skysight-inc/HackerNews huggingface dataset:
Once Google started doing it, it creeped out in all directions.

The SSO reason is 1000% the driver behind it. None of the other reasons really succeed in rationalizing all the added complication. It's just retcon after the SSO need.

Others are worse. Microsoft has ten layers of cognitive dissonance gumming up their login. Worst of all, they have these check boxes, where I indicate that I want them to remember my choice, and what "remembering a choice" seems to mean many things to many people.

To Microsoft, "remembering a choice" means tripping a flag on an ephemeral cookie that does not leave the browser on the computer I'm using when they show me the check box. Indeed, if I change to some other browser, but log in with the same account, the thing they were supposed to remember never attaches to the user's account. It only gets "remembered" by the HTTP session that displayed that particular instance of the checkbox, and only if you never clear your cookies.

A "client side only remember my choice" checkbox. Now, why the fuck would they even bother wasting my time with that?

Why get my hopes up? Are they trying to torture me? Is it a taunt that the checkbox is always defaulted to the opposite of what I want? If they show me the checkbox, after I indicate the use account, why can't they attach that choice to the user account? Do they simply hate me?

The psychological warfare being deployed in that situation speaks volumes to me. It tells me that the person who chose to put the checkbox there, that person didn't really care if it did anything. It tells me that there was a conversation between a boss and employee, somewhere in this version of the time stream where John Connor beats the terminator and Skynet doesn't initiate judgement day, and in this version of events, the employee built something that made sense, and the psychotic boss passive aggressively told the employee to detach the option from the user account, and make sure it only binds to the cookie. The bastard can only have done this to both torture the employee AND disappoint untold millions of users who expect a checkbox that advertises memory to actually remember them.

It never does. It doesn't remember anything. It lies to you. It forgets.

This is why I hate Microsoft.
Ah, really—wasn't aware, thanks.
And for the statement, a "Loading..." should be sufficient, since most folk don't have the patience to wait for the statement to "load" and verify it.
> given caffeine addiction

Caffeine is not addictive. Physiological effect of constant coffee drinking go away without side effects after two weeks.
It has no (known) negative effects on health or sociological function as actual drugs have.

I can't figure out why you mentioned caffeine at all
im getting checked next week.. such health issues that wont kill me but wont let me live.
One possible reason: the site owners nowadays use the likes of Foursquare/wix/whatnot which means reCaptcha etc are just a checkbox item. Custom anti-spam may be beyond their technical capabilities or interest levels.
I’m just waiting for the AI-generates fake people and whatever way they will come up to monetize that!
Crummy solution, but get the FF user agent switcher in TBB.

And then set it to Windows/Chrome. And all those Scroogle-captchas are easy-peasy.
This is just so disappointing. We cannot allow this to be the last word on the topic, they must be made to address this!
Good Algorithms Make Good Neighbors
Observing crystal nucleation in four dimensions using atomic electron tomography
this write up gave me a headache just thinking about this task :D wow what a battle to dump some bytes! excellent and interesting write up for sure! props!
The Programmer Skill Fetish, Contextualized
The small phones usually have much worse cameras than the big ones. Sometimes the mid-sized ones also have worse cameras than the really big ones. I'd love an SE-sized phone with a great camera, but that wasn't an option, so I bought a Plus, solely for the better camera, not for the screen size.
I started using that approach in late adolescence as I was discovering that everyone has an internal world that I can't understand. I tried to give people the benefit of the doubt and operate under the assumption that there is an underlying reason for hostile behavior.

Over the years, I got seriously burned personally and professionally by malicious people that I made excuses for in my head. It hardened my heart and caused me to be less understanding and forgiving of people.

Now I've come full circle. I'm back to your approach, but I play more defensively. People likely have a reason for being malicious that is out of their control. I don't need to judge them, but I do need to protect myself and my loved ones.
There are government services, such as the USPTO, that rely on Google reCAPTCHA. The new reCAPTCHA has made it difficult for me to access documents, and sometimes they think that I'm a bot and thus deny me access entirely.

