skysight-inc/HackerNews huggingface dataset:
The data for "Local Storage" is stored in ~/Library/Safari/Databases -- you will need to give Terminal access to the Safari directory as the current Sandboxing works both ways, Safari stores security config info in this directory and scripted malware could / can exfiltrate data and change values in this location.

To violate privacy (aka enable tracking) a sub-iFrame could be set up that uses "local storage" with a parent page security policy that allows communication across the iFrame boundary. Sorry, yes, I am being a bit vague.

Who cleans up ~/Library/Safari/Databases? I personally see crud in this directory from 2011 that has been migrated from older systems.

Almost not relevant now, but Flash also had a "local storage" system that was shared across all Flash Apps. It also allowed (before sandboxing) local apps to proxy and communicate (via shared memory) with any standalone Flash App on the system through any page that used the Flash plugin -- i.e any running web browser, violating all attempts to have web compartmentalization rules.
Thanks, founder here. Remotion is designed for teams of people that collaborate closely. Usually that's the "2-pizza" team of 4-10 people, even if you're at a 1000-person company.

The way this works in Remotion is you choose who you want to add to your Desktop Shortlist, and those are the people you see on your desktop.
Tried this out and love it. Waiting for Linux support so that everyone on my team can use it.
Coronavirus dataset and graph generator (Python)
I'm honestly surprised by any country that hasn't done this yet. Looking at NZ they have 200 cases today which means the real number of undetected cases there is already some thousands. Everyone seems to be dragging their feet even though its crystal clear how this will play out in the short term.
MPD can handle the streaming part for you but you have to have access to all the files.

https://musicpd.org/
Seeing all the "enable notifications" popups on every site I visit, I am happy that Apple doesn't allow this for websites.
If you are distribting a PWA through e.g. electron the user does not have (easily) the means to delete the cache.
Web app is a misnomer in that case, they are just applications running inside a somewhat hidden browser.
The loanlord (bank) has enough money to defer payments for a few months. They might have to skip the huge bonuses for a bit and cut back on lavish perks and parties. A small sacrifice. The Fed could temporarily ease up on the reserve rule a bit to help.
A presentation delivered live doesn't convey information faster than a YouTube video - that's just inherent in the message.
Coinbase Wallet lets you earn interest on your crypto with DeFi integration
Why do fitbit have this data?
Can you describe this porn app which also benefits from being a PWA and doesn’t need a backend?
Well, ignoring his intelligence community for months, downplaying it for the first few weeks once he started acknowledging it, and now advocating for a quick end to the lockdowns...
You might be thinking of https://github.com/rein4ce/hlbsp
Japan Is Obsessed with Paper
There are different kinds of DRM. Streaming websites allow different quality for different kinds of DRM. E.g. they allow best quality only for best protected DRM (which should use encryption all the way from Netflix webserver to your display). There's software DRM (decrypting stream inside proprietary blob) which is considered weaker, so you'll receive acceptable quality in Chrome. I don't know why Chrome did not implement the most secure DRM. Hopefully Microsoft will contribute their patches back.
Ah.. well, ok, but this is pure nonsense.

First of all, the various kinds of browser local storage have always been volatile. It has always been a bad idea to treat it as permanent storage. Maybe it's a little more obvious now? Not exactly a bad thing.

> the PWAs I was building here might just be dead for iOS users

If so, it was already dead for your users, whether you realized it or not. I guess you were going to implicitly promise something you could not deliver: that your PWA would keep track of the feeds the user was subscribed to (and perhaps also keep track of what had been read, and other user state). But you were going to screw your users, because a PWA without external persistent storage could not do that reliably. It's really luck for your users that this caught your attention and has you rethinking your app.

A partial list of things completely external to your app (not including this change) that could cause your users to lose things important to them that you stored in various local storage...

