skysight-inc/HackerNews huggingface dataset:
> OK, so how do we know what this mystery service does?

We don't, Apple didn't say.

> I think this definitely raises questions about what remaining service is asking for location, and especially what that is being used for.

Yes absolutely.

> Given that this article is coming from a security blog, there is a definite implication of questioning ...

What I'm saying is that the blog missed the point entirely. They're saying it's a bug and that something isn't respecting an individual setting. Apple is saying that for the particular service there IS NO INDIVIDUAL SETTING.

It definitely raises questions as you stated AND it demonstrates that even when Apple considers something above user choice, they still do not hide it. They created a means for an App/Service to access Location Services, when enabled, without user's consent BUT they didn't create a way to hide it.

If Location Services are accessed, you receive a notification.
But then Google shows up and demands that all that cruft has to be added back to make AMP and normal pages the same again. Doesn't this kinda defeat the purpose? I thought I can maybe understand AMP pages as some reader mode, fast and no-bullshit content, but now they look like they just want to push their kind-of proprietary tech.
So?

I mean you are right, but you are right in a very odd way. Imagine this headline:

Local boy gets beat to death.

Then some random guy comes to comment: "Well that happens all the time, it's not news."

I mean sure, it's true, but it's callous, it's minimizing and trivializing what happened, it's acting like it's always inevitable and it's not bringing anything new to the table. It's not just helping, it's actually detracting from any meaningful conversation. In short, I get the feeling that such responses come from smug people who aren't very kind. Not saying you are, just saying how you come off to me.
is this served from politico's servers and how is it different from a stripped down version of their site?
I can't speak for Python but the JavaScript community has been investing heavily in TypeScript, and the desire for a more integrated IDE experience is a huge driver for that growth.
Java has zillions of 'not very good' or 'not empowered' developers writing in it, and the perceived safety of frameworks is valued over the ability for devs to actually write decent code.

Especially in orgs for which the code/tech is a secondary issue, only seen as a risk, they'd rather higher 5 more low-cost people to deal with the framework cruft than just hire the right people for the job.
As a small business owner, this terrifies me. Since the TTL for NS records is 48 hours, a domain takeover like this could easily bankrupt a lot of SaaS companies.

What options are there to prevent this? Would a registrar such as MarkMonitor provide at least some notice or protection?
The recent changes in Alphabet leadership seem to push it further into AMP like ideas.
> Likewise, what factors, events, and socioeconomic circumstances have driven people into the throes of addiction?

It’s not the whole story, but access to cheap addictive substances is part of the equation of how someone becomes addicted.
Last time I worked with Python or JavaScript I was using a very basic text editor. I'm not sure I'd be quite so brave with Java.
No. This is what many considered test induced damage. If the only reason you create an interface is because a test requires it, you are damaging the integrity of your design.

Interfaces are one of the more powerful abstractions available and should be well thought out points of flexibility you specifically designed into your solution. If you use interfaces for other reasons your codebase is full of false flexibility and not-actually-abstracted abstractions which makes it difficult for other people to figure out what they can actually do with it.
That matches with human psychology of perception, IIUC.
Thanks! I do have a tax consultant, but he charge's extra to do payroll, which is why I'm exploring how difficult it'd be.

Do you know if there's one time setup forms I need to file for employment at the federal level, like forms to tell the IRS that you now have an employee or register as an employer. Or do you just start paying payroll taxes each quarter?
I think this is a confused issue as AMP the format is harmless, while AMP the google publishing platform is worrying.
I’ve noticed that the MBA crowd (including some friends!) who jumped into the Bitcoing bandwagon at 10K are now hawking Quantum Computing.
> %90 of this "malware library" problem too would have been avoided if package repositories just required all packages to be signed with keys on hardware dongles.

