skysight-inc/HackerNews huggingface dataset:
On Windows the path separator is U+005c, it's only a backslash in most codepages, but not all: https://devblogs.microsoft.com/oldnewthing/20051014-20/?p=33... which links to a dead link; copy here http://archives.miloush.net/michkap/archive/2005/09/17/46994...

That doesn't change just because Unicode renders individual codepages obsolete, it's now special-cased into Windows that Japanese and Korean situations display U+005c as a currency symbol instead of a backslash.

There's also [System.IO.Path]::AltDirectorySeparatorChar which is `/` because Windows is often fine with / as a path separator as well.
Ask HN: Has anyone gone through SoC 2 compliance as a solopreneur?
I started a SaaS business about a few years ago selling to mid-market B2B tech companies and as I'm moving into larger and larger deals I'm butting heads with IT because I don't have a SOC 2 or ISO 27001 certification.

Going into this is as a single-person companies is far easier than executing on it if the company were to grow but it feels like a bear even at this stage.

Has anyone else gone through this process running a single(or even a few) person company? Was it worth it? What were the pitfalls I should be aware of?
Very cool, but...Murray Gell-Man for Santa Fe? Not George R.R. Martin? Drew Goddard for Los Alamos, not Richard Feynman?
I hope I don't sound crass, but how much is this feature going to matter to you once Google locks up the web?
Do you actually work in this industry ?

Because Hadoop has not been killed off. In fact it is far bigger than it has ever been and growing each year. It's just that it is all transitioning to the cloud with parts like HDFS being replaced with more scalable solutions like S3/EMRFS.

But you can't say it's been killed off when on AWS you have managed Hadoop (EMR), managed Hadoop pipelines (DataPipeline) managed Spark (Glue ETL), managed Hive Metastore (Glue Catalog) etc. And similar on Azure or GCP.
While you're at it, "Monitor your user's computers" appears twice. The first time under your users appears to be correct, but the second occurence has a description about how lets encrypt is a free, easy to use option. I'm guessing the second heading should be "Use encryption on all your web sites and APIs" or similar?
Add to that list: hardware-based 2FA. Based on past tweets from jgrahamc, I believe CloudFlare requires all their employees to use hardware U2F tokens for critical things like Google services and has for awhile, yet they still don't support those on their own dashboard.
Really? What is hard about “u=rw;g=r;o=“ etc - literally no calculations involved.

This “reinvent things that already work fine but in javascript” is getting old.
That's what I've done. Thanks for confirming that I wasn't missing anything. I still think the Chrome implementation is the gold standard, but it's without a doubt workable in Safari.
Thanks for flagging this confusion. It's helpful to hear how this is perceived. Short answer: The spreadsheet is, indeed, embedded in a broader context. (And has a pointer to that context in the "Notes" tab.) Slightly longer explanation in my main comment on this thread.
The first 3 days are by far the hardest when fasting.
> It is your responsibility to understand the terms and conditions

Terms and conditions are written to be very opaque and to obscure what you're "agreeing" to. What you're saying is that you need to effectively be an attorney in order to be able to have informed consent.

> You did legally consent.

I didn't say otherwise. I was talking about actual consent, not legal consent.

> But the argument you made is false.

I disagree, obviously.
17.62 bits on firefox, 11.0 on Tor, 17.63 on chrome.

On firefox, the big contributors are HTTP headers (my native language is announced), hash of WebGl fingerprint and time zone.

On Tor big contributors are hash of webGL fingerprint, screen size.

On chrome, they are system fonts, hash of canvas fingerprint, user agent, and time zone.

I am not too concerned about the fingerprinting in firefox since I have strict blocking on, ublock origin, and separate containers for facebook and google. Based on the small amount of data facebook has on me, all the blocking is working pretty well.
If you look at the definitions I linked to, you'll see that they are very similar to each other and both involve a lot more than "just means you can view the code".