Does the government realize the consequences of this? Both that it pushes users to use Chromium-based browsers, and that they're helping to solidify a company that already has a near monopoly in the browser space?

Further, this quote is very creepy:

> To make this risk-score system work accurately, website administrators are supposed to embed reCaptcha v3 code on all of the pages of their website, not just on forms or log-in pages.

With AMP, Google Ads, and reCAPTCHA, Google now has access to pretty much everything that people do on the web.
One-Way and Two-Way Doors
The International Telecommunication Union (https://en.wikipedia.org/wiki/International_Telecommunicatio... the body that governs these things at the international level.

Individual countries implement decisions taken at the ITU through laws and policy. Individual countries take care of enforcement. For instance, in the USA, that would be the FCC.
You are trying to make me say things I never said.

What I did was try Brave out. I _want_ to like the product. On top of that I have a lot of respect for most of the people behind the project. As a security conscious person I looked at what kind of network activity there was on start.

After installing Brave, I notice things that IMO should not be there. After that I even spent the time to search what it was. The link mentioned by me in my post looks to me like it is a post at a forum from Brave. As someone who is not familiar to the project it is not clear that there is any bug report or bug filed, where do you see that?

There is also no indication to me that somebody from the Brave team replied to the post. There's 1 reply 6 days later, by an anonymous user, which explains what is going on, then 24 days later the thread is closed.

The reason I did not reproduce the text from the link is that it is pretty clearly stated down there. If I wanted to spread FUD I would not have provided the link.
Different kind of drone.

In addition to the unmanned bombers that fly at high altitude, the military also has low-altitude surveillance drones like:

https://www.avinc.com/uas/view/raven
I just got offered google Maps beta this morning, this could be fun.........
I'm more sympathetic. I can imagine being in that situation — going down a dirt road — and laughing at the absurdity of it all and yet needing to get to the airport to catch a flight and not having any better options.

I'd wager it didn't get muddy immediately upon starting down that road. Once it did, though, it was probably too late with a line of cars behind you and nowhere to go but forward.
As long as it still works with a password manager, the two-step process doesn't really annoy me. What does is when these break the password manager flow for some reason - I think that should be added to UAT for these sorts of deployments now (especially considering browsers are coming built in with these tools now too).
I'm much more worried about ideological persecution than targeted advertising. It's very easy to think you are doing the right thing, everyone thinks that.
Simple Text Classification Using Keras Deep Learning Python Library
This is a problem that has to be solved by government regulation, “the market” has already made up its mind: It doesn’t give a fuck.
Most sites use reCAPTCHA to protect against bot registrations, sometimes targeted to their specific registration system. Any simple solution would defeat the purpose of a CAPTCHA.
What happens is the captcha is farmed out to live operators who solve it.
It is tempting to "follow the herd". I guess sometimes optimism gets you in trouble.
That should be federal courts, not state courts. This is important, because states like Pennsylvania have had its Supreme Court hand down rulings on gerrymandering because of its constitution.

I should note that this didn't go to the Supreme Court because it was purely a state matter, and ruled based on the state's constitution.
34 senators are represented by less than 8% of the population. Good luck with that.

Anarchism is the only reasonable path forward. Liberalism has failed.
The Governor of California should just say, "Thanks to today's Supreme Court decision, we intend to redistrict California to make it mathematically impossible for Republicans to win a single House seat". I bet you the Senate would agree to a federal anti-gerrymandering provision right quick after that.
I think this would fail under any directed attack. It’s too hard to generate a database that’s large enough.
We used to do this for amusement with each other's 3-5 tumbler ski locks on the rides to races. It wasn't even brute force, just exploiting weaknesses in the manufacturing

The most useful trick was to put a bit of tension on the lock cable while turning the tunblers. Once we got a feel for it, we could often open unfamiliar locks almost as fast as if we had the combination, and didn't even have to look. You could just feel the gap slip into place.
>Customers do not prefer it, it was not popular, otherwise we would still see that form factor.

