skysight-inc/HackerNews huggingface dataset:
For clarification sake I suspect nobody is talking about a stand alone, run-on-the-mobile-OS, never to communicate via internet application. Idk for sure (wasn’t worth the investigation), but I’m betting their “app” is just shorthand for a web service that looks like a stand alone app through the UI.

But regardless of the architectural nature of their (Shadow Inc’s) product it’s worth noting that high performing, mission critical software is challenging to do correctly. That is to say doing it with feasible, adequate solutions for security, availability, performance, testing, and usability from the end users and administrators perspectives is a whole world of responsibility for an engineering team, even if the objective seems trivial in casual conversation.

People like to characterize software projects as “easy” and almost never know the scope of what they’re talking about. Idk anything about Shadow. But judging by their lack of effective consulting on this project, and consequently allowing such a terrible product to be released, they are bad at what they do. This whole incident should go down as a lesson to folks to not screw around with silly budgets, inexperienced teams, and unrealistic timelines when looking for quality software. That the DNC or whoever doesn’t know any better is a sign of the complete cultural ignorance that otherwise functional adults in this world have about the seriousness of software as any solution to any real-world problem. Everyone is a failure in this case: Shadow, the DNC, even the commenters still misunderstanding things on this thread.
It syncs heroku config variables into our secrets mechanism: https://fly.io/docs/secrets/

We’re troubleshooting your app right now! I’ll send you an email shortly.
If your CRUD can't handle 1681 users, then you're almost certainly doing something horribly, horribly wrong.

Like, that's "LAMP stack in 2001 hosting someone's blog about cacti wearing sweaters in Duluth" levels of scale.
Macy's pulling out of weakest malls
Landlords do not set prices. If you owned property or a rental you would know that.
With these sorts of marketplaces, the major challenge is trying to get small landlords to list. Of course the sites want their listings to be legitimate, though, so there's a tension between making it easy for posters and getting enough information and verification to be able to detect and weed out scammers.
Cloudflare and Remote Browser Isolation
You should have a donation link. I've been fiddling with gaze off and on this eve. I love that I can simply write a quick test under my (defun ...) and then :w, which is already my habit, to see if it works. This erases all the hubbub I have to do in between saving and testing. A perfect niche. Gaze exactly soothes a common pain point.

It is going to be part of my workflow, and at least worth a beer or highly caffeinated beverage.
Because incompetence is vastly more common than malfeasance?
The problem is that scam posts are frequently just copied legitimate posts. The only thing we found that worked was to force communication to go through a messaging proxy to run classifiers on those messages.
They probably could have done it in google forms for free. It’s absurd how much they over complicated it.
I can appreciate the quip, especially given my curmundgeonly entry. But the point remains. The shell needs to be able to call any command on the system reliably. Even aged old counting methods. At no point in that loop would the expr subprocess return other than zero. Try to break out of that loop with that bash switch.

One should not rely on these magics, the ones that alter runtime behaviors, without truly understanding what you're after and what you're writing. Or mostly understand. They're fine and good if you have narrow routines with a very strict focus - "I'm in, I'm out, bang."

The best switches available to the shell without a bunch of feature and package and library this or that bloat are exactly

-x
-n

That's all that you need to ensure that your scripting is what you need it to be. Introduce the magic after you've written the thing. When it's ready and it passes your tests then test it again.

Every single utility and package on that system is at your fingertips. Demand accuracy. I do.
For me, this behavior is controlled through the browser. Firefox calls it "Custom Tabs" on the General settings page. Firefox preview calls it "Open links in apps".

If that's on, you get the mini-browser in the app, otherwise links go immediately to the full browser. (Just tested with Gmail, YMMV)
Thanks this looks promising will take a look
Ok. So, this is just a data collection app? Trying to have casual inexperienced users accept/trust a developer certificate? Both PINs and 2FA? This is beyond embarrassing.

"...Two people who work for Acronym, speaking on the condition of anonymity because they did not want to risk their jobs, acknowledged that the app had problems. It was so rushed, they said, that there was no time to get it approved by the Apple store. Had it been, it might have proved far easier for users to install.