In fact, the very first sentence of the introduction explicitly rejects your proposed definition: "Open source doesn't just mean access to the source code."
No, this is different. This feature is a block list of known fingerprinting and cryptomining scripts. The privacy.resistFingerprinting flag changes Firefox settings that scripts use to fingerprint users, such as User-Agent string, window dimensions, and time zone (as you mentioned). The flag is enabled in Tor but not Firefox because the setting changes can break some websites or hurt performance.
You can use Workers to write real code on our edge. VCL is ok but it’s not coding. People are writing real programs on our edge not just configuring it. But you can also use Workers for that.
Yes, but that is just because they represent a risk for Google. Their incentives are quite different than Google's, and that is what matters.
Can anyone explain why canvas fingerprinting is so difficult to eradicate without breaking canvas?
https://archive.org/details/elementsquaterni00hamirich/page/... Hamilton's "Elements of Quaternions"'s table of contents is about 60 pages long and includes footnotes.
I tend to use both and keep switching between home/work but it just feels like FF is still not as snappy in terms of performance (could just be my perception -- no actual data on this one).

I think the Manifest V3 change on ad-blocking is probably a big win for FF and will likely make many people switch over to FF permanently.
I'd be more likely to believe (at least part of) the effect is caused by giving the natural defense systems of the body something actually foreign to 'attack'. Sort of like regular training exercises and legal explosives/fireworks days give a more controlled and thus safer expression of pressure relief, training, and general readiness inspection.

PS: Related to the fireworks I mentioned, I'm for having local fire departments provide basic fire knock back training with basic safety gear (bucket of water and hose) that should be required when they're in use. We focus way too much on black and white bans rather than enforcing responsible consumption.
>The lack of deaths is not a function of desire on the part of terrorists to cause death, but just their ability to do so.

I don't necessarily agree. Terrorists are people with a point to make who view violence as the preferable way to make it (usually out of desperation).

Numbers are pretty much never the point (any more than companies set out to kill as many people as possible with pollutants). The symbol is what's important. The world trade center. Mosques. Gay bars. All representative of what the attacker views as a corrupting influence on society in their own worldview.
What happens when you report suicidal people on Twitter?
mine is ~17. language, platform, screen size, time zone, user agent, and plugin info are the most identifying.

anyone know of a list of the most used values for these so we could lower our uniqueness by setting our browser values to them?
Yes, but while the Internet has resulted in more propaganda, it has also resulted in more opportunities for clarification and other sides of the story to at least be available. Your story may not make it through the FANG gauntlet of algorithms and, as such, a mass audience may not see it, but it feels to me like alternative angles are way more available now than they were in the 90's and before.
"In scientific and academic language, may is often used to talk about typical occurrences - things that can happen in certain situations."

https://ell.stackexchange.com/questions/22134/can-could-vs-m...
What made me particularly sick is when asked about over time working problem (996[1]), Ren's answer was: Huawei obeys the law and protect workers, but our workers have a calling, they won't be successful without their calling. Foreign scientists work even harder than Chinese scientists, many foreign scientists don't get married before 40s.

This is the finest propaganda I've seen recently, well matching the "Our great Patriot Farmers" tweet[2]

[1] https://en.wikipedia.org/wiki/996_working_hour_system

[2] https://twitter.com/realdonaldtrump/status/11282610666544087...
Really? It was my understanding that the urine confirmation would be diminished, but almost always not completely washed out. That's good to be aware of if true though.
Up until Swift 5, Swift's String type was backed by UTF-16 (except for all-ASCII native strings, which just stored ASCII). Even with Swift 5, it's sometimes backed by UTF-16 (namely, when it contains an NSString bridged from Obj-C code that contains non-ASCII characters, which can happen even in pure-Swift code due to all of the String APIs that are really just wrappers around Obj-C Foundation APIs) and sometimes backed by UTF-8.