* user switches browser
* user has multiple devices
* user upgrades phone (or tablet, or workstation, or laptop)
* phone (or other device) goes in for repair or upgrade
* major change to browser (like Edge moving to chromium)
* some OS updates
* user clears browser data (as innumerable troubleshooting processes suggest)

It's wrong to think browser-based storage used to be stable but now isn't. It never was. Browser-based storage was never going to be a good place to store your user's important, persistent data.
Hey guys, I am a co-founder of Turing Pi. I see a lot of comments around Raspberry Pi, performance and VM. I just want to shed a light on some things here. Turing Pi is not about performance, it's about cluster architecture. If you look at Turing Pi as a homelab project, then yes, you can get more performance with some used cheap servers. Of course, if you get approval from your homies to occupy a closet. You can even run apps in containers with Kubernetes orchestration using VM and so on.

The main idea behind Turing Pi is to deliver compute to the edge. If we look at cases where some compute will run low latency, highly available and internet independent apps to automate processes, and often in a hard to reach places, then the classic servers, not a solution. Turing Pi is an early version of edge computers with cloud-native architecture. Why it's important? Because if you are a business with some services running in the cloud and you want your edge computing organically to coexist with your cloud stack, then edge clusters could be a great choice. The speed to innovate and deploy your code into production to both cloud and the edge environment could be a critical component.

The existing Turing Pi model more oriented at forward-thinking developers who want to learn and push cloud-native to the edge. Why Raspberry Pi computers? They are not the most powerful computers, but they definitely can lower the entry point for developers by offering a huge and well-documented software ecosystem.
As some further context, New Zealand announced its lock down when it had 2 cases that weren't linked to international travel.
Continued on 2012: https://groups.google.com/d/msg/scala-language/PIhmEeMg-Ms/3...
Microsoft will be releasing PWA versions of the Office suite.

Twitter, Instagram, Starbucks, Pinterest and more have PWAs as well.
Do you even leadership bro?
That's a relief. We've built our business on our PWA, which also has an offline mode. It would be annoying if we had to adjust it for (yet another) Safari quirk.
My company created a web client for our chat software product around 5 years ago. The quality of our product has slowly deteriorated as browser vendors continually remove or restrict features that once worked fine. Just to name two examples: autoplay audio for chat notifications and tab throttling killing websocket connections and background timers. I understand bad actors are abusing these things, but they're breaking totally legitimate use cases.

We've been forced into an electron client and now urge our customers to ignore the web client. If we didn't have a small number of customers on Macs, we would abandon web tech altogether and build a native Windows client.
The exFAT filesystem is coming to Linux–Paragon software’s not happy about it
> "Web applications added to the home screen are not part of Safari and thus have their own counter of days of use. Their days of use will match actual use of the web application which resets the timer."

What exactly does that mean? So you use the app for seven (perhaps non-consecutive) days, and now all third parties that haven't been, uh, interacted with, get their data wiped - but not the the first party, because that has been interacted with, by virtue of the PWA being launched in the first place?

I guess that solves the problem?
I also don't understand the alarm.

There is no hard limit on how long things will be stored. Data in localStorage might still be stored for weeks/months/years, as before.

The only limit is on how long things will be stored if the user does not interact with the site/PWA.

If you are a website, not a natively-installed app, that I haven't "used" in a first-party sense for 7 days or more, I don't think your data belongs on my device.

Storage space can be limited, and any app I haven't used in 7 days should be happy to re-fetch my data from a server or convince me to install their native app.

To act like this is some nefarious plan by Apple to get people to build native apps instead of PWAs is absurd. If a PWA was written properly in the first place, this change will have basically 0 impact on it.
It says in the press release (the text of which is in the article):

> While we are aware the perpetrator has additional files that have not been made public,
This site does that for Youtube: https://plug.dj/
If you’re not a doctor, you should really stop providing medical advice to others. You’ve been aggressively pushing this whole home remedy thing. Stop saying things with authority, you can suggest things with “This is my personal advice but talk to your doctor”.

