skysight-inc/HackerNews huggingface dataset:
Hi y'all, I'm a co-founder at Pipedream. During a recent refactor of our CSP, we used this workflow to store and aggregate CSP violations using SQL to report on our violation data. This helped us find a few entries we missed because our CSP was too strict.

Now that we've got a new CSP running in production, it's nice to get violations sent to Slack so we can identify other potential issues.

Tools like https://report-uri.com/ are great for reporting on CSP violations, but we found this was an easy way to roll our own and get some advanced functionality (SQL, running Node code on each violation to filter and format the violation JSON) with little work.

You can copy and extend this workflow in any way you'd like!
The women joining their husbands could serve as a survival stategy for the women. If you were a member of a family of the intelligentsia, and your husband was arrested, it was likely just a matter of time before they arrested you, too. Leaving Moscow or Saint-Petersburg for that kind of voluntary internal exile was thus a way for women to escape the notice of the authorities and keep their own records clean.
If you're a .org owner for personal use and aren't happy with this change - what are the feasible alternatives that others have settled on?
Still not icons on the desktop ...
I remember reading a comment on HN a while ago about the "basic" ways to create value (and make money) that really resonated with me. I can't for the life of me find it again. It was broken down into things people want like "information that others don't have" and "moving things from place A to place B where they wouldn't be otherwise" etc. Anyone remember that?
Thanks! I've added a reference to Scantegrity to the post. Interestingly, Scantegrity is just a front-end -- you still need something like mixnets to actually count the votes.
As one datapoint over last ~3 weeks or so I've accumulated 20ish BAT (~$5) from a combination of 1) ads shown to me, 2) tips from people to my twitter, 3) automatic monthly contributions from other users, presumably based on them spending time on the pages I've registered for rewards. In turn my auto-contribute settings (left at defaults) are to distribute up to 20BAT/month on sites I visit the most (e.g. DDG, HN, Github, Twitter, ...), which will happen automatically on Dec 15.

Agree with some of the other users that the tooling around the rewards is still a bit hard to navigate. There's the separate Uphold account, from which I seem to have to manually move BATs around to my browser wallet (?), I'm getting BATs from sources I don't fully understand, I don't think there is a page that just shows the timestamped deltas (debit/credit) etc.
> There are countries where women die by suicide more often than men.

Agreed. We might take the fact that more women die by suicide than men in those countries to say that women are relatively worse off than men in those countries than women are to men in countries where the ratio is reversed.

> You need to be careful with how you're defining a death by suicide too. Someone who shoots themself in the head is more likely to be counted as a death by suicide than someone who overdoses on prescription meds, because the intent is clearer.

Agreed, but it's unclear which direction this would push the numbers: more men die by drug overdose than do women, though I can't find a breakdown by gender of prescription drug overdose. And plenty of other methods can also be miscoded, e.g. intentional car crashes, which are one of men's preferred methods. The only ones that I'd expect to be coded correctly most of the time are exsanguination and hanging. But we've got to do the best we can with the numbers we have, and try to improve accuracy while we're at it.

> This is incorrect. Some people do make multiple attempts, but plenty of people don't.

Correction noted. A previous attempt at death by suicide is a significant risk factor for future attempts at suicide, with somewhere between a third and a half of deaths by suicide being on a second-or-more attempt, but my "likely" was incorrect. It also seems like reattempts aren't likely to account for the gendered divergence in attempts versus deaths, because the large majority of first attempts at suicide don't result in future attempts.
I liked it fine right until my F key broke off and now can't be repaired without basically replacing the whole laptop.
You're probably correct. Corporations almost never reach an enormous scale without government to provide the regulatory moats necessary to inhibit competition and disruption. And that doesn't even take the issue of subsidies into account. Smaller government would likely lead to more small enterprises and fewer enormous ones.
What sort of stuff do you do?
Does anyone know if the mobile version is a wrapper around safari?
You missed the 3rd group, and that is the people who make Android, spending billions to make a great OS, to make sure they can always track you.
just wondering what is your setup for this mailserver ? Which OS, smtpd, IMAPd, etc...
It’s the one time where I can honestly say: The discussion we’re having within Cliqz about our brand name are even more heated and controversial than here on Hacker News (and Reddit for that matter) ... but then there is this saying: “Every brand name is shit until you surpass one billion users - than it becomes brilliant”. More seriously: we do think about it a lot - happy to get ideas.
> Is this a need that arises frequently?

