skysight-inc/HackerNews huggingface dataset:
"For each card processed, a developer will pay an average processing fee of around 2% to 3%"

My understanding is that credit card processors, Stripe for example, charge $0.30 + 2.9% of the transaction amount. So for an $0.99 purchase that is roughly 33 cents. On large purchases your statement is true, but in-app purchases average $0.99.
It is an issue on game consoles too, just because it has somehow become accepted it doesn't mean it isn't an issue that you cannot run whatever you want on your own hardware. "Others are doing <bad thing> too" isn't much of an excuse.

Also note that it isn't all game consoles, there are various open game consoles, though since they are not made by huge companies with huge marketing budgets they are not as popular (perhaps Atari's new Linux powered console[1] will change that, but we'll see). However their existence means that games consoles are not synonymous with locked down walled gardens.

[1] https://atarivcs.com/
Okay, but no quibble re. the lonely alien part?
The propaganda machine is in full effect, not in Russia but in the US. For any possible scenario Americans might come up with for China or anyone else for dystopian surveillance systems, they should look no further than America itself. Chinese government involvement with Huawei -> 3 letter agency desks at Facebook and Google (let's not forget their funding as well). Uighur's prisons in the west -> immigration camps and mistreatment in the US. Meddling of elections by Russia -> assassinations and policy warfare by the US.

It's time for the US to respect the principles in which it was founded on. Respect the sovereignty of others and "live and let live."
Product Design Misconceptions
The value is that Apple allows distribution. Distribution could be handled any number of ways for considerably less. It is only valuable (especially at 30%) because it is the only one allowed.
So did you buy software from retail when they were taking 60%? Do you buy music when the artist only gets pennies? Do you use Spotify where the artist gets even less?

Do you realize that it costs thousands of dollars to develop for either the Playstation or Nintendo and you have to sign an NDA? Do you buy console games?
I have a friend who has a small business doing, well I actually have no clue what the English word for it is, but its direct translation would be “Nature Nursing/Care taking”. A descriptive translation would be something like a wild nature gartner.

I asked him and he said it would be little trouble to plant that many seedlings if you coordinates the efforts and planned for it.

He also told me that these stunts, like airlines planting a lot of trees to go carbon neutral, often ends up with a lot of dead trees. Because the hard part isn’t planting trees it’s making sure they survive the first five years.
One of my favorite activities here was floating down the lazy river with my mask on, scanning the bottom for loonies and toonies ($1 and $2 coins).

In one spectacular end of school field trip I netted $25-30. That was a lot of money for a 12 year old in the late 80s, and helped me buy my first computer.
We (using general "we" here) spent so much time convincing developer that version control is good, reviewable changes are good, automated CI is good, and editing directly on the servers is bad. This was not because of some abstract ideas, but because of practical lessons about how to maintain long-lived applications.

And now there is a startup which says "let's edit directly on the servers, automated CI is not needed -- the code will always be correct, and we will add version control in the future.. maybe..."

How do you think people will react to this?
You turn off autoplay by exiting netflix.
I can write things in Javascript 5x faster than I can write things in C#. I am finally convinced .NET Core is inferior to Node for that reason, unless I am writing something that needs to be super accurate/performant.

And it has brackets.
> if (foo = bar()) { // syntax error!

That's already an error in strict mode (which would presumably be on for anyone writing bleeding-edge JS).
But it does. There are other phone platforms I could buy. Flagship android hardware is quite nice, and similarly priced. And in the past Apple has outcompeted to death windows phone and WebOS and Palm OS and BlackBerry, all of which had more open app distribution models.

I want to Apple to be the benevolent dictator of what software is on my phone, And I am willing to pay higher up prices, and put up with missing features in order to protect their revenue stream in exchange for that.
And modern banks that offer their customers "one time use" credit card numbers that you load up with an exact amount, and expire after a few hours if not collected on by a third party.
> Also, a new feature I want to use needs only be supported by one C compiler: the one I'm using.

I've always had the impression that C programmers also care about standards compliance, and aren't typically willing to marry their project to a particular compiler.

At least, it's the language community where you see "language lawyers". I'm sure there are "language lawyers" in other language communities, but I've never seen discussions about what causes "undefined behavior" or what's "implementation dependent" or discuss interpretations of particular passages of the standard like I do with the C and C++ communities.
Or shared curation, just like Wikipedia. Depends on your view point I guess.
More to the point, if a package maintainer turns malicious, as it appears was the case here, none of the changes this article is suggesting will help at all.

2FA means nothing if you can't trust the person publishing the package.
So is their server intruding onto my computer when they set cookies without my permission?
I have used recursion two times irl outside of interviews.
Show HN: Kweb 0.5.0 released – Pleasant web development, in Kotlin
Great comment! I'd offer this:

> Fiat money is just faith-token money without a tangible base.