Instead, the app had to be downloaded by bypassing a phone’s security settings, a complicated process for anyone unfamiliar with the intricacies of mobile operating systems, and especially hard for many of the older, less tech-savvy caucus chairs in Iowa.

The app also had to be installed using two-factor authentication and PIN passcodes. The information was included on worksheets given to volunteers at the Iowa precincts tallying the votes, but it added another layer of complication that appeared to hinder people..."

https://www.nytimes.com/2020/02/04/us/politics/iowa-caucus-s...
As someone nowhere near California, I am hoping.
Thanks, k8s would be Infrastructure I guess?
Does anyone know of or can think of a use for (x is var y)? I'm assuming there must be, but I just can't figure it out.
In Germany, FF still has 25% market share on desktop (tbf, the numbers look atrocious on mobile, but still).
I'm not really being snarky - it just seems like it.

Lots of people really thought Windows Mobile was great (including here on HN). Meego was great too.

It doesn't matter.

The point is that it's unclear why Intel (a company that has failed at every consumer focused business they have ever tried) would have done better with Nokia than Microsoft did, given that MS has had considerable success in consumer markets, already had carrier relationships, had developer relationships etc etc).
CAS is the full round trip time, the controller does not care about individual components of the latency just the total latency. End users just see the CAS number, but what it’s repressing under the hood is not simply what’s going on inside a DIMM, which is why the numbers get higher with higher memory clock speeds.

Further, MB traces are just part of the story. It’s the physical distance traveled from a CPU’s memory controller to the furthest physical cell location on a chip which is significantly more than 10cm and it’s a round trip timing. Even just the physical DIMM’s are 13 CM wide.

A more accurate ~25 cm each way = 50 cm total ~= 3ns out of 6.56ns timing for a DDR3-2133 & CAS 7 ~47%. CAS 18 DDR4-4600 is 7.82 ns or ~40%.

PS: As to progress, DDR2-1066 at CAS 4 was 7.5n where CAS 18 DDR4-4600 is 7.82 ns that’s some progress.
Wait until WebAssembly hits the scene in a big way.

Browser support is already in-place, now it's on to adoption.

When you have binaries running in the browser it's going to be a lot harder to block advertisements.
As a beekeeper who loses half his hives every year, I can definitely say that Colony collapse is caused by varroa mites. You can easily see them on the bees. I have tried all kinds of treatments for varroa.I don't want to argue with those who are convinced that pesticides cause colony collapse, but I am certain, for me, it is varroa.

I am waiting for this treatment is available. I spend a thousands of dollars a year to restock my bees.
Jeez... it almost seems like social justice warriors could be a false flag operation by virulent racists, with how effectively they can turn sensible moderates against everything that they stand for.
That's a standard module included in ejabberd. It may not be enabled by default in others, such as prosody
Small sites can put in the effort to make deals with individual advertisers and bake it right into the page.

Usually when I or others bring this up someone says: but then you are leaving behind the value of serving customized ads for each user.

To to which I counter:

- ads baked into the page would probably slip by my ad blocker, and more importantly, as long as they are relevant and not annoying I'd probably not even care to try to get rid of them. There exist a subset of ads that are absolutely ok with me and I'd be happy to leave them visible to support smaller sites, and another subset of ads that I just don't care strongly about.

- I strongly believe that the value of customized ads has been overhyped. And with that I mean to the ad buyer, not to Google: I've only seen relevant ads from Google once or twice a year for the last 10 years or so.

- there should be a value in knowing that your ads don't end up next to a "hit the monkey scam" or next to another dubious ad. A good seller or sales organization can make this obvious to ad buyers.

