skysight-inc/HackerNews huggingface dataset:
If the Snowden slides about PRISM are to be believed (and we don't have any reason to doubt their credibility), then ever since October 2012, your iCloud data (device backups, email, message history, photos, notes, et c) are available for download by the US military intelligence community directly from Apple servers, with no warrant required (rubber stamp secret police FISA "court" orders are not warrants and they have no oversight).

Apple has, of course, denied this:

“We have never heard of PRISM,” said Apple spokesperson Steve Dowling in a statement. “We do not provide any government agency with direct access to our servers, and any government agency requesting customer data must get a court order.”

Shortly thereafter, the heads of many of the affected companies met with Obama at the white house to coordinate their next steps at counteracting the damage. The initial cover story was that they were meeting to discuss the healthcare.gov disaster, but it turned out that the meeting was actually about the NSA's comprehensive illegal spying programs being disclosed.

https://www.nytimes.com/2013/12/18/us/politics/as-tech-indus...

Reuters reported in January of 2020 that an ex-Apple employee told them that Apple Legal scrapped a 2018-2020 project to do clientside end-to-end encryption of the iCloud device backups (which would render this collection useless) as a result of pressure from the US government.

"That person told Reuters the company did not want to risk being attacked by public officials for protecting criminals, sued for moving previously accessible data out of reach of government agencies or used as an excuse for new legislation against encryption."

https://www.reuters.com/article/us-apple-fbi-icloud-exclusiv...

Non-e2e-encrypted iCloud Backups are on by default for every single iOS device if it is set up with an Apple ID.

Please do not believe the Apple marketing narrative about individual privacy.
Learn Istio: A Service Mesh and Istio Resource List
> sometimes wonder if the people claiming to hate client-side technologies or disable JS in their browsers have actually ever had to build a complex website to put food on their table. My bet is the answer is often no, or they are a contrarian in general.

I've been developing single page applications, mostly, for six years; and I generally don't enable JavaScript on a website unless it is otherwise broken and I actually care to use it. I'm developing a website right now that has some persistent elements (video call, interactive charts) that don't play well with server side rendering. For the elements that are fine without it I prefer to render them on the server when there are enough of them, but ultimately there are limits.
Been down this road before, much harder than it looks. MITRE techniques can be deceptive in that you think you can detect on a technique but that is true only for the specific attack scenario. Example: you can detect anomalous scheduled task creation, but is it because you are looking for specific command lines? If so, why can't attackers just use .NET ? You can detect cred dumping because procdump.exe or wce.exe is seen,but what you are not looking for process handles to lsass. It can lead to a false sense of security if you're not careful.

From a threat hunting and detection perspective, I am so glad they are sharing this tool. It becomes very tedious very fast when you take things like this and apply them against the highly nuanced context of your environment.
I guess there's a lot to be said for having a good community of users who love the product and want to help contribute to it to make it better. Active creators rather than passive consumers.
> ... education were vastly more accessible than they are today.

Diplomas were more accessible. Education has never been cheaper.

This isn't an attack on your point, since what people really want are the diplomas (and the comfy middle-class jobs they led to), I'm just pointing out that everything that runs on information transfer[1] is incomparably cheaper in 2020 than in 1980. The college tuition problem isn't an economics of information transfer problem, it's an economics of status transfer problem.

[1] All of which you dismiss as "hollow digital toys" somewhat unfairly I feel, but I don't actually know enough to have an informed opinion on 1980 vs 2020, so I won't get into it.
Wait... WHAT?!?! I mean if I think about it, yeah that makes sense to have been built but WTF?!?

Care to share which email client it is? It should be killed with fire!!!
The calculator on my desk is a (relatively) complex set of circuitry but it sure saves me a lot of time when I do my taxes
Yeah, I think this is one of those things where, when the normals catch on, there's gonna be pitchforks and torches.
Facebook and Google probably feel the same way every time privacy conversations come up. Too bad. Walks like a duck, sounds like a duck, must be a duck. Don't care what country a company is from, if you keep doing the same thing over and over again, I'm going to have this opinion.
Let the page refresh, what's wrong with going to `/orders/{order_id}` page to get information about the order? It is REST-ful and static

Exactly. As a bonus, you automatically get the behaviour associated with a link that browsers already implement: people can bookmark a link for later use, open it in a new window, etc. All of which would need extra effort (and thus also easily break) if it was just a clickable element invoking some JS.

I've had some pretty annoying conversations with customer support and developers about things like this; almost always, the response is something like "we didn't think you would have a need to do that". They would not have needed to think about it at all, and it would work for me, if they had just used a regular link.

