skysight-inc/HackerNews huggingface dataset:
This is certainly true for the big headline projects. For every one of those, there's a hundred small but widely used libraries or tools whose sole maintainers (or tiny groups of maintainers) struggle under the workload of keeping it going, as they do so in addition to whatever pays their bills - with no obvious route to recompense for that unpaid labour. Worse, large users of the tool or library get to make modifications without sharing them with the original author and rest of the world.

the idea that free software is primarily done unpaid is just a myth, as can be seen from the attendees of any major free software conference

I'll point out that just because you mostly see delegates from big businesses to FOSS conferences, that doesn't mean this is a representative sample. It can just as well mean that the long tail of contributors isn't able to attend.

Of course, had the maintainers of the small-but-popular tool/library chosen a license under which the big corporate users were forced to contribute any local modifications back, this may in itself have prevented the popularity of the tool or library in the first place. Because for many developers and companies, using an AGPL (or even GPL or LGPL) licensed tool or library is absolute anathema.

(GPL in whatever form of course does not help with financially compensating independent developers, so it wouldn't fully solve the problem.)
Sunday: The Idea of the Covenant
I like the fact that my local EU bank will actually be allowed to offer me mobile payments as opposed to now, when Apple refuses to even talk to them because my country is too small.
HTML or Plain-text: Which email works better for you?
Wait in a central waiting hall until the train arrives, at which time a big screen shows what platform the train is on. Then you and everyone else rush to be first to get to the single escalator going down to the platform.
A conductor checks your ticket at the top of the escalator. That's how it works in NY. It's also approximately how it works in China, unfortunately (though their stations put Penn Station to shame in almost every other way).
Apple does not prevent banks to release their own payment apps. There are several on the app store in my country.
The distinction between language ecosystem like Javascript and a platform is blurry...
Lingua Latina seconded. It’s a tremendously powerful to acquire Latin on such an intuitive level that you will find yourself thinking in Latin after a while. A lot of fun!
Apple could've probably easily prevented this if they had allowed banking payment apps from the beginning, like Google did.

Without an exclusive payment system, they would just be a payment alternative that would be way more user friendly than their competitors and everything would be dandy. I'd even consider it to be a reason to buy an iPhone, given their super simple UX flow compared to even the most user friendly bank apps.

I hope not just Germany, but also the EU will take action against companies like Apple. These exclusive networks that serve no purpose other than vendor lock-in are a lose-lose scenario for customers and even the most rabid Apple fans should see how shitty their behaviour is.

They've made their bed and now they will have to lie in it. Good on Germany for taking action.
Centralization is driven by competition.

Services need to be able to iterate quickly to deliver features that other services have, introduce new ones that give them a competitive advantage, and improve UX, all at the same time. Federation and standardization do not help in achieving any of that.

There is nothing wrong with XMPP, it's not a technical issue.
There were many intentional references to Tesla during the unveiling event: https://electrek.co/2019/11/17/exclusive-bill-ford-at-the-mu...
Actually the problem with congestion stems from the fact that buildings are 3D but roads are 2D. If you want to house more people then you can simply build higher but you can't do the same with roads.
Does anyone know which law it is and can post an English translations? Feels like this HN thread will be too vacuous if we don't know what we're discussing.
Nest.js Tutorial for Beginners: Learn Nest.js in 1 Hour
How big of a risk is overfitting for these kinds of models? I think common practice is to hold back some of the data for testing.
You don't see advantage to have an option to use e.g. Google Pay on iPhone?

Apple Pay adoption in banks (in EU at least) is much worse than Google Pay, so if I have account in bank that has only Google Pay I can't currently use iPhone to do payments.
Yea it's really nice. I looked through the Github repo could couldn't figure out what library they used.

