skysight-inc/HackerNews huggingface dataset:
Well I know how this works for TV shows (Got Talents, Master Chef, and national series, and they work all the same):

A show/movie/series is in the process of being financed and you have sales teams going around to Media Agencies and/or direct to brands (usually media agencies are the first contact) and they pitch the show with the available placements for product placement.

Cars, clothes, drinks, food, shampoo, you name it - everything that's on screen it's sold.

If it's not sold it's unbranded, even if you recognize the product by it's shape, the logo can't show.

So basically what happened so far is that the sales team approaches Apple Media Agency or Apple directly and pitch them the movies/shows and the characters with enough relevance/screen on time, and ask if they want to place their product with that character.

Probably it's even a guideline nowadays that the agency account manager doesn't even let villains, crooks, etc placements even reach Apple brand management because they know the brand guidelines to not be associated with "Evil Characters".

After some time they don't even pitch those placements to them because they know it's a direct "No".

If it's a yes then there's a series of meetings to show the script/story board where the product is actually placed and shown, and some brands even have a say over the directors in some shots.

In some sets there are usually brand representatives with the respective media agency contact.

No idea if it's like this on Hollywood, but should be something in these lines.
It sounds to me like they are choosing their software based off their marketing techniques.
Which isn't really enough, considering SNI and subdomains.
As a regular Goodreads user, I've never cared about the site's relatively slow load times. What's important to me is the trust that the site will still be around in 20 years, largely thanks to the Amazon ownership and Kindle integrations. I wouldn't have that same faith in an anonymous competitor.
While I agree that the US prison system has many issues, recidivism rates can't really be compared between countries because of differences in time frames and rearrest vs re-conviction.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4472929/
I didn't say the opposite. But he demonstrated that, internally at his company (before releasing the source to the public), he was not a good engineer.
"Poor enough" means you make less than ~$50,000 for a single person though. (Twice that for a family of four.) That puts you in the top 20% in the US and would be the top 10% in most of Europe.
For what it's worth, a Japanese work collaborator of mine had plans to visit me in the US next week. Just today he wrote me to cancel.

He mentioned an additional concern: that air travel might be disrupted, and that he'd be unable to return home.
So a two month supply, since serial numbers don't get reused.
I believe North Korea was one of the first countries to close off their borders in the wake of the outbreak. Probably the smartest thing they've done in decades, especially considering the amount of pain and chaos currently taking place in South Korea.
Seems to me like you're missing the point.

They want to give their users a numeric keyboard but without the downsides of a numeric textfield. Your solution seems oblivious to their goals and TFA.
The top comments are so negative. I find the steps towards making uBlock origin directly available, and extensions available in subsequent releases laudable. I have been using Firefox mobile for at least 8 years and it's been getting faster and better with every new release.
Pandemic Simulation Game Plague Inc. Pulled from iOS App Store in China
Is this in the terms and conditions for Apple products?
Covid-19 Re-infection: Osaka tour guide tested positive for second time
Do you really want an answer to that question if you are trying to avoid spoilers for the movie? Right now, you don't know whether it is a spoiler or not. It is Scrodinger's spoiler. Why open the box and risk finding a dead cat?
So, what you're saying is that my certificate was definitely the billionth.
Sounds like society is so biased in favor of women that they can get away with breaking shit (whether accident or intentional).
And my point is that bookstores do not even begin to resemble a "public square" which is why I don't believe your analogy is a good one.
I'm by no means an expert, but I believe Certificate Transparency provides a way to catch that rogue CA after the fact.
https://news.ycombinator.com/item?id=22436271

If a character tastes sauce X, and sauce X's logo is displayed prominently, and the character shows disgust for sauce X, it could be misrepresentation of the product. Look at it the other way around, as anti-advertising: what would stop competitors buying negative coverage, negative placement if you will, against the trademark?
If you believe Facebook is a monopoly, then the solution is to break up its monopoly, not to compel it to behave a certain way in its capacity as a monopoly.
In grad school, my MBA-level technology course had a case on Zara and their POS software.