That said I'm not totally opposed to SPAs; highly interactive apps, e.g. realtime games and such, would definitely benefit as they wouldn't really make sense as a linked set of documents. But for everything else it feels like they not only reinvent the wheel, but make it square.
OP said “Amazon is their biggest competitor” because of Amazon Prime video
Not them, but you can’t do that at every company.
Here: https://report-delta.now.sh

SourceHut is still the winner of most, but GitHub is a lot faster than in the report on forgeperf.org.

I think the perceived speediness of GitHub for me can be mostly attributed to the fact they don't trigger a full page reload for every navigation. Whereas SourceHut is rendered completely server-side AFAIK.

(I meant GitHub in my previous comment, fyi.)
A close enough gravitational interaction, even if not a collision, could do sufficient momentum exchange.
XPlane 11 has Ortho4XP which will build maps from online satellite images. It's interesting that most Ortho4XP users use Bing as their satellite image source because they are more uniformly colored and have fewer "stitching" lines between areas.
But why change it then? If the article has no connection, then the people complaining are the issue, they should fix themselves, it's not the author's job to cater to that.
Not all of them. Without the overhead of rendering everything to a virtual DOM and then doing a diff, performance can get pretty close to native javascript--the sweet spot the author mentions gets bigger. Plus since the framework is mostly just a compiler, the bundle issue is less of a big deal.
> many airlines will go bust before this is done

My bet is there will be a large number of hard hit industries (e.g. airlines, cruise lines, hotels, car rental companies) which will see widespread ch 11 and bankruptcies. Makes sense if then they can reemerge after eliminating a good chunk of debt and also roll back labour agreements. Likely a bunch of consolidation/merges on their way as a result too.

Should see the ball start rolling after the mid-year results come out early July.
Being slow to criticise, particularly with colleagues you have to work day in and day out with, is critically important.

That said, much of the FOSS currently available is either itself crap, or built on libraries and/or toolkits that are crap. I cite specifically anything of the GTK flavour, many popular things built in C/C++, and to a lesser degree QT.

Why is this? Writing capstone technology (compilers and languages) is very hard. Many industries start life fragmented, but looking now at the tech landscape, sadly there is more hegemony in the proprietary world than the open source one.

If FOSS is ever to be adopted by a wider community that is inviting to newcomers (both users and hackers), this has to be addressed. It is not being addressed, and the power and elegance offered by the tech giants (Swift, C#/.NET etc.) continues to lap open source equivalents.

One example I'll cite is Inkscape. I now honestly believe it would have resulted in better software if this has been written once per platform (WinForms/WPF + Cocoa) rather than with GTK. It's years between minor bug releases, and it gets slower with each release. The (just released) 1.0 is unbearably slow (i.e. unusable). I've spent many hours trying to get familiar with the codebase so I could contribute to it. There's no documentation to speak of for developers, and the little that I've grasped so far leads me to thing it's better left to rot. The core is based on Sodipodi, a project abandoned in 2003.

FWIW I have started writing a clean room replacement in Swift/AppKit, but I'm considering altering this to Swift/UIKit for iPad so it'll be cross platform (albeit Apple only).
It seems to me that combining age and minisign using the sign-encrypt-sign method and two keys would give you signed and authenticated encryption.
The missing piece: how do you convert from blog comments to files reliably?
> coworker saying "Oh, I bought this awesome coffee maker on Amazon last night!"

This x1000.

I have seen people invite others to eat lunch at restaurants that only accepted credit cards in order to elicit such a data sample.
They can be taken by managerial types to obfuscate things in a b.s. way but they really do help organize efforts and map adversary capability in a way that lets you prioritize resources.

I've seen both sides, without this people just use intuition and whatever is trending in the news cycle these days.
Interesting.

My take has been that they have taken a conservative action with regards to the virus, I've seen locking down as a way for the government to slow down time to try and work out what is going on before then taking a more considered point of view.

There was so much confusion in mid March about what would happen and lockdowns seem to have slowed things down a bit to get a clear head about what the path through is going to be like and I hope they don't rush their next decisions as there are so many things that are still not known.

In the future these current decisions could be wrong and will be wrong, I'm hoping that they aren't badly wrong but who knows... It seems to be considered on what mainstream scientific consensus but that's been wrong before but I feel it's the best we have given the situation.
> 4) The median age in the US is over 38 yrs old. Way past the education and career-building ages.

I'm 39 and generally dissatisfied with the work I'm qualified to do, and I might need to work another 30 years at the rate we're going (fml). I'd jump on a government grant for training in an industry with promised growth at this point.
Nobody is reducing your comments. That is what you wrote.
Uber has the same problem as Groupon: scaling into new markets requires a team of people for each market. It doesn’t have great scaling properties simply by virtue of being a tech company.
Delaying deaths (slowing the spread) doesn't mean that "deaths" are prevented - they are still going to happen just spread across significantly larger timeframe, however, the extreme measures taken to slow down the spread have already and will kill, starve and impoverish way more people and do way more damage overall.