This is not sufficient reasoning — industries can independently yet collectively decide what the next big thing is, and operate in tandem to produce a market where only that thing exists. Notably, the shift to large phone sizes occurred rapidly, suggesting this may have been the case. That the shift was not a reaction to consumer interest, but rather in anticipation of it.

The biggest recent example of this effect was the 5 years or so where every new tv was a 3D TV; its now been phased out in favor of SmartTVs, which I personally believe are shitty enough to likely have no real consumer support. Another example is car touchscreens, and their somehow consistent terribleness across all brands, even luxury ones.
Your last statement hangs development of society on the growth and ubiquity of corporations, which frankly is absurd to an offensive degree.

There is a long and disgraceful history of corporations opposing damn near everything and anything that would even remotely upset the status quo that they're used to. Everything from women's rights to equal wages among races to ending child labor to the right to unionize, all the way to health and safety laws, the 40 hour work week, and even basic labor rights like whistle-blowing all receive the same frantic and "THIS IS THE END TIMES IF THIS HAPPENS!" treatment from the corporations and their lobbies.

And it's been wrong every. Single. Time. Somehow, some way, the businesses adapted to giving their workers basic human decency, fair wages, etc. and it was never once at the behest of benevolent corporate overlords but in fact was always at the direct demand of regulatory oversight.

If anything, society has developed by fighting, tooth and nail, at every turn, the wailing and howling corporate opposition to anything even remotely not immediately profitable.
I also think OpenAi's spinning up isn't beginner friendly.
Summary: a third party in the US provides synthetic Toshiba shares (without Toshiba's consent or input).

But the buyers have sued Toshiba using the US court system!

"Toshiba Corp. is a Japanese company whose stock is listed in Japan. It has unsponsored Level 1 ADRs in the U.S., through no fault of its own. [Toshiba] did a fraud. U.S. investors lost money on their ADRs and sued, and Toshiba objected that it had nothing to do with those ADRs, or with U.S. securities markets in general. Last year a U.S. federal appeals court let the lawsuit go forward".

I also love this quote from Matt "If you are a member of the global insider-trading Illuminati, please tell me about it over unencrypted email."
Brazil Is an Alternate Video Game Universe Where Sega Beat Nintendo (2015)
Articles like this are constantly reminding me of how massively complex the AWS ecosystem has become and how difficult it is in practice to actually tell what you're getting billed for. If there isn't already, this seems like a great space for consulting services dedicated to optimizing AWS usage and reducing overall billing (with a dead-simple value proposition).
As pwnna pointed out, package size gives you away.

The real way to protect against this, if it's genuinely part of your threat model, is to maintain a complete local mirror: you can't tell what is installed and at what versions if you simply download everything.

And if it's actually part of your threat model, then you likely have a large enough install base that you need a local mirror for performance/non-security reasons anyway. So it's really a non-issue.
I was ranting about this the other day. The whole point of programming is to have as few steps as possible.

While we're at it, can we also say forcing 2nd party apps to use Oauth is nonsense that doesn't help anyone do anything.
Yeah, this definitely is a way to break the filter bubble.

But thinking about it a bit more, it might be one of the worst ways to do so.

For example, assuming roughly that both favorites and retweets represent general agreement, using those mechanisms to surface new tweets to people makes sense. If someone you follow (and presumably respect) quote retweets someone you don't follow with "Yes this!" or something similar, then you're already primed to agree with the person you follow.

But, often at least, replying and not faving/retweeting could very well bais for DISagreement. Now instead you're going to see someone you follow and respect arguing about something, and you're primed to agree with them, and potentially pile on to the original tweet author even though you might not have cared about the topic a minute ago.

