skysight-inc/HackerNews huggingface dataset:
Cloudflare is like the TSA for the internet, I'm not convinced it needs to be as aggressive as it is. And yes I know websites have some control over how aggressive it will be but much like Reddit-moderation policy it's choosing the safety over everything approach, which hits enough false-positives on the edges to be a serious problem.

Cloudflare is very much anti-internet. And I'm a very security-obsessed person. Just like Reddit I believe we need to dial things a bit closer back towards chaos like a venn-diagram (safety)[x](chaos) there's a balance and I believe the internet is worse off when this balance is out of wack.

There might be some awful stuff on sites like 4chan but it also generated a ton of the memes that later filtered down into mainstream internet culture. Culture and innovation often happens in the chaos and fringes, which is an area I believe the world is becoming completely intolerant of in some attempt at idealism. But there are real sacrifices in between (ie, the mostly harmless stuff getting tagged as bad guys).

We need to be better at calming down and embracing the chaos, pushing back against FUD, and maintain a good balanced default. That chaos and flexibility is what originally made the internet great and endlessly promising.

Based on the various posts I've seen from Cloudflare founders on here I'm not convinced they are taking this problem as seriously as they need to be.
> Ironically, I get electronics that are in great shape and undamaged from eBay, not the same experience from Amazon.

I've had the same experience as you. I'm not sure what the cause is (maybe there's lower volume, so scammers don't use eBay as much), but I've bought things like top-of-the-line noise cancelling headphones refurbished at huge markdowns on eBay and had zero issues, but I've not had great experiences buying similar things from Amazon.
Including "running Tomato" is a great step. Too often, these warnings, which a great deal of the time are only relevant to machines running Windows, do not include "running X" in the title, so everyone, even those not running X, have to read the article to ensure they're not vulnerable. I believe journalistic integrity demands that the OS/App/whatever appear in the title.
Asking Good Questions Isn’t the First Step to Enterprise ML, It’s Step 0
It's not always faster. There are plenty of performance and usability issues with AMP pages, not to mention all the extra development effort needing to maintain a different version of the site just for a few mobile browsers.
Your image doesn't show the same experiment as the twitter "article" does
first paragraph: The Amazon billionaire Jeff Bezos had his mobile phone “hacked” in 2018 after receiving a WhatsApp message that had apparently been sent from the personal account of the crown prince of Saudi Arabia, sources have told the Guardian.

So, not snapchat, but whatsapp. And it's quite surprising for me. So, Saudis have 0 days which work on whatsapp on iphone (I suppose Bezos uses iphone)? I mean, FB and AAPL, which both can afford tens of billions in security research, were pwned by saudi 0day? hmmm...
elon has entered the chat
So...to me this article illustrates the dramatic differences in objective and mentality between bootstrappers and VCs.

This VC looks at this idea, figures out that in order to own the market and make $fuckton, they'd have to spend > $fuckton. Decides to bail.

As a bootstrapper of businesses, I look at this case study and go "well yeah of course it'll take $fuckton because you're haven't focused on a narrow enough niche". Which of course they haven't because you can only make $shittons from niches, not $fucktons (where $fuckton is up to an order of magnitude larger than $shitton).

It's a very different set of expectations. $idea might not be investable as a VC, but if you can really define a specific niche, get a toehold, and patiently build from there, $idea might have merit for a bootstrapper.

(All that said I don't think this particular idea has legs based on the reasons identified in the "Regarding competition" section and also from my own limited experience in the music space).
I really love articles like this. There's so much value in quickly summarizing years of experience with proven tools.

This writeup in particular is great because it starts with simple architectures and progresses to horizontal scaling with a load balancer -- it really is 75% of what you'd need to actually implement a production-ready application backend, with clear links to get the other 25%.
I'm American and I find Lidl to be absolutely ghetto; Aldi only marginally less so; but neither of them as scary as Netto! A lot of my friends shop at these places, because they're really cheap, and if you don't actually care who gets your money (or you can't afford to care) it's sorta like why not?

