skysight-inc/HackerNews huggingface dataset:
Pilot wave theory is simplest and most obvious interpretation IMO. We already accept the Higgs field that permeates all space-time (and predictions of that theory were verified by discovery of Higgs Boson) so why can't there be waves in that or another omnipresent medium that these particles are "riding" on? These double slit, wave-particle dualities, and all the other bizarre notions (apart from non-locality which both predict) vanish with the pilot wave theory. Never understood why Copenhagen interpretation has so much mindshare except it's more sensational, controversial nature and the personalities that advocated for it.
That emulator is from the very talented Matthew Godbolt of "Compiler Explorer" fame, by the way.
Does it require that? Can you elaborate? I haven't heard of this issue with Pilot Wave Theory before.
>As for my feelings about the various TLAs in the US they're mixed but I definitely think they're more likely to be able to tell who was actually involved than Assange.

The same agencies that said, with certainty, that there were WMD's in Iraq .. and then, after a few million innocent people have been murdered, can't find them?

I think Americans put too much faith in their TLA's. These organisations are as corruptible as any other, and - as we have learned - could just as easily be controlled by Russia as anyone else.
and this is the reason why all my tests are reasonable sane strings which customers could see and not something like "fuck 1", "fuck 2", etc
Here you go: https://www.windows93.net/
Our favorite tools for powering our content marketing agency
What about civil disobedience as a motiv?

Maybe I'm aware that some entity, probably tied to a powerful player like a nation state, can read my encrypted mails somehow.

But the more people are using encrypted mail the more difficult and expensive this will be for this entity.
> the fact that most of those items were shipped in a extraordinarily well-supported, mass market OS literally decades ago and still didn't catch on maybe says something about the value of the design ideas.

that statement seems heavily draw on the idea that success is the result of a meritocracy. But 'how good something is' often plays a small part in the selection of winners and losers.
> I can assure you that the ratio of people working on improving our payments stack to publishing is about 1000:1.

@pc, I just checked that Stripe has about 1800 employees. Could I ask why so many? :) I wouldn't expect such a big number for the company providing one (?) product/service.
In my experience the auditors and sec guys are bred in the same enterprise factory.

“Let’s just buy and implement yet another indispensible enterprise tool and we will _finally_ be in control!”

There’s one thing, and one thing only that allows the speed business want and enable the security and audit required - it’s called automation.

Nothing beats competence coupled with automation.

Let’s use the machines that was invented and built for automation to actually automate stuff!
Ok, Enterprise IT?!
Slightly amusing story about “testing” payment flows in production: In Germany we have payment providers like Sofortüberweisung that ask you for your online banking credentials and then access your online banking via browser orchestration to initiate a transfer (I know it’s an utterly horrible idea from a privacy and security point of view).

What they didn’t know initially was that some banks provide test accounts to customers where you can simulate transfers without transferring any money, and where you can simply enter your desired bank account balance (now that would be a killer feature for real online banking). Some people figured this out and used those fake accounts to make fraudulent orders.

So if you offer such testing card numbers you should make sure your customers need a specific workflow to handle them (e.g. by returning a special error response code that can be distinguished from a normal error).
I can agree with all the PGP bashing in the world, but it seems to me that PGP provides one thing that apparently nobody else cares about, and I don't understand why: the thing is identity verification. When I encrypt or sign I don't just do it for the sake of itself: I want to be sure to whom I am encrypting and from whom I am verifying a signature. If I am not sure of what is the link between the used key and an actual person, organization or service, crypto is not very useful for me. PGP has a way to do that. We can speak for hours of its pitfalls, but it's there, and with same care it can be used.

Do the alternatives have anything similar? I don't think so. Signal and WhatsApp basically rely on a GSM identity (a telephone number), which is verified by checking a six-digits code by SMS. There are hundreds of ways to screw this up. Any random street pickpocket would be able to get your phone, read the code and put it back in your pocket without you even noticing, not mentioning attack on the actual GSM protocol of which I do not know much (but have heard of its insecurity more than once). It's true that there is Perfect Forward Secrecy and your peers will get a little notice saying that your security code has changed (and will most probably ignore it), but if it is so easy to take over one's identity, I don't think I can put much trust if the system as a whole. (also, OP complains that GPG is a complex and obscure implementation; what are they going to say about GSM stacks?)

Ironically, the thing that would make this system secure would be that people actually checked security codes, which would basically amount to what PGP users do when they exchange fingerprints (and I am sure OP would consider that the LARPmost possible thing in the universe). Not even with the advantage of having a proper Web of Trust, though.

