skysight-inc/HackerNews huggingface dataset:
This site serves executables and script files via HTTP. Those potentially dangerous files are thus neither encrypted nor - and that's the bad part - authenticated, meaning that any man in the middle can inject content that infects your machine.

I draw the line at this point. Serve with HTTP if you just have some text. Serve with HTTPS if you have logins, sensitive information or executables and scripts.
Yes, the phrasing "secure/insecure" is an abbreviation that loses a lot of meaning, but to dismiss TLS based on that seems dishonest. Even if you don't care about your user's privacy, don't you at least want the authenticity and integrity TLS provides? The author doesn't only acknowledge MitM, but even show an example where they themselves are MitM'd.

Those same anti-TLS arguments have been rehashed often enough by now.
Your loan is an asset of the bank. The administrators or liquidators of the bank can sell that asset to someone else.

Or the entire bank can be purchased/merged in which case your loan becomes an asset on the purchaser's balance sheet.

Bankruptcy doesn't mean "all bets are off".
I just upgrade my plan to developers.
I just can't wait for some API's to be up.
Gonna build some my left over todo's task/site
95k ppm undersea CO2 hotspot –200x atmospheric–highest ever recorded in nature
> Its presence is implied in a variety of astrophysical observations, including gravitational effects that cannot be explained by accepted theories of gravity unless more matter is present than can be seen.

https://en.m.wikipedia.org/wiki/Dark_matter

Even Wikipedia says dark matter is a stop gap of gravitational models. The very next sentence, first paragraph, says experts believe dark matter exists for that reason.

> Without introducing a new form of energy, there was no way to explain how an accelerating universe could be measured.

https://en.m.wikipedia.org/wiki/Dark_energy

Dark energy is an unobserved stop gap as well. Dark energy was introduced because dark matter was not enough of a stop gap to qualify the acceleration of the expansion.

The reality is that there is just as much theoretical qualifiers for the presence of dark matter as there are unexplained phenomena in the standard model that needs dark matter as a qualifier.

The best possible answer to this nonsense is that the standard model is wrong because we don’t have the evidence to form a better model. All our evidence is limited to observations from Earth surface and low orbit. Hopefully the James Webb telescope will provide better evidence.
Horror story from my stepfather at Bruce Nuclear Power Plant in Ontario Canada: At least twice a year there was a "secret leak" where he had to come home early but no media was alerted and they had to hire racialized folks from the city to go in and make repairs. He also stole reactor sealer to seal our basement from spring leaks and our basement leaked. And on and on. Canada has very loose safety standards and cuts lots of corners.
Also, this might constitute a fellony, basically you're "hacking" Quora, using technical tricks to circumvent security measures they put in place. And no, it doesn't matter that the trick is so trivial.
You also have a huge amount of questions like “What’s the cheapest ticket I can get from A to B?” Or “Do I need travel insurance?” followed by answers with links to various spammy sites.
Sorry, I wasn’t trying to suggest that your parents specifically were prioritizing reading above any other goal, but only (in response to ddrdrck_) that I believe it would be possible for the vast majority of parents and kids to get a kid reading simple books by about age 3 if the parents were willing to do so.

Thanks for the elaboration. I enjoyed reading about your experience.

ddrdrck_: If you are reading to your daughter for >1 hour every day, she’s going to come out way ahead on language skills whether or not she can read by age 4 or not.
I think a big problem is that Apple puts all the maintenance effort on developers. On iOS, developers have to update apps at least once a year to make sure they keep working.

On the Mac, as on Windows, you could just keep using an old app for years. It didn't matter if the developer bothered to update their app for the latest OS, you could generally just keep using apps that you bought years ago.
It really doesn't work that well especially on small screens. Spotify for example has a minimum size and will be unusable when the tile is smaller than that because half the window isn't visible. Focus-follows-mouse is also broken when using multiple screens and workspaces.
https://en.m.wikipedia.org/wiki/Jumping_the_shark

Nothing to do with being believable. More to do with being gimmicky and irrelevant.
The URL seems way more important to me than the favicon / ad issue. Its an issue, but the users who can't see the difference didn't know they've been clicking on ads for the past 10 years.

