skysight-inc/HackerNews huggingface dataset:
Businesses built wholly on top of another business, much less a flaw in how another business operates a tiny portion of their overall business, are doomed to fail. They are 1 policy change at Google away from losing their intake funnel -- a funnel that provides no value to anyone but Slice, but that is a separate discussion.
Why should they be neutral and how would you enforce that? What does "ideological neutral" even mean?
> A while later /../ migrate to a new platform. I need to tell every buyer that their account is moving. But some have unsubscribed from all emails.

They unsub'd all meaning "no more emails ever" as you said. How do I tell them the stuff moved if they don't want to be contacted ever again ever?
And DNS doesn't?
There's also the question of who it is that is predicting violence (or giving a dog whistle signal to his followers that violence is OK.) This is not a blue check mark living in his mom's basement predicting (or asking) for violence, it's the chief executive of the United States.
Too much work, tbh. It's my mailbox, not theirs.
The PHC string format https://github.com/P-H-C/phc-string-format/blob/master/phc-s... (used by stuff like Rust's LibreAuth/BoringAuth) is a less fancy but probably better-suited-to-passwords solution, because it can indicate salt values and additional parameters.
Youre right. Before twitter took this step I was unable to decide whether to read the president's tweets. Every morning I am forced by twitter to read trumps tweets. Thank goodness this is no longer the case. /s
I believe you can use this Gatsby theme to get the behavior you're looking for https://github.com/aravindballa/gatsby-theme-andy
> anyone leaning toward the idea we should exterminate mosquitoes

Is this actually a thing?
> From the sidelines, I'd think the answer is that your email platform should have that feature

It does. But the user clicked "No I want to unsubscribe all"
Jeff Weiner steps down as CEO of LinkedIn after 11.5 years
Hell, why not use real bullets then? After all it's supposed to be a deterrent. Don't go looting and you'll be fine.

/s
Maybe companies should be allowed to do whatever they want on their own websites
Why draw the line at "their own citizens"? Have they posted suggestions of shooting people who aren't their own citizens?
>Don't stalk people

The problem is there is no consistent definition of stalking in this context. Which could be the difference between a store manager watching how people move around a store vs following you home and going through your trash.
I have to say that aside from a few things* this is what I consider the perfect blog design in terms of structure, styling, layout.

* use of HTML tables, month-first dates
This entire event is effectively self-defense from a community that has felt terrorized by the police for decades.

It could've been easily prevented by actually arresting someone that committed abject murder, but the city and the police chose to instead defend a man who has killed multiple people in the past and got away with it scott-free. So when people feel like justice no longer exists, there should be no surprise that they get angry.

It doesn't help that the police also employ agent provocateurs whom help incite riots and looting so that they can use more violent tactics with glee.
No, in that case the email client shouldn't be making any remote requests.

Although note that IIUC the gmail default is now loading remote content. (Although they do load it via a proxy so that your IP isn't shared).
End corporate involvement in politics! Oh wait... Its okay if they attack republicans. /s
Of course it is, very popular among the Thought Leader circuit: https://www.sciencealert.com/bill-melinda-gates-funding-scie...
Cutting off my post right before I say "except they should have told them where they should go instead of arresting them of course." is incredibly misleading.
A friend mentioned this to me the other day and I think it's a cool piece of Internet history. It's still operational and I wonder how many people are using it. The fee is $15.95 per month. It has an associated YouTube channel from a few years ago: https://www.youtube.com/channel/UCrF0GuFv5Rgc2M8llAeMdEg
Famously, the million dollar book feedback loop: http://www.michaeleisen.org/blog/?p=358
> A lot of websites also consider analytics cookies as essential

For a lot of websites, they are.
How else can you even store a consent for cookies/localStorage? You can go around calling people immoral and incompetent, but what is the actual way to ask for permission to store data?

If your contention is that it is immoral or incompetent to store any data except through some specific user interaction related to those data, sure that's an opinion.

