skysight-inc/HackerNews huggingface dataset:
Sure thing I will cheer. I'm tired to death by quality and content of the ads in apps right now. I'm tired to death that apps have size of an elephant because of bunch of unrelated advertising and tracking frameworks compiled in. I'm tired that apps require permissions they don't need and then send data who knows where. And no, I don't give accesses, but bunch of people who has my contact information and less tech savvy or less privacy conscious send it around, left right and center.

So yeah, I will cheer. You can't fix your shit? Ok then, Apple will do this, this time on their terms.
Today, though, that filesystem abstraction is block-aligned. So you could delete blocks from the beginning or middle of a file easily, but you couldn't delete bytes from the beginning or middle.
Sure. So for us IT folk, SOX boils down into 2 buckets (if you'll allow me to oversimplify a bit):

1. Separation of duties

2. Process (and well, documentation, but let's say that's a part of process.)

Separation of duties boils down into needing separate people to develop, review, and deploy a piece of code. Okay, let's look at this from compliance's PoV.

Compliance team just wants an easy way to show and enforce "yes, a separate individual performed each of these duties." Preferably in a way that non-technical people can understand. Easiest way to do this? RBAC. If you are a developer, you simply don't have permission to login to production. If you're ops, you don't have permission to contribute. Clean, easy enforcement, clear lines drawn in the sand, easy reporting to auditors. It also has a chilling effect on the devops mindset. Which seems to be the issue you are raising.

How else can you satisfy your compliance team, follow regulations, and still practice devops? Well, instead of enforcing at the role level, enforce at the individual level.

A lot of VCS software offer the ability to disallow branch merges without a secondary approver. This can be your separation between development and review. Then for implementation in production, you can automate this piece. Think of a git commit, enforced code review, and then k8s automatically deploying your change from the merge to master. This allows your dev and ops team to work on tasks together.

We use Jira extensively (other tools work too), and certain important systems are tagged as SOX for a specific year. When an auditor asks "show me all changes to financially important systems", it's easy to pull up that year's changes, and then show off the 2 people signing off. We also have auto deploy (not k8s... yet) that is easy to show "hey look, this code was definitely not tampered with on its way to production."

Getting your compliance team on board is difficult. It requires team work because if you are subject to SOX, you are possibly subject to other regulations that touch your processes. Like PCI-DSS. Or SOC. If your dev or ops teams can pitch a process change in a way that's easy to digest, document, and audit, then they will likely be on board.
That's amazing, so cool.

Is that something Google's not doing with the data, but could? (E.g. they don't because their maps don't show most houses precisely enough or whatever, so it wouldn't be useful?)

Or is it relying on the fact that you are triangulating or similar from the known exact position of your WiFi routers or similar down to the inch, and Google doesn't have any way of knowing that?
They must've implemented RFC 2549:

https://tools.ietf.org/html/rfc2549
> But the data clearly shows that the richer you are, the less likely you are to have children. How are you resolving that discrepancy?

Without taking a stand on the greater discussion here, I'd just like to add: birth control is not all that cheap, and poorer people are much less likely to be as educated on all the birth control options available to them anyway. I would also reason that the feeling of having limited life prospects would make one more likely to have kids as it becomes a larger milestone at that point.
The whole idea that a mass censorship policy can be implemented in a way that is "unbiased" is absurd. This would be true even if it wasn't being implemented by a company with incredible political bias like Google (Youtube).
SearX is a meta-search engine, which means it isn't truly its own search engine. Still useful and open-source. I'd actually recommend the Bloom people to host their own SearX instance to cover search needs.
> Writing a check for $0 is not an instruction to pay.

By describing it as a check you've already acknowledged it as an instruction to pay.

> Paying $0 is equivalent to not paying.

It's equivalent in terms of the final balance, but it's not the same thing in other respects. If I sent you a check for $0, you would wonder how I got your address. There are a variety of ways that it would be different from me not sending you a check for any amount of money at all.
One thing I wish the article touched on: Why aren't we asking ourselves how current tuition rates got so high in the first place? If the federal government allows public universities to get away with creating administrative roles like 'Director of Picking Blue or Yellow Gatorade for the Football Team', that demands close to six-figure salaries, there's no wonder students have to incur debt to go to school. They aren't paying for their degree, they are paying the salaries of ballooning administrative chaff.
Vendor prefixes are no longer being used for new features - flags and preview releases are the new way browsers release draft features like this.

CSS grid level 2 is a W3C draft design which, if accepted, will make its way into all browsers.
Because it’s wrong?
> Instead they're just slightly tipping the scales in favour of site developers. Ad-blockers wouldn't be made impossible with this change, they'd just be made less accurate and reliable. This doesn't make a lot of sense to me.

