skysight-inc/HackerNews huggingface dataset:
Has anyone compared JabRef to Zotero? I chose JabRef a while back (its database is nothing more than your bib file, it helps organize your pdfs well enough, it can import bib entries from MathSciNet and the ArXiv, it runs fast enough), but every once in a while I wonder whether the programs I'm not using are the ones that deliver true bibliographic salvation.
To everyone, it's worth remembering that the Agile Manifesto was some dudes in a room with a whiteboard, and doesn't have to be taken as word on high.
I too am confused.

My immediate thought was that Dgit offered a centralized remote, packaged around decentralized technology. Which is to say, many people have a main "master"; a single, centralized repo/branch. Dgit might be offering the same thing, but hosted in a decentralized fashion. I could see the value in this for backup, I suppose.

Sure, Git is decentralized but many of us still prefer having some centralization. Bundling that up into a decentralized system (aka no third party host) has some value.

Though really to me if I was avoiding Github/Gitlab/etc, the primary value add I'd want to see is all of the Github/Gitlab UI features. Notably pull requests, code reviews, comments, basic issue tracking, etc.
If you are going to shill comment with a two-hour old account you should make the comment a little bit less like the comment above it!

Please, you can do better.
I certainly agree about the "Hallway track." Nowadays, you can get more from a session by reviewing the video, than from being there in person.

However, making relationships, and maintaining them, is really important. This goes double for today's distributed teams; where people may seldom get a chance to meet.

Never been to an O'Reilly conference, but have attended many others.

Nowadays, most conferences are too damn big and polished for me. My favorite conference of all time, was MacHack, in the late 1980s. Really scruffy, scrappy, and energizing.
All parts of Apple's platform has had bugs that have kicked around for literally years. Their native SDK is infamously under documented and has all sorts of bugs https://twitter.com/caseyliss/status/1171778706878160897

The bugs in Apple's software, whether in web or native or in documentation are not part of some nefarious plot, its just a part of Apple's mismanagement and relatively minimal resources.
https://en.wikipedia.org/wiki/Whataboutism

The thing that makes Amazon's case stand out is how systematic it is (and the scale at which that system plays out). This is a global company with deep pockets, and it very deliberately meters out exactly how much it can push people to maintain maximum profits. Even when that means people get injured or burned-out; others will take their place. The dire state of the low-wage job market, that causes people to take these jobs because it's the best they can get, is no excuse for treating people as subhuman.
I’m a little confused by this and maybe I’m missing something. Wasn’t localStorage always intended to be treated as a volatile storage mechanism for non-critical data and caching? The advice I’ve seen for several years says to avoid storing sensitive or critical data there.

Can PWAs not switch to using IndexedDB which seems like it’s more purpose-built for this use case?

No snark intended. I’m legitimately curious what the situation is and where any blockers are.
that was 27" screen, so not likely. but I'll try again later to see if maybe I just wasn't looking right. thx
Ask HN: The Solution to Covid19?
Lets pretend we are a country of 100 million people. Every household has a binary choice:

1) Get fully quarantined for 20 Days , this will be choose be all people at risk (old, weak, existing illness). You will get food for 20 Days but otherwise your doors are closed and sealed.

2) Get intentionally infected and be allowed to go out and live as before. This will be chosen by young, healthy people like me who have extremely low chance of having serious issues with covid 19.

If we get the 60 million young and healthy to choose to be infected, after the 20 Days they will be immune and due to herd immunity even with a low amount of still active cases the virus can not spread anymore and dies out by itself.

Young and healthy people are less likely to need hospitalization / ICU by a factor of around 50 to 100.

Of the 60 millionen people infected about 100.000 - 200.000 will require hospitalization and about 20.000 to 40.000 will require ICU (spread over 3 weeks so maybe manageable).