But if your job is literally "tell me which other pages users go to after this one", it's not really that crazy of an ask.

The law seems to call upon you to make it conspicuous, but when you make it conspicuous it is annoying, the law then calls upon you to make it not annoying.

The better solution, in my mind, is just making cookie control features more visible in browsers. They work great, and it's the right place for this form of consent.

Malicious actors abuse the current circumstance, because it relies on there being a responsible party with collateral to complain against. This is one of those times where the engineered solution is better than the social one.
I initially noted that Twitter has very clearly and intentionally positioned themselves as what I can only think to describe as a public platform. Private malls simply do not do that.

You need to actually read the private mall cases, since the malls actually held themselves out to be replacements for the public square, i.e., to replace Main St and the public park where people used to freely meet and discuss stuff. There is a reason these cases are so important to First Amendment jurisprudence.

The point of the private mall cases is that it doesn't matter if they hold themselves out to be replacements for the traditional public forum, because they're not actually a public forum--they're still just privately owned venues that can withdraw their openness to public expression at any time as a matter of their own first amendment rights.

Twitter is just the new private mall. It may hold itself up to be a public platform, but as a private entity, it can revoke that presentation at any time as a matter of its own first amendment rights.

It is my understanding that factors such as intentions and size of influence are important in cases like this

You would be wrong. This has never been relevant to first amendment cases. Moreover, at the time of the private mall cases, the malls had significantly more customers on an absolute and proportional basis (out of the US population at the time) than Twitter does today in the US.

When the majority opinion goes out of its way to bring such an issue up and makes direct comparisons, I think it is reasonable to assume that they would be open to entertaining such a line of argument.

The ruling does not "go out of its way" to compare social media platforms to public forums. In mentions "public forum" only once, offhand, as one of the ways that social media could be used by the appellant whose civil rights were being violated when the government tried to bar him from using social media. And even then, under the lineage of the private mall cases, it's irrelevant because private websites are still private websites with their own first amendment rights to control the speech that appears on their websites.
Removing PostgreSQL Bottlenecks Caused by High Traffic
Liberal politicians would be smart enough to call for decentralized syndicated social media solutions. Democrats aren't a party that needs constant media attention in order to polarize America.
Yet, Kaepernick's isn't hidden (which also pushes violence).
Thank you for your work! I believe once it's properly documented and marketed, it will be very popular.
Don't remember that but there's this:

https://www.wired.com/2007/05/spying-in-the-death-star-the-a...
For J. Random Twitterer, sure. The President does have whitehouse.gov available, though.
Here’s another. https://www.post-gazette.com/news/vote2020/2020/05/15/Allegh...
Is there recent research on the effects of political polarization on the mental health and sanity of americans?
Not only sub-optimal, but unsuitable. Use algorithms specifically designed for password hashing: argon2 / scrypt etc.

SHA256, SHA512 and Blake* algorithms are suitable for secure checksums and HMACs, but not password hashing
I do not think that this would work for the hashes that are used in signatures sadly. In addition I do not see the point for the digest-length parameter.
Not sure why this is getting downvoted, seems to be a perfectly reasonable point?
Yes, so what you said didn't contradict anything I said. Hydroxycloroquine is safer than acetaminophen which is available openly at doses that can destroy the liver.

Here is what the CDC says about hydroxychloroquine. To call it "unsafe" is ridiculous and spreading misinformation.

Hydroxychloroquine is a relatively well tolerated medicine. The most common adverse reactions reported are stomach pain, nausea, vomiting, and headache. These side effects can often be lessened by taking hydroxychloroquine with food.Hydroxychloroquine may also cause itching in some people.

All medicines may have some side effects. Minor side effects such as nausea, occasional vomiting, or diarrhea usually do not require stopping the antimalarial drug. If you cannot tolerate your antimalarial drug, see your health care provider; other antimalarial drugs are available
Crucible
Citizens united foes not grant private corporations anything. Their freedom to say what they like was determined to already have existed. Citizens united just stops lower courts from enforcing any law that violates this freedom.

