skysight-inc/HackerNews huggingface dataset:
There's no drama here.

The oldest copy of the current app store guidelines I could find goes back to 2014:

http://web.archive.org/web/20140903022336/https://developer....

"2.5 Apps that use non-public APIs will be rejected"

However this has been known dating back to 2010, so I'm sure someone can dig up an older version of the agreement that says as much.

The fact that Electron is a much easier way to build apps than Swift, Obj-C, etc has nothing to do with the enforcement of these long-standing rules.
Does it work? How many trials have they done? Like actually following people for 40 years to check the effects.
This analysis seems to skip the obvious step whereby the manufacture of cement involves expelling CO2 from limestone so that it can be mixed with water which re-forms the same compound by absorbing CO2.

Making Lime CaCO3 (+ heat) → CaO + CO2

Making concrete CaO + CO2 (in water, from air) → CaCO3

[there are lots of other things in concrete, but the CaO/CaCO3 are the media that glue them together into the useful composite they are]

They quote that as "half" the emissions, well those emissions are all reabsorbed by the product itself. The complete reabsorption does have a long tail, but if you expose CaO to air it will absorb CO2 all by itself.

The rest can be pretty trivially converted to renewable sources so it seems like this is just a big pile of scaremongering nonsense.

Which is unfortunate, it is difficult being scientifically literate and progressive being surrounded by people "on your side" who are spouting the exact same kind of nonsense and lies as your opposition.
From https://github.com/atlassian/localstack/blob/master/localsta... it looks like it's just running the AWS DynamoDBLocal code for you, rather than reimplementing the API.
Why does Electron need to use non-public APIs?
This was, I think, in 1996. (Edit: Nope, ~2002.)

And depending on if you believe the daughter or not, Target knew that she was pregnant before she did. It was able to tie the purchase of unscented lotion (and a few other items, but nothing as obvious as a pregnancy test, or anything similar) to her home address from using her parents credit card.

The lesson Target learned was not to show their hand.

But it goes to show how much effort is put into finding new (almost) parents to market to.

Edit 2:

“And we found out that as long as a pregnant woman thinks she hasn’t been spied on, she’ll use the coupons. She just assumes that everyone else on her block got the same mailer for diapers and cribs. As long as we don’t spook her, it works.”

https://www.nytimes.com/2012/02/19/magazine/shopping-habits....
The problem is that your ISP can log and mine your DNS requests, regardless of the servers you use. They definitely do this and one can only assume they then sell it after some sort of processing.
Is this why so many of the apps on my ipad "need to be updated to work with this version of ios"?

and there is no update.
any specific links to these groups??
I've had the same experience as you're describing: graphic designers who believe user experience is the same thing as art direction. There is a whole level of learning they just don't get from the purely artistic, 'gut feeling' perspective. They can design beautiful branding, visuals, and print-ready elements, but it's seems hard for them to understand everyday users.

I'm trying to move away from front end/software and into a more UX/Product design role. I think my experience is valuable because I have have good 'digital taste', user empathy, and desire to make data-driven decisions. I generally lack the graphic design skills of visual designers outside of wireframes and low-fi mockups, but I make up for it in the ability to bring together business, creative, and technology. UX is building a 'sweet spot' balance of those things.
The trillion-dollar lawsuit against Tether
You misinterpreted my comment.

Apple is roadblocking the use of private APIs, not languages. Or interpreted another way, they're roadblocking frameworks, not languages. This is true whether you're using Javascript, Swift, or C. This rule has been in place for years.
Banning private APIs is absurd. Permanently banning developers for using private APIs is shear lunacy.

As someone else pointed out, not using private APIs would put some applications at a disadvantage against first party software: https://news.ycombinator.com/item?id=21437673

Firefox is often criticized for it's power consumption on the mac because it is not on par with safari. Chrome/electron uses private APIs to reduce power consumption to be more competitive with Apples browser. Apple bans the use of private APIs.

