skysight-inc/HackerNews huggingface dataset:
> Government surveillance is crucial for effective counter-terrorism, counter-intelligence, foreign intelligence, and law enforcement.

There is more than a little truth to this, although I think the argument is relied on more heavily than it should be.

Here's how I view the issue -- surveillance is inherently oppressive, but it also brings certain benefits in terms of safety. So it's a tradeoff. Where the balance should be is something that reasonable people can, and do, differ about.

My bent is that I'd rather live free in a dangerous world than to live oppressed in a safe world. That's simply my bias -- I wouldn't want to live in a world that exists at either extreme, of course, but I want to preserve whatever freedom I have left.

We have been seeing a serious erosion of that freedom over the past couple of decades, primarily because of the actions of the private sector, and I am highly resistant to letting it erode even further.

You speak of surveillance (and other) abuse as if they are rare things that people make too much fuss over. I don't think that they're nearly rare enough, personally.

So, while I am not a privacy absolutist, I am of the opinion that we've already set the balance far too towards the "oppression" side of the scale, and we need to resist having it slide even further in that direction.

> If you deem your country incapable of holding that responsibility, I guess it is time to move to a country

As a patriotic citizen, I consider it my duty to not abandon my nation when I think it is behaving badly. It's my duty to help correct it.
The very nature that Facebook sold micro-targeted ads for pennies just because they were "only" for the smallest audiences, but yet these audiences were most likely to reshare the content virally, effectively whitewashing the "sponsored content" tag off it into a larger population of feeds, effectively created a scenario where ad spend on Facebook at the time must have been absolutely misleading.
I work on gVisor, I can answer this!

gVisor is not a rewritten version of an internal tool. The code you see really does run in production for App Engine and Cloud Run. While there are some internal modifications to better integrate with internal infrastructure, the vast majority of the code is identical to open source, critically including all of the system call handling, filesystem, and memory management code.

While browsing through our issues will show that we still have plenty to work on, the vast majority of applications work well inside gVisor.
Also, the US still has fairly high emissions per capita--something like 2x China, 6.7x Brazil, and 8.5x India (though I think these numbers also leave something to be desired in terms of how they consider other factors the GP notes like deforestation, as well as what emission fractions are going to activities like producing and shipping exports elsewhere).
Yeah. It's only marginally better than Massimo Vignelli's terrible subway map.

Designers seem to love making subway maps that are aesthetically pleasing but impractical for the end user.
Great, thanks for the link :)

I was looking for exactly this book in german book stores, but local bookstores here do not have books from No Starch Press in their program:
https://nostarch.com/shenzhen

I never buy anything from amazon, just my personal decision
I have compiled a data set of enough scammer's info (names, contact info) that has nearly the word count as the first Harry Potter book. In the early days, I would report these profiles, but the service generally said they weren't going against any policies even when they flagrantly asked for money in their public profiles.
> which is currently too expensive to do at consumer scale

There are companies that do that for $200, sequencing is the new genotyping!

(which I hope will encourage more people to donate their data to open source databases, making the sale of this kind of data unprofitable)
Born 1968, never made more than $80k/yr until 2011, resigned 2014 (came back very part time because there's something wrong with me, 2017). Started saving and investing 1990.
What could one get for a $500 budget?
> It wasn't her thoughts it was company policy, or to be specific it's required by law that this notice to be posted in the workplace.

Unless she was asked to do it by management, it was her thoughts. As much as the title makes this seem like David v Goliath this is really just employer v disgruntled former employee.

No matter your thoughts on "its required by law... Blah blah blah" it's not up to her to enforce the law on behalf of an employer. Google has the right to post or not, statements of its choosing. In fact it's absolutely within Google's right to ignore this law, doesn't mean there won't be consequences but it they can do it.

This is so cut and dry I'm surprised she found a lawyer willing to take the case. It's staggering there's even a discussion ok HN about this.
How do you imagine this to work? XHR caller and XHR endpoint are both coming from untrusted sources at that point — if you allow either side to define a trust root, you are fully opening up to MITM attacks.

For development purposes, I imagine the approach akin to cross-origin support in browsers for loopback networks might work (i.e. don't enforce checks on them).
Indeed it does, which is to not go that route.
Deep Learning for Symbolic Mathematics – NN that can do advanced math [Facebook]
These would be printed, and large. I don't think legibility is a major issue with either map.
"Consider carefully whether the extra step is worth it". This is what I'm wondering about everyday /s
Bitmain Rival’s Founder Arrested as War of Crypto Miners Heats up
Yet the higher information density of Chinese & Japanese means the total file size tends to be about the same. Korean gets a bit short-changed, and some of the Indian subcontinent languages have low-density (like Latin) but high size (in with the Asian characters) and lose out.
1. The requirement to involve a 3rd party certificate authority is a needless power grab. Giving in ends the hope that it will ever get changed.

