skysight-inc/HackerNews huggingface dataset:
> I don't have the solution but I don't think state-subsidized is it. It's a conflict of interest when the people you're trying to hold accountable are the ones writing your paycheck.

The current alternative seems to be a combination of "that, but indirectly, through access to primary sources" and "your paycheck comes from turning everyone against everyone by saturating their attention with outrage-inducing content". Is that really better?
Surveillance cameras debunk the bystander effect
BitWarden to the rescue!
Hands-on with new Sigma 'FP' – a compact, full-frame, L-mount mirrorless camera
Is it possible to use WebRTC on your blockchain?
Why not do both? Amazon gets you your first orders. You ship with a note saying visit mystore.com for the full range, and sign up for discounts at mystore.com/discounts.
So instead I stay on Windows 7 and become a much greater risk.
I don't think it's an hypocrisy so much as a conservatism to avoid what happened to, oh, Fatty Arbuckle. Or HUAC'ers. This has waned a bit in the wake of Bill Cosby, but I always felt there was a desire to hold onto the greatness of these peoples' art for as long as possible before their reputations were sullied forever. Then again, The Cosby Show is back on TV in reruns, so what do I know.
Automated facial recognition trials backed by home secretary
Yea, I think PWAs are a great substitute for apps. I wrote a websocket chat that my girlfriend and I use. It works great on desktop and mobile, makes for a seamless transition from commute to work. I'm less hyped about the electron ecosystem, but something performant that allowed those front end tools would be great.
Have you seen what development for this is like? You can slap together simple apps (the UI anyway) with a few dozen lines of C. It's extremely simple, lightweight and fast, everything react/PWA's/etc aren't. This is what excites me about librem the most, it's so easy to just write code with no bloated IDE, 15 xml files, AbstractFactoryBuilders and the rest of the android crapfest.

PWA's and the like can stay away, I want software from developers that actually respect their users, software that doesn't waste resources, software that actually looks native.
When he creates something, you will know.
Removing a feature that has a huge chance to cause an unknowing user to shoot themselves in the foot. Sure, it should have had a mention in the the changelog, but I think this is a completely sensible thing to have done long term. You can still sync with Dropbox or the app over WiFi which shows me they're not doing this to force you into some subscription.
Registered just to post this. Love Purism, want it to succeed. But...

IMHO, the effort is going to fail miserably, unless folks stop wasting time trying to build a phone UI, i.e. another attempt to build Android/iOS ecosystem. There were Sailfish, MER, Openmoko, and whatnot attempts to make a pure Linux-running cell phone. Just stop it. You will burn through your money doing half-baked UI, there will be no adoption, then no developers, then no apps, and thus no users.

As per OP link, Purism just have shown that they wasted precious time on badly looking GNOME Clocks, Emacs, Password manager, a game, a half-baked music player, Torrent client (on a phone!), and Drawing app made with their native UI. What a waste of time to re-write (or port) all of this, all over again.

The only surviving plan for any Linux-phone: make it web-centric. You have to port ONE app: Firefox. Make it fast, make it perfect. Then, automatically you will get:

- Adoption. http://m.uber.com http://m.lyft.com/ work out of the box. I am not leaving home without the phone because it enables to access essential day-to-day services. Partner with companies that develop those web-based apps.

- Adoption. Web-based music: Spotify, SoundCloud. Out of the box. Purism doesn't need to waste time on this. Just have pre-installed bookmarks to those apps. Partner with companies that develop those web-based apps.

- Adoption. Endless web apps such as "Clocks", "Notepad", Games and drawing apps already exists. Purism don't need to waste time on this stuff. Just have pre-installed bookmarks for those apps. Partner with companies that develop those web-based apps.

Once basic needs satisfied, those of us who need Emacs, will be able to port Emacs and Torrent clients themselves. Why waste your time, Purism?

