skysight-inc/HackerNews huggingface dataset:
Time to start avoiding any browser that limits the power of extensions.

Browsing the web today has become a dirty business, it's easy to be tracked, and users have the freaking right to defend their privacy when browsing, and to do it in whichever way they like.

I'm tired of these paternalistic and uningenuous claims from Google and Apple that sound like "but we do it for you, you know, adblockers really hurt the performance of your browser". Something hurts my browsing experience? Well, it should be my call whether the pros outsize the cons or not, it should my call whether to use it or not, not the browser's developer call. After all, the web browsing experience today is way more compromised because of the huge amount of third-party scripts that run on most of the pages, surely not by extensions, but browser producers don't seem to put the same emphasis on the need of reducing the use of third-party scripts and trackers.

To me decisions like blocking external web API calls in extensions just because "they may slow down your browser or put your security at risk" sound like if the Linux kernel suddenly decided to disable the support for network sockets because "you know, hackers might use them for backdoors, or you might end up connecting to an extremely slow server and hurt your experience": a complete nonsense bullshit.

Plus, browsers like Brave have recently proved, with its native content blocker developed in Rust, that it's still possible to use a traditional adblocker without compromising the browsing experience.

Time to uninstall Chrome. Time to uninstall Safari. Time to ditch away all the browsers that do their best to limit your freedom on how you surf the web. Extensions are among the foundations of a modern browser, and limiting their power to static lists of rules is an immoral decision that deserves a serious boycot act from users.
I think as with everything it’s about context. If you play games deep within some internal component that is very limited in scope, easy to rewrite, and it buys you performance that is truly worthwhile, that’s one thing. If you’re doing this with pointers beyond some region of local control, you’re asking for it.
Wikipedia has a fair bit on this too:
https://en.wikipedia.org/wiki/CumEx-Files
This should not be the outcome.

Let's hope it gets the OPs problem resolved and Stripe uses this case as a learning experience so this doesn't happen again.

Bill Gates has said something like "Your most unhappy customers are your biggest learning opportunity."
The Intelligence Trap: Why Smart People Do Stupid Things
There's a site called mailbait (and probably others) dedicated to this sort of thing. It's probably just one person who knows how to use Google.
Unfortunately there will probably be a slap on the wrist, some lower level employees blamed and some big managers may have to go with dozens of millions of dollars as severance. 2008 was a good example for that, then LIBOR, Wells Fargo, money laundry for drug cartels, emissions cheating, Equifax and more. Corporations have transcended the law.
Not to mention autofilling in verification codes. It's not only time saving but I hate having to pick up my phone when I'm in the zone.
I agree, I think its not an apples-to-apples comparison, and that is slightly intentional. I want to highlight the same decision to be made under a less frictional commodity to ask the question: where does one draw the line on what they supply? There are some obvious lines probably. You would not want to be a gun manufacturer that sold guns directly to drug cartels, for example.
Ideologues often don't that care much about being professional or reasonable.
CodeScene isn't built on the open source tool. CodeScene's engine is implemented from scratch in order to deal with large-scale codebases. The basic metrics are the same, but CodeScene adds plenty of information and pattern detection on top of them. If you're interested, the story of CodeScene is written down here: https://empear.com/blog/happy-birthday-3-years/
Someone upthread asked "why is NPM different from PyPi/pip in this?"

There are lots of practical answers - PyPi is open source, Python packages aren't so fragmented, and so on. But honestly, a huge part of the difference is that PyPi has sponsors like PyPi and AWS using its baseline implementation. NPM's private repository system means the public system just doesn't have that kind of pressure on it.
Well the real question isn't if NSA used it but if they knew about it long before everyone else and never reported it.
Wood That Shapes Itself
That was the first thing I thought of when I read Crist's statement, and it is the reason I have been so harsh in my condemnation.
https://news.ycombinator.com/item?id=21030561
Therapy is great. Excellent way to create some balance and regular introspection.
Many, many sales people would say... sales.
Containers aren't even a thing like that though. They don't run anything per se. Implementations vary but it can be as simple as an extra struct field in the process list.
My understanding of the laws of physics that govern batteries is we are already close to the limits. There might be a doubling or two of capacity left, but that doesn't get us anywhere near the weight/energy ratio of jet fuel.