Even TLS, although it is not mentioned by OP, has quite a few problems. Most TLS certificates are Domain Validating, and the validation procedure essentially consists in recovering a secret file by mean of an HTTP request to that domain (surely that's true for Let's Encrypt, but I believe that most commercial DV operators work in the same way, except that you have to pay for it). So as soon as you're able to MITM the domain validation (and there are a lot of actors who are able to) you can grab the certificate, which would in theory protect from those who are able to MITM your server. This mechanism still protects your from MITMs positioned close to the client, that's true and it's better than nothing. But you still have all the holes you want. And bad examples of TLS CAs are nothing near missing.

So, bottom line: I am very happy if you give me modern and advanced tools for encrypting stuff, but please do not ignore the problem of giving names to keys, a problem that as far as I know only PGP is currently able to tackle.
Why won't the UK get those new laws?

Now that Britain has Brexited it needs to make a trade deal with the US. Why won't the US insist on things like lesser data protections and software patents as part of the trade deal? Now that Britain is in a weaker bargaining position, how will it avoid implementing these things?
I'm not an Android dev, but isn't it nothing about privacy or remote control (apart from sending the notification) contrary to the reactions in the comments?

AFAIK, Android/iOS push notifications works quite independently from the app itself. Even if the app is not running in the background the app server can send a message to Google/Apple (not to Samsung) and Google/Apple send the message to the device to show the message. Correct me if I'm wrong.
Gitkraken free no longer works for private/self hosted repositories
They just obtained the location of EVERY phone - you don't think that wasn't an invasion of privacy
What a great place to pitch the user script that adds inline file previews on the GitHub file listings: https://greasyfork.org/en/scripts/396357-repo-tree-inline-im...
...because smaller companies cannot possibly comply, while they can easily do?

Smaller companies don't really need to comply since the possibility of prosecution is negligible.

Big companies do because the possibility of prosecution is almost certain.
The core of OSes need to be treated more like read-only firmware that only gets updated as-needed and is unable to be over-written by itself, e.g., send a request to the BIOS to look for a valid public-key signed image file to be applied on reboot.

Flash is so cheap, 64 GiB mirrored SSD devices should be available for operating system images on system boards. Leave OS images as signed squashfs files on a dumb flash FS like exFAT. Delta updates can be applied by stripping-out entropic-metadata, patching and recompressing a previous release to arrive at the valid signature of a complete latest release.

Mixing operating systems, configuration, programs and user data in together is a recipe for fail.
The important question here is, why? Was it because of those features? Or something else?

I don't know, but one major factor in OS adoption is network effects. "The rich get richer", and it's very hard to introduce a new and different system, no matter how good it is.
At some point (I can't remember how, or if my action had anything to do with it) the Google Play Store changed from pounds to Danish crowns.

I assume that means my account now counts as Danish.
I'm sceptical. You'd need a lot of insulation and possibly refrigeration to prevent excessive boil off on long flights, adding weight. Also you'd want the tanks to be, if not spherical, at least cylindrical. Where would you put them?

Rockets make do with minimal insulation since they can top off the tanks just before liftoff and the flight itself takes only minutes.

And then there's also the thing that the climate forcing of flights is roughly a factor of 2.6 worse than the CO2 emissions alone, largely due to high altitude water vapor emissions. Switching to hydrogen would obviously not fix this.
GDPR has an enforcement problem. Ideally we should have some mechanism that allows us to submit violations as easy as posting to HN. The next problem are courts in Ireland which have been stonewalling attempts to move things swiftly (and moving things at scale will simply be impossible). See also Max Schrems v. Facebook
That's nice and all but standards exist for a reason. You ask devs to use it in order to be compliant. Regardless of merits, you can't ask people who are not knowledgable about crypto to use a library by some guy/corp just because you think it has better merits. I mean, I guess you can and some will listen but only a few. Most webdevs for non-web businesses are happy to go with a standard so if something goes wrong they don't get blamed for picking it. And many security/vulnerability pros agree with that line of thinking as well.

In practice,if paseto is better I think an internet draft is in order. If JSOE is bad by commonly accepted security measurements then shouldn't the ietf wg have a mailing list where these shortcomings can be discussed and fixed?
we'll get exactly what we deserve
There has been an outbreak of modified stop signs near me. Some are quite professionally done with stickers championing pet projects. Stop animal farming, stop eating meat etc. If they weren’t at the end of a street, they would definitely look like a marketing campaign (which I suppose is exactly what they are).
Yes!

I implemented something similar on a particularly annoying 8/16-bit controller just a few weeks ago. Extra fun since it had no instruction to read the program counter (and no general purpose register wide enough to hold it).

I hope ARM adds that (or IC vendors like ST if possible) to the core itself, just mirror the PC to a register on reset. Should be trivial in hardware.
> Is that true or does it just seem that way?

Definitely seems that way, but I don't think it's just an illusion.