Focus on releasing the hardware, be different from other phones, be lean, get immediate adoption, community will fill the blanks.
Flickr users furious; critical issues plague platform after Yahoo transition
I've been wanting to build gesture based control of my smarthome for a while.
I have question. Do you think that this could be used as a brick to build an alternative web browser?
Ask HN: How do you ensure US sanctions compliance
Hello, we are trying to setup a company via Stripe Atlas and since we will be having a software as a service (SAAS) setup, there is a query on how will we ensure we don’t work with customers, contractors, employees from territories or entities that have US sanctions against them.

I looked for solutions but could not find any. I assume that if we work with a US bank or payment service like Stripe, they will ensure we can’t transact with such entities. Apparently Stripe Atlas needs a more convincing answer. Want to ask other startups how do they manage this?
> Why be the cow when you could be the dairyman?

Because the cow doesn't need to worry about selling the milk, collecting money from the customers and fixing the roof on the barn?
Wow, this is tremendously bad communication from their team. I don't care about the local vault feature, but the lack of empathy in the responses from AgileBits is certainly making me reconsider my family account.
You do that by letting a human play, informed by the bot.
I've been running Windows with Windows Update disabled for many years. I enable it and update when I feel I should, and assess risk on an as-needed basis. I'm aware that running outdated software is bad practice, but I like not getting interrupted on my PC... for 154 straight days so far: https://i.imgur.com/1RTpIBY.png
List of Topics Categorized as Pseudoscience
Jedi orders: Amazon is eyeing billions in federal contracts
I think it's more just fatigue. The user was getting really combative in their responses, and eventually you learn to just shut down emotions when you encounter that.
Wow. This user on the “free plan” has quite an attitude, and is yet receiving a heap of support from Agilebits.
I was just checking specs on the two devices and it seems that the new Kinect depth even higher resolution, so it looks like a go in terms of raw input data.

So my next question would be why would it be significantly harder than regular facial recognition approaches as found in say OpenCV, naively one would think more data makes it easier not harder,
neglecting hardware requirements/performance, but just from accuracy perspective from a trivial refactor of current facial identification algorithms.

I’m not talking about identification of people moving or far away but straight looking at from a fairly close distance.
Sure, there’s good reasons why you might remove it but the subscription model reason is more compelling to me, a long-time user. I’m still with them for now but my trust is significantly reduced and I’m shopping around.
I'm a paid licence holder for 1Password, but am uncomfortable with being more and more forcefully pushed into using their cloud-based subscription service (which while I use for work, I'd rather _not_ us personally).

What're people's experiences with alternatives to 1PW - ones that do device-device sync and work at least across iOS/macos and ideally integrate nicely with browsers and apps on both those platforms? Is BitWarden ready for prime time for something as critical as secure password storage yet? Does it's iOS app take advantage of the secure enclave features of iPhones?
What Is NoOps?
The last time I helped my wife with a Windows 10 install, I was utterly grossed out. I've always been suspicious about snooping and covert logging, and spent years playing the game about blocking it all, but Windows 10 is crazy invasive.

I mean, by default, it wants to send every keystroke back to Microsoft servers! For "diagnostic purposes", I guess. And every URL that you visit. That's arguably worse than Google. Which is saying a lot.
BitWarden gets so many things right that using other password managers can only be the result of inertia.

And its has an open source client, plugins, and server--with instructions on how to setup your own instance if you want to. This is vital, not because I want to run it myself, but it provides a check in case the company is ever bought out or starts blowing it on policy.
There's already loads of bots online, this is just another incremental improvement in a very long line. This isn't some unexpected sudden death-knell for online poker.
IS the experience using that good? Are their iOS and macOS apps "good enough" for critical password storage?
Likewise, it was not fun when my phone with GA suprise died. Many services with 2FA do not provide backup codes. I switched over to Authy for this reason--they allow an encrypted backup of the TOTP secrets.
Again, this doesn't really compare to Google - if somebody started up a business within Google and only had about New York Times level of success, it may very well be in danger of being shut down. New York Times has about 3 million subscribers. Youtube Premium had 1.5M about a year after launch and it's on life support. Youtube Music has 16 million subscribers a year after launch and it's barely successful enough not to be cut. These are ancillary services run by small teams. Google has Android, Chrome, Search, GMail, Maps, Photos, Calendar, etc, etc, many of them actually manage lots of your data on your behalf and/or require real-time location capabilities. Of course providing these services requires a long privacy policy if they want to honestly cover what they do with user data.