It's the camel's nose under the tent (or the boiling frog). Abolishing all ad-blocking extensions would cause many folks to migrate away from Chrome, so they probably see a more effective strategy in incrementally neutering these extensions at a rate that reduces peak outrage.

"What is something we can take away that ad blocking tech relies on?" Today it's an API change, in a few months it'll be some other measure.
I knew that at the time of the Paris Agreement. Even that was too little, too late. It was wishful thinking that doing that little would make the difference that they said needed to be made. ("They" being the people proposing and negotiating the agreement.)

In a word, it wasn't a serious attempt. It may have been the most that could be successfully negotiated, but it wasn't a serious attempt at actually solving the problem.

(See https://en.wikipedia.org/wiki/Paris_Agreement#Effectiveness for why I say this.)
The Left tries to sanitize history...

Probably because history clearly shows that their cult is apt to turn into mega-murder. Like National Socialists' did.
Flexbox is easier, but I think grid produces better results
I was referring to the add(...) function
So what services are exempt from this ban? Does Apple offer a first-party advertisement plugin?
The biggest fomenters of terrorism are our dear allies in the Middle East.
Yes, maybe they can't place an ad on your app but they do track all your user event data which means that they can target them somewhere else. All the iOS unique identifier, location, and user attribution data are collected directly into their servers.
IME Curl and even NoScript is becoming nigh impossible to use because of all the JS
What's your point? I already said in a separate comment that there is colloquial Hindi, which like many other languages has words from other languages, especially from Urdu. But that does not make those words Hindi. They remain Urdu words.

We similarly use several words from Latin, French and other languages in colloquial English, but from pure language standpoint I doubt that they'd be called English words.

Edit: A Wikipedia page of interest [0]

[0] https://en.m.wikipedia.org/wiki/Hindi–Urdu_controversy
The article gives the example of El Gamal encryption [1]. Looking at the key generation section, it seems like you could keep a single (q, x) pair and create a new (G, g, h) for the same x.
> “Make your devs be on call without paying them”

1) let's fire all the DBAs

2) let's fire half the operations team, and outsource the rest

3) let's have the devs do the operational work

What could go wrong?!
Beginning at the top of page 41: https://www.apple.com/business/site/docs/iOS_Security_Guide....

```
iOS uses a randomized Media Access Control (MAC) address when conducting
Wi-Fi scans while it isn’t associated with a Wi-Fi network. These scans could
be performed in order to find and connect a preferred Wi-Fi network or to
assist Location Services for apps that use geofences, such as location-based
reminders or fixing a location in Apple Maps. Note that Wi-Fi scans that happen
while trying to connect to a preferred Wi-Fi network aren’t randomized.

.... [continues with all the cases]
```
Assuming the corruption is independent, potentially, but A) even unlikely events are likely to happen for large enough N, and much more importantly, B) as another poster described, if you don't regularly check the integrity, and you have single-disk redundancy, losing a whole disk can likely result in you discovering a block that got mangled some time ago, too late to do anything about it.

There are a number of cases where failures might not be independent, though.

What if, say, you're using multiple drives of the same model, which have a firmware bug causing them to sometimes mangle data on the Nth sector?

What if you're using multiple drives from the same manufacturing batch which have a flaw leading to certain regions being more likely to fail than others?

What if you're using some battery-backed write cache under ZFS (from a HW RAID card or something more exotic), and it helpfully writes out garbage to the same sector on two disks?

What if you have a certain manufacturer's hard drives that lie about flushing their write cache successfully to disk if you issue a SMART request to them between when they put data in cache and when it actually gets to disk, so polling those two disks when they both just got a write results in data loss?

(The last of these is a real firmware bug I ran into - I was running a testbed of a bunch of raidz3 vdevs, and spent some time isolating when zpool scrub kept making the error counters increase even though it had corrected them all...thanks, Samsung HD204UI drives.)
flexbox works beautifully with grid
1.5 miles from Facebook HQ, in the middle of silicon valley, we JUST got FTTH a few weeks ago.

Cable internet is the only game in town in most of the valley unless you want 40mbit DSL.
What I understood the parent to mean would be to buy and register a Tile yourself, then hide that on your victim.

Using the same type of "mesh network" Apple mentioned, other users you can track that Tile for you:
https://youtu.be/WG7BdW7iFzo?t=58

(I'm not familiar enough with Tile to know if that feature is continuous, but I wouldn't be surprised if a competitor does).
Is there an archive somewhere?
- firewall

I have an ad blocker app (adblockios.com) that uses an internal 127.0.0.1 VPN. The version I have was yanked by apple and they had to change to a less powerful "dns based solution".

In any case, a true firewall would be my holy grail.

- sideloading

I believe sideloading only allows you to run an app for 7 days (You have to continually ask for permission)
I have replied to your elsewhere comment too.

