skysight-inc/HackerNews huggingface dataset:
I was just looking at this recently, funnily enough, while looking for other examples of x86 Operating-System development in Ada.

Here are a few other examples of Operating-System development in Ada, in various levels of completion.

- https://github.com/ajxs/cxos

- https://github.com/Lucretia/bare_bones

- https://marte.unican.es/todo.htm

- https://sourceforge.net/projects/lovelaceos/

- https://sourceforge.net/projects/sx-ada-kalinda/
You have proposed a social solution to a technical problem. Why does JavaScript offer a way to enumerate things about the client cat the server has no need to know?
They're not reversing course since it's not an opt-in, but still an opt-out. I don't want to inspect every hidden option on my hardware to be sure that nothing is spying on me.

For me it's still not solve here. I'm sad, because now I have to find another hardware provider that I can trust.
It sounds like this would limit scalability quite a bit because you'd either have to keep a DB connection open for each active user or close connections rather aggressively.
I'm confused how they keep saying this is in compliance with Grpd when auto opt in is not allowed.

And the idea that they force everyone in, and will add an opt out button later seems like they are gaming the system.

If they don't opt everyone out they didn't ask to opt in as a default, their actions to me seem hollow.
YC companies can submit special job ads, I actually don't know how, you probably have to email the admins. Those stories don't allow commenting, have no voting buttons and are guaranteed to hit the frontpage automatically. Look for "reserved for YC-funded" on https://news.ycombinator.com/newsfaq.html
"HPV vaccination is also recommended for everyone through age 26 years, if not vaccinated already.
Vaccination is not recommended for everyone older than age 26 years."
https://www.cdc.gov/hpv/parents/vaccine.html

Does anyone know why? Is it because most sexually active people would already have HPV at that point?
Obvious answer I didn't see from others:

Because hypothetical employers who are actually benevolent are forced to compete with those who aren't, absent regulation? AKA a "race to the bottom".

When corporations send me stuff in writing every day saying that they can only do the minimum mandated by law in respect to any ethical matter, I have to wonder whose opinion it really represents to say that minimum standards aren't necessary.
Refusing a breath test may be a criminal conviction itself.

At least it is across Canada.
> And, why do they need to be productive?

Why do I need to give them money?
Indeed. It's especially odd when companies seem to fail to realize their entire market is comprised of people leaving larger, more established companies largely because of things like this.
Thanks for this. People are always skeptical of this approach, not because the tried it and failed (or even thought 5 minutes about it) but because they read some blogpost somewhere.

Not to say though that this solves everything, there are cases where it does not work (as someone commented correctly and gave an example where they needed to use linear algebra over the data)
I haven't seen LessWrong mentioned in quite some time! I remember the first time I heard about them, from this article in Harper's:

https://harpers.org/archive/2015/01/come-with-us-if-you-want...

LessWrong is great as intellectually stimulating entertainment but I don't think they are actually any good at all for making people more rational.
Psychology seems to point out that we all make emotional decisions first and then rationalize them. The danger is that everybody is convinced their decision is rational.

I don't know if the non-reproducability crises has hit these studies
This also happens on TV, and you probably have no idea. There are applications on iPads and phones that work with ratings firms, like Nielsen and so forth. These firms work with content producers, and they embed inaudible tones into TV shows and even advertisements. The phones and iPads pick up this tone and report back that the user is, indeed, watching said TV show or ad. It's a way of confirmed tracking of views.
The Office of Personnel Management (OPM) could not even protect the information of people with security clearances.

https://en.wikipedia.org/wiki/Office_of_Personnel_Management...

Trey Gowdy's questioning of the people in charge of the OPM is a classic:

https://www.youtube.com/watch?v=AK-zEGjxuAA
I've known people who got pinched on their riding lawn mowers because they crossed the road to mow the other side with a beer in the cupholder.
Browsers sandbox more than just the javascript VM/ renderer.
Just to clarify, this is not a new finding, but an explainer of a study from 2016.

Note that this fingerprinting technique exploits differences in the behavior of the AudioContext API, but does not (and cannot) actually record audio.

Paper: https://webtransparency.cs.princeton.edu/webcensus/index.htm...

Demonstration (test your own audio fingerprint): https://audiofingerprint.openwpm.com

Discussion from 2016: https://news.ycombinator.com/item?id=11729438

Full list of websites where audio fingerprinting scripts were found (in March 2016): https://webtransparency.cs.princeton.edu/webcensus/audio_fp_...

Source: I'm an author of the research in question (but unaffiliated with this blog).

Note to mods: article title is "Audio Fingerprinting using the AudioContext API". Submitter title is "Sites are using audio (no permissions needed) to track users", which may violate the site guidelines.
There's a postgres extension called plv8 that essentially allows one to write database functions in JavaScript, instead of plpgsql.
At what point on the line does tracking people based on side effects of running JS become illegal unauthorized access to a computer.