"California Today" needing a location capability - I'm not sure if you're entirely serious. Why would it need to access your current location - people read local news for where they live, not where they happen to be. And whether you're in California or not is not something that changes frequently. Nor is California Today a travel guide - it has no relevance for people who happen to be in California. Do you actually know if it's based on your real time location? I doubt it. And even if it was, it doesn't have to be.

Also looking at this - https://www.nytimes.com/column/california-today - it consists of an article every other day or so? This is why they need the location data? And it doesn't look like it's a customized feed at all - seems like everyone gets the exact same feed. What data do they need to put this together? And it looks like they have a signup sheet - https://www.nytimes.com/newsletters/signup/CA - are you sure they don't automatically sign you up based on your permanent address? I mean, consider the level of location access (frequency and granularity) needed to show New York news vs California news and compare that against, say, turn-by-turn navigation.

Also I just downloaded the app and it has "Australia" as a top-level section by default (I'm in the US). Are you sure user location is used meaningfully for anything in the app?
Don't make this about moral superiority of Apple over Google.

Apple did it because they could, because when the iPhone came out it owned the smartphone market; any carrier that didn't play ball would be frozen out (as T-Mobile was initially - AT&T's exclusivity on the iPhone really helped their market share among high-end consumers). Google did not have that luxury.
Are you able to make local, encrypted backups and view them later with offline software?

Any password manager that doesn't offer this is a non-starter for me. I don't want to be caught unawares when the vendor who makes my cloud-based password manager suddenly goes out of business (or if it's suffering a network outage when I really need to log in somewhere).
Wonder how many people this actually affects? The affected user admits they have a really unusual use case.

I thought AgileBits was fine with their responses. The last thing you can do is give people like this any hope. Be clear that you’re not going back to the way things were and stick to that.
This is great news for employment based immigration. It makes the system FIFO and helps American workers by reducing the number of people waiting perpetually in line for a GC. This way people stuck in the backlog can move jobs easily and accept promotions which helps avoid depressing wages. This bill also strengthens protections for H1B to reduce fraud.
Also “Winter monsoons became stronger during geomagnetic reversal
Revealing the impact of cosmic rays on the Earth's climate” https://www.sciencedaily.com/releases/2019/07/190703121407.h...
Bonus: Quite a few simple, minimal templates from the links to other personal websites
Kernel Address Space Isolation to Prevent Data Leak from Hyper Threading Attacks
The tweet: "Every spreadsheet shared in a business is an angel announcing another SaaS app still needs to be built."
> Surely the religious leadership is not happy with that.

Hindu religion is not like Catholic Church. Unfortunately, in such issues, it is very fragmented and 'decentralized' with multiple different sects, castes, pontiffs etc.

Uttar Pradesh, where Ganga mostly flows has a lot of water heavy low-tech businesses. Leather tanneries is the first thing that comes to my mind. Illiteracy doesn't help either.

Things are changing. Ganga in Varanasi and a few other areas are much cleaner in the last couple years than they have been in the past!
The feature has been specifically disabled in the iOS app, still available on macOS for now.

It's extremely disappointing that the staff are being so evasive regarding their communication. For a product that is necessarily built on trust, that's the last thing that I want to see.
JS is the new PHP. It's really popular (i.e. lots of n00bs) and not at all elegant, so the programmer elite regard it with derision.