Monopoly laws need to be updated.
Latency is dependent on many things. DNS server location - accessing my website from australia will take 500ms for DNS lookup (or twice as much if I'm using cnames). If this is not cached somewhere, that's 500ms every few seconds with those <1minute TTLs. If I'm on GPRS, or similar, that will add a bunch more hundreds of ms to every useless DNS resolution, incl. unpredictable variability.

So there's no single latency to report.
I don’t know all the details for this particular issue, but, in general, knowing the latency can be important. Imagine you’re displaying frames and playing sound together and you want them synchronized. You need some way to submit graphics frames and audio so that they arrive at the same time.

The browser could always increase the apparent audio latency by buffering, but that reduces the ability of music apps to perform well.
There's a reason why enterprise software looks like enterprise software...
I definitely don't have a problem with these kinds of contests. It makes sense that the contest would demonstrate something positive about the program. Teachers who don't like the program aren't likely to get involved.

As such, I found this text more offensive:

> the $50M commitments Google, Microsoft, Facebook, Salesforce, and Amazon made to CS education programs in 2017 were necessary to get Ivanka Trump to work to secure $1B of Federal support to bring computer science to the nation's schools.

It's great if she succeeded in getting the billion, but the fact that it takes 50 million just to get her attention is sad.
Slavery Warped Jefferson’s Vision for the University of Virginia
One trick that often works at hotels is to enter the hotel's domain name, which typically has an entry in the wifi DNS. I don't know how that works related to SSL, I just know it often solves the problem.
If someone is interested in blocking this, the firefox addon CanvasBlocker has an option to spoof this. Although it's not enabled by default, it doesn't seem to brake anything.
That's literally the sales pitch here. If your entire team is responsible for UX, let us be the specialists.
Consider this scenario: Loyal and long time high performing Gitlab employee Bob, is happily married to Su, who originally hails from China. They live and work in the US. All good.

Until Su's ageing parents back home succumb to ill health and she decides that the family need to move back to China to care for them for maybe one or two years - perhaps longer.

Bob then has to make the choice between (a) resigning his job or (b) being forced into a long distance relationship with lots of travel between China and the US, or (c) divorcing his wife.

When company policy gets in the way of important life decisions, I think it is a dangerous line to walk.
after this post apparently the issue has been upgraded to a bug and someone is working on it. I hope they will find a solution OR at least let everyone know that they shouldn't bother creating MAS packages and upload the apple store. I think it is dangerous as it can get you banned.
It varies state-by-state in the USA whether that’s the case, there’s a patchwork of state laws and one’s best bet is to consult an attorney familiar with your state here.

(Please don’t drive drunk so you don’t have to make this decision!)
Scientist discovers that he is very important and valuable. Much more valuable than all those idiots who didn't go to university...or those people who did go to university but earn more than scientist despite being way way more stupid then scientist.
My understanding is that it's Chromium that uses these (ostensibly for performance), not Electron, but Chromium is a dependency of Electron.
I took the SAT as a 7th grader, as part of the John Hopkins CTY program. This was back in 1989.
What about "audio" doodling as an interesting parallel?

A doodler is typically listening to their subject, whilst their visual attention is elsewhere. An audio doodler has their visual attention on the subject, but is listening elsewhere. A piano player I know will quite happy subconsciously play music on the piano, whilst reading a book placed where the sheet music would normally be.
Steve Easterbrook Fired as McDonald’s CEO
Tyranny of the Minimum Viable User.

My treatment largely focuses on software, but if you consider SW a mechanism for delivering interface and output, it applies to a physical + controls system such as cameras. Previous iterations of this phenomenon include audio equipment and bicycles.

https://old.reddit.com/r/dredmorbius/comments/69wk8y/the_tyr...
the article mentions cement is 8% of GHG emissions in text, but if you'd like a good visual on that: https://ourworldindata.org/grapher/co2-by-source
Executive powers in Aus aren't that strong - they'd have to pass a law to give themselves that specific power. I don't think there's one to permit this now, though I'm no expert and there are many obscure laws.