In editors that have good support for vertical splits, yes. Before Lisp I would never keep more than two-three split windows, with Lisp I sometimes do four, even six vertical splits at the same time - just because I can.
Ask HN: What is the best article on asynch communication at work?
My contention is that when there are things like you describe going on, it's usually fairly obvious to people (even those who can't count) because they weren't able to do the all points observation that the process allows.

I'm describing elections where you can literally watch the box before it is sealed, to being opened, to having the votes counted and the count being published. If you're in a place where you are not able to do that, then yes, of course, you're running a high risk that the election is not fair.

You don't even need people to be unbiased, you just need a selection of people with different allegiances who will be able to cry foul if they see something happening that is not right because they think it will damage their side.

> But with technology we can have far greater certainty

I have yet to see any technological solution that gives greater certainty than the ballot box system. Most of them allow the voter to prove their vote or involve many more actors that must be trusted. They also provide new central points of attack, where a well run paper vote is very distributed.

I like Schneiers analysis of the papal election protocol: https://www.schneier.com/blog/archives/2005/04/hacking_the_p...
yep. Dokku is not as simple as heroku.
> You can't decouple this from the hardware; audio will need to go through the sound card and removing GPU acceleration from canvas kills it.

What you can do is require that the hardware produce bit-identical output for given input no matter how it's actually implemented, a bit like how HTML5 exactly defines rendering for any stream of input characters nowadays. Sure, this level of exactness might impose a performance cost, but it would improve privacy.

OTOH, you still have timing fingerprinting, so maybe you just can't win.
I bet you've never worked on an e-commerce system then because none of your suggestions work against e-commerce fraud, and you'd literally lose all of your money:

switch off of the web into an App: Can't just shut down your website. Also, device farms and VM farms are super common so it won't even help.

require sign-ons against an internal system for authentication: Sure, you can require your users create an account. Accounts can be created by the thousands by bots. Even if you use captchas, captchas don't work, and even if they did I can find you 100 people who will sign up for accounts manually and sell them to you for 10 cents a piece.

policy people actively: I assume you mean police people effectively. Kind of hard to "police" your customers when a huge percentage of them sign up once, buy something, and maybe only come back 3 years later. In the meantime, their super simple passwords may have been hacked and leaked 10 times already. Maybe you should require your customers all use 2FA. Let's see how many customers you have remaining once you turn that on.
If one didn't mind breaking even rather than making money one could create a search engine which is free software and have groups/people host their own instances.
It takes an obese person more calories to take 10 steps than an average weight individual.

Profit margins (or numbers used to get Gov funding) are just a big, fat lie.

We do need healthier Internet, but do you really expect bad math or morbidly obese institutions to be the answer?
>And there are strong arguments in favor of absolutist versions of freedom of speech.

First, American freedom of speech isn't absolutist. There are laws against certain kinds of speech in the US, such as fraud, slander, libel, incitement to violence, conspiracy, etc. And many people seem to believe that Americans' right of association is in conflict with freedom of speech, as it allows the owners of private venues to determine what forms of speech can and cannot take place in those venues.