2. There is currently only one free cert provider, if there are ever issues with it, your users will see a scary error message which will make them think there are security issued with your website.

3. Downloading and running code from a 4th, or 5th party and giving it access to your config files is not "more secure".

4. The culture of fear around HTTPS, meaning only the "most secure" or "newest" protocols and cipher suites are to be used. This prevents older clients from working, where HTTP works just fine.

5. HTTPS is needlessly complex making it hard to implement. There have been several security vulnerabilities introduced simply by its use.

6. If you can't comply with the OpenSSL license, implementing it yourself is a hopeless endevour.

SSL was developed by corporations, for corporations. If you want some security feature to be applicable to the wider Internet, it needs to be community driven and community focused. Logging in to my server over SSH has far more security implications than accessing the website running on it over HTTPS. Yet, somehow, we managed to get SSH out there and accepted by the community without the need for Certificate Authorities.
> They may also have done things like normalize/remove optional.dots+suffixes@gmail.com, "quoted" or (commented) local parts.

At least the first two (removing dots and suffixes), along with conversion to lowercase, are strictly invalid transformations which may result in an email address referring to a different account. Sure, most email providers treat the account name as case-insensitive, and the use of '+' as a label/subaccount separator is a common convention, but neither of these is required. The RFCs say that the account name is case-sensitive (unlike the domain name) and '+' is just an ordinary part of the name; any special significance is assigned by the server. Ignoring '.' characters is something specific to Gmail.

In the context of a search it's not unreasonable to ignore some of these differences, but at that point the matching names aren't "equal", just "similar". Certainly it should never be assumed that it's safe to send email to the transformed version of the address.
Wow, this is a real indictment of goog’s plan to take the loot from ads and spend to diversify. They basically invented the cloud model, and if they don’t have the culture and the ability to expand to this most naturally of expansion areas.. they are doomed.

There is something seriously broken at google. This puts Larry quitting in more context. He’s lost confidence in google doing this, then there is nothing left for the org to do. Over—compensated, over-entitled, over-talented engineers that, when put together can’t actually accomplish anything.

Maybe gutting the product org all those years ago was a mistake.
So lots of arbitragers were buying from Best Buy and then selling on amazon. I keep thinking about the front page article a few weeks back about the repackaging from other online sellers.
You can make 90% of people afraid of XYZ, if you write a sufficient amount of text "explaining" how dangerous XYZ is.
But if ordering on Amazon, as a paying customer, I would at least want to know up front if I'm buying something that came out of the trash, and make my own decision on if I wanted to buy it or not.

I agree, but let me play Devil's advocate a moment.

I went to a gin distillery on vacation a couple months ago. It was well known, well respected, sold internationally, etc. I'm not really into gin, but I thought what they gave us tasted pretty great. It was well packaged, their physical location was in a nice spot and had a well decorated, cool little area where they went over the history, their employees all seemed well educated and happy to be there, etc.

When we got to look at the distillation process, we went into a very small, narrow looking hallway with all the equipment and got to see the gin coming out into a big, pretty unceremonious looking plastic bucket.

Their distillation equipment was expensive, everything was very clean, and it seemed like this was just their process. I didn't really see anything wrong with it.

But, if at the point of sale, someone had a picture of the gin going into that plastic bucket and let everyone know that this was a part of their process, I think fewer people would buy it. And for no good reason. The gin was great, everything was clean, and I'm sure cleaning and maintaining that setup would be easier to deal with than some sort of automatic bottling machinery.

Although most people think knowing where a product came from is good information (and it is if you have a good understanding of the context/what to compare it to), people have a tendency to be irrationally averted by things that don't really have any bearing on the product. I'd argue a product being "new" vs "warehoused" vs "trashed" is one of them. If the product is in the same shape, it shouldn't really matter if it was on the front and center shelf, in the back of a warehouse, or in a dumpster. It's the same product. Emphasizing where it comes from can cause people to irrationally avoid it and have it go to waste when it's perfectly fine.
At least the people who currently have it, will continue to have it (well, hopefully).
Publicly verifiable is a (stronger) superset of privately verifiable
The article quotes a law professor who says that it probably is protected activity, so I'm not sure "naive" is the correct word.
Mediating Consent
Perhaps, but only if you count nonmonetary things as part of the definition of "price".

However, that doesn't make it ethically supportable.
Borg is basically the internal predecessor to Kubernetes.
What does that mean though?