The government does not grant rights
You can? If the user doesn’t opt-in to advertising then you could simply not allow them to use the site...

Note, I’m not in any way an expert on the legality of it, but this seems like a silly argument to make. If anything, being more up-front with the model may open alternative methods of monetization (subscription-based, etc).
Ironically I decided to ditch analytics largely because I wanted a faster site. Google's PageSpeed Insights page shows my site gets 100/100 on mobile/desktop, which was not the case when I had analytics available.

Of course such measurements are meaningless, but I had already come to the conclusion that I was adding analytics snippets to my sites as a cargo-cult thing; I never actually viewed the stats, and when I wanted to get a quick feel of the level of traffic I was receiving I'd just tail the server-log.

These days with CDNs, caches, and similar, I don't really have a single specific server-log to look at. But if the site is up I know if it became unexpectedly popular, because it was featured somewhere, when I get spontaneous emails from strangers..
I love this, "Though Leader circuit", been looking for this term for a while!
> If I say mail-in votes will cause election fraud, you cannot prove or disprove that statement

I'm not sure I believe that claim. I think that looking at past history of voting fraud shows pretty conclusively that _vote by mail_ fraud has always been a very low percentage.

Sure, it's possible that _some_ fraud might happen, but looking at data from Oregon, it's happened two times in twenty years (_from my reading of the conservative database that was linked somewhere yesterday -- sorry :) -- I might be off by an order of magnitude, but it's still small_). That seems like an _extremely_ low incidence rate, and seems a small price to may for the idea that maybe more people will be likely to vote, due to not having to stand in line at polling places, deal with vote suppression efforts, or even just because it's more convenient to fill it out on your own schedule ahead of time.

Now, many will say that states like CA and other large states, who haven't had a large-scale rollout of vote-by-mail with the history and planning that Oregon had, will face more fraud than Oregon did. I think that's actually a very believable point -- we are not going to have a perfect rollout. However, I'd also like to point out that we've had two decades of electronic voting machines that have been proven to be absolutely insecure, as well as numerous cases in other states of voters who have been unable to vote because their polling places were under-staffed or closed too early.

Voting by mail is a proven method that scales well to ensure that larger portions of the populace have the opportunity to vote. It's being considered in light of wanting to limit in-person gatherings. It very unlikely that it's some conspiracy to promote fraud.
It says it on the talk page.

When a group of white people and a group with a black person are doing the exact same thing (reporting for cable news), positioned equidistant on opposite sides of a group of police offers and one group gets arrested and the other does not, how is that not racism? It is literally a natural experiment with a single variable (race) changed.
https://lobste.rs

I'd appreciate an invite as well if anybody has one.
The Art of the Cold Email
You base that on what exactly?
One does not follow the other. Maybe taking 5000 IU orally has a vastly different effect to letting it acculumate through skin? That's purely speculation on my part though, just trying to illustrate that these two are not necessarily equivalent.
How, exactly, is a developer supposed to change state in a stateless protocol to denote that you've dismissed the cookie dialog if the user has disabled the feature that allows the developer to add state to the stateless protocol?
Yes, I am in favor of exterminating every last mosquito. I’d rather deal with any results than the mosquitos themselves. Also I had a long conversation with a specialist in a company working on this and they convinced me that it wouldn’t actually be a big problem like some say.
> How else can you even store a consent for cookies/localStorage?

You said "the cookie thing just means that if I want to use these websites, I have to enable cookies so that I can dismiss the cookie dialog".

But if cookies are disabled, then there's no point in asking for consent. There should be no cookie banner in this case.
We changed the URL from https://archaeologynewsnetwork.blogspot.com/2020/05/1700-yea... to one that is almost identical but has more information. Is archaeologynewsnetwork a blogspam site? Or was this a case of both articles working off some press release?
It’s also available for Edge.
https://microsoftedge.microsoft.com/addons/detail/abjhjmfkmd...
Yes. However theft does not warrant lethal force.