Second, this is not a strong argument in favor unless you happen to be an anti-vaxxer or simply lack empathy.
>stadia

Stadia is at best an incremental improvement to PS Now or OnLive afaik. Other companies, notably MSFT and Sony, have been developing this same stuff for years, and Nvidia even has their own version I think.
Goes to show that everything American's NEED is exploding in price (cars, housing, childcare, healthcare, education), while most things they WANT only seem to be increasing slightly (or decreasing with respect to inflation) (entertainment, technology, etc.).
However they do it, they clearly don't money tracking people at this stage given no one knows or uses Cliqz.
$2.6B later, Magic Leap looks in trouble
Remote ok if you are a good match
> However, what you don't have to worry about is what chemistry goes into them.

I do not agree with that. Not every EV manufacturer will develop their own chemistry or process, but they do care about it.
I think this says all we need to know: http://pro-tiktok.s3.amazonaws.com

Notice the file left in there by a previous explorer of the internet. This gentleman has even found RCE exploits with TikTok, and they simply do not and will not respond to their security line. Olivia Newton at NBC I believe even reached out, and she could not get them to get back to her. I forwarded this (really another bucket of equal content still lurking out there) several times to Brian Krebs but he never responded. I only mention his name because it has happened before and find it somewhat damaging to the community and it needs to be called out (with fill acknowledgement that journalists get hit up by PR ppl all the time and it’s a tough job).
So what is the difference between CA, corporate banks, etc that are corporations that "shield" the employees from personally facing criminal action, and me running out to file an LLC/SCorp/etc to do illegal activities myself? Is it purely the size of their bank accounts?
I've heard that as well, but haven't heard Brave's side of it.

Not defending it in anyway. but strategically I feel like Brave should take the money, and just email the creator every 3 months saying you have X amount of money you can claim. Of course, if Brave is just profiting this money that's pretty shitty.
This is a 'never seen a shovel yuppie' price. You can rent a walk behind trencher at ~$100-200/day or ~$1-2K/month, it will do 50 meters/day of 1 meter deep trench. Need to lay something in a 40 degree hill overgrown with trees? $200/day AirSpade will do 20 meters/day. Want to hire contractor subcontracting 3 layers deep? that will be $10K.
Analysis of U Chicago life sciences inventors and their inventions
It really depends on what you're measuring. When I think of a good developer I just think of someone who writes clean code and organizes their program in a way that makes sense.

A lot of people think the ability to accomplish a task quickly makes you a good developer. This is true. But those who are strong in business knowledge but weak in programming knowledge use this to create a false dichotomy between quickly delivered code and poorly written code. So if the design of the current program or business knowledge is what's slowing you down don't worry too much about that. On the other hand if everyone on the team is doing better than you maybe there's something they know that you don't. For example maybe you spend more time on meaningless tasks because you don't time box. It might definitely be worth it to check in with some other team members throughout the day and just ask them what they would do if they were you in whatever situation you're in right then. I found this often gives me good ideas if I can humble myself enough to listen to them.

Try and take a step back from the situation and look at it without your ego attached at all with respect to the goals of the business.
For comparison, here's a popular standard:

https://github.com/golang-standards/project-layout
That's a great suggestion! We do have a security section but the link is in the footer. I assume you mean having something like this more prominent?
> ByteDance does business in Europe and therefore is subject to EU law

Legally, yes. Practically, I’m not sure the EU could block a major Chinese app from its market for fear of retaliation.
Yes, because that is the only possibility.
Stuff You Should Know did a podcast about the Cannonball Run in 2009
https://www.stuffyoushouldknow.com/podcasts/cannon-ball-run-...
You are comparing a state run propaganda organization to independent news organizations. You simply cannot compare RT to CNN because RT is owned and funded by the Russian government. They have done some work to try and distance themselves from this idea, yet it's all quite surface level - even a Wikipedia level investigation of who is who at the senior leadership level will reveal more than enough ties to prove that the Russian government pulls the strings. As one example, Margarita Simonyan is the Editor in Chief of both RT and fully state-run Rossiya Segodnya (... which, "coincidentally", also translates in English as 'Russia Today').