There is no physical basis for the faith, but a persons interactions with society is a basis for faith in fiat money. If all our neighbors and family and leaders express faith in fiat money through daily actions, then that's a powerful reason to share the faith. Even more so when you realize that faith is the only thing needed to make the system work.
Except this ignores the fact that there has been spyware and malware on Apple's store. Which perhaps gets removed eventually, but what about services that sell your data to the highest bidder without Apple's knowledge? Apple's offered security is relative to their definition of security. All it takes is your parents to install a malicious app that passed the app review. Deferring to Apple as some sort of security baby-sitter is just lazy and blind to the truth.
You could label the same of almost any toolset. Look at rechargable tools in construction.

Look at the IP protection around John Deere equipment.

While none of this is especially good, it's hardly a unique problem.
I pay taxes
There is no charge to start development for iOS. The tools are available for any Mac owner.
Rational: What I am and what my political opponents are not
Neuroscientists decode brain speech signals into actual sentences
Nifty Features of the ARM Architecture
See how Rust or C# do generics, as well as Java or Scala (I think this feature is also called "Concepts" in C++, but I'm not sure it supports it yet).

You specify a type parameter, and then statically write out that it has to adhere to a certain interface/trait. This analysis is done at compile time, not runtime as with virtual dispatch.
Wouldn't deaf ads be for deaf people?
More content disappearing behind hard paywalls will expose a lot of publishers to the truth that very few people are interested in their content specifically, their link was just the first thing to come up about the subject in some aggregator.

The only reason I bypass paywalls is so I don't have to be annoyed by them, go back to the page I came from, and choose the next option. If the aggregators I use stopped linking paywalled content entirely (or gave me a checkbox option), I wouldn't even bother.

edit: there are outlets I donate to, and they don't even have paywalls. This may sound weird, but I donate to orgs so they produce content that other people can read. People who want me to read their takes should really be paying me.
The Art of Agile Development. It's published by O'Reilly and quite a bit of it is excerpted on my blog at https://www.jamesshore.com/Agile-Book/ .
But it's not true.

There's absolutely no restriction on game development machines except that the provided tools (probably) only run on Windows.
She spent 9 months being pregnant with my daughter and suffered through labor, that’s more than a fair trade.
> legitimate uses for autoplay videos

also saving bandwidth on gifs
Moving the Linux desktop to another reality
> "You exist first and foremost through the lens of the government. You are not permitted to live outside the bureaucratic abstraction of you."

Aren't we already at that point?
This is an arbitrary selection of (exclusively western and male) philosophers, ordered by first names(?), listing the titles of some of their works. No attempt at any classification; no links to easily access the listed works. I don't see how this could be of any use to me.
It is written for an Indian audience, presumably. Would you expect all articles to be written generically or to your cultural tastes?
antiwar.com
EDIT: see caveat from K-Wall below. Can't trust anything these days :-/ </edit>

That's exactly how it works, to an extent. In a study [1], people with self-refilling soup bowls ate 73% more soup (p < 0.01) than those eating from normal soup bowls. Similar with popcorn [2]. I first read about this either in Nudge or in Mindless Eating.

[1] Wansink, B., Painter, J.E., & North, J. (2005). Bottomless Bowls: Why Visual Cues of Portion Size May Influence Intake Obesity Research, 13 (1), 93-100

https://onlinelibrary.wiley.com/doi/full/10.1038/oby.2005.12

[2] http://projectputthatcookiedownnow.com/2011/bottomless-bowls...
I have suspicion that these politicians know what they are doing and they are doing these stupid things with the fullest knowledge that the bill does not help the addicted people. Also probably they know these things don't even threaten the tech giants. Then why are they spending their precious time for such a meaningless bill?

This makes me think of McConnell gaining support or lobbying from tobacco industry. Maybe this is a thinly veiled threat or request to the tech giants?
I noticed that the author published this on a website that implements a paywall, doesn't allow much control over the look of their column, and tries to make you log into an official Medium account to read. I wonder why that is, if they're championing the open ecosystem so much?
Trading Automation with Interactive Broker API, Python and Docker
not sure if serious
A much better analogy, however I still think the generalization of "videos" as a single body of liquid is an overstep. It's not like the plot of a YouTube video just extends forever, you are aware you're starting a new video each time.
> You seem to be objecting to the manner in which they compete.

I absolutely am! There is such a thing as unfair competition. As I see it, Apple is using their existing dominance to create barriers to entry for new players.