Would love to know what css/ui they are using.
It's a paper weekly in fishing towns in Alaska.
The free version is kinda unstable, but this is as far as I got:

https://imgur.com/QMQVDrk

https://imgur.com/E2ZZBaZ
Just gravity is more than 1m/s^2, around 9.8m/s^2
Really nice tip: Click the little keylock on the left side of the address bar when on medium, go into site settings, under javascript block it and medium articles will now load as just pure easy to read text :)
Medium Unlimited?
Wow, downvoted for saying that US citizens cannot ignore the climate changes because cars are more comfortable to them...
> we have the mov.im domains as well

I don’t know to what extent the name Movim confuses people, but when I read the name in the title of this post, before I read the rest I too expected something related to vim.

If rebranding it as Mov.im is an option, since you already own that domain name, I suggest considering doing so. Though I guess there is a risk then that people think of the QuickTime file format instead?

I don’t know what impact such a rebranding would have on search results rankings but among all possible rebrandings, if any were to be considered, I would think it would have the least impact at least. And also would involve a low amount of work since other domain names and such still make sense.
This should work (add it to "my filters" in uBlock settings and click the checkmark/apply button):

medium.com##div[tabindex="-1"][aria-modal="true"]

Tested in FF 70 with uBlock Origin and tracking protection enabled.

EDIT: Here's a simple blocklist with more Medium banners and popups. Can be added via "Import…" at the bottom of "Filter lists" tab in uBlock Origin settings. I'll try to update it when i encounter some new Medium stupidity:

https://helb.gitlab.io/medium.com-blocklist/medium-blocklist...

If you hit the (monthly?) quota for articles without an account, just clear cookies & localstorage.
America’s New Top Tech Hubs
> 10% per payment

that'd be ludicrous. I found a source that says 0.15% which is way more reasonable: https://www.macrumors.com/2014/09/12/more-apple-pay-details/
>> Did you keep the skills at level 1?

I went through all the levels.

>> What do you think is holding you back?

What was holding me back was:
1. Spoken French goes much faster than the French spoken in the course so I wasn't able to understand most of it.

2. To form a sentence to express yourself in real life is much more difficult than to translate a given English sentence like in DuoLingo.

I agree that to be able to use a language you need to do more than just follow a course like DuoLingo; you have to read books, watch television and most important practice it in real life.
Thanks for this feedback, you make some great points which I really appreciate you taking the time to make. And your experience of being malware free is mostly my experience as well.

It sounds like with reasonably good content blocking a person can avoid all attacks, and it looks like using local VMs/containers mean then the attack needs an exceptional exploit chain to escape all the way, and it's hard to imagine any target being caught in a drive-by.

I agree. Also, internet-based attacks are a real problem for many businesses and organizations. For example, in 2016 Singapore government mandated that RBI had to be used because of ongoing attacks.[0]

How can it both be true that most people avoid any attacks whatsoever (and therefore that most simple measures are sufficient) while at the same time, malware is a real industry inflicting real damage on organizations?

I think of malware as an "industry" and as a collection "criminal enterprises" and from that viewpoint the malware industry has certain goals and markets it seeks to penetrate. If you don't find yourself in one of those target groups, that's a good thing. If you do, then you probably are already exploring RBI or CBII to some extent.

So your logic is correct and it looks like you are simply not in the target group.

At the same time, I think categorizing the only victim of web-based malware that can benefit from RBI/CBII as "extremely high value targets" is misleading. Perhaps the finance department in a Fortune 500 company is an "EHVT", but there's a lot of web-based attacks that succeed at targeting businesses and organization units of many different sorts, and the costs inflicted are significant and important, not just to "EHVTs".

Your concern about trust and the cloud is valid, and perceptive, as is the solution you propose (self-hosting). Self-hosting is indeed the right choice for many. That's one reason I think OSS has a role to play in RBI/CBII.

[0]: https://secureview.cloudbrowser.xyz/uploads/file1uod.8tyb6vb...
Wake up by 6am, 20 minute meditation, 15 minutes of back stretches/light body weight exercises. Do some sort of stoicism practice, usually negative visualisation to realise how lucky I am. Make breakfast for the family, either head to work (3 days a week), work on my own projects or plan my day with my kid. Evenings there's usually some sort of physical activity - sport/yoga followed by dinner/kids bedtime routine and veg in front of the tv.
Russia weaponized social media, got caught and escaped consequence
Time is a major component of g force tolerance. Healthily people can take 15g’s for short periods without issue, but extend that to a minute and it can prove deadly.