I'm with you about requiring signatures, and you can get around the FUD about packages getting abandoned because of developers losing keys by implementing something like TUF[1] (because of delegations in the targets role), but I don't really see how you can enforce dongle usage. That is, how can the repository administrators tell the difference between a signature from a key on a hardware dongle and a signature from a key on somebody's windows laptop? You'd need an IRL auditing process, which just isn't feasible for most open source packages.

[1] https://theupdateframework.github.io/
My suspicion: the whole world lets the FAA validate airplanes and then sort of rubber stamps. Boeing was able to capture the FAA, but Airbus wasn't(since it's a foreign company). As such Airbus is still working with a proper adversarial regulator, whereas Boeing can get away with more cut corners. Eventually that screwed them.

The EUs move for greater local safety review, ironically, might make Airbus less safe, since they might be able to capture the EU regulators.

[edit] to emphasize: it's not market competition or the EU being better than the USA that's different. It's just the quasi-monopoly the FAA has on global aviation safety checks and the effect it has on foreign versus local companies.

In fairness, if there were multiple US aircraft manufacturers, they might battle each other for FAA regulatory capture and prevent either of them from achieving it.

[double edit] For the reverse of this see Dieselgate: discovered by some random American(named of all things John German) and pushed into the limelight by the EPA or whatever. It's not a perfect metaphor since he worked for an NGO, but arguably even civil society faces a sort of funder capture. Would German environmental NGOs have blown the whistle on something like this? Maybe?
Java's eccentric uncle Objective-C called this method "description" instead of "toString". That was a better name IMO because it avoids the suggestion that it's some kind of canonical string representation.
You're misunderstanding the bug.

In the end, the number will be displayed to one decimal place, eg. "1.1 MB" or similar due to the "%.1f" format specifier.

If the input is 999999 bytes, the loop will see that it is less than 1 MB and so will format the number 999.999 into "%.1f kB". When this number is rounded to one decimal place as part of that formatting, it rounds up to "1000.0 kB". This is the wrong output.

There's a bit of a catch 22 because ideally, you would be able to do the rounding first, and then see what units need applying, but you can't do the rounding until you know what the divisor will be.

The article solves this by first manually determining what the cut-off should be (it will be some number like "...999500...") but personally I'd probably just decide to round to significant figures instead so that you can cleanly separate the "rounding" and "unit selection" steps.
They were pretty much forced to change though
another attempt to murder it https://news.ycombinator.com/item?id=20599752
It is an optional web standard. There are other search engines than Google.

I can't help but wonder why none of them have thought to start indexing AMP pages (or pages with some other standard or even no standard) in local cache and serve them faster to their users; seems like a space they could choose to compete on.
It will be blocked from purchase in the U.S.

https://www.wired.com/story/us-china-cybertheft-su-bin/
The problems are forks, though. Anybody can create a copy and the problem is that e.g. on Github there are tons of library clones that aren't even marked as fork, because they have been cloned and then imported as a new library for whatever reason by the new maintainer. I've often had substantial troubles finding the original library or the most well-maintained fork.

Large repos like Github should do an automated similarity search and prominently display potential older (as in creation date) versions of the same library even if they are not forked from the original repo directly.
American Trash
My guess is since .in is one of the cheapest (if not THE cheapest) ccTLD the malwares/botnets are exploiting them. I received an email couple of years back from a top domain registrar based in India that the govt. requires actual Registrant contact address and not that of any privacy protection service (to protect from WHOIS); I don't remember whether it was only for .in or for any TLD's registered from India.

Anyways I've since then stopped buying .in and sticked with .com. I'm glad OP got his domain back, but I'm quite sure it wouldn't have been simple (or even possible) if he had chosen some registrar based in India (due to their incompetence and general nature to not contend with higher authorities) instead of Namecheap; especially since Namecheap's .in domain costs more than that of any registrar based in India.
Bokep VPN Free Downoad – Simolex APK Latest Version 2.9
I'm familiar with Ferguson's work. As with most economic work based on theoretical models, the empirical facts are more than enough to disprove them.