For example if there is an exploit to read your local files and upload them to the server, that would clearly be illegal.

What if you just got the names of the files?

What if you just got the count, e.g. 33413 and stored it against a name?

What about the count, but just used as a semi-anonymous tracking token?

What about system information, as a tracking token?

What about audio information specifically, as a tracking system? (Like this appears to be. Didn't read the article because it won't load for me).
Updated response from Ubiquiti

https://community.ui.com/questions/Update-UniFi-Phone-Home-P...
If he claimed something happened to him that was known to be widely happening to people like him at the time, something that was the norm in business and was often recorded the way it was recorded in his case to give the people doing it deniability, then yes, I’d believe it.

Of course it’s difficult to give a general answer, and it’d depend on the details of the case.

Perhaps you have a specific example of where Trump was at the tail-end of systematic discrimination in the beginning of his career?
I hear you, and I agree I'd prefer all telemetry to be strictly opt-in. I'd be comfortable with software prompting me to make that decision at installation time to have a chance at me answering affirmatively (I'll virtually never opt in after installation).

But I consider an opt-out a workable option in this case, as long as they realize this mistake should not be repeated, which remains to be seen.

Is there any alternative that provides the elegance and affordability of UniFi SDN?
FFS why is this information exposed to a goddamn website?
I think lubuntu comes relatively close to that requirement, but really it is becoming a needless exercise other than being intellectually stimulating. You could just download the older releases of Linux for such machines
when it comes to these tools, all your statements are wrong, give them 5 minutes and check our their capabilities (there is no coupling and joins in frontend) :)
Steam game sales for 'the other 50%'
There are arguments for term limits, but this isn't one of them. No person can be an expert in everything the government can potentially regulate.
More and more the only thing that makes sense is blocking all resource loads not from the primary site or directly affiliated servers, which unfortunately breaks a lot of things.
Ask HN: Emergency Preparedness as a Service
With global warming, the environment is becoming much more volatile. Proper emergency preparedness is difficult. First you need to know what supplies to purchase based on your family composition and size. Second, items, such as OTC medicine, water purification, batteries and food, expire at different times creating a maintenance headache.

Would you pay $20/month as an individual or $50/month for a family of four to build and maintain an emergency preparedness kit?
>He sees “transferring money to people who are unproductive” [universal basic income, UBI] as less optimal than finding a way for them to be productive.

¿Por qué no los dos? One of the issues with the current system is that it does not serve people who are only somewhat productive, if only for the time being. We expect that every job (more generally - every production opportunity, at the margin) will pay for itself, but there's no law of economics that says this has to happen.
> In every society where some people are working ("the young") and some people are not ("the old"), and everybody is consuming, the young people have to work for the old.

You are missing one big thing: productivity increasing. Since I'm born in 1988, the GDP of my country (France) doubled (adjusted for inflation), assuming GDP is not totally meaninglessness, that means that we need much less «young» to sustain the entire society with the standard of living we had in 1988 (which was a pretty decent one by all standards).
They do!

https://tools.ietf.org/html/rfc1996

https://tools.ietf.org/html/rfc1995
I think the ADI ones are actually based on transformers.

Specifically they'll do "Full Speed" 12Mbit, but not "High Speed" 480Mbit. USB3 @ 5Gbit can also be isolated, as it uses separate send/receive pairs. But that doesn't mean you can use a hub and drop down to 480MBit - they're separate data paths.

If you need 480Mbit, the best solution is probably a Raspberry Pi or other SBC, to convert to ethernet.
You don't debug views of course. But with postgREST you have to write your logic in stored procedures. So say I want to write an accounting app that has an invoice function. A view is not enough to create an invoice, because there are complex rules to apply to the data, so I have to write a SP. I need to debug that stored procedure, and if I have to install pgAdmin and switch from my very much loved and customized editor to debug my invoicing procedure, the workflow is broken, and so it comes that I will write that invoicing function in C#, java, python or js instead, because the tooling is better.

Compare that to a node application: just open vscode, start editing away and press F5 to test it. If you want to debug it, add a breakpoint and step away. When you are done you commit and push to git.

It should be the same with stored procedures.
Diwali is an Hindu festival where Indians burn firecrackers in millions. Should stop the festival and firecracker.
That's what generated columns [0] are for ;) There is very little you can't do on the side of the database these days. And if all of it fails, then stored procedures and triggers can solve the rest. We [1] as a rule don't allow any data to be post-processed once they leave the database and we run database of 100TB+ with trillions of rows with absolutely no problems.

[0] https://www.postgresql.org/docs/current/ddl-generated-column...
[1] https://www.citusdata.com/customers/pex
"transmitted using end-to-end encryption"

Technically correct but sounds either ignorant or misleading.
I know iOS requires permission granted in an app when it tries to use the microphone, and I presume Android does similarly.

