skysight-inc/HackerNews huggingface dataset:
Zoom has had major security issues for years, and they've always brushed them off as not a big deal. This isn't an isolated incident.

If their position is now that the Zoom software was designed for corporate users, e.g., that you're expected to only run it on your own VPN where you can guarantee there's no malicious network traffic, then it should have "NOT FOR CONSUMER USE" plastered all over it.

To me, this reads exactly like "Lol user error", except there's no "M" to "RTF" that ever said, for example, that its local web server stayed running after uninstallation and could take control of your camera, or that "E2E" in the Zoom docs doesn't mean the same thing as it means to the rest of the industry.

There's no responsibility being taken here. Taking responsibility would be "We fired all our 'security' people who told us we had best-of-breed security, and hired some actual security experts to re-architect our system to provide actual security for our users." What they did here is indistinguishable from "We're sorry we got caught!" except in verbosity.
e2e encryption for multiple video streams at once is not something that is easily done.

if you told me they planned to offer this feature within a year, i would bet money against it happening.
It has some limitations as well around timeouts, cross site cookies, and progress tracking (uploads, for example).
> Keep calm and carry on

You know that that meme originated from a campaign designed by the British government for motivation in the face of mass bombing anticipated in England before the onset of WWII right? I think saying that "this won't be any worse than being bombed by nazis" is not a particularly motivated slogan.

> a flu won't cause it to fall apart this century either.

If you think this is just a freak thing that is happening, som e flu what will pass, then you don't understand what is happening. What we're seeing is the way this pandemic is exposing vulnerabilities in our global capitalist system.

And finally, plenty of societies of collapse in those time periods. Of course humans and societies continue to exist, but there are more an enough examples of societies that have ceases to exist and the transition is a painful process.
> Similarly, the main question of physics used to be "how everything is", not how do we think everything might be.

I assure you, philosophy of physics is much more complicated than that, and a lot of senior physicists and leaders in the community are aware of these subtleties, and constantly argue about it.
how I didn't see this, I am so happy right now!
You're my favorite writer this is an honor, I'll definitely recommend it to everyone

I'm looking forward for the new book and editions, especially the introduction. Since seeing a copy of Homeland on Ed's mattress in the documentary is what got me to read the books!

Best of luck on the recording process and publishing ^^
Because the code you write is not what is loaded into the browser, it’s bundled and loaded in chunks.
> The problem with this reasoning is that the numbers will start to look a lot less practical if we consider the total number of projects Google has shut down. If we applied this reasoning each time, they'll be out of cash a lot sooner than your estimate.

This should not be true and if it is, it’s just further indication of a problem.

I said 1 ten thousandth of cash on hand for 1.1 million years to drive home how much of a paradigm breaking amount of money they have.

They could make a blank rule that every app gets 20 years of maintenance and support and support 55,000 projects for 1/10000 of their budget.

Now realistically I feel your comment is still missing the point because it’s not even about saying they should maintain these apps anymore.

It’s about the fact that your hard earned dollar is a a drop in the bucket for them. Literally.

Imagine a bucket holding a bucket of water.

Imagine 1.5 million of these buckets back to back.

$1 of your money, is one drop in all 1.5 million of these jugs for Google.

Now pardon my visualizations here but I find it helps when you’re talking about such stupid amounts of money, to help put things into perspective.

They don’t care about services unless the returns are going to be astronomical in one dimension of another.

-

Every service they make like a VC backed startup on their Series A... except they go and attach literally the biggest name in modern technology to it, which lulls people into a false sense of security and also expands the reach of these projects so that them shutting down affects many more people than an early stage product shutdown should.

This is what angers so many people
Yes, you're running the Prometheus server. But what Cortex is a Prometheus API compatible service that horizontally scales and has multi-tenancy and other things built in.
Definitely stockpile TP and food, if you're in an area where the shelves haven't been stripped already. But don't overdo it and leave none for others.