- for a number of sites I would not only be OK with but also happy to pay for individual news items (think smaller newspapers from Nowhere that gets linked in social media etc), as long as they don't insist on selling me a subscription instead of access to this single page.
Symmetric airfoils (which do exist) are considered to have a centerline in the obvious (symmetric) place, but this doesn't have anything to do with angle of attack. For various reasons, aerobatic planes sometimes have symmetric airfoils with an angle of incidence of zero—that is, the aircraft centerline and airfoil centerline are parallel.

https://aviation.stackexchange.com/questions/7560/what-are-t...

Angle of attack is a separate issue.
I think I would agree with you. London and NYC have been immigrant destinations for much longer than Toronto has. London of course draws its immigrants from Commonwealth countries. NYC draws immigrants from all over.

Toronto's immigrants are much newer and Toronto's reputation for multiculturalism is actually only a few decades old (there hasn't been time for a deep multicultural identity to emerge). Multiculturalism entered the national conversation in 1971. In the decades prior to that, Toronto was very much still a stodgy Anglo-Saxon enclave, with Montreal being the multicultural hub of Canada.

That said, certain large global demographics are underrepresented in London (east Asians for instance, but not south Asians). Hispanics are underrepresented in Toronto.

I feel NYC is the only city in the world where most of the world's major demographics are on balance well-represented.

Singapore is actually not that multicultural (there are only four major races/cultures). I would say it's more international than multicultural, because the residual diversity come from people who are expats rather than immigrants.
Only allow individuals to own, not companies. If you want to let a unit, rent control with rate increases permitted annually that peg to inflation. Mandatory reporting and regulation through the local housing authority.

That’s about all you can do if there’s no will to build but you don’t want corporate or private landlords gouging renters when demand outstrips supply. Life ain’t fair, everyone isn’t going to be able to live exactly where they want to. Scarcity leads to rationing.

Disclaimer: Landlord who charges reasonable rents and tries to upzone where I operate.
Haha, I love watching classic third world corruption in the West.
I'm sad that this hasn't received much more attention from the HN community - it is shocking in a wonderful way.
In electron the UI javascript is running in a separate process than the node javascript. They can communicate through Electron's IPC channel.

I wouldn't be too surprised if it could be exploited, but it's not as easy as require('fs'). Instead you have to send messages through the pipe and you'd have to know how to exploit the handlers at the other end in the NodeJs process.

https://www.electronjs.org/docs/api/ipc-main
If a magazine i sometimes read because its free closes shop because they raise prices and nobody wants to pay for it...

I probably feel nothing because i was only reading it because it was free, and if the price is no longer worth it that's that.

People always bemoan how x is going to die on the internet because of changing trends in advertising. Fact is many of these sites provide ok at best content, and are dying because the value they provide doesnt equal the cost they want to charge.
Bicycles on the other hand...
They are optimized, yes, but from what I recall from reading the JVM code a few years ago, some optimizations don't get applied to those reads/writes. For example, summing two arrays together will be vectorized to use SSE instructions while doing so through Unsafe won't [0].

[0] https://cr.openjdk.java.net/~vlivanov/talks/2017_Vectorizati...
In Sickness and in Health: Dating Apps in the Cancer World
$50000 for a mission critical, scalable app? They got exactly what they paid for.

I would have written an app that doesn't work for only $25000
Here in the UK we have a chronic issue with a lack of new housing developments, alongside issues like poor rental conditions. We also have a very strong "landlord lobby", and a sizeable proportion of landlords in the ruling party, which get in the way of fixing either issue because it means less return for landlords from the assets they currently own.
At the height of Intel bribery scandal Intel was directly transferring $750 Million per quarter back to DELL.
I use a Ring doorbell and alarm, actually. My comment was explaining why someone would use a system like Ring. I use them over a self-hosted solution because of the professional monitoring. I don’t use their cameras in my house, though.
I figure, if you ever want to attack a Rails app (white hat on), go through the CVE list and try every vulnerability. There's been so many with exploit codes and it's dubious that every single service is patched.
Ask HN: Do you need a free logo for your business?
Hi guys!
I'm currently trying to build a solid logofolio, so I'm willing to design logos for anyone who needs them. It gives me a chance to build my portfolio and test out my skills :)
I'm offering my logo services for free, but you may decide to throw some money at me if you really like my work ;) And if you don't like my logo, you can simply not use it. Also, if you have a website, you may get choose to get a backlink when I upload the logo on my portfolio :D
Feel free to request a logo as a comment here or from my website (https://creatiffish.com/contact/)
I find the whole idea that it matters if people are offended to be pretty infuriating. Not it does not. Intent matters. Whether one of an infinite number of readers was offended is irrelevant. There will always be at least one.
Take a cue from Uncle Bob (Heinlein) and start working on his list:

A human being should be able to:

- change a diaper

- plan an invasion

- butcher a hog

- conn a ship

- design a building

- write a sonnet

- balance accounts

- build a wall

- set a bone

- comfort the dying

- take orders

- give orders

- cooperate

- act alone

- solve equations

- analyze a new problem

- pitch manure

- program a computer

- cook a tasty meal

- fight efficiently

- die gallantly

Specialization is for insects.
In the reply, I'd probably include 1x1 pixel hidden tracker image or maybe a legit looking logo below signature and get the client ip of the scammer's computer when it does http GET on it. The ip can tell more about where they're located.
I've really wanted one for a while, but they're so expensive. Maybe one day.
There is a list of examples on the wikipedia article for the subject https://en.m.wikipedia.org/wiki/Malvertising
Are you asking how they currently do it, or how it could theoretically be done better?

If you're asking how they currently do it, I guess by sending the password, but I don't really know.

One way that would be slightly better than that would be to send the hash. That's still a replayable token, but it has the advantage that if someone does password reuse it's not immediately replayable against other websites. Ideally the hash would be salted (maybe with the username and some teamviewer-specific constant). Even better than sending it would be to use a PAKE, authenticated with that salted hash.

Maybe an alternative would be some sort of asymmetric key system, where each device gets its own keypair. I guess it depends on exactly what functionality is needed. Does it need to be able to be setup offline, or can it be setup online, then go offline for further use?
Of course we'd say "except it doesn't affect Apple"...

If there's a privacy gap, (and Apple is actively exploiting that gap)

When Apple patches it, (while leaving it open for themselves)

They'll get called out.
I disagree that bernoulli's principle demands equal transit times, but I think it is an irrelevant point.

I believe the key fact is instead that the outer flow is forced into a curve, even though the straight path is technically free (no sail to stop it), because a vacuum (low pressure zone, anyone?) would be generated between the outer flow and the sail.

Hence, the sail needs no thickness to generate its lift, but only to separate the inner and outer flow.

Moreover, due to the viscosity of air, the area of influence of the sails goes well past the immediate layer of outer flow, but rather the layers of outer air closest to the sail have a similar "sail" effect, to a lesser degree, to adjacent layers of air.
I'm Testing in 2020
That's only true if you actually need to access more than a few elements at once. And if you never need to insert/delete to/from anywhere but the end.
The problem's showing up as 'Ad blockers', but the reality is that it's increasingly becoming understood to be a problem of tracking, targeting, fingerprinting and generally being bombarded by underhanded, gold-toothed, second-hand car salesmen crying out, "Trust Me!"

No thanks. Not ever.

There are application level firewalls (such as Little Snitch on macOS) that can cater to applications trying to do adware: allow the content, reject the ads. On Android you can install AFWall+ or NetGuard. On iOS you have Lockdown.
There's also pi-hole which will get more traction outside IT as this ad war continues.

The problem is a circular, chicken and egg issue. Ad companies think of news ways to track, fingerprint, monitor and inject ads, and the market will respond with new blocking techniques.

The only unique position the goog has in all of this is the 'value add' that its non-revenue products bring to the table. However, more people are looking at alternatives to those as well.

Personally, I look forward to the day that I can pi-hole google.com... and I know that your company will fight to abuse this right every day (typically with recaptcha).

Just like it's not personal to your company to try and vacuum up every single bit of data about me, it's not personal to me that I look forward to the day the goog/Big Brother dies. What was a beautiful thing: the original google search, has long passed, imho.