Does it only mean that ZFC is consistent when subsumed within a strongly-typed higher order theory, or does it mean that ZFC by itself is consistent?
Breakfast Gone Bad the Case of Kellogg’s Rice Krispies
We will know AI when a machine blurts out "I think, therefor I am" without any prior input.
GCP generates $8B annually. It's a bit dramatic to think Google will give up on GCP. AWS has a loyal customer base, which is well deserved, but Google does have some unique products (like Spanner) that AWS may never have. Point being there will always be a place in the market for GCP.
The RFC for adding `?` to the language might be a good start: https://rust-lang.github.io/rfcs/0243-trait-based-exception-...
I hated the Logitech driver, it's been a complete dumpster fire -- constantly disconnecting, disabling certain functionality, and just overall a pain to fight. Ended up switching to SteerMouse, the developer's been crazy responsive and even went out of the way to work on MX Master 3 compatibility + support Smart Zoom functionality when it wasn't even previously up for consideration.
You two are talking past each other.

There wealth as a token of who is winning some game: he who has the most $$$ wins (what I don't know - this is a religion question). You need to own means of production to win this game. If you are reading this, you probably have no chance of getting here, but is fun to dream about.

There is also wealth as in you don't have to hold a job to maintain your lifestyle. When you are young this is impossible (except for a few who inherit money or win the lottery), but if you live below your earnings and invest the rest well you can get to the point where you no longer need to work. (Some people choose to work anyway, others will retire)
I don't know if that a French thing or not, but in France, in many cities there is a day designated as "encombrants" (~ bulky). Basically for when you want to throw out large objects.

I had this when I lived in Nevada. It was every other Tuesday and called "bulk trash day." You could put out pretty much anything that wasn't commercial construction waste or hazardous waste.

There were also scavengers who knew when bulk trash day was for each neighborhood, and would drive around the neighborhoods in trucks taking things off the curb to sell at flea markets.
I think it's crappy that all the other responses you've received so far are ignoring that you are comparing the existing NYC subway map to a map that claims to be better.

the NYC subway map is better, so perhaps whatever design principles it uses would work better in Paris also. And if not, that might teach us all something about map-making, unlike the other replies to your comment which teach nothing because they can't seem to learn anything.

peace out.
Logitech does have a wireless charging mousepad system but it's currently limited to their gaming series mice.

https://www.logitechg.com/en-us/products/gaming-mouse-pads/p...
If you happen to be in California...

Section 2872 of the California Labor Code prohibits your employer from taking ownership of anything that you develop entirely on your own time without using your employer's equipment, supplies, facilities or trade secret information, EXCEPT for those things that either:

(a) Relate at the time of conception or reduction to practice to your employer's business, or actual or demonstrably anticipated research or development; or

(b) Result from any work performed by you for your employer.
Ask HN: Best Way to Measure Progress?
Are there any good apps you'd recommend to help measure personal progress like habits, achievements, or happiness?
I picture search engine team laughing secretly (or openly?) looking at this post? Is that an accurate imagination?

I don't work at google so I have no idea of knowing what it's like.
That's great for the handful of people that read Hacker News and understand DNS, it's a trash solution for the rest of the world. Defaults matter because they are rarely changed.
Is there a difference from a programming perspective between, say Kafka, and the event store linked in this post?

I understand that Kafka can scale horizontally and can handle crazy throughput, but I mean from a programming point of view, the idea of a unified log as a data model applies to both, correct?
I didn't know this either ...

https://www.cnbc.com/2019/02/12/google-cloud-ceo-thomas-kuri...
> Microsoft or Amazon—currently first and second, respectively, in cloud market share

Isn’t this backwards? I thought aws was quite a bit bigger than azure.
Not to mention that Facebook for some time also enabled resharing those micro-targeted ads, which would then show those ads on friends/followers' newsfeed without the Sponsored Content notice, thus further blurring the lines between what was "legitimately" viral content and what originated as micro-targeted paid advertising.
Meanwhile, in my town (pop 1.4 million in South America) nobody can fix anything anymore and the electronics shops are turning into lighting or computer stores.

I couldn't get a ribbon cable last month from what used to be the best electronics shop in town!
Didn't Bing end up profitable?
I have the same setting, but vim automatically sets `noexpandtab` when editing a file named Makefile. I don't have any explicit setting to do that, nor any Makefile-related plugin.
As far as I can tell, Costco.com doesn’t give you the same price as in warehouse, even if you’re a member.
The comment I responded to has the correct way (return success || somethingelse).
Generally, when a company doesn't sue over something like this, it's because they don't have a case. And that always means that enough of the allegations are true that they couldn't win an absolutely massive judgement in court.

Because in the US, truth is an absolute defense to the defamation torts. (The same is not truth in the UK; you can still be liable for defamation even if everything you said is true. See, e.g., the case of the Nazi-fetishist MP.)