(UK already into "one large pack of TP per customer" territory, which is an improvement from bare shelves)
Well lets see, you go engage in unnecessary activities in an area where the infection is spreading. .. and as a result you become an asymptomatic carrier and infect three people. Those three people infect three more each, those nine people infect 27 more, those people infect 81 people... who go on to infect 243 people...

And not so far down the line your actions have resulted in the deaths of-- say-- 80 people (including a few people who didn't die of covid19, but because they couldn't get treatment due to hospital overloads that you created). People who wouldn't have died if they weren't infected or if the infection came later when treatments were improved or hospitals weren't overloaded-- who wouldn't have died if you'd avoided creating an unnecessary exposure.

So, on that basis, since you're planning on taking responsibility for your actions, we can assume that you're prepared to pay out about a half a billion dollars
(OMB values a human life at 7-9 million dollars) to the surviving families of the people your actions were responsible for killing?

I knew that there were some high rollers on HN, but I find myself surprised to encounter someone so eager to "take responsibility" for the consequences of choosing to expose other people to a deadly contagion.

I imagine most people, instead, would find it much more attractive to obey the mandated best practices and thereby be morally and legally absolved of the consequences of whatever infection they inadvertently spread in spite of those efforts. And... hopefully spare themselves an excruciating (and potentially debilitating or deadly) illness at the same time.
https://morningconsult.com/wp-content/uploads/2020/03/200310...

All registered voters supported M4A with ~55% (see POL19) according to a recent poll. I'm not really sure what to do with a twitter image, but I'd be interested in seeing their numbers.
Good resources to learn about computer networking
That feels like an orthogonal issue. I mean, what if the best way to arrange the transistors turns out to be a one-instruction set computer? It's not obvious to me that adding more instructions is a better use of the transistors available in the surface area we've got to work with.
We make water meters, radios for water meters, mobile radio receivers that go in utility trucks, fixed radio receivers that go on towers. I test the new and old products, using a lot of Python to automate and speed up testing.
Well, "the economy in the abstract sense" is the thing that is employing people.

Claiming that those people would still definitely be employed in a different economy is simply saying it would be the same economy. And the claim was that this utopian new economy would contribute to the "welfare of society as a whole, and most individuals within that society", so I'm curious who isn't covered under that "most".
Indeed; just like with a house, on Linux things are always breaking.

My best analogy: buying a car from Lexus and taking it in for service every few years vs. building a car in your garage from plans you found on the Internet.
Yes, Prometheus is an implementation - the HN text has a limited number of words, so I thought "Prometheus implementation" conveyed the fact Cortex was trying to be a 100% API compatible implementation of Prometheus, but with scalability, replication etc
SEEKING WORK | Scotland | Remote

Technologies: .NET/.NET Core, C#, SQL/NoSQL, PHP, Python

Resume/CV: https://stackoverflow.com/users/story/419?view=Cv
Thank you for recommendation. Just to clarify I have not subscribed the Google Cloud Platform. Scammer did it. I was not aware of such a platform. I have never used it in the past. This is not a matter of paid support. I dont need this support cause I had never necessity of usage this platform in the past.
What is tantamount to educational malpractice is the pathological revulsion javascript developers have for their own language, such that merely teaching newbies how to actually write it without six proxies, three other languages and a framework to protected them is considered harmful.
Onboarding Continuity – Building SaaS #50 · Matt Layman
> Daily meetings participants jumped from 10 million in December to 200 million in March.

I am really impressed that the tool has remained stable and performant.

(This doesn't mean there's not things they got to fix regarding security and privacy; both things can be true, I'm still impressed with the technical quality -- AND wish/hope they use what is apparently some high-quality engineering ability in a more pro-user way).
Fraunhofer is already field-testing an app based on that concept
This is a good point, the fact that browsers won’t load JS modules over the file:// protocol is not the fault of JavaScript.
"While we never intended to deceive any of our customers, we recognize that there is a discrepancy between the commonly accepted definition of end-to-end encryption and how we were using it."

https://blog.zoom.us/wordpress/2020/04/01/facts-around-zoom-...