In their favor I will say that there is less choice of products than in, say, a Spar or Rewe (mid-market grocery chains) and thus shopping, especially for a family, can be both cheaper and more efficient. At least in Berlin there's also Edeka everywhere, which is sort of cheap-ish but not so soul-crushing.

I guess I'm pretty far off topic already, but I will add that I find it weird that there's no equivalent of Whole Foods in Germany. You have some chains of "Bioladen" like LPG (yuck) or BioCompany (pretty good IMO) -- but nobody's got that magic Whole Paycheck mix of yummy food, organic and also gourmet stuff, and that sort of vaguely aspirational shopping experience while also having a big fat parking lot.

Or maybe this exists in Munich?
That's a very good point.

It's so hard to get people to write good requirements that we often overlook (or rather, won't look at it) as a solution.

Rewrites are easier with good requirements. They're a constant stream of bad surprises without them.

It's possible, while refactoring, to begin to collect those requirements, in the tests if nowhere else. But it's not a given.
To me, "telemetry" is a violation of boundaries. And I don't think it's necessary to provide legitimation scenarios for not wanting that.

For decades I have used personal computers and it was my machine and nobody constantly observed what I was doing with it. With "telemetry" I'm not sure about the relation anymore - do I own the machine or does the machine own me? It's a loss of control, I'm not able to make the decisions anymore about what happens and what doesn't.
An alternative? This service uses both Cloudfare and googleapis. What's that all about?
The hall of fame includes "Tetyais" and "Boyadt".
Sorry, you're right, I misremembered. You solve the CAPTCHA to get tickets, you don't do work.
How you got your customers?
Because some search terms get interpreted by the browser as trying to hit a specific site. If you prepend the browser probably won't make that mistake. I tend to use !g on the end of my search terms and hit this every now and then; I feel like I've hit this issue in Chrome more than Firefox.
You need initial capital or connections. Right now in Canada the well connected are flushed with free money from the government. Just say you are doing AI or add AI to the company name (nope, elasticsearch document scoring recommendation is not AI!) and you get millions from the government to push your way into the market.
My personal basics are Adnauseaum (uBlock origin based, makes exceptions for non-tracking ads, and clicks all tracking ones to pollute data), Decentraleyes, HTTPS Everywhere, and multi-touch zoom if I'm on a 2-in-1
They do work well for the vast majority of people. Only on HN do I ever see people complaining about cloudflare/captchas/etc.
But the marketing is nonetheless deceptive. Apple’s practices are much less stringent, and their cooperation with law enforcement much greater, than their marketing and even their privacy pages suggest.

This is a crappy place to turn around and tell your customers, “should’ve read the fine print!”
It makes it so you solve thirty times fewer CAPTCHAs, which is not nothing.
Show HN: C++ starter code for building ncurses apps using Bazel
Is the pysam API more stable now? Years ago, I had to stop using it because the API has changed between versions too much.
Not sure we can blame the current leadership for the last 30+ years of issues.

That said our current govt will surely follow the path to the most profit for big pharma. Of that I have no doubt.
Is it too much to ask for a real URL, not some garbage link?
... only vulnerable if the default has been changed to ALLOW remote administration, and are using the default admin:admin or root:admin credentials.
If you don't need gnu extensions, I've found mawk to be 4x faster than gawk on some scripts
It is easy to explain: unit tests give a documented proof that you care about code robustness. It is used more for social and psychological effect than for its advantages. In fact, outside a few domains, unit tests make it harder to evolve software because the more tests you write, the harder it is to make changes that move the design in a different direction. This is, by the way, my main problem with verbose techniques of programming: the more you have to code, the harder to make needed changes.
Skylo raises $103M to affordably connect IoT to satellite networks
I wasn't speaking of Greenwald specifically.

But the problem is in your comment 'improper collaboration'.