If the virus just spreads randomly as it does now of the 60 million that will be affected sooner or later anyway 5 to 10 million will require hospitalization and 1 to 2 million ICU. Spread over a longer period (probably about 1 to 3 years) we might be able to handle that but still more people will die and every other aspect (economy, public life is affected for years instead of weeks)

TL;DR: The young and healthy should take the hit to save the old and weak. Also save economy and shorten the crisis as much as possible.
I'm looking for a backend software engineer position or a data engineer position with an open-minded and ambitious company

Location: Amsterdam

Remote: No

Willing to relocate: No

Technologies: Java 8, SQL

CV: On request

Email: kristina_head@icloud.com
What versions of Firefox and Chrome are you seeing different behavior in Google Maps? I get the same experience in Chrome 80 and Firefox 74 on OSX Catalina.
Is the issue here that someone has the ability to do this?
You know People give up information willingly to Facebook right? And Cell service companies have the ability to do this for likely decades. At the very least they've known which tower you connect to.

tbh, I doubt the Government, in this situation, cares who you are. The issue is that groups will spread disease, keep the economy slow and overburden the healthcare system. They don't need your name! They're probably going to the cell service providers and saying 'yo, give me the lat long of group of 10 or more clustered in a 6 meter radius'. Maybe they're asking for names but it's not like they need them.
Yes, there will be a drop in flu deaths this year for example. And a rebound next year
Epicycles created a consistent framework in which to produce repeated measurements and observe anomalies. It was an agreement that this was the basis on which observations would be compared, which turned out to be encompassing of the minimal correct theory. I think that is how to view string theory.
thank you so much for the insights
Defaults cause zig to error out. This isn't that hard to understand or fix. It isn't even clear when it happens because it's just not something that any other compiler would error on. It isn't about being able to fix it, it about creating an assanine hurdle for anyone trying the language for the first time in windows. No other compiler or scripting language makes someone jump through that hoop. It is completely ridiculous. I still can not believe anyone would defend this decision. Do you want people to use it or not?
What's interesting is I knew about cpap machine (I mean everyone does from the ads for "sleep equipment" right?) but I didn't know there is also bi-pap machines which may be suitable for some with covid19.

Some also get away with just taking in oxygen, I guess at the hospital they have to evaluate and monitor.
I don't think so, but for stuff like that I just use shell scripts to search the Time Machine Backup database.
Letter to Myself in Late 2008
Looking on the Bright Side of Coronavirus: Impact on Low Tier Cybercriminals
Thank you. I think this is very often overlooked. "Consent" gets thrown around alot but most of the time people basically have no choice if they want to, you know, participate in modern society. That's one of the reasons why an open web is so so so important and why I think Tim Berners Lee is working so hard to try to bring some part of that back as the "online world" (apps and internet) become more and more walled garden.

If you are coerced into giving consent, it isn't consent, and most of the time if you're doing it so you can be part of the world around you, it is coerced, whether people want to recognize that or not.
Regardless of your RNG algorithm, outputting 2 bits always[1] leaks a 2 bit state. If your state is only 2 bits[0], then there are only 4 possible states. With significant probability, your two output bits will be inconsistent with 3 of them.

In general, a N bit output will be inconsistent with 2^N - 1 of your 2^N possible internal states; the point of using ~256 bits of entropy is to ensure that it's computationally intractable to figure out which, and that only works if the attacker can't work out the first (second, etc) 32 bits separately from the subsequent ones.

0: of entropy, mind, not data. If the attacker knows your 64-byte RNG buffer, and you inject 2 bits of entropy, there are only 2^2=4 new 64-byte blobs that your buffer could have evolved to, so you have 512 bits of data with only 2 bits of entropy.

1: for any algorithm that is; on a per-event basis, there's obviously a chance that you happen to produce output that's consistent with multiple possible internal states.
After a restart the selected disk doesn't change back to /home/sky1s1
When I see things like this I like to consider perhaps I know less about these things than the people in charge.

So I wonder, what where the sequence of events and decisions that lead to this outcome? and who were the people that made those decisions, and who are the people who continue to maintain that state of affairs and what is their rationale?
There are two ways to react to this:

* React to protect people, this is what Europe is doing.