I also notice people often conflate the problems of overzealous browser-based scripting with JavaScript the programming language. This is pretty understandable since JavaScript has been the only browser scripting option for 2 decades, but those problems would exist no matter what options were available for browser scripting. It's a safe bet to assume that the problems would actually be much worse if JavaScript wasn't the only browser scripting language available since that would mean browser-based scripting would be more accessible to more programmers.

In another 6-8 years when WASM targeting alternatives become more mature we will see a new explosion of browser scripting.
Not sure how it would work with iOS, but keeweb (or keepass) .kdbx files sync really well via syncthing. Even to my mobile devices.
I'm not defending the semi-aggressive users here because I don't use 1Password and didn't fully understand the support forum thread. But I think this illustrates something larger that the tech industry doesn't really understand: the world is seven billion edge cases. No two users are alike and no assumptions should be made about them.
Well, its hard to feel any sympathy for Google here. Google forces their android partners to include Google's own apps and keep them updated. They could also have made Android security updates mandatory. MS still got the blame when Windows systems got exploited using bugs that were fixed ages ago. Its unfair, but that's just the nature of the beast...
What? Seems to me like the core question the user had (free or not) was a) was this removed? & b) where and how can I read about its removal, it’s not in the notes?

None of those questions were answered without repeated requests for the information. That’s shady. What exactly are you seeing that I didn’t?
A timely reminder that the current spreadsheet format is not the last word on how to manage data and simple programs.
1password seems to be slowly but surely inching towards pay-by-month model for all users, which is I assume great deal for them (persistent recurrent revenue!) but terrible deal for the user (once you are in, you are on the hook forever or you don't get access to your precious passwords). I've been a happy user of 1password for a decade. Looks like it's time to consider alternatives?
Huh, I have the exact opposite feeling. If a SaaS app can be boiled down to a specific spreadsheet + web UI bolted on top, it's making money by wasting everyone's time.

Maybe I should get back to Twitter.
I think the specs are already pretty competitive with Macbook Pro -- the only thing it doesn't have is a discrete GPU.

Unfortunately I'd guess they won't use an AMD CPU anytime soon because I don't think we know how to 'purify' it, at least with Intel we can try to disable ME.
> another attempt to build Android/iOS ecosystem

Do you understand what they are doing? They don't have to build the ecosystem, it already exists!

> Purism just have shown that they wasted precious time on badly looking

I think it looks good.

> What a waste of time to re-write (or port)

So you still have no idea what they are doing. Why are you taking the time to create new accounts and post long comments if you aren't taking the time to understand what they're doing?

> make it web-centric. You have to port ONE app: Firefox.

They aren't making a web-centric device. We don't want a web-centric device. They are making a privacy-focused, portable Linux device that makes calls.

---

It's weird. It seems like every Librem 5 post has new accounts that criticize it.

Is there someone who doesn't want it to suceed?
Is there any reason why applications cannot be written for the Librem 5 with Flutter? The Flutter framework compiles to ARM binary and the UI is rendered with Skia, a C++ UI layer. It's not like a bunch of widgets would need to be written and supported on Librem, just the Skia layer. What am I missing?
Sun holds key to volatile weather
There are 2 other admins in our domain. We all get the same error. Through the Azure console I can disable MFA for other accounts, so even if I lost my app, one of the other 2 admins could just disable MFA until I re-enable it on another device.
I think 1password is great and use it myself.

I tried to have a family member set it up and it was really hard for them.

What do people think about a simpler service that relies on SaaS and you owning your primary email address. The service is called nopassword and you log in via a link that is sent to your primary email address. When you log in you see a hashed email address that ends in @nopassword.com. to add a new account.

To add a new account you change your email at that account to the hashed email address that ends in @nopassword.com. The nopassword service will automatically detect this, confirm the email address change, and reset your password. From now on you can find your password in the nopassword website or client.

Because every service uses a new unique email address you have the privacy and spam filtering advantages of Apple ID. Since almost every web service lets you register by email and reset your password by email it is compatible with almost everything.