That's the good(ish) news - the bad is that restraints on the passing of bad law are generally pretty weak in the absence of a hostile Senate. This is particularly true with the current feeble opposition, and even more so given the general atmosphere of cowering obeisance that the major parties have allowed (or encouraged) to develop around any legislation involving the word 'security'.
>The website should be the one to inform me that they are actually using the audio api for tracking and not just playing audio. With a large penalty for lying.

The website can't do anything without your browser cooperating. The website can request the audio API as much as it wants but if your browser had a same configuration then it would just ignore it.

You're asking for legislation on a problem with a global scope. Countries that ignore your laws will still do all of this as long as your browser lets them.

>If we were talking about the issue of people being stabbed you don't suggest "Why should the stabber be penalized? The victim should have been wearing a Kevlar vest that doesn't allow them to be stabbed.

This is such a poor analogy. The server doesn't do anything without a client asking for something. In your case the victim went to the stabber and started the interaction. Then the victim's electric scooter (browser) malfunctioned or was poorly configured and drove into the stabber's knife.

Of course the server isn't blameless, because they are most likely knowingly exploiting this. But to suggest that the user has no control over this is foolish. It implies that the user can't be blamed for anything their computer does.
Moses McCormick - https://www.youtube.com/user/laoshu505000
Is it really a side project if it’s used in your performance review?
> Since National Security Letters exist, blocking all employees from the US would also be logical.

Sure, it would be, especially for companies located in neutral countries, but since US influence is so strong everywhere almost all over the world that's also practically impossible.
"Every animal is equal but some animals are more equal than others"
> Connections should only be closed due to? Inactivity.

Or if the user closes the browser of if the server/proxy restarts. But yes, mostly inactivity on the order of a couple of minutes.

> If a connection is closed, don't you think you would probably want to do another DNS request?

That's the whole point of the DNS TTL, to say how long to go before doing another lookup rather than doing it each time you reconnect.

> Also if your doing proper layer 4 load balancing using BGP, DNS is a moot point...

BGP load balancing operates on layer 3, and is irrelevant as you still need to DNS lookup an anycast address. EDNS client subnet is better anyways.
I don't understand what I am reading, I feel I am missing some context... Is it about being afraid the Chinese and Russian state will spy on user data if some employees are located in those countries? Or were there updates to their laws that made it mandatory to open databases to the state if an employee is located in these countries?
Website: http://rosagriculture.org/
Slack: http://rosagriculture.slack.com/
GitHub: https://github.com/ros-agriculture
Twitter: @ROSAgriculture
YouTube: https://www.youtube.com/channel/UCnr6AObsHnHSGPge0HVlBpA
Utmost respect for what is one of the most difficult jobs imaginable.

Do you think the anti-encryption / communications surveillance would help to stop these things from happening?

Are most of the crimes perpetrated by relatives of the children?

If Child Services visited these people prior to an incident occurring, in what percentage of cases would there have been cause to intervene?

Do you have the resources to investigate all the cases you feel worthy of investigation?

What political decisions would help minimize these incidents from occurring?

I want my commentary to be hand-wavey and wrong. I'd be very happy to hear that it is.
Presumably the country manager knew there would be a difference between selling barrels which had cleared security reviews and selling actual explosives to Ghadaffi, something which would have come back to bite him. Also perhaps not as much work as it seems for barrels considering the likely quantity of them and the ability of the company to transport to wherever they were needed.
Life long doodler here. Have had many teachers and lecturers express their consternation at me, but I persist. I often find it necessary to prevent my mind sort of "zoning out" which is unpleasant.