The case problem was that the software was running on MS-DOS, had a janky text-based interface, but managed to work well for Zara's fast-fashion inventory.

The 'right' solution for the case was to not change anything at all.
Genomic epidemiology of novel coronavirus (HCoV-19)
Touchscreen pcs? Surface Pro users in particular would see this.
This is nonsense, I am running it on samsung galaxy s5 and s7 and both are running without issues. But with a small twist, both are free from google with microg lineage installed and xprivacy lua and netguard blocking all unneeded communication. Maybe you should think about removing all google apps to remove bloatware from your phone to save the resources for somethinv usefull instead od wasting your batter life (30% longer battery life) and cpu to feed google?

Anyway, I dont use firefox due to speed but as I dont want any of google products on my phone, regardless of how fast they are. It is not about speed. It is about having some dignity within survailance capitalism. And I am filtering everything trough mitm proxy so I dont need ublock. For the fingerprinting part... I wont update untill they fix this mess.
The things described in this article mostly stopped after ~2014-2015 in my experience. Few, if any, of my co-workers (mostly new grad to 5 YOE) stay past 7PM. Calling people ninjas is cringeworthy, and wizards even more so. When previous employer did "quirky" stuff like spend $100,000 on a chrome panda it was the stuff of ridicule not pride. Open offices are a naked cost-saving choice that companies try to justify.

Speaking from the perspective of a Silicon Valley millennial this article comes off like the "why hello hello kids" meme.
Naturally argumentum ad hominem is always the best strategy.
Well, this is quite telling of Mozilla's marketing department; the link to the developer edition at the bottom is being blocked by my PiHole. It's sad to see Mozilla's open values being wasted by whatever marketing/data people they've hired to switch to massive telemetry and tracking for their own products. Their related articles are all over the place about protecting yourself from tracking companies but Mozilla themselves are as bad as any company on their own blog site.

I hope it'll be a while until the launch. I like the direction they're going with the collections and the UI. And sure, it's faster already, but without extensions I might as well just use Chrome or Brave or Edgeium for all that matters.

The preview also has several weird freezes and crashes during the minimal use I give it.

They also packaged their own certificate store like usual so my custom root certificate doesn't work. Unlike the current version of FF, they haven't added UI to add certificates to it yet. In other words, people relying on intranet access with corporate certificates will have to switch to Chrome. This is a breaking issue for me; I'm not willing to mess around with implementing the weird API my DNS provider uses to use Let's Encrypt's wildcard certificates just so an update for Firefox lets me access my intranet.
All my (full, not side) projects are opensource (from the 1st commit). But this is a throw-away account.
> How the heck do such wild, ludicrously wrong misunderstandings propagate

Hypothesis: in the modern era, perhaps thanks to strong belief in freedom of speech and support for said belief baked into our mass bidirectional communications tools on the internet, false beliefs can easily outstrip true facts on publicly-accessible fora because false beliefs greatly outnumber true facts.
>It's a really fundamental tradition of french society, going back to the revolution (or even before) that you can think how you like.

That doesn't mean you have to want people who happen to think very differently to come in. You can like the fact that people in your country are free to think how they like, and also like the fact that most of them happen to like to think certain ways.

>people with unwarranted self-regard often think they can convince other people with obvious nonsense.

Projecting?
I am on a similar arc, attacking a multi-facet problem space and assuming some % of facets will fail. Would love to chat with someone on a similar path. Email me if you are interested in that!
I just have 10 gallons of water, plus a water filter -- I live about 200 feet from a freshwater lake, so I'll have access to water.

Actually, I have 2 water filters, the primary one is a LifeStraw Family that claims to be a purifier that can filter both bacteria and viruses and will last for 5000 gallons), and I have a small hiking filter (a katadyn, I think) and some purifying tablets as well.