* React to protect large businesses, this is what the US is doing by trying to prop up the market, lie to the citizens about the dangers, actively block testing.
Happy to talk with your friend - my email is in my signature - thanks!
This is off topic but do you know why Edge is the only browser to support DRM for streaming? Or is that incorrect?

I see lots of people who have to use edge on order to get 4k content from Netflix; presumably because of the DRM issues.
Thanks for the feedback! Yes that option is still there just for yucks. Its possible to beat it 'twice' in that regard but nothing special will happen
Your 2nd paragraph says what I meant to say, but much more sussinctly. Thank you.
Awesome site. Needed. Consolidates all the relevant numbers in one place. Clean and straight forward design.
Hah yeah that was unnecessary. Glad you enjoyed Time Quest as well :)
Haven't polygraphs been discredited as inaccurate by now?
That just makes things harder for those who wants this information. Still you can fingerprint browser by features and API support, but it requires javascript now and up to date library with recent features support check. I mean that it doesn't prevent obtaining this information, it's still available for big players who has big data
Super cool! By any chance were you on the old facepunch forums? I remember something similar on one of the devlog threads
"extremely invasive" isn't really a precise term, and sounds untrue here. It's a routine procedure, not considered dangerous.
Will Privacy Survive Covid-19?
I am a firm believer of the 4 values of the manifesto. It is the 6th principle stating face to face communication.
Well, pretty much like the picture. Package insert is the same. Not going to unwrap the LFA device unless it's really necessary.
Is there any evidence that local storage is being used as a pseudo-cookie way of tracking users? If so, keeping local storage saved while regular cookies are being deleted would defeat the purpose of deleting cookies for anti-tracking reasons.
QuickLook works from the Time Machine GUI.
This is somewhat off-topic, but has anyone else been disappointed by O'Reilly's website these days?

I was disappointed to learn about them discontinuing the sale of individual ebooks, but sort of rolled with it by just buying them from another vendor.

Now it seems I can only sign up for online learning. What is that? Yes, I can start a free trial, but wouldn't it be nice to know what I might want to spend $500 USD per year on? What does O'Reilly actually have these days?

I'd prefer to save my free trial for when I'm moderately sure I'll want to stick with the service. If I don't even have an index of what's being offered, that really turns me away.
Perhaps the Sia node gives you access to a "master" repo. Aka a single entity that represents a centralized repo, but hosted on a decentralized system.

Not sure though.
I m sure ppl have considered various similar ideas, but the legal risk seems too large to take, esp. for a sector that has been conditioned to sell virtual trivialities for decades
It's a classic idea generation exercise. It isn't a prediction even if worded as such. I found it interesting.
> The weird thing about this is that the only company I've seen doing problematic user-agent handling in recent years is Google themselves.

I frequently consume web articles with a combination of newsboat + Lynx, and it's astounding how many websites throw up HTTP 403 messages when I try to open a link. They're obviously sniffing my user agent because if I blank out the string (more accurately, just the 'libwww-FM' part, then the site will show me the correct page.

I'm pretty sure that the webmasters responsible for this are using user agent string blocking as a naive attempt to block bots from scraping their site, but that assumes that the bots that they want to block actually send an accurate user agent string the first place.
> browser feature detection is the way grown up developers have been doing this for several years now.

and how do these grown up developers feature-detect when js is disabled? or are they too "grown up" to deal with anything but the ideal scenario?

> I'd be surprised if that's how Amazon is doing it still.

why don't you go there and open up your "grown up developer" devtools.
I can run Ubuntu now without worrying about hardware compatibility and I can play video games, all from Windows. I'm a fan.
Кроссворд – География азии – Детские клипы Елены Молчановой
Younger millennials/Gen-Z can professionally pandemic-proof
Actually the guidelines specifically ban non-webkit rendering engines.