Because "thousands of enterprises around the world have done exhaustive security reviews of our user, network, and data center layers and confidently selected Zoom for complete deployment" and they didnt "design the product" for these "new, mostly consumer use cases", it means that up until now they couldnt have forseen that lying about e2e encryption to sell enterprise subscriptions was an issue.
It's rather fantastic that congress spends $2,000,000,000,000 to handle a virus, where $0 of that goes to paying for treatment of those infected by that virus...
I still don’t see how that’s not vanilla.js
I doubt non-technical users are savvy enough to find out about this problem and they probably won't remember to blame you for something clearly beyond your control.

I know it's the kind of thing that can randomly keep a person up at night, but I think you can probably safely forget about this awkwardness and move on.
> The odd thing to me about it is that futures seem largely positive. Is it because the CAREs act or dropped labor is supposed to equal money not spent and thus meant to shield companies ( and investors )? I honestly do not get how market interprets it as good news.

Personally, I think things are happening too fast to gauge what investor activity is actually reacting too. There can be big movers who are still in decision-making stages and their actions have yet to be made, or they acted hastily and sold, then come back and repurchase, etc.
The basics are:

- keep this private

- keep this secure

- use hardware acceleration to not melt my laptop

- make it easy to setup and use

They’ve got 1/4.
Best entry-level online marketing jobs you can start
It's worth noting that the Virtual Console SNES emulator doesn't really have a reputation for inaccuracy. For sure it's not as accurate as Higan/bsnes but by all accounts it's pretty decent. Of course it was made for running in different constraints. It runs many games very well on the New 3DS' 804MHz ARM11 or the Wii's 729MHz PowerPC G3. Bsnes won't run much in those constraints.
What is the source of that imgur meme? Here is an article with a link to the pdf which claims 55% of voters are in support of M4A

https://morningconsult.com/2020/04/01/medicare-for-all-coron...
Sure, but those aren’t common uses for $.ajax. Fetch can get you 95% of the way there.
British Airways will suspend over 35,000 of its employees
The lockdowns and stay-at-home orders as measures to slow the spread of the virus has greatly affected the aviation sector.

Amid the worsening coronavirus crisis, the airline industry has taken a hard blow with a drastic decrease in passenger travel.
I'm not sure I could adapt at this point. Yes, I know how to use encryption to properly secure a conversation, but that assumes I can trust my device, my recipient's device, and that the underlying algorithms are really as unbreakable as advertised.

At this point I go through life under the assumption that the government (or bad actors within the government) could eavesdrop on every facet of my life if desired, and live with the anxiety that entails, which is low enough to be drowned out by other, more traditional anxieties. And I focus on political solutions rather than technological ones.
Sure, just not features that make any money. Those are capabilities you work on after you've already captured market share.
Love that talk. :)
The DS version is an excellent port - much better than the Final Fantasy ports to the GBA, because they didn't have to compromise on the resolution. It's selling for about $55 now.

(Yes, I know this is quite different than having it on the Switch, but I mentioned it in case you have a DS and wasn't aware.)
This is not correct. I have some sympathy for them, maybe this was what was needed to grow with a dev center in China. They might have been pressured by government authorities.
Welcome to Hacker News, and congratulations on making your very first post ever! You can start by reading misterman's posting history to familiarize yourself with what "sealioning" is (although you may need to set "show dead" in your profile to even see all the worst ones that have been downvoted, flagged, and killed), and refrain from doing it yourself, please. I'm sure your entire life will be more interesting and less sheltered after you have had the opportunity to read all the insane things than mistermann has written, and feel free to read my posting history for much more insanity. But I'm not holding my breath, so don't worry about me.
Got to maintain the principle that people who can't afford their own healthcare get to suffer. That is far more important to the US system than other outcomes.
Very cool. Works on iOS with iSH surprisingly.