3rd party media watchdog organizations such as Reporters Without Borders and Accuracy In Media consider RT as a propaganda arm of the Russian government as the results of their investigations into their reporting accuracy. Negative reporting of Putin is directly banned by RT.

They have a propensity for airing conspiracy theory based content as news, as well. They keep people like Tony Gosling on staff, an anti-semite who spends much of his time peddling conspiracy theories about a worldwide zionist illuminati, have run stories about how the boston bombing was perpetrated by the US government, how EU citizens have all been microchipped to release hormones that make them submissive, etc.

RT is not a legitimate news organization. They are an arm of the Russian government, and Assange would surely know exactly who and what they are. Working with them is incredibly damning evidence.

Personally, I don't believe that Assange was always a Russian asset. I think when he started WikiLeaks his intentions were relatively noble, at least in his eyes. But I think that the position he was put in over his actions ultimately gave the Russians significant leverage over him, and they were able to use that to flip him. But based on his recent actions, there is a significant body of evidence that he is a Russian asset. And to put it bluntly, your argument that RT is a legitimate news organization really only has 3 possible explanations that I can personally see: That you are informed on the subject and have taken a stance counter to independent media watchdogs/Western governments/etc. (Which may be fine, but I'm curious how you can rectify that view with all of the evidence that is publicly available), that you are uninformed on the subject and thus basing your defense of Assange on an incomplete understanding of the situation, or that you are informed but some bias in favor of Assange has you ignoring all of the evidence out there on RT.
Not GP but Linux on laptops often has its own problems, including unreasonable battery usage that's non-trivially hard to fix.
Braves filter is much more granularized. Cookies get blocked. Specific scripts get blocked. I love it.

But it's webkit and I like Firefox.
[EDIT: removed some mild irony.]

Is free speech really what's holding back significant action to combat global warming? Isn't it possible that speech restrictions could have a negative effect on public support for such significant action?
Elon Musk wins Twitter defamation trial brought by caver Vernon Unsworth
Intel Teases new monster die GPU
> If I was advertised a browser

AMP is not a browser. It is HTML markup. Likewise, nobody claimed that AMP contains all of HTML. By deliberately misconstruing what AMP is, you are the one who is fruitlessly engaging in trite point scoring.

> it would require unanimous coalition of every other member to oppose them.

As I have also pointed out before, their goal is to have even fewer Google members on that committee. Already, anything that benefits only Google would be shot down. Compare to Apple News, which is controlled entirely by Apple or FBIA, controlled entirely by Facebook, or RSS which is no longer updated at all.
Ehh... Is Brave who decides what ads I will see?

Switching to a privacy-centric browser and seeing more ads was unexpected for myself and I would guess other as well.
There have been security bugs involving allowing unprivileged user namespaces, but that doesn't matter at all in this case -- seccomp is used by effectively all container runtimes to block things like CLONE_NEWUSER inside containers.
JIT and Ruby's MJIT
just a couple of bucks. you can earn from both visitors and from referral link downloads. system is kind of fun and it incentivizes you to promote browser downloads
That's actually how I wish FF containers worked. (As it is, I haven't gotten into using them.)
> it's paying the users first

I didn't actually know about this mechanism. I thought users had to pay a monthly amount if they wanted to support the sites they visited. Adding another layer of ads on top is... interesting. But feels like it's just kicking the can down the road.

What I'd like to see is a mechanism similar to current paywalls but broken down into effortless micro-distributions the way Brave is. So a subset of sites would say "you can only browse our site if you're using a browser that will pay us and you're paying $10/month (total) which will be distributed amongst us based on what sites you visit and how often".

This would solve the main problem with paywalls, which is that literally nobody is willing to maintain dozens of separate subscriptions (both in terms of logistics and price) across all of the websites they read one article on each month. Apple News+ is trying a similar solution to this problem, but gated into their proprietary app. This could instead be a web standard that keeps people on the real web.
How are you going to identify them by hash or know which hash is significant? Why not store that determiner in the SP name and use that to pick and chose different versions based on that determiner.