> 2.5.6 Apps that browse the web must use the appropriate WebKit framework and WebKit Javascript.
Can't happen soon enough. As a frequent user of various non-mainstream browsers i'm sick and tired of seeing "your browser isn't supported" messages with download links to chrome/etc. At least in the case of Falkon it has a built in user agent manager, and I can't remember the last time flipping the UA to firefox/whatever actually caused any problems. Although, i've also gotten annoyed at the sanctimoniousness web sites that tell me my browser is to old because the FF version I've got the UA set to isn't the latest.
> sites that want it will get it this way and even if you respond with "no" that's useful to them as well for fingerprinting

To an extent, sure. But to follow the model of third party cookies, let's say client hints are used extensively instead of user agent and all cross-domain iframes are blocked from client hint sniffing. All the third party iframe is going to be able to detect is whether user has a client hint capable browser or not. That's a big difference from the whole user agent they get today.

The idea is that this won't be a Chrome-specific API. It's been submitted to standards bodies, but Chrome is the first to implement. For example, Firefox have said they "look forward to learning from other vendors who implement the "GREASE-like UA Strings" proposal and its effects on site compatibility"[1] so they're not dismissing the idea, they're just saying "you first".

https://mozilla.github.io/standards-positions/#ua-client-hin...
Also: Does this work offline, or on just a LAN? To be completely candid, I feel very strongly that we should be moving away from decentralized protocol that require anything more than two friends and a wifi network.
ISC: Issue with dlv.isc.org causing trouble for dlv-enabled bind9 resolvers
If there was direct evidence it would warrant its own post, so I think your comment has been made in bad faith since people are talking about their own experiences.

That said; if it's possible to measure firefox/chrome performance (with altered user-agents) it would make for a good blog post.
Whoever uses local storage as persistent storage doesn't understand what local storage is. 7 days is enough. Local storage is supposed to allow your app to temporarily navigate around connection issues, to not require "always on". You can never rely on this storage to be permanent, there are just too many ways to accidentally wipe it all and for the user there is no easy way to back it up.

Your offline app should ALWAYS sync to the server whenever possible. The only bad thing I can see here is that if you can't upload the data in time and the user then doesn't use your app for 7 days, he will lose what he last worked on, but such is life and why you should rather use real apps. Offline apps needs to work differently, they need to get permanent storage just for that app but only if the user explicitly choses to install it like that. Not every random page should get permanent storage on your device. This is the right move, Apple might just lack an alternative for apps you actually chose to "install permanently" ;).
Yes other diseases. Sorry for not being clear. I've had trouble with the number of characters limit.
Ask HN: What tools are your company using to enhance WFH/Remote work?
Hi All,

As with most companies, we have been forced to move our workforce to working from home and remote locations. As it was put upon us rather quickly, for users who are in teams that are typically always in the office, and use desktop computers, we weren't really prepared with robust solutions.

I wanted to ask, what the community has been using and their experiences, in areas like (the options in bracket are what we personally have used/explored):

- Communication (slack, zoom, gmail)
- Remote Desktop (chrome remote desktop, getscreen.me, gotomypc, aws workspaces)
- team activities
- efficiency tracking / employee checking

I would love to see what options others use, and how they find them?
If you end up doing anything embedded you’ll likely be working with machines that also have very limited capabilities (you may be debugging by toggling a few pins and looking at the results on an oscilloscope) so I’d argue that these old machines can provide a lot of infrastructure to get comfortable with thinking this way.
I think you misunderstand the purpose of Little Snitch. The entire product is to warn you about outgoing connections. One of the use cases of that is seeing if a random app is connecting to an unknown host.

If you allowed crowdsourced rules, someone could sneak in a rule that says to allow their random app to connect to a random host, which is how malware exfiltrates your private data.
Imagemagick (2018)
There are some all-in-one ventilators, which automatically suction too, but I guess they are not wide spread:

> VOCSN integrates five separate medical devices, including a ventilator, oxygen concentrator, cough assist, suction, and nebulizer, into one multi-function ventilator.

https://www.venteclife.com
Finally an application for MIX!
Honestly, I'm starting to get tired of Netflix. There's some original content I like, but the quality keeps going down as the price goes up.