There are options to make fuels from other sources - but every time someone brings this up we get the oil shrills screaming about why use food for fuel, or their tired old energy neutral studies that haven't changed their numbers in 20 years.
I have started moving my friends and family from Chrome to FF. Biggest piece is the privacy angle, but the multi-site containers is also pretty important. It's nice to be able to block facebook API calls from other sites, etc. etc.
I don't follow what you're saying. Is it that other emissions than CO2 are more important to fight?

Well, that change is already happening with the ongoing big change towards LNG as the preferred fuel for shipping.

But when it comes to reducing CO2 emissions, outside of improving energy efficiency, it seems nobody has anything even remotely viable today. That goes both for deep sea shipping and for most air travel.
We’re using stripe and are overall happy. But their customer support is pretty bad. Lots of canned replies and ping-pong back and forth until you get someone to actually read your question.
So, where should we put our money?
> ... then we need to fix shipping first.

The problem with this logic is that we aren't one person looking at a bug tracker queue deciding one to tackle next. We are a civilization.

We need to fix everything all at once, as quickly as possible.

If shipping is a problem, fix it now.

If air travel is a problem, fix it now.

If grid electric is a problem, fix it now.

If automotive emissions are a problem, fix it now.

We are many; we can do much.
exactly, especially when the sentence before it mentions he worked with their executive team to make the decision.

This is entirely about money.

> former employee that removed the ruby gem

I hadn’t heard of this, do you have a link to that by chance?
Here's a translated version I ran on DeepL.com

https://hastebin.com/raw/wiwerobayi
It seems to me like we need to do both: tax carbon (ideally globally, but even if half the developed countries do it, it's huge) AND use that tax money to work on research and deployment of carbon sequestration or carbon to fuel conversion.
Substituting to travel by boat would almost definitely increase carbon output, unless you mean sailboats. Carbon output is the integral of emissions/hour over time, and a comparable boat trip could take weeks.

High speed rail is also not as great as people think - true HSR uses a pretty huge amount of electricity, which has to come from somewhere. Conventional (aka medium-speed) rail on electrified tracks is probably the sweet spot for efficiency, but the travel times aren't going to make most people happy.

More realistically, the solution in a world where carbon is "properly" priced would be that people travel a lot less overall.
http://rusrs.com/

Compatible with Mosaic 1.0, Netscape 1.0, 3.0, 4.0, and IE 5.5, Links, Lynx, and NetSurf, among others tested.
NCAA Football Live Stream
https://www.eventbrite.com/e/r-ncaa-streamsutah-vs-usc-l-i-v-e-free-21-sept-2019-tickets-73608905217

https://www.eventbrite.com/e/streamsncaa-usc-v-utah-utes-live-broadcast-21-sept-2019-tickets-73609127883

https://www.eventbrite.com/e/streamstexas-longhorns-vs-louisiana-tech-live-broadcast-21-sept-2019-tickets-73609649443

https://www.eventbrite.com/e/reddit-ncaa-streamslouisiana-tech-vs-florida-international-l-i-v-e-free-tickets-73609990463

https://www.eventbrite.com/e/reddit-ncaa-streamsfiu-panthers-vs-louisiana-l-i-v-e-free-21-sept-2019-tickets-73610319447

https://www.eventbrite.com/e/reddit-ncaa-streamsair-force-vs-boise-state-l-i-v-e-free-21-sept-2019-tickets-73610562173

https://www.eventbrite.com/e/streamsair-force-falcons-vs-boise-state-broncos-live-broadcast-21-sept-2-tickets-73611216129
I know you said intuition but can you elaborate why you think that?
Passenger-hour is not an appropriate metric here. passenger-miles is.