#1 What does Google want the web to look like? Look at Google News.

#2 Google gets to hijack 20%~ of the screen space to get users to install their own apps, and go back to Google, not onward to the publisher's own website.

#3 Removing the URL is the final disambiguation, where no one but the most technical users can go where they want.
Replicant has an evaluation page incorporating this info with a handy table.

https://redmine.replicant.us/projects/replicant/wiki/Pinepho...
Top Woman Empowerment Ted Talks
That website refused to open in my uMatrix-enabled Firefox, and didn't open properly on mobile Safari (1BlockerX adblocker). Only desktop Safari (with the same adblocker) opened it.

So here's another link: http://archive.is/aRU3O
Yeah, this analogy is not that useful after all.
I've just been toying with an idea of a canvas-based game and wanted to use hand-drawn graphics style – and with this library, it looks like I can save money on the art and have animations for free, too! Thanks so much for posting this.
Reminds me of the recent Chernobyl series - state pride and appearing to have it all in hand can be far more important than actually finding out what's going on.
Quora was a good product. I remember the first time I used it, I was amazed by the quality of their answers. Even Jordan Peterson betseller book was based on a Quora answer.
Sadly, they decided to focus on questions instead. Now, it's filled with garbage questions and it is just slightly better than Yahoo answers.
1) the tech matters - obviously depends on your business but in my case after three rounds no one has ever really looked into tech.
2) investors will deeply understand your business and question your ideas - We never really felt challenged in the process, even though we have our doubts
The thing is I am not sure if these so called "niches" can be "looked" into. Most if not all came from one single sources, you are frustrated at the current way of doing it and start asking, there has got to be a better way.

And because you understand the problem so well, you can crave a niche out of it. Simply by looking into things people are doing rarely gives any deep insight that are enough to built something useful.
regarding #1: As others mentioned, IntelliJ (the platform) is open source, but even if it weren't, it would be a superior model.

I'm a user of JB products for some years now. last week I had to open eclipse again, which is probably THE foss IDE for java. Developing in it is mostly fine, but if you get to the tiny details then IntelliJ is far better (multiple Carets, a proper dark mode, good vcs integration, UI is to the point and not as crowded as Eclipse, integrated terminal, etcpp).

I think that it shows the limits of (pure) open source and that the paid model really can polish a complex product. I imagine that contributors and drive-by patches are not really able to create a coherent product which maybe needs a proper plan.

(This really reminds me of that Bazaar vs Cathedral argument)
Startup has been used at least somewhat frequently for public companies as well. I’ve seen it used with tech companies that have been public recently. I think I’ve only seen it used on public companies that are losing money. So at least that part seems to be consistent. Still though, makes the word diluted.
Freelancing is what I thought, but then, their benefits wouldn't be enforcible. As in, if they tell you they'll give you 20 days off a year, but then, you've been unable to take more than 5 due to crunch, nobody's gonna be there for you.
Some apps died from compatibility issues even before Apple killed 32-bit. Back before the iBooks store, some publishers made one app per book, and I bought Windows Internals that way.

A little while ago, before the end of 32-bit, I wanted to read it again. But the app was barely functional, it didn't accept certain touch inputs.
Living Root Bridges of Cherrapunji
Many shareholders are only holding these shares for a few years, and could not care less about long term prospects of the company

Most of them dont actively choose much eithet
It's not just growth-oriented new companies. The old ACME BigCorp.'s have exactly the same problems, but not because they disregard best practices because everyone is fixated on growth, but because inertia has crept in everywhere. Because everything is executed top-down and there's no back-channel. Because people care about their yearly bonuses and would rather not bring up uncomfortable truth to their superiors.