FOUND index.html
FOUND favicon.ico
The trouble is that the argument isn't that pressuring providers to eliminate end to end encryption itself violates the 4th Amendment, but that, in the new scheme required under EARN IT, that when a provider does scan your information, that will violate the 4th Amendment.

So at the time this argument applies, you have provided them readable information and the doctrine would apply.

To be fairer to EFF in the light of the morning, their argument actually does account for the third-party doctrine: it instead rests on the theory that courts would find EARN IT so coercive that the service providers should be effectively treated as an arm of the state. I take a pretty dim view of the likelihood of such an argument's success, but it's a game attempt.

The 1st Amendment case is probably stronger, especially given the tendency toward maximalism in that area by the Supreme Court lately... but I wouldn't call it very strong. Defeating this politically is a much better bet.
What’s not nice about POST?

fetch(url, {
method: “POST”,
body: “a body”
})
Haven't Thiel donated 7 figure sums to Trump's campaign?

After contracts are being awarded left and right - I cannot see those donations none other than bribery.
Little known fact is that peter thiel used palantir analytics to help Donald trump understand where to campaign.
That is a reasonable line of thought, but incomplete. How many lives are we risking by tanking the global economy? That seems like it should be a more quantifiable risk. It becomes a trade-off between the amount of lives we can calculate will be lost via our pandemic-prevention measures (and to what degree of certainty) and the number that might be lost without them (and to what degree of certainty).

The trade-off is between loss of lives one way versus loss of lives another way.
> If I'm laid off, I'll first look at my savings and hit the job market before I consider driving right into unemployment.

This is a great case of “the world doesn’t revolve around you.”

1. Most states only give you a few weeks to apply.

2. You already “pay” for your unemployment several times over during your career through unemployment insurance. Your employer pays this, but they could have paid you more if they didn’t have to.

3. It’s income. You still pay taxes on it. It’s not free money out of nowhere.

Use the tiny social net that you have instead of waiting too late and out of money and having to rely on family or friends.
SEEKING WORK | Bishkek, Kyrgyzstan | Remote

Technologies: C, Java, JavaScript, Common Lisp, Erlang,
PostgreSQL, Redis, Node.js, React.js, full-stack, systems programming

Résumé/CV: On request

Email: kamils80@gmail.com
If the economy bounced back to what it was on Feb 28th, what is your acceptable number of dead? Would you trade 9 million unemployed for 9 million dead? Do you think that wouldn't have an effect on the market as well?

We're in it now, and no amount of wanting to hit the abort button will change anything. It's a fantasy to assume people will just go back to work, the economy will get better, and everything will return to normal, aside from a hot new opportunity for mass body disposal services.
> Competitors, take note. Get the basics right - don't concern yourself with fluff - and customers will flock to you.

IMO they did take note and that's why we are seeing the deluge of articles about Zoom.
> defeating the point

Have you considered that some people trust Apple but don't trust Zoom? At some point you have to trust somebody, right?
While we are already seeing a lot of mixed carts indicating that a two-sided effect is achievable, our current model assumes that creators will funnel in the majority of traffic to their own stores. The creators we work with have already build a direct channel with a fairly large and unique set of people (anywhere from 50K-millions). Size and other parameters of their audience is what determines whether this is a suitable fit for them. Since we rely on data to make that decision, a strong social media presence is necessary at the moment.
Argh. Odd statements about "Erlang was implemented in Prolog, therefore, it's an FP language" aside, I was interested to read more on Elixir's meta-programming, and was assured that this code was a great example[1]. But there was no further discussion, just a Github link.

For anyone else wondering the same, the Elixir docs give more insight into quote/unquote[2]...

...but I'm still unsure as to why the Unicode code uses it. Most of the time it's unquoting byte_size - but why does what looks like a function call need to be unquoted?