Twitter ALREADY has a way to signal that you want all your followers to see a tweet you saw: retweet. And even showing your followers things you favorited at least means they'll see things you probably like. But it seems there's at least a reasonable argument that showing your replies to your followers is setting up a situation where pile-ons to the original tweet are likely.
Especially on iOs, where I have a password manager that won't fill in the email/username step, so I have to manually either find that or type it.

If it's one screen I can just prefill both at once.
Firefox revamp for Android promises privacy without losing features
reCAPTCHA on VPN is difficult, but on the Tor network, they are downright impossible. I've never been able to get past it, even after a few dozen painful attempts. That means Google services are entirely off-limits over Tor, even Search, which is a disgrace.
I had to test a simple contact form implementation with reCAPTCHA yesterday on an office worker's PC that was running Chrome.

I spent all day clicking on sidewalks ans traffic lights! Or buses. No idea what they want the clicks on buses for.

I actually had problems upstream of the CAPTCHA. This was on a Wordpress site and I was patching up the Contact Form 7 implementation on there.

What shocked me was how naff Wordpress is. After however many years it does not come with a contact form built in. Comments yes, but a contact form, no. Then the fairly de-facto Contact Form 7 would not work with Google Captcha 3 and the latest V5 Wordpress. So there must be hundreds of sites out there with contact forms that do not work. Then there are people cussing ReCaptcha when there is this hideous mess of bloat going on.

The Contact Form 7 didn't even use HTML5 form validation and styling it was a nightmare.

I eventually went to CAPTCHA2 with the box you tick. Having the v3 box in the bottom right of the screen on every page was not what the client wanted. Plus it didn't work with this kludge known as Wordpress.

I think the issues raised in the article are not that big a deal. If you have logged in to Chrome and you are on your normal device and IP address then you can get a free pass. Why not?

I seriously advise anyone to test their implementations on a non-logged in PC, it is an eye opener. And a time consumer. But forms have to be made to work. You can't have people locked out.

There is a lot to be said for backend validation based on form data, I like to make forms unique with a hidden timestamp in it that is MD5 encoded. You can then see if someone has spent long enough on the form for it to be 'real'.
> As developer I can run anything thanks license.

I cannot parse this, what do you mean?

> As consumer, app stores are more than proven.

I do not have any problem with app stores as long as they are not tied to a locked down OS. See Steam or any Linux repository front-end as an example of app stores that do it right.
This is good.

Hopefully it inspired a bit of innovation.

China has learned a lot from not adopting all the US
products and implementing their own product and in
some ways we see things they did, that our products
had not done yet.

The monoculture that the digital hegemony of a few
multi national corporations creating the only viable
solutions is not healthy.

Making something like a government chat system, might
be the seed for creating a public system.
Send these miserable, privileged people to Africa to dig latrines for a year. They'll be a lot happier when they return.

Deprivation is a necessary dimension of human experience. I was looking at setting up one-month trips for snowflakes through Canadian muskeg guided by special forces veterans, but it turns out that only the government can legally form a meeting of minds sufficient to conclude a contract where one party agrees to what amounts to boot camp.

Empathizing with people whose only problem is that their experience does not include overcoming adversity is a challenge that I think is best met with tough love. More of the same clearly is not going to do any good.
What do you believe HEVC is winning? The major online video platforms (YouTube, Vimeo, Netflix, Twitch, etc.) are all going to AV1.

HEVC had its shot but the terrible licensing stunted its growth and AV1 will replace it. Leonardo Chiariglione says the MPEG business model is broken and I think he's right:

http://blog.chiariglione.org/a-crisis-the-causes-and-a-solut...
Pennsylvania is neither uniformly red nor blue, so this kind of judgement will not be possible in a state like North Carolina.
There are some good books out there... such as (slightly outdated) "Design for Hackers" and "the design of everyday things"

... But if I were going to recommend a place to start I think you need to start small... begin by going to dribbble.com or awwwards.com and look around... get a sense for what you like, and more importantly, try to figure out why you like it. After you get an idea and take notes on the subject... try to fiddle around with copying the things that you like => personal blogs are amazing for this.