And most of all, because there are zero techies among managers. There's a complete mental disconnect between the tech-savvy among the grunts and even their direct reports, let alone more senior management.

Those companies then pay big money for external consultants to tell them how to fix issues; the consultants tell them the obvious solutions from their books (which may or may not overlap with what the grunts would have told them), and then those solutions are pushed down in the next restructuring.

Where I work, senior management has just discovered DevOps & Agile, and now everyone has been told to do DevOps, but without breaking up the top-down communication style. That's going to work just wonderfully.
There is a chrome extension that brings back the "view original image" fucntionality.

https://chrome.google.com/webstore/detail/view-image/jpcmhce...
By the time you get to the opening up of the internet to mere non-defence mortals, there was plenty of fun.

There was a beautiful sweet spot between the earliest ISPs around 1990, and the end of fun once the effects of the mid 90s ending of NSF's ban on commercial activity fully kicked in. Probably late 90s/millennium as the first dot com boom turned into full on idiotic bubble.
As a very satisfied CloudFlare customer (read "leech", since I'm using the free tier), I have seen your dashboard serve 300 GB of data for me some days, which never reached my server because of caching. It would be nice to be able to see a list of the ten most bandwidth-using URLs for a period, so I can maybe save you some bandwidth in case it's an attack or something similar.

Currently, since I use caching, I never see what consumed the bandwidth, so I don't know what file people are downloading so much.

(P.S. Hey David, long time! I hope everything is going well)
This design is very successful technically for them and I’m sure it increased Ad click through.

The issue was cultural. The articles saying “okay this is too far on making Ads hard to see” and the super hilariously ironic fact that they launched this on the exact day that Basecamp went in front of congress to explain how Google is abusing running ads on trademarks, where this design make it much much worse.
When I was a kid, I had entire recurring plot lines of elaborate day dreams. These days my daydreams are more "realistic". I'm not fantasizing about riding unicorns and wielding ancient magic anymore, but I do daydream about starting my own company.
If your product is SAAS aimed at helping to add authentication to simple apps with low lift, then I think it's a real problem. If I use this product in my product and my customer loses access to her account, then it becomes my problem, and my customer won't want to hear that I can't get their access back.
There has to be a meaningful difference between "Here's something that works for us and might work for you" and "That's wrong, what everyone needs is this thing here"
Open infra accelerates Coronavirus research “near Real-Time”
We will probably see a great rift occur, its really mind boggling. The internet is ... plastic. All these algorithms, and mass herding of the human flock ... and the centralization ... it goes against basic natural laws if you ask me!
I personally think (and hope) the ever-growing issues surrounding data privacy and the constant stream of data breaches we hear about will push people to demand solutions like this and embrace the tradeoff that comes with it. Hope we get more people using password managers. Hope we get more people thinking more deeply about how they can protect their data.

Time will tell what the people want! :)

That's my idealistic way of looking at it. Practically speaking, the burden on developers to adhere to GDPR and other data privacy laws is quite high. You can use this service to store sensitive user data and relax :)
If you have two windows the order shouldn't matter?

Also, Cmd+` goes to the next window, Cmd+Shift+` goes to the previous window, your mappings having a shift in them might be the issue.
> companies can't protect us from a government we have put into power.

But.. the electoral college.
> So Internet security has become a big and ongoing business, which has to be paid for. If I want to have a secure E-commerce site so I can make money, I have buy security services on top of the basic web services: an HTTPS address instead of the original HTTP: — OK, fair enough.

Has this guy not heard of Let's Encrypt? HTTPS certificates are literally free. I was astounded when I got to the end of the article and saw it was published in 2020 and not 2015.
It's social engineering, not capitalism.
How's that even possible? I cannot imagine how you could convince a registry to do this. Maybe a gTLD registry?
that website also contains borderline malicious js making the back button nonfunctional (at least on ios safari). funny considering they felt the need to specifically point out how evil googles strategies are.
DHS Releases Report on Combating Trafficking in Counterfeit and Pirated Goods
Seconding @fpereio's request - I too would like to know more. CSRF handling is painful, so your approach is very interesting, but I don't understand it fully yet.
A Novel Coronavirus from Patients with Pneumonia in China, 2019
Isn't this why product testing, security auditing, and the quality control function that processes customer feedback and complaints have to be in a separate organization that reports directly to the top?