After you log into a service nopassword will reset your password 16 hours later. This way intercepted passwords can never be used for long. And if a webservice has a breach nopassword will proactively reset your password.

The nopassword service will have clients for iphone/android/chrome/firefox/safari that word with native authentication (FaceID, etc.) to get in the client after validating with your primary email on install.

Would you use this?
I was in a similar position for years and got a hearing test. Turns out I have a sensory processing disorder that I got help for.
> The people of whom you speak would need to be gifted communicators.

Going about it one way yes, but not all ways.

For example, if you could alter the HN guidelines to include new rules like:

- do not state speculation as fact

- be careful to not confuse beliefs based on facts with beliefs based on heuristics

- just as you realize it is foolish to say "people of ethnicity X do (or will do) Y", also realize it is similarly foolish (in most cases) to say things about various groups of people. Realize that you cannot read minds and cannot predict the future, so do not do it in comments.

- be mindful that there's a difference between fact and opinion, and it's often very difficult to tell the difference (errors hidden in axioms, etc)

- do not lie; try to not write untruths

- etc (I can't recall all the ideas I've had over time)

If you made some reasonable changes like this, and actually enforced them, do you think it would not (could not?) make a change? Perhaps the very idea seems absurd, but if you stop and think about it for a while, is it really? You can go into any non-technical thread, and it is full of utterly delusional statements, and it keeps getting worse. I simply cannot believe people as intelligent as those who frequent HN are not capable of significantly decreasing this behavior.

I also don't see a plausible way that this problem gets fixed otherwise. Perhaps some amazingly persuasive enlightened guru could spring onto the world scene and wake people up, but I have a feeling he wouldn't get a very warm reception, from a wide variety of powerful people.
APA102 is strictly better than WS2812B (standard SPI, much less sensitive to timing, way less PWM flicker, similar price/availability).

When you still want bare metal, pick a modern uC like ESP8266 (cheap, 32 bit, integrated WiFi for trivial connectivity) instead of "classic" overpriced, outdated 8/16 bit AVR (Attiny/Atmega) based Arduino hardware.

Arduino the software platform still works great of course, but so does NodeMCU which is the go to stack on ESP8266.
Then don't buy any
I had my whole extended family on 1PW. We've all switched to Bitwarden (after a few transgressed to LastPass, but that's behind us now), and we're happy.

Having the developer respond quickly on email is delightful, it works great on Ubuntu, macOS, Windows, Chrome OS, Android, Firefox, and sharing credentials between accounts works seamlessly.
>I just have a very precise use case where for a period of time I only need a local vault with a few items in it.

Any guesses as to what the use case here is?
That's simply not true... I don't play casino games because of the losing odds. I play poker because of the winning odds. I guess you meant "having losing odds doesn't stop everyone from gambling".
Would love to wire this into some kind of device I could play with at a casino.
The three reasons you mentioned are indeed the prevalent reasons but mostly in rural part of india.

In cities like Delhi and Mumbai, none of these is major reason. Pollution from vehicles (especially diesel vehicles), crop waste burning (esp in areas around Delhi) and industrial pollution are the major reasons. These cities are too densed and yet too big.

The sad thing is that there are hundreds of laws to prevent pollution but law enforcement is not a thing in India.
I'd welcome more push behind Plasma Mobile for it. There is practically no progress now. It could benefit from moving towards more touch oriented design, Sailfish like, dropping lingering elements inherited from the desktop UI.
They aren't writing applications, they are improving Gnome to work with small touch displays.
This reminds me of the time I was trying to explain to the Verizon store rep why I was concerned that my SIM suddenly went offline, and they told me "Oh hun, nobody steals a phone number!"
Chances are this is only part of the story.
The problem is that I may have to buy and hold. For example, if I leave the company, I have to buy the options within 6 months or else they expire.

Otherwise, of course, waiting until the options are profitable is the best move and is risk-free.