I’m flagging your comments.
I do not believe that is accurate. I would say the Federal Government can have maximum authority, under certain circumstances, if it is competent enough to know when to do so. The Federal Government, specifically the Executive Branch, has the authority to declare a nationwide state of emergency. Doing so gives broad (and somewhat undefined) powers to the President and Federal Government.

See, for example, The International Emergency Economic Powers Act: https://en.m.wikipedia.org/wiki/International_Emergency_Econ...

Edit, to add: I don’t think the IEEPA applies here, but there are a number of Congressional Acts that give the President and Federal Government tremendous power to regulate State goings-on. This was just the first one I could think of.
If you click 'unzip file' all works fine. But if you click on file directly you will get message (that looks like error message) that you need space to extract. Maybe thats the reason of confusion..
This downturn is vastly sharper and more unexpected than 2008. Time to roll out the Plan B budget and cash flow model where you lose that big customer and everyone else delays their repayment. Oh, also forget adding new logos for six months. Large companies are in a state of paralysis while they try to figure out what to do and when this will all end. You should be too.
I now use a personal Gogs instance, but I also want to give a shout-out to Klaus: it's something like Gitweb with a more Github-like UI. Klaus (like Github) shows you first and foremost the state of the tree with nicely rendered or syntax-highlighted file contents instead of (like Gitweb) focusing on the commit history first. It also has smart Git HTTP support out of the box without having to muck around in the web server config as described in this post.

The project is here https://github.com/jonashaag/klaus and you can see a preview of it here: http://klausdemo.lophus.org/
Never used it myself, though, except for detecting my name in a bibliography and highlighting it (for publication lists and some such).
I just use the contact site to send them a note to cut it out. There are better ways to prevent spam. Like my password that I just entered in the latest case. I'll go elsewhere in the next, they have competitors that won't be that different in price and easier to use.
This sounds like a death-knell for my personal project: a fully decentralized collaborative task/wiki, built on ipfs, and encrypted against your blockchain wallet. I had just migrated the backend from firebase, too, and was ready to re-launch the beta next week.

Pretty much any PWA that was using ipfs as anything but a caching/distribution layer is no longer viable. This is a huge blow to decentralization technology.

Sure, you can make a standalone app, but that is going to cripple already difficult adoption.

This sucks :(
Other browsers support Widevine which is by far the more popular DRM scheme.
I've stated as clearly as I can that this is my personal opinion and what that personal opinion is based on.

I am aware of the official explanation for CF and have noted what it is in another comment of mine in this same discussion.

I am not actually looking to get into some long tangent concerning my opinion about how CF really works. It's irrelevant to this discussion.

If you don't care for my personal opinions about how this works, please just focus on the takeaway that "non mechanical air clearance methods exist and are medically prescribed" and please seek out official medical sources of information on airway clearance, which Italian doctors are apparently using in cases not serious enough for a ventilator.
Would also check out this video: https://www.youtube.com/watch?v=CHDMdyN5Jjs

The supply chain issues alone are going to be a big hurdle for traditional PPE delivery to those that need it.

While efforts like this of course can't compete with the volume of a full on manufacturing plant, they will probably help the tail of smaller provider groups that can't tap into the supply chain.
If you want to make an app that someone can use offline on their device, why are you making it as a website at all?
While the trigger was obvious, the way this came down makes one suspect that the in-person events were, if not on the chopping block, at least somewhat precarious. Remember also that it's not just OSCON; O'Reilly had a big slate of events.

(That a lot of people mostly equate OSCON with the O'Reilly events business is likely a symptom of the overall problem. This isn't a commentary on the quality of their events generally--which I've found to be pretty solid--but it does say something about the mindshare they have beyond OSCON.)

And, if I'm being honest, OSCON has gone from being almost a must go if you were in certain open source circles to something still mostly worth going to if you could find the time and budget. OSCON out-survived a lot of shows that were about open source overall but it's frankly a bit hard to be an event about open source in a general way when open source touches almost everything.