In truly performance-sensitive code with Swift 5 I will go ahead and use the UTF-8 view with the assumption that input strings are backed by UTF-8, and even force it to native UTF-8 if I'm doing enough processing that the potential string copy is outweighed by the savings during processing, but that's something that's only worth dealing with if there's a clear benefit to doing so. In most cases it's simpler just to use the unicode scalar view, as that doesn't have the potential for having to map UTF-8 sub-scalar offsets into a UTF-16 backing store (whereas unicode scalar offsets always lie on both UTF-8 and UTF-16 code unit boundaries).

All that said, I would have been much happier if Swift could have been 100% UTF-8 from the get-go, which would drastically simplify a lot of this stuff. But the requirement for bridging to/from NSString makes that untenable as it would otherwise involve a lot of string copying every time you cross the Swift/Obj-C boundary.
Rampsliding Is a Quake Engine Quirk in the Same Way That Bunnyhopping Is
"At Sqreen, for example, if someone catches another person’s laptop unlocked while they’re AFK, they can type “Cookies!” in that person’s Slack. That person will then have to bring in cookies for the office!"

This sounds like a fun idea, but has anyone ever refused to bring in cookies?
If the complaint is that "I am not told when my computer will reboot" then that isn't really valid anymore. There are lots of notifications and dialogs that let users know about pending reboots days in advance.

If the complaint is that "I can't skip arbitrary patches at will" then yeah that's not possible, nor should it be if you're aware of security concerns AT ALL.

Windows users have a long history of not willingly patching against vulnerabilities that are actively being used by attackers in the wild, and for very odd reasons. Those reasons can include complete ignorance of the vulnerability or the patch which fixes it, fear of a wide array of conspiracy theories (I've heard all of these that I care to hear in 1,000 lifetimes), fear of post-patch performance problems, fear of home-grown automation breaking, and a bazillion other reasons, nearly all of which are complete nonsense in practice.

I was very happy when Microsoft announced that they would force updates on most users, because my own experience and Microsoft's telemetry both agreed that if given an option, users simply will not patch their systems.
Are you honestly taking this site seriously? One that lists no staff? It's clearly a manipulative site using sourced content to build an audience before easing into its own content to drive its agenda.
I have ublock origin. The website works fine. I have all the default filters on.
Different, but focus is using the same engine that fenix does.
Firefox forks.
Thanks for checking out Hedgehog!

This was documented only indirectly - we should add a specific note / example for this. The model here is that the ethereumjs-wallet object returned by Hedgehog (eg. by getWallet https://audiusproject.github.io/hedgehog-docs/#getwallet ) follows this API https://github.com/ethereumjs/ethereumjs-wallet which, when used in tandem with this package https://github.com/ethereumjs/ethereumjs-tx can do everything a normal Ethereum wallet would.
Tons of ugly nerds cry out in agony.
Gitlab is a pretty decent Github competitor that certainly isn't a BIG corporation.
I'd be more inclined to do a "drinks" option.
We don't have Edge on Linux. Right now, it is on Windows and Mac; the questions about Linux version got an uncertain answer.
TBH, most major companies, especially media ones, do this nowdays. I was used to be surprised when adblocker counts 20+ blocked entities on the page (and that's not counting second and third level ones that would be loaded by blocked ones!) but now it's just routine.
Is there a test to check whether a site is fingerprinting ?
To tag onto what JGC said, you have complete programmatic access to the Cloudflare cache inside a Worker [1] using the Cache API [2]. If there's anything VCL can do which Worker's can't we would love to hear about it. We also support Terraform for all of our APIs if your goal is to have a config language to configure Cloudflare settings.

1- https://developers.cloudflare.com/workers/about/

2- https://blog.cloudflare.com/introducing-the-workers-cache-ap...
Well that proves the rule. I don't even see the dinosaurs there anymore.
Why Tesla's dashboard touch screens suck
The majority of these items are applicable to any startup.
So in the very recent past (i.e. a few years) businesses wanting to do Data Science ran a distro of Hadoop e.g. MapR that they bought from the vendor. They charged an exorbitant charge per node (e.g. $10k) because they figured they would get people to switch from Teradata or Oracle.