More importantly though, the government should be more concerned with the cause than the symptom. Arrest the officer and this goes away.

It’s terrible that folks are looting and taking the focus away from the problem, but it’s also shameful to evoke George Floyd’s name to shame them without making mention of the officer who started this mess.
Two small threads from 2010:

https://news.ycombinator.com/item?id=1048091

https://news.ycombinator.com/item?id=1888207
You are allowed a cookie that tracks their opt in to your other cookies, so long as it is anonymous (or so our lawyer tells us).

On our site, we ping whether that cookie is set before we load the rest of the cookies.
How the Cloud Complicates Security
Malaria and dengue are only carried by certain mosquito species. Suggestions to eliminate mosquitos through gene therapy almost always concern those specific species, not the relatively harmless (yet very annoying) mosquitos of the global north.
Their site sure is leaning on the history of the name they bought; the front page has a big image of every single Microprose game cover ever. A little further down there are some big statistics: Games developed, 93. Games published, 201. Awards received, 53.

Then a history section that starts off with "American video game publisher and developer founded by Bill Stealey and Sid Meier in 1982."

And waaaaayyyyyyyyy down in the footer? Contact info in Australia.

Nothing about who runs it now. Nothing about their personal relationship with Microprose or the general genre of "war-themed games". Nothing about how delighted they are to be able to revive this much-loved brand and their hopes to carry it forwards to new glory.

----

In their subreddit, I did find a link to a Kotaku interview with the CEO of New Microprose: https://www.kotaku.com.au/2020/05/the-australian-who-brought... - he used to run the Australian division of the folks behind ArmA, including a spin-off designed for military training, which feels like something he should be crowing about in the "who are we" section. He does claim to have been profoundly influenced by Original Microprose's games.

Kotaku asks him about the rights to Original Microprose stuff and his response is a whole lot of corporatespeak that I parse as "hahaha yeah that sure would be nice, but nope. Maybe someday if we can cut a deal with the various companies that own them, don't hold your breath though."
What's been done here is a chosen-prefix collision attack [1] where the attacker can produce two files that have the same hash. What you're asking about is a preimage attack [2] where one of the files is already created and the attacker can't influence it.

The practical attack enabled here is mostly around digital signatures. An attacker could produce documents A and B that both have the same SHA-1. They can then get someone to sign document A (which really is signing the SHA-1 of document A), then use the signature with document B and make it look like they have a document B signed with a valid signature.

As an example, if document A is a regular SSL certificate request, and document B is a "CA certificate", the attacker can trick a real CA into signing a rogue CA into existence, which can then sign its own certificates that will be trusted by every browser. This has already happened with MD5 in 2008 [3].

[1] https://en.wikipedia.org/wiki/Collision_attack

[2] https://en.wikipedia.org/wiki/Preimage_attack

[3] http://www.phreedom.org/research/rogue-ca/
Your site can be ad-supported, without GDPR popup, as long as you don't track your users to display those ads. You could even have relevant ads by using keywords instead of user data.

That's what the NYT has done, and they've seen their revenue grow: https://news.ycombinator.com/item?id=18920079
Scroll through the rich history of Apple wallpapers
Completely agree with trump here honestly. Looting private business is not a form of protest against the police or the state for that matter.
Ask HN: How do you feel about income sharing agreements (ISAs)?
For context, I'm teaching an 8-week Python for Bioinformatics course in a couple weeks. In retrospect maybe it's unsurprising, but I wasn't expecting so many students to register with the hopes of switching careers. My expectations were more along the lines of people who are and plan to continue in lab, but wanted to expand their skillset.

At the same time, I've been reading a lot about ISA's and they seem to make a lot of sense. If a student's primary goal is to learn a new skillset to get a new job, shouldn't their education organization be incentivized to do everything possible to get them a new job? The more I think about how people are willing to shell out $200-250k up front to go to a University who has little incentive to make sure the student ends up with a job, the more unreasonable it seems.