Let's just agree to disagree and move on.
Çorum Sohbet Odaları
> not allowed to count points in games before children are 12

So it's illegal in Norway for my 12-year-old cousin to beat my highscore in Pacman?
Thank you, this sounds pretty promising (and ambitious) so far. Will watch this project for the future!
Works here on Firefox. Something to do with your internet connection or certificate store in particular?
How do you have a mature conversation with children who are unable to process (due to age) certain advanced concepts like marketing, advertising, monetization, irrelevancy, deception, exploitation, etc?

I don’t think they’re talking adolescents but rather toddlers and young children.
"business model R&D" used to be called "fraud"
There's a huge difference between an exercise bike and the real thing. Sure you can add online gameplay, but it is a poor substitute.

I'm not sure how much staying power they have. More people seem to like the idea of excerise rather than the exercise itself. Maybe I'm missing something..

I'm surprised that they haven't expanded into rowing, seems like an even better fit. Personally, I think you're better off joining a gym and going to spin class if you don't have good roads near you.

Oh, and seeing that they have packages with bundled cycling shoes did make me cringe. That's when you need to go to a bike shop and get some that fit (cycling shoes are designed to be stiff so they don't 'wear in' to the same degree as other footwear.
Deleting from the beginning, and the more general problem of deletion and insertion at arbitrary offsets, is very difficult to solve. Due to file mapping APIs like mmap, MMU limitations make the situation difficult. It isn't even clear if the mappings should slide or not, and what the alignment requirements for mappings might be if an insertion or deletion is not a multiple of the page size. No common filesystem has data structures that are suitable for deleting an arbitrary number of bytes from the beginning, and very few filesystems have data structures that are suited to block-aligned deletions.

Hans Reiser was working on it. He created a killer filesystem called ReiserFS, which offered efficient storage of data smaller than a disk block. He was working on an API and filesystem layout for arbitrary insertions and deletions when his work got interrupted by a death in his family. Perhaps he can get back to it starting May 2020, when he might have a chance to take a break from Correctional Training Facility.
Can this be used as essentially 100% effective anti-theft?

If an Apple device is constantly emitting a BLE beacon code that can't effectively be changed in any way by a thief...

...then unless a thief keeps the device in their basement and never has anybody visit, your stolen device will almost certainly be detected sooner or later, and then you just call the police?

Even if the thief has sold it by that point and disappeared, if local law means the stolen good reverts to you, then people would quickly learn never to purchase any phone there's even a chance of having been suspiciously acquired.

Am I missing something here?
I clicked through to this article because I recently bought some scissors from Amazon here in Japan. I didn't do any comparisons or anything, I just chose a cheap model from the first page of results.

I am not like a heavy scissors user, I was just sick of not being able to find the scissors, so I wanted a couple extra around the house.

And then they were delivered and I was like HOLY SHIT THESE SCISSORS ARE AMAZING!!!! And I quite literally told five or six people about these scissors, just because I was so astonished how well they cut things. I didn't know scissors went to this level.

Sure enough, the kind I bought is referenced in the article (the one with pink handles in the photo). Nakabayashi's Hikigiri model.

¥432 at Amazon Japan (about $4.00). Amazing.

https://www.amazon.co.jp/gp/product/B00NATJ7R0/ref=ppx_yo_dt...
Ah good to know. I assumed they were lined with lead and/or tinfoil
>Are we using & monetizing customers' bandwidth without their permission

not covered by General Data Protection Regulation.
Or they do and have internally assessed that it would be too creepy to provide to users, but are happily using it to better target advertising.
Vintage Tech Stickers
Beyond just grids, any layout, explicitly responsive or not.

Fire up your browser's Responsive Design Mode and play around with the window width. The basics are generally easy to fix if you take a minute or two to spot check your layouts.
Works in FF just fine over here.
Well, whichever measure of IQ you want to use as a proxy for intelligence, it's plausible that the self-selected group of people who comment on HN is higher compared to the world population (oh, this includes me, too -- how embarassing). How much higher is an empirical question which is unlikely to be settled, although I would guess that your .01% is a bit of an overestimate.

The important point, though, is that "dichotomy" not the same as "contradiction". The contradiction between your estimate of the high intelligence of HN commenters and the, let's say, less-than-intelligent ideas sometimes expressed here can be explained by noticing that being somewhat smart doesn't make someone immune to having stupid ideas.

What, after all, is the minimal IQ beyond which one will never make a mistake?
Oh wow he’s getting out in less than a year already? Or is that just his first chance for parole?
What is wrong about it?

"Because it's wrong" isn't really a response without something backing it up. That's what I'm asking -- what's the harm, where's the wrong?