I would imagine to do such tracking, you'd need to have an app open which already had those permissions for some reason, such as Skype.
I brought PCs as an example because it's a relatively open hardware platform and you can run Linux or BSD and have an imperfect control of everything that is going on.

On phones, things have gotten much worse. Although you can flash a relatively open ROM in case of Android, good luck controlling what the baseband does behind the scenes.

And if we talk about cars and other devices like smart watches, there's often zero openness.
I wonder how they are planing to force free software to add client-side scanning.
Most likely because as an American company they have no clue what the GDPR really does. Many European companies are still struggling to be fully compliant.

Furthermore, if they transmit crash logs, and those contain partial memory contents (core dumps), chances are actual content from network packets are transmitted to UBNT as well, and those contents may contain PII (IP addresses, MAC addresses, usernames, passwords, real names, addresses, credit card information, etc.), meaning they’re most certainly violating the GDPR by making it opt out.
That's a pretty incredible claim, you got a source on that? My searches can't find anything.
As a french person who's been to a few schools in the US, the US has such a long way to go it's almost non funny. I would never subject my kids to the food the local super-rich-tech-company daycare gives to toddlers.
I am rather skeptical about PhotoDNA. If it is an effectively method for video filtering then why is youtube using very expensive machine learning, which has a high maintaince and operation costs, compared to just simply hashing the video frames.

There is also similar problem with spam where spammers send email with images in order to fool the spam filter. If the algorithms in PhotoDNA would be effective then the problem of spam images would be a fairly solved problems, but what I keep hearing is that the only effective tool is machine learning.
I operate authoritative name servers for almost 10.000 domains. Originally, I used a default TTL of 2 days, as recommended by RIPE-203¹ (which is also compatible with the recommendations of RFC 1912²), but this was not accepted by users, who didn’t want to wait two days. Therefore, for all records except SOA and NS records, I changed the default TTL to one hour, which I still use as the default value unless a change is scheduled and/or planned, in which case I lower it to 5 minutes. I do not want to lower it any more, as I’ve heard rumors of buggy resolvers interpreting “too low” TTLs as bad, and reverting to some very-high default TTL, and thereby wrecking my carefully planned DNS changeover. I have, however, not seen any real numbers or good references on what numbers are “too low”, and would like to hear from anyone who might have some information on this.

1. https://www.ripe.net/publications/docs/ripe-203

2. https://tools.ietf.org/html/rfc1912#page-4
Great (as in powerful) fallacies and strategies came out the gullibility and emotional weakness of the majority.

e.g every time someone yells "think about the [insert adjective here] children!" it's most likely a clear attempt to emotionally manipulate you, trick you into doing whatever the manipulator wants you to. Very few are capable to recognize and withstand emotional manipulation.
Oh, absolutely. Same with Python, Tcl, Perl... but that's not the part I'm talking about. The business logic being encoded as pgpl/* is just fine. But having to write complex triggers that wrap pgpl functions and making sure the state of the functions is as expected and all of the other wiring stuff is just not something most people are used to.

I've recently seen an uptick in "Postgres-native" stuff being built, though. So maybe there's hope for the future.
My thought exactly. Honestly, I think Informatica should consider firing their entire HR department.

As you say, the entire point of HR is risk management. I hear loads of time on HN about how you can never trust HR because they are only there to protect the company, and while that's true, a lot of the time good HR people realize that the employees' needs and the long-term needs of company are aligned, so they should be working to improve your situation.

In this case, they asked a woman whose baby just died to come back to work over 2 weeks of leave. Did they honestly believe this inhumane act, which would basically guarantee them lots of deservedly shitty press, was worth it over a measly 2 weeks of leave?

Any decent HR person (and, honestly, any decent person in general) would have immediately realized this was an idiotic decision.
Doesn’t work for me. This does:

https://web.archive.org/web/20191103211525/https://00f.net/2...
1. I continue not to understand. Which one of these things do you believe to be true?

a) The company's reason for firing the guy was the content of the password, not the behavior of harassment, and jedberg was outright lying in claiming otherwise. If so, what basis do you have to believe this? What do you know about the company or the guy that jedberg is talking about other than what jedberg has told us?

b) The company's reason for firing was the harassment, but somehow the unsavory password is a complaint of harassment that cannot be disproven. This makes no sense. The content of the password cannot be disproven, of course, because it's in the computer system and so is a plain fact to all observers, but the existence or nonexistence of harassment can of course be disproven, which they checked by asking the officemate (unless you believe jedberg outright lied to us). Hence the officemate's complaint was necessary for the guy to be removed, and going to management about the password couldn't "almost guarantee someone is going to get fired".

