skysight-inc/HackerNews huggingface dataset:
for anyone interested, Brian Krebs did an excellent article[1] on The Great Cannon after the Citizen Labs incident.

> [Nicholas] Weaver said the attacks from the Great Cannon don’t succeed when people are browsing Chinese sites with a Web address that begins with "https://", meaning that regular Internet users can limit their exposure to these attacks by insisting that all Internet communications are routed over "https" versus unencrypted "http://" connections in their browsers. A number of third-party browser plug-ins — such as https-everywhere — can help people accomplish this goal.

> But Bill Marczak, a research fellow with Citizen Lab, said relying on an always-on encryption strategy is not a foolproof counter to this attack, because plug-ins like https-everywhere will still serve regular unencrypted content when Web sites refuse to or don’t offer the same content over an encrypted connection. What’s more, many Web sites draw content from a variety of sources online, meaning that the Great Cannon attack could succeed merely by drawing on resources provided by online ad networks that serve ads on a variety of Web sites from a dizzying array of sources.

[1] https://krebsonsecurity.com/2015/04/dont-be-fodder-for-china...
Going back to Google's knowing and willing abetting of hardware ID abuse.

I heard it many times that Google knows that a lot of Chinese companies violate their play store policy against using hardware IDs for advertising purposes.

If they stand against it, why they added APIs for accessing them in the first place?

I thought about that for a long time, and finally it struck me: Google very well knows that GDPR prohibits them IDing people if they refuse, so they just added those APIs to let other companies do it for them!
> BEVs are far simpler than regular cars. Particularly ones that aren't retrofitted on older chassis. There are simply far fewer parts to deal with.

Sure, but you've still got to figure out which parts to use and how to put them together. Automakers have over a century of calibrating ICE propulsion, so the incremental change in calibration for an ICE is very small. Calibrating EVs may be much easier, but the incremental change is huge for legacy automakers. As an aside, even Tesla cheerleaders should be happy that legacy automakers are entering the EV space. Competition is great for the consumer.

> Chemistry for batteries doesn't really matter all that much when thinking about compatibility.

I mean, sure, all batteries will deliver "electricity", but engineering is all about balancing conflicting requirements. You want low volume, low weight, low risk of "thermal events", high energy capacity, high discharge rate, high charge rate, high charge cycle count, etc etc etc.

> Tesla packs are a good example of this. ... Yet the pack form factor for Model S and X is the same.

I'd say this is a good example of the cost of engineering. On the one hand, if it ain't broke don't fix it. On the other hand, customers continue to demand better vehicles, especially as competitors enter the market.
> Replacing with _who_ though?

That's a separate question. Note, too, that activist victories can take many forms. It could be Jack retreating to a Chairmanship, it could be him committing more hours to Twitter, it could be him hiring a President.

> there's really no meat on the bones there

Weibo has effectively bootstrapped a separate platform on its Twitter clone. And ByteDance outvalues Twitter on what is essentially a re-jiggered Vine.

This is oversimplifying. But Twitter's only options aren't more ads or languishing with distracted leadership.
I guess, but my point is that for many people in rural and underserved locations, they won't notice any performance difference between fiber and a coaxial connection, for example.

Insisting that EVERYONE has to get fiber, even when that won't change their performance experience, only slows down the actual service of their needs.

This is like any sort of performance engineering problem; focusing on an area that is no where close to becoming the bottleneck is not an efficient use of resources.
Non-sequitor. We were talking about legal and you jumped to moral. I don't believe that anybody should have legal consequences for speech that doesn't incite violence or libel.

Even with moral, I'd argue that the consequences have to be reasonable. It's not reasonable to take advice about vaccinations from anybody except a medical professional. I eat junk food and I tell people it's delicious. If some of them hear me say it's delicious, eat some, get fat, and die, I don't feel morally responsible - take advice about your diet from professionals, not from me.
C is hiring.

We're having problems finding qualified new graduates because it's all about those fancy web stuff these days...
Autonomous cars are wildly inefficient compared to high-speed rail and would likely require similar sized infrastructure upgrades and ongoing maintenance in order to operate at scale. Assuming the 20 year timeline us actually feasible, their better suited for short distance trace anyway.

I generally agree that one-off projects are a bad investment and that we should be building a nationwide network of high speed rail. But your original comment was to the broader concern of high speed rail’s viability relative to the size of the IIS.
New features can be made without changing the base service.
Looks interesting. I’ll watch it
> it is really hard to make a leap in improvement in technical skills.

This is true, particularly, if you work full-time, and your job is not connected to the subject of your passion. You will have few hours in the evening, but for a hard subject you may not have enough energy.

You can try remote work, it worked for me. Currently, my client allows 2-3 days a week of working from home, and also now I’m looking for my next place for a full remote position. I save 1.5 hours on commute, 20 mins on lunch. So I have additional time and energy to focus on maths, building things, and running.