I always remember a particular incident, when I was 15, a history teacher got very annoyed and went through my entire exercise book where the left-hand page was filled with some (IMO) excellent robot/human hybrids, and he used a pen to deface every last one of them. I didn't enjoy that class, apart from the drawing, but I did go on to top the grade in that semester. I strongly believe it was because of the drawings, not in spite of it.
This is absolutely insane. Apple could learn a lot from Microsoft of how to treat developers. God i miss Steve Ballmer
Probably way better to not say than to say. Little upside versus who knows what downside.
The left is pro science as long as you don't discuss biology, evolution and the differences between men and women or ethnic groups.
Banning private APIs is absurd. Permanently banning developers for using private APIs is shear lunacy

An API by definition is the public interface that a platform promises developers will not change without notice. The vendor has every right to change a private API. Once you start letting third party developers use private APIs either you are stuck with them forever or when you change it, users will blame you not the developer when applications break.
Keybase (linked in their profile) is a messaging service too.
> While the jury is out on giftedness being innate and other factors potentially making the difference

Countless studies showing the heritability of intelligence and behavioral traits means "the jury is still out", but a few outliers and the fact that practice also plays a part, merits an article title of "no such thing as a gifted child".

The Guardian has such a fascinating approach to science!
(reading your comment when I got to the bit about "bouncing their leg" ooops... guilty...)
> I vote for and fund environmental parties, despite that meaning I will personally lose out in a lot of ways, because it's the right thing to do.

The "catch" there is that since your vote won't actually change any election, this end up costing you nothing.

This is how economists analyze it. Not meant as a critique of you in any way.
its to the point where i'm consciously trying to not engage in the facts debate or the what-about-foo endless spiraling. we're over-complicating things and enabling the "debate" to continue to waste precious time.

coal need to end within a decade. oil needs to be cut in half within a decade. anything else is a distraction.
Well sure they have the same capabilities from a certain perspective, in that both ultimately send data from a database to a client, but GraphQL does this entirely through a fairly free-form query language with either auto-generated or custom mapping code to turn that into DB queries (though in all cases it has to handle a fairly flexible query set or "shape", or else what's the point of using GraphQL), while PostgREST requires views and stored procedures to handle all but the most trivial cases. I think the latter's way less likely than the former to cause unexpected problems or force tons of defensive coding and cause anxious, sleepless nights—PostgREST seems to me closer to what's normal for any more traditional DB-to-HTTP-client CRUD glueware (Rails, Django—like 99% of the dynamic web, really) when it comes to inherent risk factor.

Exposing a poorly-indexed table can happen in any ol' Rails API app with the usual lazy 3-line controller methods bouncing about its codebase—that's the same level of risk in any system using a database, more or less. I don't see PostgREST as being more likely to cause that to happen. GraphQL's trickier, especially from a performance perspective, because the scope of a query is so hard to determine or account for up-front, and it's hard to confidently answer the question "what's the largest possible scope of a request to this endpoint?".
When I am visiting a friend and plan to drive after a drink or two, I usually find and bring a “session beer” that’s 4-5% ABV. There are good beers out there that aren’t 7-8% but it does seem like the majority of craft beer is high ABV and having more than one and then driving is concerning to me.

And yeah, avoid mixed drinks or liquors, that’s an easy way to a high BAC sometimes without even realizing it from what I hear people say (getting sick on drinking mixed drinks to the point of intoxication, or so on).
Even with technical prowess - I'm a software developer and spent much of today designing a cloud load balancer architecture for a startup's global infrastructure - I had never realized that this issue had to do with SSL.

I usually just futz around with things like the local gateway IP or the business's domain name (e.g. hotel domain name) until it works.
I think the "polarized hull" is only in the Star Trek Enterprise prequel which takes place prior to the founding of the federation and takes place where humanity had just achieved Warp 5 and has pathetic weaponry. Every single other Star Trek show (Original Series, The Next Generation, Voyager, Deep Space 9, and the later movies) use shields as in "shields up" or "raise shields". I believe the new Star Trek Discovery should also have shields.
>The façade began crumbling last November, when The New York Times published...

I need to call bullshit. It was readily apparent in 2013. Probably earlier, but that's when I learned she and her book existed.

I did a naughty thing though. I read the Lean In book review written by a rum-fueled pirate blogging the kind of insights the NY Post is taught not to have.
Thankfully this is one of those things, that you don't need to respect. TTLs are just suggested values in the end (the standard may disagree).