Who decides what is 'improper' or not? I'd imagine the Republicans think almost everything Democrats do is 'improper' by some measure - can they steal and then publish information?

This is very grey and needs to be cleared up or it will be a really ugly new kind of information war.
>The US today has a tight labor market which will eventually drive wages up if it persists long enough. Germany on the other hand has similar employment statistics but they did it with the Hartz reforms [2]. The unemployment stats look great because you can get a shitty low wage job [3].

Meh, that flies in the face of facts. Real wages in Germany had been depressed for long, not least due to unification, but are picking up: https://d3fy651gv2fhd3.cloudfront.net/charts/germany-wage-gr... and there's not reason to believe that is going to stop anytime soon.
Hackernews is one enormous echo chamber where people will naturally find reasons to prove their conformance to the norm. Your statement however matched what other people from germany told me. Also there is an almost regular post on HN about how self driving cars wont happen, usually coming from german carmakers. Those sound eerily identical to articles i used to read where they explained why electric cars wont ever happen, and so on. Making great drilling machines, construction machinery and maybe electronics is not innovation. The echo chamber doesnt understand such topics because its too busy trusting politica driven “innovation stats”. Perhaps they are the kind whom buy a new car because it has fancier leds as opposed to actual new tech.
So you're saying that people SHOULD care about backups now? Which is it?
I read on Reddit that Chinese New Year is the largest regularly occurring human migration event in the world. Millions of Chinese people gather on public transport and planes To go home to celebrate. It’s in a few days I think.

Also I’m not sure how the CDC is preparing for this under 45, but given the state of the federal government I would guess it’s less prepared than the days of the Ebola scare.

Hopefully things will not be too interesting. I hate it when things are interesting.
As an advertising company, where are they losing money?
It's a self-fulfilling prophecy. Third-party shopping results are shown on page one and the manufacturer's store is on page two, and people rarely go beyond page one so naturally they will click the Amazon results. This in turn feeds the algorithm and reinforces its original assumption.
Oh, oobee doo

I wanna be like you

I wanna walk like you, talk like you, too

You'll see it's true someone like me

Can learn to be like someone like you
Forward $old to $new

Setup a filter in $new email that labels all mail received on the $old address, so you know where you need to update your email address

Keep this until you don't have any more emails coming in with that $old label for ... however long you're comfortable, 6 months, 1 year, forever. Unless there's a reason you need to decommission the $old one, I'd just leave it there
That would be a huge mistake for Apple, and I cannot imagine it passing the scrutiny of anti trust regulators.
Are we one step closer to pilotless commercial jets?
You're right, edited my comment to be more clear that this is my opinion only. I don't use an anonymous username on HN because, as you saw in my profile before searching me, everything I say reflects my opinion only.
ctrl+shift+p on firefox
A capital gain of $200 for a single transaction is plenty for day traders who do it in their spare time. This is still a personal transaction, even if you happen to profit from it.
I Quit New York
> However they've been argued and asserted, and there is basis for a fair-use defence of virtually any meme use, so long as it's not injurious to the original.

Yeah, fair use definitely has been used successfully. And in many meme cases I'd agree the meme is not necessarily injuring the original. (Though note, lack of injury is in no way sufficient to justify copyright infringement.) But I would speculate(!) that meme images being irrelevant to a photo undermines the fair use defense, that using a copyrighted photo to comment on something other than the subject in the photo means that use of the photo is not "commentary" relevant to the photo that supports fair use.
Yes, but the Brazilian Constitution is basically a "suggestion" for Jair Bolsonaro, even more than the US Constitution is a suggestion for Donald Trump. Clearly the Brazilian Constitution does not have the protection of force, which is ultimately what gives a law its existence.
This sort of tackiness in Windows 10 is one of the primary reasons I've switched back to macOS.

Windows 10 is a great OS in many respects, and I like the hardware story more than in Apple world, but I just can't get over Microsoft's need to invade my workspace with tacky, distracting, irrelevant ads.