Just like you need a comptroller and auditors for finance.
https://www.traficom.fi/en/services/registration-registrar
I skip Quora as well. It's automatic.
It's even more obvious thanks to Jerry2's "mostly comprehensive history of Google's ad shading and labeling"[0]:
https://i.imgur.com/0RxdzBE.png

Anyone want to guess what their next devious attempt to confuse users into clicking more ads?

[0]: https://news.ycombinator.com/item?id=22108338
Is it possible to include it as a standalone js file? Instead of using npm or yarn?
Is there any plan or agreement for how national borders should respond to plate tectonics? I guess one answer could be "they don't" and it would be possible for a town to gradually move into a different country, or a country to move ever more into the ocean, but that doesn't seem particularly satisfactory.
Why would that make things better, rather than the fairly obvious "worse"?
I scale internet services for a living. I think it is relatively straight forward. I can't think of a product or a market. That one is vastly more difficult for me.
Only with a completely new definition of the word.

Oxford: nature [mass noun] The phenomena of the physical world collectively, including plants, animals, the landscape, and other features and products of the earth, as opposed to humans or human creations.

Where in nature, outside human creations, can I find an airliner, or even a fence? A beaver dam involves no human activity so is of nature. By stretching the definition only a little, one might consider a log cabin and other buildings that use natural materials to be of nature, or at least sympathetic -- wood, stone, earth based, but certainly not steel.

Once you distance yourself via fossil fuel, tools, rules of physics or chemistry and highly complex industrial manufacturing processes the claim becomes absurd. A 3d printer, airliner, drug production or an atomic clock cannot be part of nature -- they exist only through the confluence of man and fossil fuel.
And it became increasingly less of a good fit with each one. By now, it is ridiculously mismatched to the task it needs to perform.

Just leave it to die.
This article reminded me of an intriguing experiment my Music teacher proposed to me and my classmates. He made us listen to some classical music and then he asked us to express what mental images popped in our mind. I realized that we (14yo students) were lacking creativity. Our teacher said that when he proposed the same experiment to children they were much more creative (which is obvious to me now).
By the way, this was a really nice read while listening to Kid A.
Consider that a feature request heard, I'll make sure the product and engineering managers who do the HTTP and cache analytics know about it.

Mind if I put them in touch with you?

And hey again, long time no speak... if you're in London let me know. Otherwise one day I'll make it to wherever you are in the world now.
I mean, that is exactly what WebGPU is, so I am not understanding why you are so determined to complain about it.
WebGPU is a simpler API for doing modern rendering, with less tradeoff.

OpenGL is not simple if you want to actually do useful things with it.
No they wouldn't, because this is trivially easy to MITM. The whole reason CAs exist is to verify the identity of the domain owner, because any random MITMer can claim to be yourbank.com and you can't prove it either way.

Very technically this would be slightly better because it stops passive observers, but in reality I suspect it would be worse because tons of websites would use this broken by design solution and think they were perfectly secure because encryption.

What we really need is to stop making HTTPS so hard to setup. It has gotten better in the last 5-10 years, but you still have to do this whole rigamarole with Apache2/nginx to disable weak cipher suites, setup all the right TLS parameters, etc because the default configuration is so bad. Imagine a world where I just installed an HTTP server and it asks me if I wanted to get a cert from Let's Encrypt (or any other ACME provider) and just did all the setup correctly for me.
So what you are saying is the most common actions, copy and share, were behind a confusing an easy to mess up long press gesture.