Now what the cloud offered was so much more compelling. You had per hour pricing on the order of $20 for a minimal cluster. You had unlimited autoscaling so you didn't have to do capacity planning and go through procurement processes to pre-order hardware/licenses. And of course you had unlimited, ultra-cheap storage courtesy of S3. And it also allowed each team to have their own mini-cluster instead of everyone relying on some giant one.

I don't think the recent explosion in Data Science would've happened without the cloud.
Unfortunately a lot of effort has been put into finalizing the name. We are exploring.
Thanks! Deploying the fix and stealing your heading suggestion :)
Serious question. Suppose we have this. I suppose my expectation is that instead of seeing the same ad over and over again, now I'm seeing effectively a random one.

Why is this necessarily better? I guess personally, I've always thought that regulating the content of the ads, rather than the usage of sufficiently anonymized data for ad targeting.
Thanks for the reply. I was under the impression that businesses have a legal business name that is registered when you register the business. If the name isn't an identifier then what is?
Flynn effect or not (and the evidence supporting the Flynn effect is weak at best), most people are not exceptional.

Even if the average is rising, the average is still the average. Only people far above average are "exceptional", even if the average person of today would be considered "exceptional" 100 years ago.

The normal distribution curve may (or may not) be sliding along the scale, but its shape doesn't change.
Anecdotally, I'm reminded that for constipation, Gandhi followed Adolf Just’s prescription of applying to the abdomen a bandage of clean earth moistened with cold water and spread like a poultice on fine linen. This I applied at bedtime, removing it during the night or in the morning, whenever I happened to wake up. It proved a radical cure.
How to achieve 218.1% better performance when replacing strings in JavaScript
I've been really impressed with Firefox Quantum for the steps they've taken towards privacy and transparency.

This definitely seems like the edge that Mozilla will have when trying to stand out against Chromium-based browsers going forward (especially now that everyone else seems to base their browser off of Chromium).
This is interesting, but my nonscientific counter might be:

What if "dirt" is harmful, and causes your body to degrade appetite in attempt to overcome the irritants?

I agree we've evolved perhaps, but sometimes modern is better (e.g. portion control). Is it harmful to "feel" hungry and not sate your appetite?
Plugins would be fine; you could always point out, that they are non-standard. Now, if you fail to support the right EME plugin, it is the browsers fault.
More seriously. I’d be curious to hear about what you’d build on our network. We are all over the world and it would be fun to hear about companies other than GitHub that you think we should disrupt.
Another example: unify all the separate "rule" types. There's page rules, firewall rules, IP access rules, user agent rules, etc. It can get unwieldy.
What Truck Drivers Think About Autonomous Trucking
Yes, MapR was local hosting.
Same! Had Developer edition installed for testing, but switched fully today (Uninstalled Developer, installed Nightly). The fonts look nice, it's got wayland support on my Linux partition (on Fedora), and it's just really pleasant!
I think that's an uncharitable view of the author's choice of words. He also doesn't even use "thesis" in the way you imply, he refers to "the thesis of the essay", which unambiguously is the meaning of the word that is "the central claim of the essay".
I would say the target market is b2b tech savvy. Is there a risk in proceeding with .io, .in or .ly ?
I've been switching back and forth between Windows and OS X since 10.2 and honestly, I really like the Windows 10 UX as a pretty keyboard friendly UX out of the box, hell I even prefer it to the Mac these days. Launching my pinned apps are bound to win+[1-9], All my setting and systems menus are under win+X, win+arrow keys for tiling windows, win+ctrl+left/right arrow switches virtual desktops, and for everything else I just hit the win key and start typing whatever I'm searching for.

My only real complaint is that the file explorer hasn't really been updated in ages and isn't exactly great.
China's actually pretty middle-of-the-pack in carbon emissions per capita.
> Based on the small amount of data facebook has on me ...

How did you get all data, that facebook has on you?
Anxious? Eat dirt!
East Lansing is best known as the home of Michigan State University which is best known as the school that harbored Larry Nassar while he molested hundreds of american gymnasts.