The first time I saw a "Candy Crush" ad in the Start menu (of Windows 10 Professional, not Home), I hoped Microsoft would get enough negative feedback to see the error of their ways.

But it seems like they're going the wrong direction.

And yes, I'm aware of the LTSC version of Windows 10. I have no way to install it legally.
Get some window screen from your local home improvement big box store.
> Google is deprioritizing sites without amp in search to force them to use it.

Isn't that just a protection racket?
> I was reading Stripe and Braintree's restricted businesses (https://stripe.com/restricted-businesses) and saw "unauthorized sale or resale of brand name or designer products or services". If I own something physical there should be nothing telling me I can't sell it.

Property rights also apply to Stripe, in that the company, as an asset itself, can be restricted by its owners to conduct business in some certain way.

And I wouldn't be surprised if Stripe's policies will have more to do with the credit card companies than Stripe. Then, further, the credit card companies act as a cartel by using the government to prevent anyone else from using property to create a competing service by making the ROI on creating a competing service worse than other investment opportunities, or even just blocking it outright under some nebulous "shut down for accounting irregularities" or "insufficient consumer protections" nonsense.
The number I've heard, don't ask me from where, is 16 ms.
Over population and high density building

I spend an ungodly amount on weed abatement at my farm. We could also use goats for weed eating.

Just because we have a lot of surface land doesn’t mean it can be inhabited ..ca is building indiscriminately. Human settlements next to wild areas with fire hazard is the dumbest thing.

With a clueless young voting population, a state agenda to hound more and more and a desire to get rid of CEQA makes people forget that land doesn’t not always mean dwelling. Dwelling also includes environment and its limitations.

We are building homes ..and at high density..where land and forests should be allowed to be wild and untamed. There is a delicate balance. Forest fires are cyclical and periodical. This happens everywhere (think Scotland and heather burns) and controlled fires are essential. You can’t do that if there are real estate developments everywhere. There is such a thing as ecosphere and we must remember that we are part of it.
Lattice didn't exactly buy SiBeam. They bought the company owning SiBeam.
DDG uses an aggregate of results from various search engines. I really do hope that at some point (if they haven't already) they build out a native search team. I know its hard computer science, but they really need to start rolling their own search engine
NoScript breaks some sites but makes many run faster. Everything defaults to blocked, but I've marked some known ad servers and Google/Facebook trackers as specifically blocked so I don't accidentally unblock them.

Also, setting up custom searches is very nice: when editing a bookmark, attach a keyword to it and put "%s" in the URL. If you type the keyword first, the rest of the search string will replace the %s. I use it for the usual Wikipedia search, but also I've set "@r tf2" to take me directly to the subreddit called tf2, and @i immediately throws the query at DDG's image search.
This is taken as axiomatic by people who believe in the efficient market hypothesis, but I don't think there's much reason to believe it's true.
If this is true it is incredibly disapppointing.
In case someone is wondering how they hacked Telegram.

They used caller id spoofing and a telco vulnerability.

1. Change your phone ID and try to login on Telegram;

2. Telegram will send an SMS with an authentication number followed by a phone call to the actual mobile phone;

3. To avoid the message going through, spams the victim with many VoIP calls;

4. The Telegram call will be recorded on the missed call voice messages;

In Brazil, you can listen to the recorded messages calling your own number. Surprisingly, the telco only checks if the calling number was equal to the called number.

5. Again, with the call id spoofing, call your own number.

6. Now you have access to the victim's Telegram (past conversations and contact list)

7. ???