In ideal conditions linear acceleration to Mach 2 at 5, 10, even 20g is fine. But, if you want to go much faster the limits are reduced significantly. The Soyuz for example can hit 8.5g’s for about 60 seconds in some situations which adds up to ~Mach 14.6 and is a rather extreme situation.
I can't believe this. All these years I've been recommending Intel products because of their long term support.

I know these boards are legacy, but does it really cost them that much to host the files for occasional downloaders?

One would have thought they'd tread carefully after so many recent PR hits, but I guess not.
Not to process contactless.
That's not true, Apple Pay is competitive with other payment systems. https://support.apple.com/en-ca/HT204274

Small business would absolutely not be implementing this if the take was 10%
OpenOffice Draw Repair: Fix Corrupt ODG Files
Thank you for this use-case!

Would you like to email me cris@dosycorp.com and we can discuss something tailored towards this? :)

I'd be really happy to help you.
Somewhat true. Of course, this is a headline and it is a little exaggerated, however as I said, somewhat true. But I would like to correct something as a Turkish. These places were also called "kiraathane". -hane is "house". Kahvehane means coffee house, kiraathane means kiraat house. The word "kiraat" means "to read".

Therefore people were not only doing conspiracy, they were "learning" at the same time.
I'm amazed when people assert stuff that is ludicrous on the face of it. Places that have signs that say "no Amex" because it's 1% more fees are also implementing Apple Pay ...
>> We are surprised at how suddenly this legislation was introduced,

Meanwhile we, the Apple clients are surprised why it took so long to pass this legislation. I still wonder why nothing is done against the appstore/google lock-in.
Sounds like this is just the Payment Service Directive ? Someone at APPLE must have slept while on the wheel for years.
XMPP were lacking "gamification" tools that'd encourage people to do better. Eg. for TLS there is https://www.ssllabs.com/ssltest/ but for XMPP it was only recently that https://compliance.conversations.im/ sprung to convince server operators to upgrade.

Also, clients. https://conversations.im/ is good for Android . https://dino.im/ looks like a promising Desktop client but where are the iOS clients? Stuck in XMPP dark ages from what I've heard.
I think I had a better intuition for how fast this star would appear to move across our sky from the headline alone (which is just as well because I can't see the article) than how fast "tracers at the Knob Creek night shoot" might do.
Not in recent years at all.
Thanks for the excellent reply.
I plan to read Paradise Lost now, I failed at a previous attempt.
Samoa shuts schools, declares emergency as measles kills 6
A 9-Year-Old Is About to Get a University Degree. He Has Giganticplans
Not true. I've spent 5+ minutes trying to get through this captcha system multiple times, never getting through.

It really fucks with you when you're on TOR, especially.
That's what we are asking, what does this law do for us (well, for Germans). Just blindly saying "Thanks" isn't useful to the discussion.

It sounds like it forces Apple to open up the NFC stack to other applications?
>My new laptop is the new thinkpad, the quintessential corporate black square brick. Fingerprints all over it. Eww, right?

When Steve Jobs returned to Apple he needed a computer that ran NeXTSTEP. Was it a sleek trendy Sony VAIO? Nope, a simple black IBM Think Pad. Design is about how something works, not just what it looks like. Jobs was one of those people who really got that, right down in his bones and that's where Apple has gone astray recently. Hopefully the 16" is a sign they're course correcting in the right direction.
> IMO we need something simpler, websocket and JSON based.

Why JSON? JSON is the packaging format of this decade but remember when XMPP was conceived XML was the packaging format of that decade.