The famous IMF rebuttal of Piketty was an exercise in exactly the same. "rich in data, [but] the book provides no formal empirical testing for its theoretical causal chain". The same applies to the Investment Theory of Party Alignment. You can make an argument that poor people will follow rich people ideologically, but you can't 1) draw a causal line between the wealth and the influence, and 2) most importantly, you can't prove that poor people would ideologically follow rich people against their own self-assessed interests.

[1] https://www.imf.org/external/pubs/ft/wp/2016/wp16160.pdf
Go seems to have much less boilerplate than Java. I’m really glad that OOP was explicitly unsupported and the language designers opted for using interfaces instead.
I look forward to the day when most of my regional flights are on A220s. CRJs are a little long in the tooth. ERJs are decent but A220s are much better.

Cabin config is of course airline dependent but in one of the default configurations the A220 middle seat is actually wider than the flanking seats. In a world no one cares about customer comfort this is a nice reversal.

As a frequent flyer customer I find comfort has much more to do with aircraft than cabin service: I flew 2 United segments in the past few days on 737 equipment. United flight attendants are the highest paid among US airlines but United doesn’t spend enough money on ops. Aircrafts had so many technical issues and both segments were heavily delayed and very uncomfortable. No amount of customer service would have helped.
What Google does is try to look like they're respecting privacy and following the privacy laws only to the minimum amount possible.

Google of course cares a lot that your data doesn't get into the hands of other companies, after all, it's THEIR data. That's were their care ends.
Maybe in the West, but with increasing incomes in China and India, we'll likely see increased travel in the East (and world-wide) for quite some time.
Mockito is a single pom.xml (or build.gradle) entry.

edit: Not "Moquitto".
for most implementations it would not be possible to use the location in memory because most java garbage collectors will move stuff around in memory. they could use the location initially and cache it afterwards but this would seem tricky to do without breaking the hash code contract.
> Granted it isn't 10s of thousands of lines, but it isn't small either.

I'm not trying to belittle what you do, but if your good base is in the 4 figures in size then it's not large (in fact yes, it is small). When people talk about large code bases they are generally talking 100-1000x larger than yours, or more.
Paidera
Property taxes are not wealth taxes, they are consumption taxes.

You can easily tell this because a person who owns a home outright pays the same tax as someone who owns a similar home but has a large mortgage. These two people have different levels of wealth but pay the same tax. This is because their consumption is the same.
Even if you beat me (2015)
after reading this thread sometime ago ( https://news.ycombinator.com/item?id=20244848 ) i decided to start one.
It's been an on and off endeavour, when i am most busy, that's when i should be taking those notes, and that's exactly when i completely forget about it... :/
As mentioned elsewhere, refactoring a concrete class into an interface is actually pretty trivial using an IDE. At least within an codebase. The only time to really be diligent about interface design is if you're designing an API.
I've been in the workforce for nearly 10 years and I still have this issue when starting a new project.

It takes a conscious effort to just move forward, and it still leaves a lingering thought in my mind about what I'm doing wrong while building exactly what I need.
Unit testing?
the idea of your phone being a front end to your private server cloud is somthing that really should be explored.
The smart phone could also be a great ubermouse, way more than xyz and 123 inputs are possible with a touchscreen.
completely anecdotal, but my cousin did. she told me chrome (not the web, chrome, but she definitely meant the web in general) was "too confusing" and now only uses facebook and the mobile apps for a few other services.
It has build-time annotations though, which often serve the same purpose.
It's called "AWS Extend Switch Roles"
MS also have their own take on WebAssembly

https://dotnet.microsoft.com/apps/aspnet/web-apps/blazor
Was it profitable for Boeing to cut corners?
You can do that with classes -- as long the dependents don't instantiate their dependencies directly.

However, I personally like interfaces (well, traits, I'm doing scala), because it makes it much easier for readers to understand what bits are supposed to be part of the interface and which parts are supposed to be an internal implementation detail. Without interfaces it's really easy to accidentally change e.g. a return type into a more concrete one which accidentally leaks impl. details and suddenly other bits of code will come to rely on those impl. details. I work on rather large/complicated systems and I've seen this gradual spaghettification time and time again.