8. Profit.

EDIT: I translated part of the transcription used to accuse GG in another thread.
Sheffield United 0-1 Manchester City – Premier League – FootballGH
I think this is a deeper problem, one with the limitations of personalized search itself. In the initial days people were picking up relevant stuff from the search results offered by Google and the feedback was helpful to improve the search index. Nowadays, people click whatever is the first result so the only feedback obtained is that results are great. Everything is so highly optimized for clickability that users are just not able to think and provide feedback.
My guess is this gave them the ability to access anything WhatsApp could access with a code bug in the application and so maybe a Facebook issue more than an Apple issue.
So MBS or someone in Saudi intelligence is somehow behind the leak of the photos to the National Enquirer, and the subsequent divorce of the Bezos?
to go a little deeper, corporate charters set out the values and goals of the company, as amended by the board from time to time, so it's whatever the (amended) charter says (it doesn't have to be solely profit-seeking). executives are judged by their ability to deliver on the goals of the charter.

baords are largely controlled by the various (professional) shareholders, and most, if not all, of them explicity seek profits above all else. that's one way markets get dominated by profit-seeking companies.

the other common argument is that in capital-oriented markets, not-primarily-profit-seeking corporations are at a competitive disadvantage over time, as the extra profits of greedy corporations can push them faster/further along the technology adoption/innovation curve (or economies of scale/scope).

so it's hard for such companies to survive. i don't think in practice that this is a dominant factor in competitive markets, but it's an argument often made (in business schools, for example).
This is part of a workshop series[0]. Does anyone know if the talks/shops will be recorded?

[0]https://appliedmldays.org/workshops
"My claim was that it is nothing out-of-ordinary". Well I guess will agree to disagree there are pretty prominent cases of very capable people trying to do a project in C++ and failing and then leveraging Rust and actually delivering.
Apple may still be controlling the encryption keys but this says nothing about sharing the keys if compelled to do so.

> Can you quote the part of the article that states that Apple must give China private keys? Can you find a citation where a third party has found proof that Apple changed the iMessage architecture?

Apple is smarter than to put some text on their official website saying that the Chinese government has access to all your data. The key here is that their Terms and Conditions state that they operate "...in accordance to local laws". This is a cop-out legalese way of saying "We abide by whatever the Chinese government tells us to do".
Funny you say that, I was just thinking the same. Their recent user hostile moves seem like desperation more than part of an evil plan.
Wouldn't be that surprising. Zero days are available to the highest bidder and Saudi princes have deep pockets.
> I wouldn't be surprised if Stripe's policies will have more to do with the credit card companies than Stripe

That's what i figured, which is why I included braintree to not throw Stripe under the bus alone.
Plot twist: Google insiders concerned with the consistently unethical practices of the company are working in secret to undermine the viability of their primary revenue stream to save the world from google.

... Fiction aside, since so much evil is done by accident and indifference it's only fitting that some heroics be done by similar mechanisms.
Then you admit income inequality isn't what is important here. but absolute quality of life.
Definitely a lot of rage about this on twitter at the moment. Early customers feeling betrayed.

https://twitter.com/therealfitz/status/1219656757242474496
4. Mirror the contents of this Dark Web 3.0 on a Light Web 3.0 accessed using privacy-protecting technologies like Tor to make sure it remains accessible. Obviously this won't help for logging into Twitter and your Fecebutt account but it should be fine for the nginx documentation.

The underlying incentive here is that centralized websites are slow and vulnerable to DDoS. Massively mirroring their content is the solution, and it's what Cloudflare does. Let's do it in a way that protects human rights rather than taking them away.
Konqueror was even further ahead. After you searched for something via search engine and then opened a page, it offered you buttons which could be used to search for those same terms on the result page. Very useful, but never saw it elsewhere.
You can't. And even if you could, the automatic updates could change things later so you couldn't.

Several governments and their regulators in the EU are currently at various stages of looking into this issue, because it may be literally impossible to be GDPR compliant if you're processing personal data on a system running a Windows 10 edition that requires this stuff. And that's just the literally-breaking-the-law part as it relates to personal data in general. You might also have contractual obligations like NDAs, or perhaps some more specific legal obligations to protect data if you work in healthcare, finance, national security, etc.