I'm curious if any of you have thoughts to share having experienced ISAs on either the student or company side of things. General feelings about the arrangement are also welcome. Thanks in advance!

For more context about the course:
https://mycodestories.com/
Evidence for what claim? That hydroxychloroquine is safer than Tylenol?

I don't know why you connected what I said with anything to do with COVID-19. I didn't say that it helped, in fact, I think it was bad science that lead to that belief. But the fact that hydroxychloroquine is safe is beyond argument.

This is from the CDC:

Hydroxychloroquine is a relatively well tolerated medicine. The most common adverse reactions reported are stomach pain, nausea, vomiting, and headache. These side effects can often be lessened by taking hydroxychloroquine with food. Hydroxychloroquine may also cause itching in some people.

All medicines may have some side effects. Minor side effects such as nausea, occasional vomiting, or diarrhea usually do not require stopping the antimalarial drug. If you cannot tolerate your antimalarial drug, see your health care provider; other antimalarial drugs are available
My favourite exchange. For those unaware https://twitter.com/dog_rates/status/775408819274969089
Yeah, I'm wondering why it is going to stay in service? Maybe they should emphasize that they are donation supported (if that is the plan).
No, I get it, more of a comment on the unnecessary complexity of a lot of sites that have a minimal amount of dynamic content or user interaction, and yet implement very complex workflows for the content editors.
While this is terrible, the special protections that journalists enjoy should apply to all citizens. If these weren't journalists but some poor random persons we wouldnt even know. Everyone can be a reporter nowadays thanks to technology, and there shouldn't be a class of officially recognized, untouchable arbiters of facts
I disagree, I would argue that they are optimal for passwords with sufficient entropy (which includes passwords generated by a password manager)

> argon2

It uses BLAKE2 internally
Great post.

I also think that poor general education has also been exposed. People lack general science education and critical thinking skills. Just look at all the 'gotcha' posts of people giving scientists a hard time for changing their positions as new information is learned, when that is exactly what a scientist is supposed to do.

The other part drives these conspiracy theories is not just that they share a platform with legitimate sources, but also the algorithms. Someone clicks on a single story that is borderline conspiracy out of curiosity, and now they are served them at every turn. It's easy for a person to get lost and think that what they are being pushed is the entire world.

By the way, I think you're being downvoted because of this statement:

We live in a world where a substantial number of people believe the earth is flat, that 5G cellular is a mind control scheme, that vaccines cause autism, that COVID-19 was created by a political party, that the concept of climate change is manufactured, or that major national crises are actually just actors being paid to further a political narrative.

I've noticed there is a contingent on HN that do believe in some or all of these things.
Yesterday the highest German court (BGH) ruled that "default accept" in cookie dialog boxes is illegal.

It was a pre-GDPR case, but the court said it interpreted the them-in-force law in a GDPR-friendly way.
Nice site. It reminds me of the Primitive Technology channel: https://www.youtube.com/channel/UCAL3JXZSzSm8AlZyD3nQdBA
I can see an argument that it is.
Mail-in ballots have been linked to voting fraud in the past. See the 2017 Dallas City Council and the 2018 North Carolina congressional race for example.

Maybe if twitter wants to start fact-checking Trump, don't start with him tweeting that water is wet.
Geopolitics - ideally separated from personal politics - are a frequent subject of posts/discussion here. Particularly around freedom of speech, authoritarianism, etc. Whether or not they technically should be, it's absolutely the norm.
It's always tough to figure out which part of a Matt Levine article the OP wanted to talk about, since the title just covers the first one. They're all interesting. If I had to guess I'd say the Luckin Coffee one, since it also mocks certain startup business models.
If you wonder whether Git supports non-sha1 hashes yet, then it's not ready yet. But it is "fixed" in that it includes code to detect sha1 collisions:

https://github.com/git/git/commit/28dc98e343ca4eb370a29ceec4...