I also have a "WaterBob" bathtub water bladder so if there's a disaster where I still have water and think I might lose it (like if there's an earthquake+power failure, I might have water for a few hours), I can fill it and store 60 - 80 gallons of water.

Oh, and like you, I have a tank style water heater so have 40 gallons (150 liters) of water in my hot water heater that will probably be salvageable unless the earthquake knocks it loose from its straps or there's a water contamination issue (which the filter will probably work for). In that case, the house may not be livable either, so I'll probably be in a shelter anyway.

This was all pretty cheap, excluding the hiking filter (which I owned anyway and cost over $100), I paid around $80 for everything.

I just looked online and the Lifestraw is selling for $170, I paid less than a third of that price, might be a lot of people buying them now so inventory is scarce.
Has anyone been able to get flights to a conference changed / refunded as a result of cancellations like this?

I got an email the other day from the Ruby Kaigi team, they are thinking of cancelling too which means I may have to do something about those flights to Japan I booked :(
Push for More Privacy Protections Throws FISA Talks into Disarray
The title claim is untrue and trivially falsifiable, but I haven't seen any articles that have actually made an effort to verify it.

Here are screens from two recent movies where villainous characters use iPhones:

https://productplacementblog.com/movies/apple-iphone-smartph...

https://productplacementblog.com/movies/apple-iphone-4s-smar...
In normal cases I would agree: e.g., I'm very much against the xenophobia shown by some Koreans against Chinese (and now, vice versa, it seems -_-). Unfortunately, this Sincheonji cult is something special.

I'm sure they didn't intentionally contract coronavirus, but once they did, their behavior went so far into gross stupidity territory that it's hard to distinguish from malice. Even after all national news blared for several days that hundreds were infected by their mass gathering, many of these cultists are still hiding their identity, not responding to authorities, and most infuriatingly, they are still going on about with their business, spreading disease everywhere.

A few hours ago it was revealed that a worker at Daegu Airport was Sincheonji cultist, he went to the Sincheonji meeting on 2/16 and kept working between 2/17-2/21, well after the news broke out on 2/18, and now he was diagnosed positive. Some 25k people were estimated to pass through Daegu airport during these days. WTF.
Don't filter input. Instead, prevent certain characters from being input in text elements. This is a user experience problem, not a software problem. The software can validate that a "name" is rejected if it does not follow the front end validations, but it doesn't need to do any more than that.

Of course, this argument does not extend beyond a "name" field to more complex fields. But more complex fields are less susceptible to introducing UX problems if certain characters are sanitized.
> Also, there is a culture of not staying home when you're sick

That's been my experience in the US, but in Japan? While briefly living there, I was shocked when my 22 year old neighbor stayed home because of a common cold.
Smoking, Gender and Disease
I don't actually remember what kind of phone each character in this movie has, but this headline is not only an issue for this movie, I guess it can be a spoiler for any movie you watch from now on! Hah.
It is much better to target a small and obscure certificate authority if you are interested in conducting wide scale MITM attacks. The entire system is only as strong as the weakest link.
GDC and the wellbeing of our teams and community
The requirement to have insurance has been dropped.
What's crazy about this is that, by "saving money" on asking people to pay for their tests, people won't get tested, spreading it more, causing more deaths and cases. Which I think is more expensive than the tests...
Won't this spoil many films?

By that I mean it will act as a spoiler - see a charter without an iPhone and you can presume that they are a bad guy/gal and with that spoil a plot twist later on. Equally, if they do have one, you know that they are a good guy/gal till the end!
https://letsencrypt.org/docs/ct-logs/

why target them when it's OSINT? :)

[ed: compromise of their HSM would be bad and I didn't consider active attacks, only passive]
Like what? All the certs they issue are already public.
Cool. Mixed message: your site starts with a loading spinner for me.
> I feel Google should just disable that permission, it’s abused.