In any case, in spite of the special place a lot of people have for OSCON, it probably wasn't sustainable as a standalone event without the rest of the event slate.
It's no less of an issue for an online-based PWA. Where do you store login credentials or session tokens? In local storage. What happens to them when Apple decides to arbitrarily throw it away? The user has to log in again and again.

This sounds like a seriously poorly thought out idea. Want to clear tracking data from random websites I've been to? That's great. But you don't mess with the data stored by apps I have specifically _chosen_ to install on _my_ device.
Squids' gene-editing superpowers may unlock human cures
I've wanted this for so many years.
So I guess what I lack is an understanding of why that doesn't affect cardinality.
NZ was a few days after Germany, yes, but it's a very isolated country.

Germany locked down after almost 100 deaths (and 20,000 cases.)

NZ locked down as soon as community transmission was detected (2 cases out of 50 total were untraceable.) No deaths yet.
They wouldn't use the IMEI. Your phone also reports the IMSI which includes country code, network, and an identifier number. They'd only have to differentiate you from the other people from your country. By the problem statement, you didn't go straight to your hotel -- so you're probably going to be the only one.

And sure, you could leave it on airplane mode -- but you have to keep in mind that you are eventually going to be found, and I'm not really clear why we're even evading quarantine but when you are found the punishment is going to be much more severe if the government believes that you were intentionally avoiding detection. Keep in mind, Taiwan still punishes drug trafficking with death -- I can't imagine they'd look kindly on intentionally endangering their entire population.

Although upon further thought, IMEI should be fine too. Consider that international travel is mostly shut down right now. I'd be surprised if there are more than 500 international travelers at the airport within 30 minutes of you. They would just check every one against their quarantine reporting status (hint: EVERYONE else will be where they're supposed to be and checking in as part of the procedure) Then all you have to do is remove IMEIs that are at their correct reporting location one by one. I'd guess less than a hour's work given that the reporting is already being handled.
> Except, when you block the first HTTP/1 load and start with loading with HTTP/2 first and flush cache between loads, the speedup vanishes. The test is disingenuous, it is not testing HTTP/2 but DNS cache velocity.

The demos I’ve seen use different domain names for the HTTP/1 and HTTP/2 tests. This makes sense, because how else would you make one set of resources load with HTTP/1 and the other with HTTP/2? This deflates your DNS caching theory.

I didn’t rely on tests by CDNs, though. I measured my own website! Accept no substitute! The differences are most dramatic over poor network connections and increase with the number of assets. I had the “privilege” of using a high-RTT, high congestion (high packet loss) satellite connection earlier this year and difference is bigger.

What I like about it is that I feel like I have more freedom from CDNs and complicated tooling. Instead of using a complicated JS/CSS bundling pipeline, I can just use a bunch of <script>/<link>/"@import/import". Instead of relying on a CDN for large assets like JS libraries or fonts, I can just host them on the same server, because it’s less hassle with HTTP/2. If anything, I feel like HTTP/2 makes it easier to make a self-sufficient site.

Finally, HTTP/2 is so dead-simple to set up on your own server, most of the time. It’s a simple config setting.
Agree with all of this! good ideas!
I was intrigued, since it was mentioned in the answer that a HN commenter had helped, meaning it was on HN before.. previous discussion (from 30 June 2017) here:

https://news.ycombinator.com/item?id=14670306
Sites could easily only prompt this after you've added them to the home screen. Browsers could, do?, also allow users to set a default of deny all notification requests.

The problem is that developers have to spend a significant amount of time and money to get on iPhones because of Apple's policy here. If browsers and devices fully supported PWAs developers could "write once, run everywhere". Instead we have to build separate apps and deal with separate release processes. It's a huge productivity cost.
Having a leader who says things like that CV will go away in a few days when that's manifestly not true is not helpful. Leaving the states to bid against each other for limited supplies is not helpful. The US is not at all akin to the European Union. Perhaps in the early stages between the revolution and the constitution that was true, but it's not remotely the case now.
If you use org mode I highly suggest org-ref (https://github.com/jkitchin/org-ref) that leverages and adds a lot to Bibtex. It makes creating/managing/citing/searching a bibliography a breeze.
There's a big difference between a user choosing to clear their data and a browser vendor deciding to clear a user's data.
If you read the update from webkit.org, you'll see that it's still quite possible to store data locally.