If quarantine made the virus go away (which it doesn't) - or it bought enough time to make vaccines or effective treatments, then it would make sense, but it doesn't.

All it does it make it seem like you are saving lives, while in effect the deaths are just spread across a longer timeframe and now you're killing, starving and impoverishing people from the severe and dire economic consequences.
For anyone who hasn't played Diplomacy, it's a very interesting game but can take a very long time to complete. There's a round of negotiation where you can meet with other players and coordinate moves, then all moves are executed at the same time. Much of the length of the game is dependent on the personalities involved and any rules you apply to limit round length.

I started a game at 7 PM and left at 4:30 AM. None of the players had been eliminated, but we all had a great time backstabbing.
Check out my geometric algebra implementation in Julia language at https://github.com/chakravala/Grassmann.jl
10 hours is easy. My brother lives in Europe and calls our parents in Aus every week (9-11 hours difference depending on DST). Usually his evening/their morning, but the reverse works well also. Just message them and set a time in advance.
The Amazon is much younger; much of what is jungle today wasn't before the Columbian Exchange.

There is a theory that American reforestation was responsible for the Little Ice Age.
Ask HN: Free Alternatives to Google Classroom
I work in a university and we are looking for a temporal free alternative for Google Classroom while the official campus is complete. I'd appreciate any recommendation.

Of the whole suite, we are more interested in the part that the students can send questions to the teacher assistants a get a reply.
That's fair. Unfamiliar about how this works, since ntfs-3g seems to drop root after mounting.

I would still not be comfortable about giving mount permissions to ordinary users (even through a setuid layer since they're known to cause security issues)
-O2 is often the only usable output level in some scenarios even during development so it's important to keep it usable in development iterations, -O3 is "I don't care about compile time"
> Features that should take a week to build now suddenly have complex client side state management requirements (to name one issue)

This sounds like bad system design rather than a problem of React.

In general, I find React hate massively overblown. The problem seems mostly to be that everyone is using it, and "everyone" in the case of frontend devs is all over the place in terms of how they got there, what they know to do, and what they know not to do. If you're not careful, all of the JS ecosystem can give you a lot of rope to hang yourself with. The relative accessibility of webdev is a blessing and a curse.
Quite promising: one thing that would probably accelerate adoption would be to provide at least one language parser that can go to/from the format to a data structure of some kind.
DC resident here, I'm really interested in learning more
Floppy-Disk Keyboard
Wouldn't a merkle tree, like torrents or dat use, avoid this? You'd only have to generate a hash of the changed chunk, then it's really low cost to update the root hash.

https://datprotocol.github.io/book/ch01-02-merkle-tree.html
I haven't seen a bootcamp teaching Django recently, so I can see where that might be true. The cheap people are overwhelmingly JS.
Netflix stores their data on AWS (and probably spends more money than Walmart on it). Amazon could use that money to improve Amazon Prime Video (which competes directly with Netflix).
As said in another reply, gearbox is a trial to achieve better performance than current frameworks.
I'm not offended, and I don't mind if I get pushback. This is just where I am in my current understanding of life and things.

Hostility breeds hostility. Cultural segregation raises the barrier for empathy.

I don't always practice what I preach, though. In a recent thread I admitted a preference for language that puts censors on edge.
there are people in battle.bet ladder. you can’t use mods there. you could play open but it’s all hackers. if you want to beat hell mode you have to go as a firewall / frozen orb mage or a necromancer that uses skeletons and corpse explode. you’ll need an act 2 merc as well. good luck lol. if you can get one friend to tank you can do it much easier.
I mean, it's not like there needs to actually be kids in the game :P
The data doesn't come directly from Yelp AFAIK. It goes throught Apple's servers. Yelp isn't queried directly.

Again this is from my memory of MITM proxying iOS.
While there is an instrument on panels that shows when turns are coordinated (a turn coordinator), fixating on it isn't really possible, and it's better to develop a feel for what coordinated flight is like, and be able to adjust automatically. Replicating this feeling in a sim is difficult because it's the interactions of motion and rotation that cause flight to be coordinated or not.
> a theory that the Sahara alternates between desert and green every X thousand years, dramatically altering the Mediterranean, European, and African climates.

This is a funny way to phrase the causation. The state of the Sahara is surely not exogenous -- the transition must be caused by the climate. (It can then contribute further, but why attribute the changes to an intermediary effect?)
This is really a book review; if you want all the figures and facts, read the book it's reviewing and discussing. Heck, they even tell you they won't be repeating it all there!
How did our parents thrive without permanent records of all their personal phone conversations?
The fact that HN would rather downvote this comment and is OK with people getting killed is absolutely disgusting. I've literally had both friends and family die because of bad actors like Elon.

HN you disappoint me, but I guess it's comes as no shock when you're obsessed with VCs and making a buck, instead of trying to help others.
That's what the C devs said about all the people learning Java.