As a developer you should understand many of the principles that will get you to a good design: reducing complexity, intensional organization, being of service to the user, iterating your way to better designs, getting feedback/ testing your work.

Last tip: get some skin in the game. Charge someone for design work... nothing lights a fire under your ass like having your reputation on the line ;)
That image link is protected by cloudflare too! Irony intended?
Just laziness on my part, when you are done with the checklist, get interrupted and start 15 minutes later you might want to still see all the check marks still there, but on the next day, you might be doing a different task.

This needs to be configurable because it depends on task frequency and how long a checked checklist stays relevant.

It might be overkill, just having an easily accessable (but not to easy?) reset button for each list might work as well.

Also, I haven't read the book yet, so my requirements might not be the best.
Is Facebook listening to me? Why those ads appear after you talk about things
Mozilla's new mobile Firefox browser pushes speed, privacy on Android phones
BytePS, A high performance and general PS framework for distributed training
Once they enter their login, couldn't you check if it's a delegated login, and hide/replace the password field before they start to enter it?

(i.e. replace it with a div saying "you will be redirected to your corporate login page to complete authentication" to avoid the "without any hint" issue)
> How many I/O devices/drivers does a pacemaker talk to?

A pacemaker would presumably be similar to Arduino: A simple processor, no OS. 100k lines (your numbers) isn't all that much, given that C standard libs are into the tens of thousands alone. Pacemakers have sensors to detect heartbeat, logic to send an electric pulse only when needed, and have an interface where medical personell can hook up a computer to adjust some parameters. So 2-3 IO channels at a minimum (one or more sensors, one or more outputs for the electric pulse, and some sort of wireless interface for adjustments).

> Are you suggesting a passenger car runs its own Linux distro?

According to Quora (last link in my reply above) the most common alternatives are Windows Embedded Automotive, a Linux derivative, and QNX. Why? To avoid writing millions of lines of fairly complex code on their own, of course. Just like a desktop developer saves a ton of work by writing on top of the OS rather than implementing their own OS from scratch.

> If you include the underlying stack, then also my <body>Hello world</body> runs on tens of millions of lines of code.

Yes, but that's the point: The numbers for lines of code in a pacemaker or car includes the entire stack. If you want to compare it to web development, you'll need to include the full stack there too.
I usually forget that image anyway and I think that most people will have no clue what to do if the picture is right or wrong. I bet they will go ahead anyway.
One thing Dan didn't mention in the article is that he wrote 3 books about web design before Dribbble's launch: Web Design Solutions (2004), Bulletproof Web Design (2005) and Handcrafted CSS (2009). These books were unique among the first to hit a then-niche market: web designers who cared about quality. This was the perfect set-up to launching a platform for web designers who cared about quality and likely foundational to the early growth of Dribbble.
Yeah, Google Maps does this kind of thing routinely in my experience. I've had it direct me down muddy dirt roads because they were 2 minutes faster than the paved road, or direct me down forest roads that didn't exist anymore or were only for loggers.

I've learned to approach the directions it gives me with skepticism.
It is a cpio archive with a custom header, so `rpm2cpio package.rpm | cpio ...` is needed to explode it.

To look at scripts/dependencies/etc you don't need to explode it at all, rpm has switches for querying that.
The signals aren't documented (for obvious reasons), but I'd be surprised if Google Analytics were a signal. These things are usually kept separate, and Analytics is a lot less user-specific under GDPR as the anonymizeIP flag is now very common.

That said, I've no evidence one way or the other!

My understanding is that it comes down to information they can read about your browser (does this look like a bot environment?), and heuristically how the user has behaved since the JS has been loaded (mouse movements, time between actions, etc).
DisplayPort 2.0 is ready for 8K monitors and beyond