It's making me consider going back to getting disks in the mail.
> I fail to see how this is counter-intuitive for privacy.

It makes it impossible to have an app that stores data in localstorage reliably, instead requiring it to be backed up on the app's servers.
Best men's face moisturizer 2020
A fair number of websites will still block perfectly working features based on what OS you use.

Some examples I've seen using the latest Firefox on *BSD:

Facebook won't let you publish or edit a Note (not a normal post, the builtin Notes app). I think earlier they wouldn't play videos but they might have fixed that.

Chase Bank won't let you log in. Gives you a mobile-looking UI which tells you to upgrade to the latest Chrome or Firefox.

In these cases if you lie and say you're using Linux or Windows it works flawlessly.
Show HN: Redirectssl – redirect naked domain with SSL anywhere
I, too, remember how this opinion was repeated as nauseam about a decade ago. It didn’t make much sense then, and even less now.

Nobody today expects identical rendering: people are used to responsive websites, native widgets etc. The problem people are actually experiencing (far less now than in the past) were more serious, such as z-axis ordering differences resulting in backgrounds obscuring content.

For JavaScript, I struggle with how non-“identical behavior” would express itself, except as a blank page and a small red icon in devtools.
> Can PWAs not switch to using IndexedDB which seems like it’s more purpose-built for this use case?

IndexedDB is also subject to the 7 day limit. Leaving no persistent storage for web apps at all.
Live coding a fully encripted chat
since im stuck at home I'll be coding live every day. Ill be trying to make one project per week. Ill be using Nodejs mongodb and socket io for this project. So if you are bored please jump over and come say hi.

https://youtu.be/H6Ev_bsWz0g
Congrats on the launch Jack & team!
Good. User-agent strings are a mess. Here is an example of a user-agent string. Can you tell what browser this is?

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/525.13 (KHTML, like Gecko) Chrome/0.2.149.27 Safari/525.13

How did they get so confusing? See: History of the browser user-agent string
https://webaim.org/blog/user-agent-string-history/

Also, last year, Vivaldi switched to using a user-agent string identical to Chrome’s because websites refused to work for Vivaldi, but worked fine with a spoofed user-agent string.
https://vivaldi.com/blog/user-agent-changes/
When will virus-hit markets heal? 12 charts to monitor
> What are private client-side PWAs anyway?

(proceeds to not answer the question)

Found the answer: Progressive Web Apps[1]

1: https://medium.com/@amberleyjohanna/seriously-though-what-is...
How do you get 10 cores? I can’t get past 4 :/ (discovered every other host but can’t do anything with them…)
Azithromycin Hydroxychloroquine Coronavirus Mortality Rate - 0.4% (5 in 1300)
> States are now acting fully autonomously

As an outsider I have to ask: isn't that how's it meant to be? The Feds take care of national defense, foreign policy and Interstate commerce and the states look after themselves internally.

Surely federalists should be celebrating.
Lightbulb Joke
Thank you for your feedback. I'll take it under advisement.
Well, assembly doesn't have much to do with computer science. The fact that aspiring programmers are taking CS degrees is the root of this problem =/
Nothing in particular, other than that is a pretty common argument nowadays for how you can't prove that existence is as it appears to be and anything that "proves" it can just be a function of the simulation tricking you.
This RISC-V board has about zero closed source code in its boot sequence:

https://www.sifive.com/blog/an-open-source-release-of-the-fr...
Children Around the World Are Drawing the Coronavirus
I really like the idea of integrating with shared data-stores! It is a quick win for going multi-cloud since it's quite challenging to run a complex arch on multiple clouds. There also isn't great parity yet across them.
Hello Everyone!

I always had troubles with Google App Engine, Heroku, Platform.sh, etc and getting that http://domain.com work with an SSL and redirect correctly without the ability to use an APEX, or ALIAS domain record.

So I made a tool that allows you to do just that (among other things).

Let me know if you have any questions!
Save Lives, Ready Shovels: A 6-Point Pandemic Plan