It looks like it's defining the same function with different pattern matching clauses using it, e.g.,

for codepoint <- cluster["CR"] ++ cluster["LF"] ++ cluster["Control"] do
def next_grapheme_size(<<unquote(codepoint), rest::binary>>) do
{unquote(byte_size(codepoint)), rest}
end
end

Would define next_grapheme_size with an arg pattern that matches each code point, effectively creating a pattern match switch without boilerplating it? I think? Keen to hear from someone who knows Elixir.

But yeah, some more detail on a) what it's doing and b) why it's awesome would've been nice.

[1]: https://github.com/elixir-lang/elixir/blob/0d32ea6bc4bcbd626...
[2]: https://elixir-lang.org/getting-started/meta/quote-and-unquo...
> Contact tracing is likely the top reason Singapore. S. Korea (and to a lesser extent Japan) were able to selectively & aggressively contain infections, along with active policing and enforcement.

That and masks on people's faces.
Thank you for contacting my office. Your thoughts and concerns are very important to me and you will receive a more detailed response shortly. I sincerely appreciate your patience in waiting for this response, as our mail volume is often significant.

If this is a request for assistance with a federal agency or an immigration case, please contact my Department of Constituent Affairs directly by phone at (212) 688 - 6262 or email casework@gillibrand.senate.gov .

Thank you again for contacting my office.

Sincerely,

Kirsten Gillibrand
United States Senator
in america we call it lobbying
Do you know 100 people? Pick one.

Crass, no? So what if it's 1%. It's life. Nothing else matters.
He Helped Discover Evolution, and Then Became Extinct
It's kinda several things

- The OSS product

- The Storage Format (I guess)

- The Interface for pulling metrics (https://github.com/OpenObservability/OpenMetrics)

I haven't dug into cortex even a little, but the other comments are suggesting it's API compatible but essentially claiming they're production ready because they'll give you things the OSS project won't give you out of the box, i.e. long term storage and RBAC.

Looks like a good thing.
Then again for the part of that which is related to corona it’s mostly through the mechanism of temporary unemployment, where the state takes over paying part of the paycheck for the duration of the time that the workers can’t work, and they are expected to return to their jobs once the lockdown is over. Of course not all companies will survive post-corona but it seems like an approach that potentially better preserves the social and economic tissue.

cf https://www.nytimes.com/2020/04/01/business/france-coronavir... (not about Belgium, but the approach is common to multiple EU countries)
I don't think "caught" really is the proper word to use, when they credited the PCSX-Rearmed project in the menu of the Playstation Classic. It might be considered somewhat embarrassing they didn't make their own better emulator (I guess?), but it's not as if they were actively hiding it either.
The US economy looks more like a pyramid scheme than ever.
Whereby (https://whereby.com/) is great if you don't need large groups. Nothing to install.
or in python 2 (should be on installed by default on most distro):

python -m SimpleHTTPServer

or python3 :

python -m http.server
It could if your service is valuable enough.
I personally like that Phoenix is kind of a middleweight framework, but at least one of batteries you mentioned as missing is being addressed. José is working on an authentication solution built into Phoenix.
Go ahead and name them, please?
This exaggerates the problem. You can enroll in ACA outside of open-enrollment if you have a qualifying event, such as losing coverage through a job. You just have to submit paperwork that you lost a job.

I'm not saying open-enrollment wouldn't be preferable, or that the administration might not be trying to encourage people to enroll, but the option is still open for many, in theory.
I agree!

The MDN docs are from my experience the best browser frontend reference available.

This site however covers a different need: guide/howto oriented documentation, which is often what you want.

> Doing & Learning things in plain JS we can learn fundamentals.

To this I have to add that I often do write plain JS supported by only a few, small libraries such as is.js, axios, json-schema and so on. This is regarding small to medium sized projects and/or features.

This can easily save time, setup and mental energy, as long as one follows a consistent, simple structure. And on top of that, the fewer dependencies you have, the less friction.

But it also means that one has to have a bit of a deeper knowledge of the available frameworks and tools, which can manage complexity with growing features, because you add them incrementally and only when needed and so on.