The Streisand effect is not a thing companies worry about. Because more brand damage = more monetary damages to collect.
She used an emergency push to deploy this change. Her job was to add notices for security purposes, not political activism:

> "She misused a security and privacy tool to create a pop-up that was neither about security nor privacy," Hansen wrote. "She did that without authorization from her team or the Security and Privacy Policy Notifier team, and without a business justification. And she used an emergency rapid push to do it."

https://arstechnica.com/tech-policy/2019/12/engineer-says-go...
After all, how can you read a review on something if you're not going to use it? Which seems like a pretty big impact on the efficiency of the entire market.
Sending your cursor position to DynamoDB
In what way would a lawyer who thought it is a rational policy be right?
the chinese (or asy) government could easily find a few samples from this population, you don't need a whole database.
It's actually pretty hard to update the IRC protocol given the number of client and server implementations and IRC's federated nature.

https://ircv3.net/support/networks.html
He seems to have been open to the idea:

> I would also like somebody—anybody—to show up with one properly-conducted test report that shows that command keys are equivalent or superior to pull-down menus somewhere, somehow.

It's been 30 years since he wrote that. Has anyone in that time been able to produce data that refutes Apple's findings?
Have they considered making their pricing easier to understand, or did they collectively decide that the AWS model of "Good luck understanding your bill!" is a good one?
Nothing prevents the owner of any bathroom you use from doing the same thing except, in both cases, the danger of being found out.
heck, even 3xx series systems are still compatible on modern IBM mainframes.

you can say alot about IBM, but excellent compatibility is not one its weaknesses.
StartCom/StartSSL used to issue free certificates even before LetsEncrypt appeared, and it was a much bigger hassle to get verified, but at least they were valid for a full year. Not sure if they still do, and they didn't allow for multiple servernames in one cert.
If this is something you're curious about I highly recommend the YouTube channel Strange Parts. One of their most popular videos features their host building an iPhone from parts sourced in the markets of Shenzhen.

https://youtu.be/aQszF2iKhx0
It’s slower, much more prone to noise, a lot of disconnects, etc. the dongle just works.

There are other software bugs on macOS, such as smooth scrolling and inverted scroll not working sometimes on Bluetooth.
I absolutely love Zulip. I use it for a company team and it's been amazing. The stream model where you can zoom in is extremely convenient for catching up with messages and we love how well everything works.

I do miss GIFs, but eh.
Yes, but I prefer to stay out of that chain entirely. If someone wants to do business with an entity I object to, well, that's up to them. But I don't want to inject myself anywhere in that chain.

> If you want to support specific retailers buy from them directly

Which I do. The third party marketplace Amazon runs is a significant factor in why I've decided to reduce my use of Amazon to "last resort" status.

Although I'm not talking about supporting specific retailers here, I'm talking about inverse -- intentionally not supporting specific retailers.
This is a legitimate threat:

https://www.youtube.com/watch?v=HKQDSgBHPfY

If your DNA becomes available to adversaries, you may suddenly find yourself on the front line in a bio-war.
"Just run the most sophisticated chess engines available 960 times and publish the results."

Ok. You've got your first "best" move, and then what?

You still have pretty much a random position after that, and it'll be up to you to think on your feet to win.
Exactly - it's a perverse incentive against the interests of society.
Correct, but, if you wanted to invest a chunk of change because it's important to you, you could get it done.

And it does work right now, pretty well, for a lot of people, even if it could be better, which was the original thing I was refuting.
> She took it upon herself to plaster it on everyone’s computer screen.

Don't think that is true from the story, if you read it.
This sounds like descriptions I've read of what Akihabara in Tokyo used to be like before it transformed into its current state as the anime otaku Mecca. There's still a small electronics market area there but it's hard to imagine what it once was with everything else so changed around it.
> it would take you about 26 years to make your first million dollars

Try again. In 26 years your $1 million in today's money is worth $526,235 assuming 2.5% inflation, and is easily vanquished in the U.S. with any major health emergency. On an average salary you'd have to save and invest 40-50% of your income to have any sort of meaningful effect long term and even then you have to hope you don't hit any unexpected emergencies. The penalty in the US for being poor is to pay more for everything and always be poor. The privilege for being rich in the US is to pay less for everything and always be rich. There is no upwards economic mobility via savings on an average salary in the US. Not even close. The only path to serious wealth in the US is by owning a ridiculous amount of capital, typically by birth-lotto, and leasing its usage.
Mandatory comment complaining about Twitter threads, especially one with so many pictures. I'd rather read the entire report than suffer through that summary.
Oh it seems we're not looking at the same map; the one in the article seems to be an old version. How about this one? https://www.inat.fr/metro/new-york/
You introduced a feature without warning a while ago where 1Password would phone home for icons every time it is run (where previously users had the option of creating their own). When Little Snitch flagged this, I was very concerned that 1Password which I had entrusted with my secrets was phoning home without my consent. It took me a while to assure myself that 1Password was not uploading my data to the cloud. I don't see why a password manager needs to phone headquarters every time it is run. I have since blocked 1Password from phoning home using Little Snitch as a workaround.