There is an additional barrier to move into a different or more advanced field: most companies want to hire people already experienced in particular areas. It will be very hard to convince a company that you can learn fast and contribute and also that they can already benefit from your current skills and technical maturity. It looks risky for them, they may have relevant candidates, or do need such expertise right now.

Our industry love talking about fixed vs. growth mindset, how crucial is the latter. At the same time, the hiring at many companies is a vivid example of fixed mindset towards candidates: your current skills matter infinitely more than you potential. The thing is it can also be hard to convince them that you actually can acquire required knowledge fast: you know, everyone says to be a “quick learner” in their CV.

I think your situation is typical and for some people the only solution was to start their own business eventually, and outplay the system.

So, focus on improving yourself in the evening and keep trying to find your way in!
I'm curious what device data is sent from the app. Are they using any private APIs to extract data from mobile users as well? That would be even more insidious, since it's hard to analyze that.

I tried decompiling the Android version of the app, but I'm not a mobile dev and don't know where to look to analyze its data collection behavior.

I also considered using mitmproxy (like the OP) to analyze transmitted data from the app on my phone, but I'm on a university network that blocks inbound connections to devices (so I can't connect to my laptop from my phone). Hope somebody else can publish an analysis.
99% of websites we visit do not need canvas or sound. And the few websites that do can explain why you should click "Allow" when they prompt you for access.

What's a charitable reason that stops even a supposedly privacy-concerned niche browser like Brave from implementing opt-ins for these things?

I suppose one reason is that you would immediately unleash opt-in spam on your users that don't know what these pop-ups mean since so many major websites use these hacks, so the average user is just going to be conditioned to mindlessly click "Allow All" every time they pop up like UAC on Windows Vista, punishing the average person while doing nothing to enhance their security.

Doesn't help that legislators are absolutely clueless here. For example, demonizing cookies when cookies are the most fair and transparent way to implement tracking, and leading to the first wave of pointless opt-in spam that plagues the internet. I'd rather they leave the internet alone and for browser vendors to step up for us.

Of course, the problem also includes native apps like in TFA. I'm just more optimistic about clients that run in web browsers.
Technically possible maybe, politically possible no.

Any ISP could force unencrypted traffic through a deep packet inspection system that looked for this kind of malicious behavior. That would be widely seen as a betrayal of the "big dumb pipe" expectation.

The computation itself is not infeasible at scale. But any ISP attempting this would see swift and brutal political pushback and almost certainly lose customers over it.
The last decade? In 2009 JQuery ruled the world, the last 6 years definitely.

they have a problem with it in that unless you are rendering server side your pages won't work for someone who does not want to enable JS.

In the same way it goes against lots of ways the web has worked for 2 decades in regards to user customization, the ability to scrape content etc. so these things are irritating to anyone familiar with how "things used to be" in the same way that new freeway development destroying an ecosystem can be irritating to people familiar with the beauties of that ecosystem.

For what it's worth I also make my living doing the same thing, but I can certainly see the benefits to the other way.
Just out of curiosity - would one (say like a soldier) be able to effectively 'pre-emptively' wear a device in a backpack which has a permanent-ish lead to the circulatory system which does multiple things:

Provides a constant flow of oxygenated blood which allows for higher endurance, longer "holding of breath", and in the case of severe injury, oxygenated blood circulation to prevent death (unless there is catastrophic blood loss which moots the machine's ability)....

Recall all the famous designs of Cyborgs [and The Borg] with the tubes running into their face/head/nose - the tubes could be pumping externally oxygenated blood to the vitals which would suffer most in catastrophic physical unplanned destruction events.
Not everything. Some. I wrote "a good chunk of", not "all of".
All the time if its a good activist investor, just look up that term.
I see, I wish you the best of luck!
FYI, LG Chem makes the current batteries for the Chevy Bolt EV
Tin Eye or other reverse image searches would be table stakes. Just because something is out there on the internet doesn't mean its free for commecial use.

Further hiring a contractor doesn't shield you from liability for copyright infringement although it's a good argument it wasn't willful.
Could moving to Africa be a signal from Dorsey that he'd like to move on from both of his positions? One could imagine that e.g. Morocco could be a tenable location for CEOs of some Western firms, but much further south could make travel and communication much more difficult.
You realize there are entire parts of the planet that operate this way, right?

> You can't be fired for religion

Therein lies the problem. Therein lies the problem. We've politicized religious speak. Who's the arbiter of what constitutes a religion and what religious views are tolerable in the workplace?