I'm free to avoid Amazon too, but as increasing amounts of society move to Amazon as the de-facto web store for everything, how reasonable is it to fully boycott them? Sure it's possible, but it would be a substantial life commitment.
Hard to tell what’s really going on here from this article. Although it seems like five vulnerabilities were fixed and one remains (and google is being unusually patient about the sixth issue)

One thing I’ve always struggled with is the strategy of these white hat teams. I’m sure Google Zero spends a lot of time on Apple because Apple is an enormous company, large partner, and competitor in some spaces.

So now I wonder: does the release of vulnerabilities ever get effected by business agenda?

I assume it has to, although I’m not sure of the agenda here. In this case, iMessage is in direct competition with a Google sms protocol (although googles hasn’t gained much traction). Maybe the vuln is less impressive than saying, “there’s one more”?
> Sweatshops and slavery and cheap mass transportation of goods make our lifestyle possible.

One of these things is not like the others!

Cheap sea transport is a triumph of engineering. Sweatshop is just a term for a factory which the speaker disdains. Usually implying that the peasants should stay on their fields in picturesque poverty, and not make their own life choices.

Slavery, on the other hand, is actually evil. Fortunately it's now confined to certain backward parts of the world which have very little to do with the modern economy. I mean how many things manufactured in Mauritania have you bought recently?
Interesting that there isn't a post on Project Zero's blog. That's typically how they do public notification.
You're probably not still looking for an answer, but since I tried to work through this question myself I will answer it, if only for my own benefit:

See the "Mutually referencing type parameters" example. [0] Ignoring the issue of generic types vs functions, suppose you wanted to do shortest path as a fuction using the Node and Edge types described. You could try to write something like

func ShortestPath(type N implements Node, E implements Edge)(from, to N) []E

but how would it be implemented? Type N only promises that it it implements the Node interface which is just

Edges() []Edge

but those Edges might not be concrete type E.

So instead you must resort to

func ShortestPath(from, to Node) []Edge

and use type assertions, which is where we were before generics.

The contracts allow you to constraint the relationship between the concrete types N and E, enabling callers to work with concrete types directly.

[0] https://github.com/golang/proposal/blob/4a54a00950b56dd00964...
That's 4000 cycles @ 4 GHz == 1us right?
Stripe gets no love? :)
I had one quote from Patton[0] the film:

I think it was Alcibiades in the Peloponnesian War... ...415 B.C. He said, "If Syracuse falls, all Sicily falls, and then Italy." He knew that Syracuse was the
jugular of the island. Old Alcibiades always went for the throat.

Good movie.

[0]https://www.imdb.com/title/tt0066206/?ref_=nv_sr_5?ref_=nv_s...
I think the choice is to just leave Netflix when you are done an episode. Maybe it's just me but I've never felt like the autoplay makes me much more likely to keep watching, it is just convenient so I don't have to go through all of the menus again.

If we ban autoplay on Netflix, we should also ban cable I suppose (not a big loss, really), since cable will autoplay indefinitely.
How would you go about documenting that? There are so many kids. Kids imitate facial expressions or sayings they heard from television. Why wouldn't they just make up a fake friend because they heard about it on TV or youtube
> This will work for a time, but what happens when the next breach occurs?

The UUID shouldn't be assumed to be private information - authentication should be built around the assumption that this identifier is a public identifier - like a name, but guaranteed to be unique.

> Physical authentication probably means fingerprints, face data, correct? These are already compromised. Worse yet, they cannot be changed.

Even if those are compromised, that doesn't mean it has to be easy to impersonate you. The solution may be low-tech - you may have to physically present yourself to a human who assesses if you are indeed who you say you are before opening an account. The higher tech solution physical authentication might require something akin to chip-and-pin or a (revocable) token generator a la Ubikey
Considering PayPal's numerous issues, I don't think that using it as a credit card substitute for online purchases is that great of an idea.
Landlords in Seattle Can’t Force Renters to Pay for Parking Anymore (2018)
Probably because part of the ios appeal is the insanely smooth interoperation between your mac laptop, your appple watch, and your iphone. If you already have a mac because, say, your work got you one (which in the tech industry is ludicrously common) then getting an iphone if you're shopping for a new device makes a whole lot of sense.
And now you have two problems.

But at least the worst is better than most everything else.
"The Facts" basically say that among the statements, "Your experiment design isn't predestined by the universe to make it accidentally seem like quantum mechanics is true," "the state of the universe today is all you need to know to predict the state of the universe tomorrow," and "an experiment only has one outcome," there is at least one lie. If the first one is a lie that's superdeterminism, the second one the Copenhagen interpretation and the last one Many Worlds. What bothers me about getting philosophical is, philosophers will attempt to choose one or more based on intellectual aesthetic criteria that we developed from the womb onwards in the macroscopic world, while in reality the only legitimate answer is "we don't know." I think that is broadly speaking a problem that hampers the effectiveness of philosophy, there is not enough willingness to say "the present information does not permit a conclusion."
I agree in broad terms, but as a counterpoint, those build pipelines are being created and used primarily by folks who initially learned by handwriting javascript.