2. The only way in which jedberg's story is self-serving is gaining imaginary points on the Internet, unless you have reason to believe jedberg stands to gain money or something else from writing his story the way he did. If your story is not self-serving because it merely helps you gain sympathy and anecdotally substantiate your argument about how the term "creep" can be used, then neither is jedberg's.
and you think that's normal?
For literally my entire career in SRE, well over a decade now, I’ve only interacted with systems that use DNS for this purpose, from small shops to parts of every HN reader’s life. That sentence in your quote, as well as the assertive nature of the post on such a weak foundation, are sufficient to disqualify a hiring candidate on account of lack of experience despite the authored software presented. It simply does not align with reality when presented with two logically separate networks and a required mechanism to transition between them.

The only other alternative for that scenario is using anycast addressing, and that has a colorful bag of limitations that are quite different from those of low-TTL DNS (including being out of reach for most).
The row level security is a feature of the database (postgresql), those rules are written and enforced by the database, they have nothing to do with PostgREST and how it connects to the database
Details like knowing how much latency to expect can be important for some use-cases, such as if you're trying to time things to occur at the same moment to the user.
There was a dns record looked up primarily by large supercomputers that had a 0 ttl. It was used for stats via a UDP packet (because it was non blocking, nevermind that the dns query was blocking). This was set to 0 for "failover" but it hadn't changed in years. I worked out that our systems alone had caused billions of queries for this name.

After I complained I think they upped the ttl.. to 60.
These days I can't help but read every NYT piece as a desperate plea to the govt for a rescue operation from its tech usurper.

Also, the govt is demonstrably worse at protecting information than any FAANG, and they are all abiding by GDPR which is the right regulation IMO
If what it says in the link is true, records say her contract was renewed and she says it was not. Then she left a few months later.

It's perfectly plausible that she could have been "constructively discharged" on account of her pregnancy, which morally would amount to the same thing.

But I think based on what is written, either that article or Warren has to be lying about specifics.

As a Democratic primary voter, I'm indifferent to this story, and will probably go with Warren if everyone else does, but if I cared, obviously I would check on the source, no matter how disreputable the publication.

Edit:
I reread it a few times and now I think it's just BS framing by the Free Beacon. She had her contract renewed, but she resigned at the end of the school year, I'd assume before the new contract took effect. Probably was told she had to. To assume her story is perfectly consistent, you just have to assume they noticed she was pregnant in those couple of months.
We know that not everyone is going to plan properly and in a few cases, even when one tries to properly plan it doesn't work out as planned. THese tend to put folks in a situation where they cannot get home from the bar without driving drunk. Not everywhere has any public transportation to speak of and if you live in a farming community, you might actually be too far to walk and have a dangerous walk on top of it all.

When faced with this - and the prospect that they'll have to walk back to the bar tomorrow or get a ride to fetch their car - folks are more likely to drive home, even if they know they really probably shouldn't. But hey, they sobered up a bit and ate a bit, so they really should be OK.

With affordable alternative transportation, not driving when you can't safely drive becomes an actual option, no matter how badly you planned.
>any argument that it will provide widespread meaning or understanding is essentially a philosophical argument.

You're just stating this, what you are saying doesn't actually mean anything.

> we'd need philosophers to understand how it effects us.

I have no problem with philosphy, Dennett is a philospher. But what you're saying makes no sense to me. What kind of understanding are you talking about?
> You could just download the older releases of Linux for such machines

You could also run Windows 95 in 2019... Both are really good plans if you want to get 0wned.
Hahaha, I am glad it finally hit them. Hopefully many more official institutions including ticket selling machines using old Windows will get hit. Maybe one day they will learn, that using proprietary software (even less outdated software)is not suitable for official institutions financed by the tax payers.
I posted this as a reply to a comment, but I will repeat it here,

If they transmit crash logs, and those contain partial memory contents (core dumps), chances are actual content from network packets are transmitted to UBNT as well, and those contents may contain PII (IP addresses, MAC addresses, usernames, passwords, real names, addresses, credit card information, etc.), meaning they’re most certainly violating the GDPR by making it opt out.

The GDPR doesn’t care how you came by the PII, it only dictates how you should behave when you handle it.

Edit: I should clarify before somebody trips over their pitchfork and sets the house on fire, the GDPR cares a lot about how you come into possession of PII, and also if you should have that information in the first place, and also cares about how long you hold on to it.

When it comes to protection of those data though, it doesn’t care if it was collected through telemetry, emailed to you (yes, also the spam folder), or it’s an old archive of core dumps on an old server somewhere. The same rules apply to how those data are handled.
This is a common misunderstanding and I think a big reason why people are reluctant to try this type of architecture. The idea here is not to couple client code to the database structure. You should expose schemas that contain views on top of the basic schema, which provides good encapsulation and prvents both of the issues you bring up. (This was common 25 years ago, when server-side code often amounted to a db schema containing stored procedures.)