But I should point out here that electric cars usually get 100mpge or better. And it's already feasible to do road trips in a Tesla. I'll be doing a (short) road trip with my first-gen Leaf.

For domestic trips, we can replace air travel with regional electric buses in the near term and electric airplanes in the mid-term. In the far-term, we can do even long-haul air travel using lithium-air batteries or very high performance lithium/sulfur or lithium metal anode batteries and extremely efficient airframes and multiple hops. That'd be faster and cheaper (at least in the US with high infrastructure costs) than high speed rail.
Out of DRM paranoia (before I discovered GOG) I used to have a separate Steam account for each game franchise and a Google Spreadsheet to keep track of them. About 15 accounts (yes yes, I don't own that many Steam games, luckily I discovered GOG before I ended up buying too many Steam games). Would be neat if I could finally collapse them now that most of my games are on GOG (including having rebought games I had on Steam that I actually care to really own).
That's the most viable path to sustainable aviation (rather than electrifying the fleet).
Why are you arguing "A instead of B" when we can do "A and B"?
I can no longer take any of these articles seriously. The hysteria around climate change precludes the possibility of reasoned rational discourse on the topic, and as such political solutions are all but impossible.
That’s what these types want, though. They want to have plausible deniability and a solid excuse while they’re cashing their checks, they don’t actually want to make hard choices.
legal page is 404. fyi.
Most homeowners still have a substantial amount of leverage though, and you can refinance every X years. On top of that, rising rates reduce house values.

Most of my parents' net worth is in either residential or investment real estate, and low rates are very much good for them.
> I think tech companies are bad at customer service because the founders have rarely worked front line

Customer service rep turned engineer here. I think this true, but I also think that so many founders just don’t care about customer service. Investors are far more interested in new customer acquisition than retention, so naturally more resources are going toward customer acquisition.

Customer service is an afterthought cost center that barely pays and experiences high churn in 90% of the companies I’ve worked for in my career.
To be covered by health insurance, glucometer testing strips have to be prescribed.
They put in no safe guards. It was designed to give developers access to personal information.

What more do you want?

Criminal negligence is still criminal.
Especially when using techniques like marine cloud brightening.

https://en.m.wikipedia.org/wiki/Marine_cloud_brightening

Imagine if cruise ships and cargo ships had snow machine jets on the back, lofting prepped salt water into the air, to seed clouds.

The problem is that this is geoengineering which means career suicide for interested scientists. At the moment.
Hrm, I had read the start of the thread a bit differently and assumed more within the realm of business... I do absolutely agree that vacation travel is worth it, but I'm less convinced that a sales dude who flies from city to city every other day is actually needed and can't be replaced with telepresence.
Which is exactly what you want. Expected monthly payments are fixed, so your principle would go down. This increases your ability to pay off the loan earlier, and lowers your property taxes.

(This may not sound causal until you consider the larger feedback loop that has gotten us to here in the first place.)
and with auto updating you'll never notice the changes.
can’t make money because they run their businesses poorly

I don't have any data but this wouldn't surprise me in the least.

You're taking a bunch of people who really aren't that interested in running a business, just in making ends meet. It's not surprising that they won't do the kind of critical analysis that running a profitable business entails.

My first ever Uber ride was in an almost brand new BMW. Really nice car, but I have no idea how you can make money driving Uber with a vehicle that expensive. As a side gig for extra cash a couple hours a day in a high-density area? I can see that. But doing it full time with all the additional wear and tear on the vehicle? No way.

Judging from the comments I see on /r/freelance, I believe many freelancers/gig workers would prefer to be employees because they really don't enjoy doing the work that they are.
I think getting an electric car is even lower hanging. No change in lifestyle, a similar total cost of ownership, but a factor of 2.5-3x lower emissions with even the current grid (and effectively zero emissions in the future grid we'll need anyway).