I should have total control over what parts are given to a third party from my email. Much like Android / iOS permission prompts.
Someone making the federal minimum wage working full time makes $15,080 a year. For an individual to be eligible for Medicaid, they have to make (for 2019) less than $17236.20 a year (138% * Federal Policy Level $12,490). So yes, in states that don't have a higher minimum wage, they would just barely be covered, but millions of people making minimum wage in states that have raised the minimum wage or making just above minimum wage are not covered by Medicaid. In such a case, it's better to make less money by working less rather than lose that insurance because Medicaid is great insurance while what is available at such jobs is likely garbage.

And of course, there are the asshole states that did not expand Medicaid coverage. In those states, people making such little money are fucked. The ACA may help with discounts but I doubt any reasonable insurance can be had. Hell, I can't find decent insurance through the ACA in my state and I'm willing to pay anything. Super fucked up. I totally agree that people who defend this system are assholes or idiots. No other way around it.
> We've recently seen this problem when a database for the first time for a non-numeric system in its ids and downstream systems that converted that to an integer started to fail.

I can add another anecdote to that list. In my case it was some code in a consuming system that expected u16 sized int which broke when the producing system increased to 32 bit sized int. I mean, no code change just the auto increment on the database finally exhausted 16 bits.

Tangentially, this is why my first thought when designing a new system is to use uuid/guid stored as a string in hyphenated hexadecimal. It prevents any downstream consumer from even attempting to store it as an int. I'm now wary of things that look like int but aren't actually integers since people will often mistakenly treat them as such.
This is what certificate transparency logs are designed to solve.

Chrome and Safari currently validates that a certificate has been published in the publicly available transparency logs as part of considering it valid.

Either Google doesn't publish the certificate in the logs and it's not valid, or they publish it and people are able to see the misissuance.

It's not foolproof, but it makes the attack even less likely.
Very, very slow for me on the first loading screen on pixel 3 XL, mobile 4g, both chrome and mobile Firefox. Firefox loaded after 4s or so, chrome did not after 10s
...at the risk of modified data? With things like credit card numbers?

I think I'm just not chill enough for that.
> Basically, the government doesn't pay for anything; only private insurers do

The US government does spend huge sums of money on healthcare.

Medicare and Medicaid are 21% and 16%, respectively, of total healthcare spending as of 2018. [0]

That's 37% of the total.

Given that total healthcare spending is about $11,172 per capita, that's $4,133.64 per capita. [0]

The UK spent £2,989 per person in 2017 in total. [1]

It's not correct to do so, but using today's GBP to USD exchange rate that's roughly $3850.

This puts US per capita government spending alone (keep in mind it's Federal + state) in the same ballpark as the UK's entire healthcare expenditure per capita.

> On top of that, the actual cost of care is far, far higher than in other developed nations for the same procedures, due to many systemic problems.

Sure is. This is a huge issue and IMO the issue to solve. But sadly, no candidate is really digging into why costs are so much higher outside of administrative overhead (which is real, but eliminating it doesn't solve the problem).

[0] https://www.cms.gov/Research-Statistics-Data-and-Systems/Sta...

[1] https://www.ons.gov.uk/peoplepopulationandcommunity/healthan...
Starting September 1, Safari will not honor new certificates that have validity periods longer than one year. I don't have a link to their documentation because the announcement was reportedly made at a face-to-face meeting at the CA/Browser Forum in February. https://www.thesslstore.com/blog/ssl-certificate-validity-wi...
And that assumes you only need the one test.
Don't the costs get even worse if you are positive - or actually, higher while you wait for results?

I mean, you are supposed to self-quarantine while waiting, which means no pay for that period. If you are positive after the result, there is more quarantine. More time without pay.