Maybe CBOR would be more appropriate. No need to encode binary data (signatures, encryption) in base64 wrappers and more efficient encoding of frequently used stuff (no need for Whatsapp-stype FunXMPP).
Cybercrime Booms as Scammers Hack Human Nature to Steal Billions
That's called "slander". I hope whoever invented, implemented and OK'd this loses their home.
Even if we assume all motherboards using BIOS can be replaced, it is still valid to want to find software downloads for those that still exist.
What Are Insights?
> Apple wants payments on the iPhone to be secure, easy and private.

I don't trust apple for that more than I trust my bank anyway.
Extremely direct form of planned obsolescence.
Many Native Americans Can't Get Clean Water, Report Finds
Don't know if it's reassuring or not, but for someone who has only played Fallout 4, I took it as bleak satire. From your description 1 & 2 sounds even better, but there is plenty to go around even in (maybe a bit bland, I now realize) Fallout 4.
> How do you define, implement, or use a REST endpoint, without verbatim using the endpoint names?

You can use names verbatim. You can write a book with the names "Harry" and "Ron" and even "Dumbledore" without violating Harry Potter's copyright. In fact, if you take Harry Potter, translate it to French and change all the names so that not a single word is copied verbatim, that is a copyright violation. But regardless of what you copy, in order for a work to be protected by copyright at all, it must be some fixed piece of text (or an image, or an audio/video recording). REST protocols aren't.

> They're using different tests than you normally see with copyright. You're spreading a lot of misinformation here.

I'm not talking about this case, but about why this case doesn't apply -- whatever the result -- to REST protocols. What you linked to is about the following: Once a work is protected by copyright, what kind of derivations are disallowed? For example, Harry Potter is copyrighted, but I don't make a verbatim copy but a French translation. Is that protected or not? What about basic plot lines? But any such discussions are irrelevant to algorithms and protocols, which are not copyrightable works to begin with. There is also a question about code APIs, because there are other necessary conditions for copyright, but there's no question about protocols, as they don't satisfy the first condition -- there is no fixed work at all. Anyone who says this could affect protocols is spreading misinformation. Whether code APIs are copyrighted or not, protocols, like algorithms, aren't.
Could that cause any issues with browser-specific features? I'm not sure what browser/renderer you are actually using, but if I'm using something different, there could be a mismatch in advertised capabilities (through the user agent).
Although you are correct. Apple does deny access to the NFC contactless for payment applications.
That's true, but they had to set their saws to something and a typical sawmill will process the logs as they're brought in, not after drying them because it would take forever to dry the whole log and it would likely split or be infested with creatures. So the logs are sawn 'green' to a rough size, dried (sometimes kiln dried to speed up the drying process) and then planed. Both drying and planing affect the dimensions.

It's quite amazing how the speed of the drying process can affect the later tendency of the wood to warp, as well as the degree to which it will warp. Counteracting this is quite tricky and requires all kinds of techniques, the most effective of which is laminating odd/even stacks of wood.
They've already done it https://www.reddit.com/r/DataHoarder/comments/d6dkoi/intel_r...
Google detected you were not running Google Chrome (with which they can easily profile you) so you end up being punished for that. Which leads to Google Chrome being the preferred product. They made up some punishment system and reason to cover that up.

Just kiddin'. Sometimes, I end up having to do unreasonably more captchas. The reason is that the system verified I am human, and it wants me to cooperate with it for free in order to authenticate more captchas. Machine learning, they call it. I call it un(der)paid labour. Never had 15 in a row though, so I suppose the already mentioned reason is more plausible.
Another great open source helpdesk in this space is Zammad https://github.com/zammad/zammad
What about /dev/random? You're gonna ban PRNG's while we're at it?

And HTTPS?
California’s Methane Super-Emitters
In order to implement Apple Pay in a country, a bank needs to beg Apple. And it looks like Apple doesn't care about smaller banks and small countries at all. For example, in NL they allowed only a few biggest banks to implement Apple Pay.
Apparently in tests the new Sony’s are slightly better NC than the Bose, but I tested them in a store and preferred the audio quality of my Bose QCs and couldn’t personally tell a difference in NC.