Some people want to take the rights of others to impose their preferred world view.
World Bank adopts $1B-plus annual China lending plan
I believe this is what you're referencing:

https://twitter.com/fernandojsg/status/1017411969169555457
I always thought the primary driver of the demise of Flash was that Apple simply decided not to support it in iOS Safari. Is that not right?
Advanced technology infrastructure can't be sustained without extensive network of enforced relationships between humans. It's either government oversight or private monopoly, there's no third option.
> You can get basic location data by turning on your GPS and making a couple of CoreLocation calls

You can't without enabling Location Services. If you could, that would be a huge security hole because users can only disable Location Services and not CoreLocation.

https://support.apple.com/en-us/HT207092

> however it is still a useful feature to have when dealing with poor connectivity.

In order to not send your location to Apple, you have to leave the network off. The location will be stored on the device and synced to Apple later if not. Nobody is going to do that just to not send their location to Apple. They'll get a phone that they are in control of instead.

> Is there a way that Android lets you get location services (see below) without sending your location to Google?

Yes. Just request location permission and use the location API. If you want AGPS functionality, you still have to request the location permission, but you need to call a Google API (or an Amazon API on Amazon devices, etc.).

> If you're going to argue, please do so with at least the barest hint of good faith please.

I'm just pointing out how ridiculous your mitigation is using an equally ridiculous description.
Low-Cost VPS Testing
Exactly. We never got the Magic Leap. I remember reading that surgeons were already using the tech so it 100% existed and just needed to be productized. I figured google-ers had taken a close look and had a pretty good idea about how to productize it. Maybe it is worth a billion, I thought to myself. What we got was a Hololens clone. It should be called the Magic One because there's no technological Leap in it.
Doesn't that depend on how big of a loss they are willing to take? Say they started selling to developers for $1000 with the promise that the price to consumers would be $99 six months from now. I think that would ignite a lot of development.
The tree F's of safety in home chemistry: fans, fire extinguishers and feet.
Yes: https://github.com/moshev/TemplateQueens
Well you know what? Building massive empires while evading taxes, exploiting unregulated markets or down-right not adhering to existing law and then relying on „philanthropy“ to make the world a better place should be disincentivized.

That said Bill & Melinda Gates do seem genuine in their efforts and I think it‘s great what they‘re doing. They just shouldn‘t have been able to obtain such obscene amounts of wealth in the first place.
It belies an ugly truth - the global community is pretty tragic even if things are on the rise - let alone the real world with its mixed metrics and setbacks.
Weekly Papers – Fine-Grained Neural Architecture Search and More
That's the tough part. People overwhelmingly just search for the site they want and go to it that way so it's hard to figure out what would take its place other than some form of search. But a lot of people seem to be thinking about this (I remember Google announcing a while ago that they were looking at how DNS could be replaced).

I don't know what a good answer is. From the user perspective it'll likely look more like a search. but technically? Honestly it could remain DNS just abstract away from the TLDs to make them not mean as much.

At least that's my opinion.
"Don't be so open-minded your brain falls out"
Whenever there was profit in the killing, corporations willfully helped. The distinction is meaningless.
I don't blame them. I signed up in 2009 and I deleted my account a few years ago because, well... Twitter now is not what I signed up for. But I guess they have to move on. Things change, but that does not mean I have to like the changes.
WebAssembly support isn't sufficient on its own. You also have to deal with various WebAssembly features, such as thread support and growable heaps, that are relevant to your app.

There are more features coming to WebAssembly in the browser, including hopefully a way to feature detect in the WebAssembly binary instead of the way it's done now, which is to compile as many binaries as you need for combinations of features, feature test in JS, and then pick which wasm module to load.
Cool articles that explains how sublease works for those looking for offices
What do you mean "not dead". It's a stack allocated variable.
We Review the Pixel 4
When I say can't get bogged down I mean I don't have the energy to get into a big long discussion.

You baited me into starting one... but I'll be brief. The sensation of seeing blue is clearly, to me, unrelated to the material aspects of blue light or the interaction of that light on the cells in my retina, or the electric signals of neurons in my brain. I could imagine myself as the same person except for the perception of two colors swapped. All this is summarized in the question, "What canvas does the brain's neurons draw its images on?" I can't imagine any answer that is material.

Also, saying that physical theories lack explanatory power is not the same thing as saying there is NOTHING can offer explanatory power, or even that physical theories cannot augment any theories. But I strongly oppose the blind optimism of those believing pure physical theories will explain consciousness when it is has so far failed abysmally. That is not the same thing as saying no such physical theories exist, but that I wish more people realized just how optimistic they sound without real reason to be.
If you're wondering why this is interesting, games that AIs excel at like chess/checkers/go are all two-player, zero-sum, perfect-information (everyone knows everything), deterministic games, so you can exactly predict your opponents behavior by simulating "what would I do if I were them, and trying to make me lose". The only real hard problem in this space is extreme branching factors.