I just checked, and I actually have TTL forced to 1 day in dnscrypt-proxy. My internet experience is fine. I guess I never noticed in the last 2 years or so.
Is it really difficult to find private API usage? Can they be searched for through static or dynamic analysis?

I don’t develop for iOS so I’m genuinely curious. Do they provide automated tools for developers to use? Or a flag that fails your build if you’re trying to call private APIs: For that matter, how are the reviewers catching these API usages?

I find it strange that a private API can be used accidentally, without something notifying the developer before they’ve gotten to the stage of submitting their app.
to be productive, you have to minimize the need to rtfm, but you should also be cognizant of any new implementations -- a refresher may sometimes provide a better way.

I recently stumbled on the postgres method jsonb_insert(jsonb,path,value) which is much more elegant than jsonb_set(jsonb,path,jsonb||value) when you just want to add a thing to some json array inside an object.

I hadn't really looked at the docs much since 9.x, I deal with jsonb everyday, so I had what I needed memorized. But despite keeping my installs updated, I had been doing it the hard way for way too long.
'Dead Cells' Is Ditching Co-Ops for Capitalism
Might work on motherboards with a bIOS implementation, there’s often a “legacy” mode that emulates a FD interface making a USB floppy bootable and accessible from Windows Setup. Likely not the case for any UEFI motherboard.
It is odd that so many otherwise tech savvy people are supportive of 20th century solutions to 21st century problems (to borrow Andrew Yang's phrase).

People don't want to use the 4th best search engine or twitter or airbnb. We all know this. These kind of things are naturally winner take all and will pop up elsewhere on the global stage if we push them down here.

Instead, apply a VAT. This would be a productive and holistic solution to a 21st century problem.
Well first, it is not a camp. No one is putting no one in prison there.

Second, a company will want to abide by the laws of the countries it operates in. Having an employee somewhere may, nowadays, count as "operating in" that country. If they are not comfortable with some state laws, that makes sense to avoid these countries. Just like the companies that say they can't operate in Europe because of GDPR.

Third, if you identify one of your employee as a Russian agent living abroad, you fire them and Russia is in the wrong there. But if you hire a Russian and that makes you legally forced to share some data, you would be in the wrong to not comply.
It’s dumb too depend on private APIs and shows a complete lack of understanding how development works. Have you read Raymond Chen’s blog about all of the obscure one off hacks Microsoft has had to add to keep misbehaving apps from breaking?
> 10000 popups asking if it has permission to render an image

We need an automated approach. We need the ability to not only disable browser APIs but also make them return fake data to fool the website. We need the ability to inspect the data websites are sending back and redact data we don't want them to have just like corporations perform deep packet inspection to prevent data exfiltration.

> If we were talking about the issue of people being stabbed

In this case we handed them the knife. We thought they'd use it to cut something for us and they stabbed us instead. They even made the ability to stab us part of their terms of service. This cannot go on.
The best cameras is the one you have with you

Also expressed as "F/8 and be there".

Numerous online references, one at random:

https://www.lightstalking.com/quick-look-philosophy-f8/
Yes, Win10 IoT Core has a lot of limitations. It's fine for developers who are familiar with C# development in Visual Studio and want to use their same development tools for an IoT device, but it's not a desktop OS. Emulators are fine if the I/O works. Getting full resolution HDMI out of an emulated OS with any fps, or even just getting USB devices to mount is a hassle.
Tips for Advanced Writers from Venkatesh Rao (2011)
Of course some portals do use DNS and so you end up with your favorite site's home page getting a bunch of irrelevant arguments appended to it, resulting in an error page.
What is Nvidia's lead over AMD?
Intel's non-AMD gpus are Intel gpus

Do Nvidia integrated gpu (mpgu) exist?

Nnvidia claims they exist but all their weblinks to details are dead.
https://www.nvidia.com/object/main_mobo_gpus.html