While less of a consideration for established teams, it dramatically raises the barrier to entry for those who are learning as well as those who currently have much simpler requirements. Those are the future members of that established team. Adding hurdles to the process of learning will, in the long run, result in a smaller, more homogeneous pool of experienced developers to draw upon. It's a self-perpetuating cycle - making folks learn by using complex build scripts will result in experienced developers who then create further complexity because they've self-selected to be those who happen to think in that mode.

That's not intended to suggest that progress is bad. Rather that it's a bit short-sighted of us, as an industry, not to consider the ramifications of enforcing a workflow that happens to be trivial from the limited perspective of long time front end developers.

{ Edit to try to make the last paragraph sound less accusatory. Sorry! That wasn't my intention. }
Why not? Saves you the trouble of building and maintaining a secure access system. You likely gain more users because of network effects, which doesn’t cut your advertising budget so much as supplements it. If your trying to preserve user privacy, there’s a good chance you’re too late there - they most likely already gave that up a long time ago.
Apple doesn’t take a cut of a Spotify subscription. Spotify hasn’t allowed in app subscriptions for years.

Can I sideload music and integrate it with my Spotify library like I can with Apple Music? Can an artist get included in the Spotify library without giving them a 30% cut?

Apple is introducing cellular streaming in WatchOS 5 and music intents with Siri in iOS 13.

This problem is the same. How can Spotify compete with Apple in a completely separate industry like Music when Apple takes a 15-30% cut? How can Netflix compete?

Netflix also stopped allowing in app subscriptions recently.
If this is something people want, why does it need a legislative fix? Couldn't we just implement a technical solution and let people choose whether to use it? Like a browser plugin that stops videos from automatically playing?
>We are withholding CVE-2019-8641 until its deadline because the fix in the advisory did not resolve the vulnerability

Wonder how this happened? rushed patch or perhaps they only tested against a submitted PoC? Only a week left until the defcon talk. Still listed as "fixed" in Apple's release here:
https://support.apple.com/en-us/HT210346
This could be more common than having an imaginary friend, although the line between having an imaginary friend and pretending to have one is blurry.
Like I said, no system is perfect. But let’s be real — which OS model is likely to better secure them and limit the damage? It’s objectively clear it’s iOS. iCloud backups make recovering from the damage much easier too. Backing up MacOS or Windows is still not easy.

Even if they installed a malicious app on iOS, the damage is still limited because of the security model of iOS.

I definitely understand the concern of centralizing everything around one provider, but I’m just pointing out that these systems win because, on the whole, they are a better experience for users. It’s why Facebook wins, and it’s why closed systems continue to crush open ones.
Which brings another point: the jio phone is orders of magnitude better than the deaths phones available the last time feature phones were big in the US or Europe.
Buffer: Bug in Login System
I have just received the following e-mail from Buffer:

Hi there,

We wanted to proactively reach out to you about a bug in our login system that we identified on Friday and resolved over the weekend.

This bug affected 0.00599% of Buffer users (467 out of 7,800,000), and we have reached out to those 467 people separately.

When a user logs in, we create an access token that secures their login and gives them access to Buffer. We identified a bug with this login system that made it possible in very rare cases for two accounts to share one access token. This would cause one of those Buffer users to log in to the incorrect account.

This issue is fully resolved. Our team has implemented a more secure system for granting these tokens, which ensures that all account access is private, safe, and secure.

To be especially clear: No passwords were compromised. No credit card details were at risk. This was a technical bug within our system and not a malicious event or hack from an outside party.

We’ve taken precautions to upgrade all Buffer accounts to our new login system. If you use a Buffer mobile app, you will need to log back in; if you use a third party app (like Zapier), you will need to reconnect.

Lastly, I’d like to send a big thank you to the customer who made us aware of this. We’re always amazed by the community we get to serve.

Photo of Dan.
Dan Farrelly, CTO
Well that by itself is a big restriction.
Oh wow. Looks like I’m wrong.
You might like this: http://www.pgrim.org/philosophersannual/index.html

It's an annual collection of some of the best papers of the year. It's not aimed at the general reader so some of these will be impenetrable if you don't have a background in the specific area, but there's usually a couple of readable things in each year's edition for someone with an ~undergrad level foundation.
history is filled with societies that fell due to aggressors attacking when they were at their weakest.
Would You Want a Computer to Judge Your Risk of HIV Infection?
Shoe Dog: A Memoir by the Creator of Nike
by Phil Knight

Bad Blood-
Secrets and Lies in a Silicon Valley Startup The full inside story of the breathtaking rise and shocking collapse of Theranos. - It is not a autobiography but I could not put it down.