"We are raising a cohort of developers who knows nothing about memory management."

Sure, there are things you do not know if all you know is React, but technological changes make it irrelevant in all but the most niche of cases.
Personally, I'd be totally happy for the game engine to fill in the details. It's more about the familiarity/general sensation of driving through places known places and exploring new, real-world ones!
What does oversight mean? If FISA warrants were reviewed by a second judge, would that not also be a "rubber stamp"?
This is true but only at present.

An analogy would be the weights of pretrained machine learning models. They're still serializable, though it's true they're less semantically trackable than a well-written TikZ snippet (which, by the way, I haven't seen many of in practice!)
React is not the problem, it's fine as a component in a page. The issue is the abuse of SPAs.
It's not my project. I am using it from within Test Flight. It is great for non-technical people who just need to temporarily disable Pi-Hole in order to get some sort of functionality to work that wouldn't otherwise.

One idea that I want to explore is to create an Alexa Skill to temporarily disable Pi-Hole. This has probably been done already.
I like this a lot and will think about using it in an app I'm planning to build, but I have one quibble with something in the docs:

> you wouldn’t build a web app in markdown

I'm willing to bet it's been done and has already been a Show HN. After all, there's "My blog is now generated by Google Docs"[1] currently on the front page of HN. If not then it's only a matter of time :)

[1] https://news.ycombinator.com/item?id=23134101
That's not necessarily correct. True the US is a top manufacturer but a lot of key personnel are imported from other countries since they can't be found in the US.

https://www.myvisajobs.com/Reports/2019-H1B-Visa-Category.as...
It outweighs all the end-user-facing cons by a lot, because companies need us, and our salaries are expensive.

As a user and developer myself, that's the sort of selfish attitude that really really angers your users.

I sometimes wonder if the people claiming to hate client-side technologies or disable JS in their browsers have actually ever had to build a complex website to put food on their table. My bet is the answer is often no, or they are a contrarian in general.

I've worked on "complex"[1] websites in PHP, all static/server-side rendered; zero need of JS, near instant load times, ultra low bandwidth and server CPU utilisation, and don't even need to think about "browser support" because it'll be usable with anything from the past two decades.

[1] complexity in terms of features and usefulness, not in terms of how much code and resources it needs. Unfortunately a lot of developers seem to think complexity as in the latter is a good thing.
Good read. One thought-provoking bit for me was:

> Waymarking was previously employed to avoid explicitly storing the user (or “parent”) corresponding to a use. Instead, the position of the user was encoded in the alignment bits of the use-list pointers (across multiple pointers). This was a space-time tradeoff and reportedly resulted in major memory usage reduction when it was originally introduced. Nowadays, the memory usage saving appears to be much smaller, resulting in the removal of this mechanism. (The cynic in me thinks that the impact is lower now, because everything else uses much more memory.)

Any seasoned programmers would remember a few of such things - you undo a decision made years ago because the assumptions have changed.

Programmers often make these kinds of trade-off choices based on the current state (typical machines the program runs, and typical inputs the program deals with, and the current version of everything else in the program). But all of those environmental factors change over time, which can make the input to the trade-off quite different. Yet, it's difficult to revisit all those decisions systematically as they require too much human analysis. If we can encode those trade-offs in the code itself in a form that's accessible to programmatic API, one can imagine implementing a machine learning system that can make those trade-off decisions automatically over time as everything else changes via traversing the search space of all those parameters. The programming language of today doesn't allow encoding such a high-level semantic unfortunately, but maybe it's possible to start small - e.g. which of the associative data structure to use can be chosen relatively easily, the initial size of datastructure can also be potentially chosen automatically based on some benchmarks or even metric from the real world metric, etc.
Ha - I mean... self made or not that's freakin' amazing. I envy that stability and hope to be there myself some day =)

I'd personally say, me too in so many ways... I had my struggles with an early death in the immediate family but it did provide the money to support me into my early start!

Here's the thing - struggle or not I absolutely have been around poverty and have actually done a bit in advocacy in the area. I don't say this for a gold star - just to qualify what I'm about to say.

Being poor is hard. Like really hard. It's expensive in sooo many ways and I freakin' wish more of us had empathy for those people that are struggling in that situation. I see WAY too many folks on HN that are comfortable in highly-paid positions like myself that don't acknowledge these things and even sound angry in regards to how people are "suppose to be"... lemme tell ya... as someone with struggles - man sometimes it's really really hard. Even with some of the insane privileges that I've been afforded.

All-in-all ... I wish more people admitted "man I had a lot of help" regardless if it's a computer in elementary school, or investments in education, etc. I know this has a negative "SJW" spin to it these days, but man... I have been privileged. holy crap I've been privileged. Doesn't diminish my accomplishments, but we need to come to terms that as a society everyone should have as equal of a playing field as possible..!