(Plus now you can go on emissions-free road trips.)
Well, to be blunt, so what? That sucks for sales stuff, it's not like I said conferences are the only things that need to change. Maybe the practices there need to change there just like for conferences and other stuff. Nobody said it's easy or nice or effective or whatever for humans to do long distance. Just that you need to start sacrificing somewhere and I sure as heck find it more reasonable and humane to start at business sales trips than family visits.
Lemme get this straight...taxes paid for the basic research; that is, paid for something for which there was zero obligation to come up with a new drug. No shareholders to make happy, no board to placate. Go do research and write some papers.

He found something, and a drug company willing to put up the other 99.99% of the money required to try to take the drug to market (even though the odds of that happening are miniscule) paid both the university and the researcher for the rights to use that discovery (and, as I understand it, usually to get a share of the profits should the drug be successful).

So for a nominal tax-based fee (funding research, not bringing drugs to market), private companies get access to research results that a private company may not have even tried and the institutions involved get a funding bump. And maybe some malady cured as a result. Unless you're a serious "screw you I got mine" libertarian, that seems like how tax supported basic research should to work.
From my understanding, that vulnerability exists only if RDMA is also enabled.

RDMA, the ability to share RAM as if it were local RAM (through a memory-mapped IO mechanism) across Ethernet is not a common setup. The fact that you can perform cache-timing attacks over RDMA + Intel L3 cache is a testament to how efficient the system is if anything.

Consider this interpretation: RDMA + DDIO is so fast, you can perform cache-timing attacks over Gigabit Ethernet(!!). NetCAT (the "vulnerability" you describe) is proof of it.

Cache-timing / side channel attacks aren't exactly the kind of vulnerabilities that most people think of though. Its kinda cool, but its nothing as crazy as Meltdown / Spectre were.
Many uses for processor-core scheduling in Linux
Climate change spawns a new kind of archaeology
The goverment has no business knowing where we are at all times. Once they do the world just becomes like a huge prison.
Yeah, this seems to me like the only real no bloody solution of this problem. It basically boils down to energy - we need to have a lot more from sources that don't produce CO2 - likely massive solar or nuclear deployments.

Once you have that, not just CO2 capture but many other similar problmes are quite easy to solve without having to put pressure on people to change the way of their live.

You can even periodically turn part of the captured CO2 into jet fuel, effectively making all planes battery powered (with Earth's atmosphere being the battery).
Stop Censoring: Chef CEO Defends Contract with ICE
When interpreting statements like "Over all, air travel accounts for about 2.5 percent of global carbon dioxide emissions", keep in mind that air travel emissions are higher impact due to occurring in the upper atmosphere. The commonly established multiplier is 2.7X [0].

So while the claim is 2.5% of global co2 emissions, in terms of impact it's more like ~6.7%.

And growing, largely just so people can take selfies in different places, which are then used to promote more travel via social media.

We need to tax fuel used for international air travel. The Chicago Convention [1] may have made sense in establishing the industry but we're well past that point now. Make this high-speed, high-impact transportation method high-cost so it's used less frivolously.

[0] https://en.wikipedia.org/wiki/Hypermobility_(travel)

[1] https://en.wikipedia.org/wiki/Chicago_Convention_on_Internat...
My season pass for the commuter train can be used by anyone I give it to.
The fact that the fix is relatively easy is not really a measure of how far off things are - some pretty terrible disorders have easy fixes...
There's always sailing, although it's a bit laborious, and fission has a good record at sea :-)
Now that just makes too much sense, and would empower users to actually take action to protect themselves from people trying to snoop them. That's probably the reason FB would do something like that only as a last ditch act of desperation.
Would you tell them to think for themselves even if they happened to be agreeing with you?
I absolutely agree, taking away private transit just isn't a workable solution with how people live and commute right now - and I wasn't advocating for anything of the kind, just pointing out that considering reducing private transit is absolutely off the table right now socially.

I use and love public transit and would love to see downtown car free zones that help encourage transit usage and phase out the need to have a car - I wouldn't love to see everyone's car instantly impounded.
Jets are not going to tanker fuel in significant quantities over anything approaching a reasonable level of taxation differences. It would be extremely rare for a medium-haul jet to even be able to tanker fuel for a round trip and impossible for any of the long-haul routes.
As CEO of Chef, Barry Crist has the authority to say, "Chef will withdraw from all ICE contracts. We cannot change ICE's policies, but we are not obligated to remain complicit in the harm these policies cause."