Cheapest stuff is absolute garbage, arguably to the point you could consider it a waste of natural resources (for a few cents here and there, you could make things not break halfway their first use). What worries me though is that price isn't a reliable quality signal anymore - there's profit being made in selling cheap garbage at high prices, because many people are fooled into believing a more expensive good must be quality. Brands are no longer a quality signal either. Even ignoring that the market is currently DDoSed by throwaway "brands", even the proper ones don't mean much anymore. For instance, witness any discussion about white goods. Next to the people telling you which brands are historically quality ones, you'll find people reporting that recently, those quality brands started to cheap out on hardware and their products are no longer reliable or repairable.

Ultimately what I'm trying to say is that the market equilibrium for price-sensitive customers is complete garbage; some companies can survive on less price-sensitive customers, but I see a trend towards converting quality into better margins even there. It's true that we have more of everything now, but it also seems most of those things are short-lived, and increasingly shorter-lived. It would be fine if matter and energy were too cheap to meter, but they aren't - especially not if you factor in the environmental costs.
> iOS built-in adult content filter blocks all searches with the keyword "Asian,” assuming it's porn-related. Which means a 12 y/o Chinese-American girl might Google "Asian hairstyles" and find out that her culture is blocked as "adult content."

> Searches like "teen mental health resources" are also blocked, because "teen" is on the blacklist. Which is so dumb for a feature that's probably being used BY TEENS!

Wow. One of the biggest tech companies in the world, people.
Happy Birthday, Photoshop
So much wasted bandwidth
his job is easier and looks easier.

Are you sure? Anyone can shift boxes by hand it requires no training or experience whatsoever. Whereas operating a forklift is a skill that you have to be trained in and are tested on.
> Can you avoid running into power limits that would greatly slow the initial exponential progress?

I doubt it, for all the reasons you give, though I agree the first choice is to do this as part of building a Dyson swarm.

I don’t even know if the interior of the moon is cool enough right now even without the extra heat from manufacturing; but then, I wouldn’t expect to know — I only have a GCSE grade B in chemistry, so I can be sure whoever does invent a von Neumann mechanism, it won’t be me.
Once again, Elon Musk proving that no matter how smart you are, you can still choose to be a total asshole.
Bitcoin Season 4 Is Just Around the Corner, and It's Shaping Up to Be
Samsung phones have only gotten worse over the years with the additional bloatware that they preinstall on phones. All Android phones get 'Find my Device' which is a service provided by google which works well. There is no reason for Samsung to install an app which can remotely track location data on it's phones and send data to it's own servers.

Another prime example of it is the preinstalled bloatware 'Samsung pay mini' that they bundle with all phones. My phone has samsung pay mini installed and I cannot remove or uninstall it. It is a persistent and annoying bar which sits at the bottom of my launcher screen so it's always visible. Force stopping it only makes it restart in a few minutes. I am never buying a Samsung again
Debugging API Callbacks on Localhost
Google Search Console can often not even read a current robots.txt file. They should fix this before making any further 'improvements'.
This is a very important idea. On a global scale this idea has been codified as "climate stabilzation wedges": https://johncarlosbaez.wordpress.com/2010/11/16/stabilizatio...

Each "wedge" is one method of reducing net CO2 output by 1 gigaton/year by 2054. Each wedge is a major economic and technological undertaking. Current estimates are that 13 wedges would be needed to limit CO2 to below 500 ppm. We have currently implemented 0 wedges.
HTTPS: //productscop.com/keto-original-diet/
Keto Original Diet
also, it will make you dynamic and lively for the duration of the day. in addition the physical motion or an pastime habitual will make you drop out extra energy from the body frequently. The high measure of fat declaration from elements like the palms, mid-vicinity, and thighs will devour quickly and you will get a trim formKeto authentic food plan weight decrease mythical beasts cave food plan drugs is incredibly constant because it will keep the frame managed for an all-encompassing length. consequently, in place of choosing fat misfortune scientific procedure (gastric clinical procedure) or drugs, you can pass for Keto authentic food regimen drugs weight lower capsules for its sound fat lower residences. it is located as instances.
http://productscop.com/keto-original-diet/
No, there is that instant dopamine hit of uploading a video and seeing the likes in real time. Whereas if it was, upload a video and 6 months later it might be approved, people would be more diligent about it. This is very obvious human nature.
> Preventing peaceful assembly is not one of these policies