I couldn’t live without my Bose QCs and they go everywhere with me. You don’t realise how much noise there is in day to day life until you’ve worn some good NC headphones around for a while then forgotten to take them with you one day.
Suburban solar could become the Uber of the energy grid
> This is a good time to remember that police forces work for governments and not the other way around.

And let's not forget that both [should] work for the people.
Not only is that all dead time but since starting to work for myself I've found that the hours right after I've just woken up, assuming no alarm clock was involved, are the most productive I have.

I wake up, put on pants and a shirt, walk over to my office, and just dive right in. I'm not historically a person that does that. I waffle about and waste a tremendous amount of time. But now it just sets the tone for my whole day as productive. By the time I'm eating breakfast or dealing with another person, I've knocked out a few hours of work. It's just a really good position to be approaching the day from, like no matter whatever happens to it now it at least wasn't a waste.

Turns out my problem isn't so much that I'm just generally not that productive so much as once I start faffing about I struggle to stop.
Silicon Valley’s Youth Problem
> It’d probably be some new PKI on top of SSH where your private key would be held in escrow by an identity provider.

There's only a small problem here: the SSH private key is not used to encrypt the connection. It's used solely to authenticate the connection. The key used to actually encrypt and authenticate the data is an ephemeral key derived through a Diffie-Hellman key exchange during the connection establishment. That is, having the SSH private key does not allow one to decrypt the data after the fact. The only thing having the SSH private key allows is doing a MITM attack, and since SSH does mutual authentication, the attacker would need to have the private key for both ends of the connection.
Facebook rejects advertisement biography Ahmed Aboutaleb (politician)
Pillars of a European Digital Strategy on Artificial Intelligence
It is a simple matter of competition.

As a customer, if I consider Apple Pay so much more convenient, I'll choose a bank which supports it. So banks are under pressure to either support Apple Pay, or create an equally customer-friendly offer.

If I consider another offer better for me, I will use their App instead of Apple Pay. So Apple can't just enjoy their monopoly, but is under pressure to be the best option for customers.
see top comment
> without any consultation or a proper review by technical and financial experts

Nah, that would just have opened the door for more lobbyism. Apple seems to have strongly worked against this law, seems like even the US ambassador was involved [0, about half way on the first page]. Looks like somebody hit a very sweet spot and an easy cash cow for Apple.

We need more open markets for processes like this. It's just fine that Apple has to open up.

[0]: https://www.heise.de/newsticker/meldung/Lex-Apple-Pay-Bundes...
Blockchain could solve Facebook and Twitter’s political ads problem
I think the various state departments of transportation that Amtrak serves own quite a bit of the equipment as well.
"...could hurt data protection and the security of financial information. "

Hahahahahaha, best joke I heard this month.
So you still need a payment card? Most payment cards can do this without a phone, you just touch the screen with the card.
In a first, fossil dinosaur feathers found near the South Pole
Tea did not take off in the Ottoman Empire until the 19th century. While yes, now tea has utterly eclipsed coffee in Turkey as the everyday beverage, it is actually a pretty recent introduction.
So you can guarantee there are no security or privacy compromises in doing this?
I agree, this is a great development. Hope to see the same in other EU countries.
Thanks! Added to reading list! I was glad to find that Robert Jordan had supported him, and by transitivity - so did I :)

Also - a good argument for shortening the default time to public domain.
PSD2 is great, but as far as I remember, it doesn't make banks have a common basic API, every bank can implement it wildly differently.

Next step is something like OpenBanking in the UK which does ask for common APIs.
Running the Browser in the Cloud
I've had Sony WH-1000XM2 for two years now.

Bought it just before boarding for a 7-hour flight, and it was great. Even after a dozen flights since then, I'd still recommend it anytime. Its noise cancelling is amazing (source: I've tested it in comparison with Bose QC35, everyday in the shop before going for this one).

The XM3 has been released a while ago (minor update IMHO), has good reviews and is regularly discounted. With Black Friday almost there, you should get good deals on it.

I personally don't feel the need to buy it since I have the XM2, but I could get it for my wife.