If a publisher wants to have ads... No worries, but if it reports back to ANY entity other than themselves AND I can trust them to not on-sell that data, then yes, sure: I'll ignore the ads that I'd never click on anyway. So for me, the only sure fire way I'd find ads acceptable these days, if those ads were text-based, used no javascript or other css/url sniffing tricks.

Until ad companies drop the idea that each person MUST be shown an ad, then there's some hope of progress. Truth be told, of all the ads I notice these days, it's the old paper billboards on the road side.
I was thinking more of the simplified HTML/CSS specification for AMP. Or at least that what I thought AMP was. I did a quick google search, first link was to the Google Amp guidelines, which has a link to ampproject.org. I can't get there, the browser won't let me because something is wrong with their SSL certificate (the cert's common name is firebaseapp.com, and it is serving up on amlpproject.org).
But your scenario doesn’t actually help Buttigieg. Also the app people can’t control the timing of the manual reporting, so there would somehow be a completely new element of the conspiracy. And you’re switching from a conspiracy orchestrated by Buttigieg to one orchestrated by the corporate media, Bloomberg, and/or the industrial military complex.
Mao certainly had a thirst for power no matter whether he thought he was doing good or not. But at some point, you have to wonder if refusing to bathe because you clean yourself on the bodies of teenage virgins, as Mao did, is really done in the belief of the greater good or not.
Itanium isn’t a good example because HP heavily subsidized its continuation after a few years. Without that cash, Intel would’ve (justifiably) killed it then.
She absolutely had the need to apologize, she was facing forces much more powerful than her who could destroy her livelihood. Don’t fault the peasant for kneeling before the King.
users are not against ads. users are against invasive, troublesome ads. if say hn, had a jpeg banner that said 'sponsored by stripe'. no user, would be bothered and most would be happy. just like when old fashioned 'toilet-paper' had ads, I mean newspapers. we were happy to see them. since you knew once you flip over the page, it was mostly material. and a little pic | text of an ad. so yeah in general ads ain't bad. but ads in their current reincarnation are bad.
> You could have the most evil landlords, corrupt politicians, and aloof newcomers, and an economic solution would still fix the problem.

I wish more people understood this. We can’t build a world for people better than us. We have to build it for ourselves.
Coronavirus R naught may be closer to 3.1 than 2.2 [pdf]
Mozilla shouldn’t recommend an old and unmaintained fork (Adblocker ultimate) when they could recommend the actual, up-to-date extension (AdGuard).

The rip-off extension only has a lot of downloads (more than the real extension, in fact) because it’s recommended by Mozilla. It’s not illegal, just unethical.
These high profile knitting bloggers make their money from their knitting blog. My wife for example follows them on Instagram and buys their products. Being “cancelled” is like being fired from a job for them.
Elon tweets.
Why is the experience of “trevyn” the one you have insight to and not another brain’s? It’s not rocket science to realize something very unexplained is going on when it comes to qualia and it’s sampling.
> Uh, landlords don't control new construction. Government and NIMBYs do

Well, government and highly engaged groups of voters exercise control in municipalities in Western democracies.

Landlords come in many stripes and some are local voters who hold land/property. These landlords are often NIMBYs, as any increase in supply of housing drives down the asset price of housing/land, which is to say their investments. MOst of these landlords aren't in the position to take advantage of liberalized zoning, as the are undercapitalized relative to the cost of land/construction. All of their financial eggs tend be in the basket of their existing property.

Larger landlords, or developers/real estate firms may well favor liberalized zoning as they profit from development. However, at the moment many voters hate developers, sometimes for good reasons.

In a sense, we're in a bit of a pickle.
Looking for a partnership in a new webworld a new WebTunnel.Cum Google llc knows about it and giving me problems all over cause he knows I'm right that .com is filled with hackers and viruses free opened doors. 4 serious SpeedNweed.cum@yahoo.com be the world Leader of Virtual Webworld with me ofcourse.Cum
VueTopia SuperFest Pre Event – 1KmeG PR