Link: https://webkit.org/blog/10218/full-third-party-cookie-blocki...

Relevant quote (emphasis mine):

> Now ITP has aligned the remaining script-writable storage forms with the existing client-side cookie restriction, deleting all of a website’s script-writable storage after seven days of Safari use without user interaction on the site.

If a website hasn't been used for 7 days, I'm happy for its data to disappear and save space on my device.
Exactly. This is like handing someone a published API and asking why they can't just compile and run it.

Patents and service manuals are most of what you need to start reinventing the wheel. They're what you hand your R&D staff as you start reverse-engineering something, learning along the way all the little tricks that make it harder than it looks. They're not what you hand your machine shop and start producing.
Dlv.isc.org DNSSEC expired – potential impact to resolvers?
Hey HN, cofounder Alexander here. Seeing Remotion in action is the best way to grok it so you have 3 mins, check out https://www.youtube.com/watch?v=eJ0GITPcMAY.

Backstory & problem:
Charley and I started working remotely when he moved to Chicago. Immediately our work felt slower. The async-first remote work best practices espoused by larger companies—GitLab & co—didn’t work for us. Frankly we think they’re better for getting many people to execute known work well together, but if you want energy & creativity on a smaller team, you need more face to face chats.

Remotion helps teams quickly chat over video. Unlike most of the space, we aren’t innovating on the in-meeting experience—keeping that lightweight. Instead, we’re innovating on _how_ you start video chats.

Remotion puts selfies of your team on your desktop so you can see who’s free and jump into quick video chats. Hope it’s useful for you all. Looking forward to feedback.
watch2gether.com does YouTube, Vimeo, Dailymotion and SoundCloud
You can also set up your own Fossil server by downloading a single executable and running it with a 2-line CGI script. Includes issues, wiki and forum.

https://www.fossil-scm.org/home/doc/trunk/www/server/
Seems like “profession” just is t a very useful or meaningful term. If you insist on using it, I might suggest that “programming” and “development” aren’t professions, while software engineering is; however, there are lots of SEs whose jobs more closely resemble dev jobs.
This is fantasy thinking about the structure of the US and how the problem can be effectively dealt with.
Yes. It's called ECMO: https://en.wikipedia.org/wiki/Extracorporeal_membrane_oxygen...
If it's well designed, then the system will only be able to query for feature support rather than ask what browser is in use.

I have a feeling Google won't do it that way, because they intentionally gimp most of their apps on non-Google browsers for no reason other than to be dicks.
Virtual Reality Lets Rare Works of Art Take a Field Trip
The Content Team's Guide to Facebook Organic Marketing
your title attribute says "Bing Together", you're missing an "e"
That's easy. It adds a hurdle for people who make malicious or fraudulent apps. It's not free, but neither is it MSDN levels of absurdity.
https://cytu.be/ - works with YT, SoundCloud, and some others.
The Content Team's Guide to LinkedIn Marketing
Their regular web app is a pwa... thats the beauty of it. PWAs are not different offer, they are just enhancement on top of web apps. Good PWAs are invisible.
I feel fortunate to work at a company that hasn't had any debt since the 80s and keeps a good stockpile of funds. Consequently they didn't have to lay off anyone in 2008 and even the current crisis didn't delay our plans to build an addition to the office.
No, he says that he's done things but many of these things (like the navy ships) are far from being launched. Much of what Trump says is not true and a disturbing amount of that is actively harmful.
That would be terrible. I'm definitely presuming that the author definitely needed to make the cuts. If that's not the case, and I got laid off, I'd be pissed.