Everything gets vastly more complicated once you break any of those rules: non-zero sum games create a prisoner's dilemma cooperate/defect dynamic, every three or more player game is non-zero sum (and exponentially more for every player you add), hidden information forces you to manage how much you reveal to your opponent and requires you to simulate multiple "alternate futures" based on things you learn after making a decision, and randomness is equivalent to an extra player that makes irrational unpredictable moves.

Games like that are vastly closer to the messy real world than the computationally expensive but near-ideal world of games like go, and they're much more of an open problem.
The sandboxing part exists: https://addons.mozilla.org/en-US/firefox/addon/multi-account...

Not sure if it randomizes things like audio or canvas fingerprints, though.
Hi admirius, I just updated my bio to have my email, can you see it? I don't think HN has PM option so just email me directly.
>> "enjoy"

Citation needed. Best I can tell the only thing people "enjoy" there is shitting on each other, and this seems to be the platform's raison d'être. It's kind of hard to enjoy being on the receiving end of that though.
Finding Purpose – Alwayswomen.com
These sorts of features are added to JS because they enhance user interaction. The audio API is an obvious example, and one of the big reasons canvas is used is that it has good 2d performance and lets you draw arbitrary stuff easily - good for game. You can't decouple this from the hardware; audio will need to go through the sound card and removing GPU acceleration from canvas kills it. The only thing that can be done is slightly fuzzing inputs the program collects (the saved PNG or the listened audio) - but this again interferes with real use cases, such as web audio editors and image editors, where this method forces lossy editing and importing.

Already I have to use another browser to use games or other 3D content because I have WebGL disabled in Firefox, and for 2d stuff the resistFingerprinting option reduces timer accuracy, which messes with game loop timing and makes the game totally unplayable. Making audio and video even harder to use is not good.

The only solution is to not allow this stuff to happen in the first place by using a permissions system. Adding more permissions popups is bad, so permission needs to be implicitly allowed by the user. Autoplay is a good example of this, calls to play() are blocked unless the call is being made in response to a click handler. Permissions for really recording audio/video through a webcam/mic also work well.
It's going to tell you more than a CGI artist's impression nonsense.

People were able to film through the lenses for standard VR glasses. I can't find anyone that tried it for Hololens but given that they also cost several thousand dollars it's probably not that surprising. I have used the Hololens quite a bit and I can't see any reason why you couldn't film from the eye's point of view.
Lisp it isn't, but that's super-cool!
What's wrong with Anthony Noto? Honest question as I am not American and I don't know him at all. His article on Wikipedia doesn't seem to show any controversies.
Do you mean a single binary file? MailHog's mail.go file pulls in a number of dependencies that round out its HTTP and SMTP servers. In OP's case, the entire project's source code is in the main.go file.
Enterprise Value (market cap + debt) is the true measure of what the market thinks a company is worth. By that measure, Ford is 3X the size of Tesla.
psychedelics are a shortcut for those who don't want to spend time meditating, you can achieve the same result without drugs. it's difficult to convince somebody who hasn't had the experience and of course if you'd had the experience you wouldn't need convincing but i'd suggest you stay open minded and at least try to explore these things when the time is right. and if you won't, it's alright, you'll remember everything once you die
Well I am not dieing I nearly did this year. I will need a heart transplant in the next ten years. And I probably have 20 years left. But I still date. Trying to find that someone to share my remaining years with
Fastq.bio, an interactive genomics web tool in WebAssembly
Do you have any links to data showing effects on brain temperature from that treatment?

Afaik interest has been low in carrying around enough ice pack capacity to make this viable, and with lacking data for it even working, whereas head-cooling packs with circulating liquid through a cooler takes little space, cools way more efficiently and required no other maintenance after insertion into the patient in the ambulance (and is moved with the patient while continously working).
Same. The only times I've ever heard Magic Leap substantially discussed, including user experience, was on HN. I was under the impression it was still in something like a closed beta.
A former Republican Congress member explains what happened to his party
This is just babble.
No hearing aids? Then no marriage
The VB also makes me wonder if AR isn’t practically impossible for the foreseeable future since lots has changed since then, but not the vaporware of this stuff.
These Guys finished a record Cannonball Run from NYC to LA averaging 103 MPH
The real question is, which company is doing the unethical data collection and covert advertising today? Ready for the December UK election?
I wouldn’t be surprised if 50 MB was a more common webpage size than 5 KB these days.
Medicare for All is not a price control policy.
It appears the tortoise-and-hare solution was found by Floyd in 1967. That means the problem was first proposed in 1955? I'd love to learn more about it, do you have a source for that?
Some commentators are just forwarding wisdom passed down from their ancestors and grandma's. Please mention only stuff what you have personally, empirically validated and invalidated - otherwise this thread is only as good as any random google search.