Unless each binary gets its own hash (in which case you could solve it by building the SP when the package is built and then injecting it into the binary) there's some piece of information you'd use to chose which one to use - why obfuscate that information behind a hash instead of just using it directly as a descriptor?
> While a stolen bike probably isn't that valuable, what matters is that in most places, there's basically no chances that you will be caught.

> And I'm not kidding about the absence of enforcement and low risk of stealing bikes. Here's a NYT journalist filming himself stealing his own bike in New York City to see how people who see him will react. You gotta see this to believe it. He even uses powertools and does it near cops.

https://www.treehugger.com/bikes/underworld-economics-what-h...
I am not sure if this sort of language and comments are encouraged on HN. Are we advocating arrest of individuals we disagree with ? Is this the new silicon valley mob with hi-tech pitchforks ?
> If you don't want Apple News formatted content, don't use the Apple News client.

If you don't want AMP content, don't click on it from Google, Bing, Yandex, Twitter, etc. Exactly the same idea.

> It only allows Chrome to view content hosted by some variation of *.google.com

That is not what AMP does. It allows browsers to safely prerender content from any link aggregator, including Bing and others. It does not change what Chrome can do. The page is just a normal HTML page served by the link aggregator's AMP cache.
VirtuaVerse – Official Trailer [video]
Because java has slowly been dying? ;-) no I don’t think that’s why (and java is still being used a lot I guess) but that was what jumped to mind first thing when I read “project valhalla”. Not the most PR friendly name!
That’s not how funding works, but it is how profit works.
Github felt like it deserved a callout here (Free if open, paid if closed). And there's no mention of free to play games which is a business mdoel powering a large chunk of a big industry.
"the ends justify the means” ?
Why not? You just don't nearly have enough transistors and connections.
Lol at "Dented Reality". I would prefer "Demented Reality" though.
Considering we ship 1.2B Smartphone, 300M Tablet, 150M Laptop, 100sM of IOT Gadget, along with Electric Cars and Buses. I am very much surprised Lead Acid Battery has a higher market revenue. Apart from ICE vehicle ( Which I dont buy every year ) I dont have any Lead Acid Battery around me.
It is in appropriate to call other individuals "death cult" or crazy. This does not lead to a constructive discussion on HN and leads to needless flamewars.
Yeah, lots of other groups have developed micropayment systems, but it looks like Brave might have finally figured out how to make it work on a large enough scale that it might improve the web.

I think that is partly because Brave has tied micropayments to something else people care about by putting their system in a privacy-oriented browser.
What's FB going to do with this?
oh cool. when should we expect to see it in firefox?
I mean, a lot of them probably are, or at least had overtures to flip them.

Giving an (at least semi-)hostile foreign government leverage over your is one of the very first steps in tradecraft to flipping someone and turning them into an asset. I feel like believing that there would be no effort on the part of the Russian government to turn these people into assets is fairly naive.
I saw Stallman talk about a decade ago and was thrilled to be picked on, so asked a question about my Linux setup.

"I think you'll find," he interrupts me, like he's done to most of the other people asking questions "that it's actually GNU/Linux" and then fixes me with a look usually reserved for telling an adult that yes, they really have just soiled themselves.

"Actually," I took great joy in responding, "I'm running Mr Torvalds' kernel with a BSD userland, so really, I'm pretty sure I'll find it's not."

We haven't stayed in touch since.
Thank you. That’s very nice of you to say.
Postgres can operate over transaction DDL but in most cases I think this would be a fine thing to isolate over - the more worrying case is when different transaction spaces have different understandings of row statistics - PG does use row statistics to inform planning so it's not inconceivable that sharing a plan between two queries running in vastly different data states would result in a highly inefficient query.