The harm in advertising is obvious. A harm from third-party analytics is not.
Human Consumption of Microplastics
They're not really unique in that though. If car commercials were real, everyone would be driving around either DUMBO, Brooklyn or peeling out on the Nevada Salt Flats.
Look I really don't care. You aren't being sarcastic.
I don't think there is, and there's a lot of apps with that model. However, that's not the topic at hand.
It's also the SSD controller, and quite impressive in that regard.
Have to add a trailing question mark
Sounds like a good reason to ditch ARM, and roll out their own solution for it.

In regards to Mali, why can't ARM support open source driver effort? Qualcomm for example are not against Freedreno, to the point that Google wants to make it the primary supported driver now. And Qualcomm are quite nasty in general, when it comes to patents and stuff. So why not the same thing with Mali?
One place this would be useful is a DVR. You want to record the last n hours of video and discard anything older. And it's not inefficient. It just requires a lot of careful engineering that's probably not worth the bother.
Peloton is a combination of stationary biking and personal fitness instructions. Both of which have long histories and a lot of popularity.
Not 100% effective - device could still be stolen and parted out
> If free speech is a right worth protecting from the government, it’s worth protecting against equally powerful corporations.

The right of free speech is that you can say what you want without violent repercussions, such as fines, prison time, or capital punishment. Corporations and individuals already aren't allowed to do any of that, so no additional protection is needed. Governments are singled out specifically because they do not follow the same rules as everyone else—asserting that violence is a "legitimate" means of achieving arbitrary goals.
Why wouldn't it be fixable?

And would there be a way you think to test if that's really the case?

I have talked with some people who had like severe reactions to the drug who managed to get some kind of mitochondria testing and it would say stuff like "30% of the active sites are blocked on the mitochondria"
Those who forget/erase history are doomed to repeat it!
Because like nuclear power people (writ large) have an especially irrational fear of flying; they demand crippling levels of security theatre. Terrorists understand this, too.
Also don't forget the whole "elsagate" debacle where lots of kids videos were highly inappropriate and sexual content disguised with super hero costumes.
Why do office workers still have dress codes? Point being that norms take a long time to change. The hippy generation mostly traded in a neck tie for some khakis, with maybe the bonus of casual Friday. The tech industry’s growing domination is just making a dent in allowing blue jeans daily. Still not super common nationwide
That 1% (and is often more like 5 or 10) can have big implications, but you can just have an on-site, it's a lot cheaper than having an office year round. Plus you can do it somewhere fun and it's a great perk and team building exercise.
I know flexbox and more or less grid but I feel like old good display inline-block and positioning is still 50x faster for prototyping and often development. Especially flex made simple things really complicated, like you have two quite long and totally unrelated properties for aligning items horizontally and vertically. And the fun really begins when you inherit codebase after someone else - even making item 100% wide is sometimes incredibly hard with flex (width: 100% does not work!). And from my experience grid is even bigger hell to maintain. Especially if many devs work with it and some of them are not really CSS wizards.
I picked up a lightly used one from my friend when he was moving across the country (<50% retail). I spin 3-4 times a week and so far (12 weeks in) have been loving it. The bike is nice, but it’s really the instructors that seal the deal imo. My girlfriend has also been using it a lot and she hates working out, so that’s a big plus for her. I know that now I wouldn’t hesitate at the price because I like it so much (will probably need to pick a new one up or at least a new screen as my current one is a gen 1. I assume at some point that might start to be a problem but so far so good)
I've interviewed many developers and operations folks. The cheap ops folks are cheap for a reason: they can't code and therefore aren't going to be automating much of anything without a lot of effort. The good ones are just as expensive as developers, because that's what they actually are...
I don't know where you heard that, but that is not what property means. The concept of property represents a set of rights (and maybe obligations) that an owner of said property does possess. Your nose is not your property by the way, because the rights you have towards your own body are very different (and a lot stronger) than the ones you have towards your property.

So your rights do not end where other's property begins. What they actually might do is be in conflict with the rights of the owner. But only in a country where capitalism is driven to cynical extremes would the rights of the owner win per default. I know of no such country.

> There are no significant barriers to entry in starting a video streaming site.

Of course there are and you even state one of them three sentences later. Online platforms with user content are very similar to natural monopolies. While anyone can start a video streaming site, it is obviously extremely hard if not impossible to actually compete with Youtube. I mean even google tried and failed. But I'm sure you aware of that. What I don't know is why you bring up the straw-man of "starting a video streaming site", knowing full well that starting such a site will not change anything about youtube's monopoly.

> If you think YouTube has a "monopoly", the right way to address it would be to start up a competing site.

So, no – the right way to address it is to handle it as we handle all the other monopolies and regulate it or break it up.
What’s the problem about jsnell posting that? It’s their post. You can go read whatever else you like, nobody forces you to read their comment.

If you don’t think jsnell’s prediction/complaint/insight was worthy, your post seems hypocritical to me unless I’m missing something.
Bash Explained – Chained Killing