Disclosure: I'm usually the person who gets called in to fix the mess -- so that might bias my perceptions here.
It just occurred to me that Boeing has been quite successful with branding ("Dreamliner", "MAX"), but maybe wishes it hadn't been... Everyone now knows that MAX is bad, but how many people can tell the difference between a 737-8 and a 737-800?
You mean, you had to edit the build file, some SQL and some configs that weren't baked into the compiled code?
I totally understand the issue raised by this article.

But I have a problem: I like AMP because it is so fast!

Publishers have done this to themselves by loading up simple web pages with hundreds of scripts that slow it down to almost unusable levels.

Maybe if publishers stopped doing that, then you could start criticizing AMP.

"Some of my clients will ask me what to do with those messages. I will tell them to delete them. Ignore Google’s nudging, pay no heed."

And then your clients will be unhappy with the traffic results. Are you going to also tell your clients the drawbacks?
It's frustrating to me that anyone buys that the driver behind AMP was performance. A Trojan horse has to have some plausible reason to let it in the gates. That plausible reason isn't the actual reason it exists.

If performance really mattered to Google, it would influence SERP and Carousel position in a meaningful way.
> 80% boilerplate is a large exaggeration.

If you restrict yourself fully to the standard library it's still not that largly exaggerated, even with Java 8.

> The compiler has a well-defined custom processing interface (@annotations) which allows for powerful boilerplate-reducing things, from Lombok to Spring to JUnit.

If you add Lombok + sth. like guava or apache-commons and in general choose modern libraries/frameworks it's really OK now. The only downside of Lombok is that it really maxes out what compiler(s) allow you to do which is not always without issues and it requires an IDE plugin to be installed.
The problem is a lot of legit programs cause the same terrifying popups in windows to the point where they become more of an annoyance than something you actually pay attention to.
Mods: [2018]
I don't know why people get so bent out of shape over what Google does. They'll just cancel it in two years. ;)

In all seriousness, though, I've been on the "screw google" train for a while. Everything good hey do they throw away (Google Code, Google Reader, Google Plus, Google Inbox, Google Wave... pours one out for OT while I work on my CRDTs) while anything they make which originally held merit they just make more awful, year after year. I don't know if they're aware just how unsustainable a business model screwing over their users might be, but I'm guessing they're willing to find out.
I'll admit I'm surprised as well, however if other search engines started doing that I would avoid them also. I want my content to be served by the URL I was shown and clicked on.
With Java you can mock concrete classes using mock libraries which can change a class to a mocked class at runtime.
This is something I've been saying for years now; it honestly feels that sometimes the mantra of the language is "why write code when you can just make files?".

I feel like Java makes you feel like you're accomplishing a lot, but in reality if half your code is generated by an IDE, and is impossible to understand without the help of a bunch of expensive tools, I do have to wonder how good it actually is. I'm not sure I've ever seem a Java project where I didn't shortly after think "this probably would have been better with Clojure or something".

I know a lot of really smart people who absolutely love Java, so I'll admit that it's possible that I don't know what I'm talking about, but I'd like to think I'm reasonably competent at this coding thing now, and Java is routinely the worst part of my day at my current job.

To make it clear, I'm not knocking the JVM. That's a pretty cool piece of tech, and enables awesome stuff like Clojure and Eta.
A couple of years ago we lost our domain [1] due to a registrar (that we were not a customer of) erroneously issuing a suspension. The amount of honor system involved in the whole process, particularly in ccTLDs without as much oversight, was really surprising.