You can let the bill go to collections if they don't require upfront payment, but few can go 2-6 weeks without pay at all. People need to eat.
It's about once per session for me. Seriously, compared to every other major site I know of, it is in a class of its own for flaky UX. At least one of the things I describe above per afternoon, lets say. Often many more than one if it is having serious problems. As for the issues with you and your spouse, I will just say it sounds like there is a opportunity for improved communication there. Best of luck.
The idea that one string is more dangerous than another is the problem.
Exactly this. It feels like this day and age people are trying to blame everything around them for their troubles. They can't bare to look at themselves and think "maybe I need to change?"
How would you determine which value to display? It seems to suffer from the same issue where if you display the sanitized value then the comment is still missing necessary characters, but if you use the unsanitized value then your application will be vulnerable to XSS.
My wife's grandparents are in Korea so I'm so happy they're taking this seriously. Her grandma smokes a lot and already has a bad cough, so I feel like she'd be particularly vulnerable.
Can products even be protected in this manner? This seems way outside the scope of copyright protections and seems entirely wrong, but IANAL. Can anyone add some background to this that is?

edit: barrkel posts a comment that links and explains the Trademark law around this. search for it and upvote!
New Story (YC Nonprofit S15) is hiring a product designer
Which is why it's not recommended to use a straw with hot beverages, only cold ones.
In my experience most people who use iphones are at least a little bad. It definitely puts a check in the "I probably won't like this person" column.
I agree, in particular with this puerile illness of celebrity worship and adoration. But part of why it would shock the conscience? Quite a lot of the serfs, spending upwards of $1000 a month for "health care", assume that they are not too far removed from the VIP health care celebrities have access to. If a celebrity dies, a true aristocrat and pinnacle of American greatness, then wow anyone could die! SHOCK!

It's a total lack of imagination about reality, and using imagination for bullshit instead.
The funny thing is that a government doing healthcare is not socialism at all. It's just good stewardship over something that is too much of a temptation for the capitalists to handle properly because 'life is priceless'.
DomPurify by default allows style tags ( https://github.com/cure53/DOMPurify/blob/master/src/tags.js#... ) which can be used for tracking visits and some types of password extraction from certain types of frameworks (see https://www.mike-gualtieri.com/posts/stealing-data-with-css-... and https://github.com/maxchehab/CSS-Keylogging ).

Also regarding these types of mitigations see https://www.youtube.com/watch?v=lG7U3fuNw3A which explains how some good mitigations might not catch all edge cases.

I don't think there is a golden rule for this stuff besides having a very strict CSP that only allows same-site resources and no eval/inline with reporting to see when someone has tried to do something bad.
Where exactly were plastic straws "banned?" As far as I know, the ban was on providing them without their being specifically requested.
I know you keep linking this blog post as if it proves a point, but its argument is tenuous at best.

The crux of the author's case is that PragerU's videos fall into the category of "videos on Terrorism, War, Crime, and Politics."

This is a remarkably wide net to cast. Surely you can think of countless YouTube channels which were not subject to the same scrutiny that Prager was, yet obviously have videos on politics and war.

At the end of the day, Google disagrees with Prager's politics. I don't think it's much more complicated than that.
Those bags require even more uses to be made of them before they break even vs. plastic bags, let alone end up being a benefit. I would find it hard to believe that on average they are a net gain.

I think one of the problems is that people very much overestimate how big a problem "plastic bags at the grocery store are", because they're big, and white, and loud when they move around, and they're something so many people deal with. But they're also whisps of plastic nothingness. Save up all the bags you shop with, and see how long it takes for them to equal the mass, of, say, this: https://www.amazon.com//dp/B07HKV9339 You're going to be saving for a long time... and you're going to be saving long past the point where your best efforts have squashed those bags into the same apparent volume.

Plastic bags and straws aren't the problem. "Solving" the not-a-problem is burning people's limited give-a-damn on pointless wastes of time, and psychologically rewarding people for doing useless things to their own detriment that helps nobody.
Typical Apple
Sports Talks Should They Be Banned in Offices?
Plague Inc. pulled from the App Store in China amid coronavirus outbreak