A whole lot of people in this thread have never watched a normal person use a smartphone in a UX study.
Bird in talks to acquire German rival Circ
These are great examples of technical details, but they're difficult to translate into impact and business value.

Would 100k SYN floods have slowed me site down? Would it have taken it offline? Would it have caused the site to remain up but corrupt data on the backend for some reason?

Off the top of my head, I would think about offering a "replay attack against your staging infra" feature on higher tier plans. The price point should help prevent someone leveraging you as an attack platform, and customers will be able to understand the value that you're bringing to the table in a much more practical way.
If a person is wealthy and doesn't need to spend that amount during the entire duration of Z, since they have other wealth to spend, they would likely choose Z for the higher return over the same time period.

So only a relative poverty would encourage the person to choose A.

Assuming they have unlimited life span. If not and their lifespan is uncertain, then the value of Z is reduced by the chance of not surviving long enough to profit from it.

If they can invest A and get a higher return than waiting for Z, then A is a more profitable choice.
And how do you find out if they turn out to be right, if you dismiss them immediately as "ridiculous"?

That is not how science works. There are other ways of judging if a theory is worth exploring than just a "it must be testable right now".
I'd bet that Contributor will work there.

https://contributor.google.com
Indirectly, yes. Directly, not yet.
Maybe describe how big the attack was in a communication with the customer? ie: how many connections per second, bandwidth used, etc? If you could trace the attacker and prosecute them, that you be a lot better, of course (and possibly the way that would gain the most confidence). In other words, if any of your claims could be confirmed by a third party, it would be good. Or you could propose to them to be hit by the attack for a set amount of time before you move in.
I believe many people are really wanting improve their environmental impact and thus unfortunately carbon footprint is not a good enough proxy.

Water use and water pollution are just two factors that are probably more significant, and have a broader, faster impact on biodiversity.

For example:
Growing 1 almond (a low emission nut) uses about a gallon of water.

Dairy cattle have a terrible impact on waterways with run-off and animal wallowing.
I have been working designing both hardware and firmware for autonomous robots for the last 6 years.

When asked if a problem is hardware or software you provide the same answer if someone asks you if you are a god... you say YES!
I have skipped quora links for so long that I don't remember why I started doing so. It's just a synonym for not worth clicking.
There is not such a lack of public voices that we must give every single one, even though of absolutely awful people, an equal hearing.

There are many, many people who would be more informative to listen on this topic. They could have been given the space to write an opinion article in this prestigious newspaper. It didn't have to be the sex pest. We missed out on hearing a good person speak on the subject, because a bad one was given the opportunity instead.
They are both pretty light and riproaring. Definitely novels of ideas not characters, fantastic language and clever plots.
same. must be an android thing.
I feel your pain, I mostly use duckduckgo these days so I'm not exposed to this behaviour too often but sometimes I don't find what I'm looking for and check Google instead. It's really frustrating.
Looks like Go v2 might get decimal floating point numbers support: https://github.com/golang/go/issues/19787
Sounds like you need another job.
Agreed it would be a problem for a developer to use Userbase as is and not understand this is a tradeoff. I take it you think it's not clear this is a tradeoff, which is an issue, duly noted :)

However, your customers also don't want to hear that you were hacked and all their sensitive data is now in someone else's hands. We offer easy-to-use protection from that increasingly common scenario.

You (and your customers) also presumably don't want you to break privacy law regulations storing data. We offer a super simple service that helps you there.
"Usually stable for a week" does not sound great..
MLLW is mean low low water. It's the average of the lowest tide each day at that location.

That's the standard used on nautical charts and also used for tide charts for the depth of the tides each day.
Right, and that's the problem. We just had a massive thread about th importance of good landing pages.

The package home page needs a README with links to wherever the good stuff lives.

Look at how GitHub does it.
> Firefox afair only supports PulseAudio

The default compilation option is PulseAudio, but some distros (eg. Debian) also enable ALSA support. On OpenBSD Firefox uses sndio.