[1]: https://medium.com/thisiscala/the-duct-tape-holding-the-inte...
How many people use HN over other tech news aggregator sites specifically because it's so lightweight? I know I do.
You're right in a sense, but I have changed which local/regional/national news sources I use. In Canada, the Postmedia group of companies have made it almost impossible to actually read the news. I'm actually ok with them having ads, but they have ads that cause the page to scroll/shift while I'm trying to read, and it seems to be random. It might teleport me further into the article, or earlier. And trying to scroll to where I was causes further ad loads that shift the page again. Totally unusable. The CBC though has none of that junk. If it continues frustrating people this much, it'll potentially shift the political discourse left (the CBC seems to have a left-leaning bias)
I have a 2014 Bravia TV, and I would still much rather use the Netflix app on that than the one in the PS4. I press one button on the remote, the app starts within seconds, it's smooth and it works. Why would I need anything else? And it's a 5 year old TV at this point!
I think you're confused. You're correct that the first connection is 1-RTT but the resumption is a new connection and is 0-RTT using a resumption PSK.

Let's say your browser was left open when you went to work, you get home, click the bookmark for your preferred porn site, and now the browser needs to resolve the FQDN for that site. How fast is that?

So if you have TCP fast open and 0-RTT TLS 1.3 that's exactly one round trip for your answer, just like traditional unencrypted DNS.

The DNS query gets wrapped as an HTTP request, which gets wrapped as a TLS plaintext, which gets sent as TLS 1.3 early data, which all goes in the Fast Open TCP packet.

The server checks the Fast Open cookie, opens the TCP connection, matches the PSK, unwraps the early data, unwraps the HTTP request, unwraps the DNS query

The server finishes the TLS handshake on the now open TCP connection, and using the now encrypted channel it sends back the HTTP response, which wraps a DNS answer and that goes back as the first TCP packet the other way.

Same number of round trips and packets as for DNS. It's very ugly and QUIC in particular will tidy this up considerably, but it's secure and fast.
Surely it's the behaviour of someone who is very much comfortable and enjoying their job. Getting well paid to waste time on Instagram all day without risk of being fired is many people's idea of a dream job!
> You talk about women and their lives as if what they want is or should be the driving factor in their lives. I don't think that's accurate at all.

Is "what they want" the driving factor in men's lives? If so, it's a somewhat fundamental principle of American cultural philosophy that we do all we can to make the option available for women too, if they want it. To do otherwise is to abandon the notion of "created equal."

The American experiment may be founded on flawed reasoning there, but it's going to be a heck of an uphill battle to convince people that's true. A battle I'm not going to fight because I'm on board with the "created equal" notion.
Trustd. securely use open-source code
I don't know about JS, but my python work is done in a repl like ipython in conjunction with a text editor. It gets me half of what I wanted from an IDE.
Fortunately we have a plethora of much better games now. I think monopoly will be a quirk of history soon. How many boomers have never played monopoly (and hopefully never will) because they have so many other games to play.
> For large code bases, most languages get unmaintainable without an IDE

I disagree. Most people working on the Linux kernel (including Linus) or the major GNU projects (including RMS) are using vim or emacs with maybe some supplemental find/grep/sed/awk.
Performance has not been a concern for about 10 years. Its all about dev speed. The amount of boilerplate loaded is wasting so much energy across the world. Our libraries are becoming more bloated.
I call for them to not do that. So Developer calls for GitHub to ignore the SJWs.
Actually if you use sealed classes or enums Kotlin does warn about things falling through. Unlike Rust, JVM languages have dynamic linking so this is not possible for e.g. open type hierarchies or other kinds of things where any library could be adding new variants.

Other useful features it has are that most constructions are also expresions. So you can assign the outcome of a when and not having a value for one of the branchesd then becomes a compile error. IMHO when is vastly superior to Java's switch. Something like that would also be a great addition to e.g. typescript which inherits limitations from Java's limited syntax.

Kotlin does have destructuring. You can do val (foo,bar) = returnsomePair(). Also works in lambdas when you do a foreach on e.g. map entries.
Enough to explain why data about his Google account might have been caught up in the investigation, perhaps.