better or I forsee a mass exedous. Who is a good alternative?
> Firefox has ~250M users as of about 9 months ago and $562M revenue for 2017

I think nearly everyone would be willing to pay the ~$2/year to use Firefox if all browsers weren't free.

At that price, the main reason not to pay is the hassle rather than just downloading.

Thanks for the context about the revenue of Firefox. I had never given it any though.
well you could help out gitea and make a hosted version on gitlab.
there is a ton of stuff which cloudflare could do, like creating a object storage git backend, etc..
Truepic doesn't solve the problem of you taking a picture of your neighbors flooded basement or broken windshield. GPS can't fix the problem as its not accurate enough, and for quite a few places is not odd if you park somewhat close to your neighbors house.
There is just one link here: https://learnawesome.org/learn-awesome/mathematics.html

If people share links here, I'll send a PR to learnawesome to add those under mathematics#flashcards section.
For me personally:

- A trackpad is much faster and more ergonomic than a separate mouse

- Being able to just pick up your workstation and take it to a meeting, a colleague's desk, or home is extremely convenient

- As you say, you can always hook them up to a dock if you need a different arrangement for long hours
Huawei is better off without Android
The article mentions that it took the family years to get these services in the first place. Which indicates that they are indeed capable of living for extended periods of time without care. Your claim that the family cannot make it through 30 days without government services for their daughters remains unsubstantiated. Seriously, trying to say that 30 days of no government services is prohibitive when the article states that they lived for years without these services is grasping at straws.

> Also, I say that this position being made is again failing to consider that 13$/hr may not be adequate. It is not strictly better- one has to pay the cost of moving, then spiral into debt assuming 13$/hr isn't enough to cover the medical expenses and living requirements of one's family. Assuming he's an intelligent man, he will likely already have examined the economics and found it doesn't check out.

How is he somehow going to spiral into debt with a $13/hr job, but not spiral into debt with no job? This makes no sense. You're trying to say that by making more money he is going to go into debt.

> I think this position is really unsympathetic and assuming an incompetence that isnt there and is overly gatekeeping. Someone is in a situation in which there are no good options due to little fault of his own, and that sucks. That's all the article is saying.

I don't think he is incompetent, that's my whole point. He has opportunities, he is competent, but he feels like he is incompetent because there's something holding him back from taking these opportunities. And in the end, this lack of employment is eating away at his sense of self work. This man seems to have it ingrained into his identity that he is an auto plant worker in Ohio, and he will never be able to be anything but an auto plant worker in Ohio. He is aware of opportunities elsewhere. The article explains that hundreds of other plant workers have done this, "Hundreds of workers have already transferred. His nephew packed up his family and moved to Flint". I don't necessarily blame him for his refusal to accept the available job opportunities. I blame the society and culture he grew up in that hammered it into his head that he'll never be anything but an auto plant worker. Feeling sympathy for whatever it was that leads him to make his decisions doesn't mean we need to to try and justify these decisions.
Does Safari have a sandbox now? (like Firefox and Chrome have had for a long while now)
The Grocery Distribution Network in North America (2010)
Kind of silly to make this a coin. Because you'll fundamentally need an external system to audit CO2 sequestration and manage issuance, the auditor might as well be a centralized issuer.
Might want to cut back on the words "simple" and "vanilla".
Ask HN: What's the quickest way to get into synthetic Biology?
I have a Biology background (B.S. degree) and a programming background.

I want to know how I can get my feet wet with synthetic Biology.

What's the quickest way to do so, without having access to a university lab?

Assuming I have space in the garage, is there some kit that I can buy, or something that I can build?

(I have seen some kits, but not knowing enough about the space, I'm not sure which ones are decent for learning and experimenting, and which ones are just money-grabs)