Who wants to be associated with that?
Yeah, in retrospect, I probably should have emphasized that I was amused by the coincidence, not that there was causation.

Obviously, gathering usage statistics from hardware / software analytics wouldn't have captured the fact that there are touch typists who would be quite displeased by (a) the loss of the tactile escape key, and (b) the downward quality of the keyboards in general.
The ‘facial recognition backlash’ is moving to Canada
Other way around, really. IQ is partially heritable and your socioeconomic status is correlated with IQ, so your kids IQ will be correlated to your socioeconomic status.

As for attractiveness... A lot of that correlation is caused by the lower end of the scale (genetic diseases are generally regarded as unattractive while also lowering IQ, correlations with poor nutrition, etc). But behavior is also a component of attractiveness, and (all else equal) IQ helps there.
I assume it can just use a cellular 3G connection or satellite link, because it doesn't need to be very fast or low latency.

The way mining pools work, the pool gives a short description of a massive block of nonces for your miner to check, and then you send back a short proof that you checked all the nonces (because you will have a predictable number of partial matches, and so the proof will be very short). So you don't need to send much data back and forth.

Whatever bitcoins the pool then mines are then allocated out in proportion to what fraction of nonces yours had checked.
> 9.93 bits of identifying information.

with this new setting turned on + uBlock Origin + NoScript
This is exactly what the team I'm in does as well. It's fun, and people actually learn to lock their machines as a routine pretty quickly.
The slider of funding rounds is a neat idea but it's kind of hard to read in chronological order without mentally keeping track of which items appeared each time I slid it forward.

Would love to see a plain, non-javascript version of this content.
> Even the US Postal Service doesn’t necessarily respect local political boundaries. I grew up in Phoenix, close to the Glendale border, and my address said “Glendale, AZ”.

Oh what the heck! How does that even work? So the official city you live in is not the city that USPS considers you to live in? If a federal form asks you what city you live in, what do you put down (without committing perjury if there is such a risk)? Do you write something different for state and local governments? And how does one figure out what city they officially live in then? Sorry I have so many questions but this one is just twisting my brain in so many ways!
This is the most convenient way, yes. In the mean time, I'm looking for a Linux utility that can scan QR codes, because I've come across this problem a lot.
But I'm not loading up on my SuperMicro, Dell or HP servers. So there's no need to buy a decent Hadoop implementation from MapR.
I haven't clicked the OP's link but I can already answer with confidence: No.

1-Don't write a headline as a question
2-Don't write a headline with a question that can be answered "no".
Right, but I think their local energy needs are far less than what these burnoffs contain.
The Wednesday of Our Discontent
> biased towards the things that kill us that we don't have as much control over.

It's not about what we have control over, but what we have information about. Informed consent is the bedrock of western society, from the enlightenment period. I suspect fear mongering (and terrorism) is effective precisely because westerners are trained to define unknowns and mitigate danger.

Some go so far as to be outraged that someone hasn't preternaturally predicted how an unknown could have been dealt with.
The problem is that many look at JBP interacting with clickbait and unethical journalists and conclude that he must be a great and honest thinker in comparison. Actual academics rarely engage with him, and not because they are afraid to or malicious but because he hasn't published much that can even be engaged with outside of psychology. The exception is Žižek, and we all saw how that went for Peterson.
The irony is they tried diversifying their income. But people don't want their browser to ask for donations (that's nagging). They don't want their new tab page pre-populated with websites on a new install (even if their browsing overwrites them). They don't want "fun" additions to advertise TV shows (even if they're opt-in).

But they're happy to pay via google's search and tracking. Mozilla doesn't have a lot of options open to them.
As our team is growing, having to bring cookies for a larger group can be a lot. Also, you're a bit less inclined if this happens to you two days in a row...

(message for Tyler: we're still waiting on those cookies)
Ads that are not targeted don't have such huge impact on you as the targeted ones and therefor they don't trick you to buy something you don't need as easily which is good for you and the environment.
Any recommendations on good sources for tutorials? Just the flutter dev channel or are there any good 3rd parties?