No one prevented peaceful assembly. Shaheen Bagh is the best example where protestors have captured a public road illegally for 60+ days and neither the Government nor the Police are doing anything about it. Police and Administration only take action against rioters or those who indulge in vandalism of public property. The Deputy Commissioner of the local district gets first hand information on everything that happens in the district. The DC knows beyond doubt if the gathering is going to be peaceful or violent. We have highest levels of intelligence gathering and that has only increased and strengthened manifold after various terror attacks. Hence why the Supreme Court doesn't take the Centre to task neither does the High Court take the State to task over imposition of Section 144. The judges instead just give a rap on the fingers. That is because the administration has all details about the nature of protests and can provide adequate proof. If you really want to understand all this you should spend sometime with retired IAS officers and if they get to like you will tell you the workings of the system. You can't fool the administration into thinking that you can riot in the guise of "peaceful protests". The administration has various ways of intelligence gathering and knows exactly what the outcome of the gathering would be.
Who says testosterone is not related to stupidity? ;)
Why rob creative people of making profit. Open source often cuts people out of profit under the promise of notoriety for imaginary future profits. Many people are not advanced graduates of elite colleges or independently wealthy. To create free repositories undermines talent that should be paid for and nourished. If you live in utopia this is great, for those who don’t it is another barrier to your dream.
Having killfiles dictated by a central authority is completely missing the point. In the old days everyone made up their own minds.
I really think that icons should be judiciously used, in the event of notification of a serious type. An alert, a warning or an immediate attention to a hazard. Icons have a cognitive overhead of learning it - if we design icons of different styles and artistic expression, they lose their efficiency in cognitive detection. An interface with lots of icons without text (For e.g. SolidWorks, 3DS MAX, Houdini) requires professional training and lots of experience. But a universally recognized icon such as the ones defined in ISO 7010 [1] are popularized and standardized - why? Because, if these icons are standardized, they gain popularity and recognizeability. I am guessing, the cognitive overhead in icon detection and interpretation becomes less as we are constantly exposed to these icons. It doesn’t have to be officially standardized. For example, Floppy disk icon (save a file) and on/off icons. Ofcourse, designers will continue to do things as a statement of artistic expression at the expense of all kinds of things - legibility, accessibility and as I said earlier, recognizeability. But that would make the world a really boring place, so let's allow creativity.

There are a bunch of people that studied semiology of graphics. Frutiger did a lot of work in iconography. Vignilli and a few other

[1] https://en.wikipedia.org/wiki/ISO_7010

PS - Btw, skeumorphic design is back, watch out for it in the next decade.
It is open source alternative to Unity3D and UnrealEngine that bundles 3D engine, scene editor, code editor and debugger. The editor is much more lightweight and faster than competition so you can use it even on older laptops. Supported languages are GDScript (python-like), C# and visual programming with routing nodes. There is also support for native code execution which allows community to hook up their own favorite language.

The engine targets all major platforms including mobile and VR. Consoles are not supported due to necessary NDAs, but there are still some Godot games deployed.

Some things lack polish (API documentation mostly), but the development and community around it is very active and positive. Works best with Blender as modeler. Currently the Vulkan support is in works and planned for next major version.

As for engine quality, you can judge from last year's showcase: https://www.youtube.com/watch?v=NlKEO1N8wMM
For this reason, they're currently working on "High Throughput JPEG 2000" which is a computationally cheaper flavor of J2K.
I'm pretty certain the article is misinformed. The GDPR transfer regime still applies in the UK, as it does in the EU. Google would have to implement the "Privacy Shield" mechanisms by which EU or UK data can be transferred legally to the US.
The law in the UK remains the same as the EU. There is no divergence at present.
If Google has got the Privacy Shield system set up, then any EU or UK data can be transferred to it.
Chapter 5 of The Data Protection Act 2018 refers http://www.legislation.gov.uk/ukpga/2018/12/part/3/chapter/5
It might be compliant to move data from the EU to the US under the privacy shield agreement, but this agreement might soon be dead as there is a court case against it (for good reason):

https://techcrunch.com/2019/12/19/more-legal-uncertainty-for...

So it’s not unlikely that the US and UK will be considered unsafe countries for handling personal data of EU citizens due to their aggressive stance on digital spying and surveillance.
Personally, I never use turn-by-turn even to walk around in unknown places, because it loses context. Instead, I stop at the screen that shows the route options; I don't press "Start" to activate the nav. Besides being more useful when walking around, it doesn't eat such ridiculous amounts of battery power that the turn-by-turn nav does for some reason.
> System1 would lose all trust

What I was saying is that this isn't a factor and that means we don't have any guarantee of good conduct. Because of that, we shouldn't trust that it will happen.

To be clear: I don't actually care all that much - I never expect a browser to be privacy-focused and I respect your right to want money to do the things you enjoy.
You can use transactions. They determine batch persistence of the data rather than persisting every insert.

You can just batch them up by

mod N inserts or Z milliseconds

if you have enough data If you don't particularly care you can disable syncing too.
For some anecdata, compare the file sizes in the latest Cantarell release tarball from the GNOME FTP server.

The compression ratio varies depending on how the variable font was made though. E.g. Noto Sans clocks in at 1.5 MB because it is made from 8 masters for two axes. Reducing it to 5 masters results in a 900 KB binary.