He could have said this. He could have taken a stand and set an example. He chose to take the easy way out, and I think there are too many people in this thread willing to make excuses for his moral cowardice.

He may have done the right thing as a CEO, but he has failed miserably as a human being and an American citizen.
Imagine it from their perspective. There's a higher chance of actually getting sued if you just ignore them.
>The goverment has no business knowing where we are at all times.

I don't understand how you could have interpreted my comment as suggesting otherwise...
Stadia is no different than a PS4 or an Xbox. It's just that you're renting a Stadia, but still buying game licenses (just like Steam). Stadia isn't Netflix for games, it's streaming console for hire.
Without a USA liaison, they can't do that and it's illegal for them to do so.

No one should ever take someone seriously acting on behalf of a foreign country trying to arrest you in America. Even Interpol needs a USA liaison.
My profile tells you how to contact me without providing scrapable data.

"My HN username is how you'll find me pretty much everywhere else."
This is a case that could set a precedent for other companies and is worth a good debate. I believe it comes down to values. Here's a simple example to explain.

Suppose I am a CEO of a consulting firm. I have a client who pays us a lot of money and have had a good relationship with for years.
Now suppose I've hired and brought another person to meet this client for several months.
The meetings seem to go well but (let's say 9 months later), Another employee brings to my attention that the client had been consistently harassing the person I hired to manage the account.

I now have two choices, re-assign the person I just hired or "fire" the client, permanently ending the relationship. What are the values of my company? That's the question that needs to be asked. What's the right thing to do?

If I choose to re-assign the person I hired, I would not be addressing the problem, not holding the client to the same bar I would have for my own employees. I'm telling the client and my employees that I value the contract more than them and more than the values of my company. The side effect is that it reinforces the bad behavior.

This is essentially what has occurred in this scenario. Except the harassment is not towards Chef's employees it's towards civilian children and their parents.

Having said that, companies don't always get it right the first time but it's our job to inform them of their error. Executive teams often are flooded pools of confirmation bias where dissent rarely occurs.
I don't think "combing" is really necessary but like anything else, when the spotlight shows up. It's usually in the company's best interest to distance itself.

[edit: fix grammar]
> If you get caught by the police you have a human to reason with. "Listen officer, I have all the paperwork right here I simply haven't gotten it to the DMV yet because today is a weekend and they are only open weekdays".

These sort of stuff tends to discriminate against certain segment of societies, like you are let go if you are white and fined if you aren't
Doesn't Flywheel already own that space?
Of course you are right. That's why a certificate trade is needed, to maintain a level the playing field between you and your competitors.
> The court rejected Valve’s defense that argued Steam is a subscription service. According to Numerama, the court found that Steam sells games in perpetuity, and not as part of a subscription package.

So Steam is in the clear as long as they stop selling perpetual licenses and start selling 99-year long subscriptions for their games?
I do agree with you, but most of Uber's spend is on tech salaries and (superfluous) marketing.

I suppose the more direct point I'm trying to make is that if Uber is spending $BILLIONS on salaries but Larry's cat can allegedly do the same work, why hasn't Larry created the app?

Presumably he could even license the tech other companies who want to compete with Uber but don't have the time to build out the app from scratch. I'm sure Tesla or Apple or BMW or Porsche would love to diversify revenue streams.
I don't really support arbitrary penalties on certain classes of travelers or banning, e.g., business class. Note that the corresponding inefficiency would be priced in to the carbon offset tax and business and first class travelers would still be paying their larger portion of the carbon externality.
My point was that very few need more than 48 bits of virtual address space. Having extra layer of lookup will reduce page walk performance.

52-bit physical & 57-bit virtual address space is a no brainer if you have more than 128 TB of RAM installed, of course. :-)