skysight-inc/HackerNews huggingface dataset:
Why not scale for example 50%? The same things hold true for 1440p (or are you just able to suck up things only getting a bit smaller?)
Not much. There's a reason they're largely forgotten!
That works if the obfuscating patterns are all straightforward like a regular grammar. But if it's not possible to distinguish an obfuscation from genuine code, that could quickly become intractable (NP).
>Linux distros are behind on implementing modern binary exploit mitigations.

Compile from source, use only trusted package managers, and sandbox and compartmentalize when possible.

>Linux distros have no concept of sandboxing

They may be inadequate or need improving, but these concepts are there, if rarely used by default.

>Any app running under Xorg can see the contents of any other app runing under Xorg.

There are ways to prevent this without saying "Wayland".

>The only good sandoxing API provided by the Linux kernel is seccomp-bpf, and the only program that uses it is Google Chrome/Chromium.

The very link to the wikipedia entry for seccomp shows otherwise...

>Also a friendly reminder that Debian is always behind on CVEs, and I'm sure that most distros don't fare any better.

This is a good point, and one of the reasons I think that the future will belong to rolling release style distros with a faster CVE cycle.

Just the few things that stood out to me, not a piece by piece analysis.
Thanks for this information! I don't live in the US myself.
We as Americans live in a society were responsible for. We as managers, owners and employees are responsible for the culture of the companies we own.

A Russian who moved here in 1998 certainly didn’t have anything to do with racism. But he is participating in a society that claims to be a just one, in which he will get preferential treatment over a Black person just because the color of his skin. Is that his fault? No. Is it his moral responsibility as a participant in society to help create a more just society? Yes.
27% of paris inhabitants left the city overnight based on phone data from 2 of the 4 french mobile phone networks.

I'm unsure of what the number would be if we added the other two phone operators and the people who wanted to leave but could. But this would probably not amount to "most".

source: https://www.leparisien.fr/paris-75/confinement-plus-de-25000... and https://www.insee.fr/fr/information/4477356
a stripped down tcl interpreter is one of the tiniest and less harmful dependendencies you can have nowadays. I do not see a problem with that.

And code is data, and has always been.
Don’t click
I totally agree with your view. The same can be expanded for many services that sells cookie approval management solutions.
The problem with all these "Apple is being nasty to me" stories that have been appearing recently is that there appears to be a strong smell of "two sides to every story".

I have not read the blog post above fully, but a speed-read suggests that the author was publicly distributing an app through TestFlight rather than App Store.

I am not accusing anyone of anything here. But if my speed-read is accurate, then its not at all surprising Apple have taken issue with him.

TestFlight is a dev tool. Its not for production deployment. Its meant for beta testing.
As a German I feel the US is only an ally like Saudi Arabia is an ally in that it's a country doing terrible shit I disagree with that dislikes other countries politicians I dislike hate.

(I do not really think the US - or Isreal for that matter - is like Saudi Arabia AT ALL, Saudi Arabia is a horrific place and that comparison is pure madness by OP - but the "doing terrible shit" part is very true.)
My understanding is keeping the deletion requests fullfills a legitimate business interest, so no -I would not delete the request. What we do is we keep those in a separate system, since the user records themselves (in my app, crm, etc) would be removed. That system is also how we "prove" that we executed the deletion requests in a timely manner
Code Optimization Techniques
Writing Code for an Audience
It's a good idea, but wouldn't be enough to secure something like uBlock origin.

Elements filtered by uBlock origin are typically not even loaded over the net. That means that an outside observer can see what uBlock origin does.

However, you could envision a variant of uBlock origin that still loads everything, and only does cosmetic blocking.

But eg an extensions that is supposed to protect your privacy will have to have an influence on your browser's network output.
For my master thesis, I wrote a small tool that would take and analyze raw genomic high throughput data of various T-cells (chip-seq + rna-seq of th17 to be precise) and create a regulatory network in Cytoscape. The basis was a paper relating to The Th17 Project [1].

What I learned is that we are sort of in the very beginnings of understanding how immune cells work (together), how their plasticity works in terms of gene expression at any given point in time. For example, environmental circumstances such as cytokine presence can lead to T-cell types "transforming" to other types which have other effects etc. but it's not well understood how this occurs. A very large amount of genes regulate each other, you get a complicated network of up- and downregulations and it's hard to reproduce and understand what needs to be done to generate a certain type of T-cell with certain characteristics and behavior.

And then you haven't even tried doing that in-vivo where you could try to push the immune system to express genes such that many T-cells of type X are generated to enhance or fight inflammation. Because then you just disturbed a complex interacting system with zero idea what the total effect is and whether "the network" is resilient enough to not crash and burn somewhere somehow.

It's very very complicated with a huge amount of combinatorics involved so Complex Systems Theory helps to build models helps a bit.

[1] http://th17.bio.nyu.edu/pages/index.html
In 2016 we proved that the owner of "Web of Trust" was exfiltrating and illegally selling clickstream data to anyone who would pay. For Germany alone the data contained the browing information of more than three million people, often revealing highly intimate and sensitive details about their lives. Still, Chrome and Firefox reinstated the extension after less than four weeks, and to this day it keeps collecting clickstream data. It does so using dark patterns and I'm sure most of the users are not aware that a free extension they use to increase their safety while surfing the web surreptitiously sells their browsing data.

If the main selling point of your browser or OS is that you protect the privacy of your users you simply can't act like that, because most users are not aware of the data collection that is happening via these extensions.

With mobile apps we're in a similar situation, companies like X-Mode exfiltrate and sell location data via apps that claim to protect your privacy. Desktop software: Same story. Anti-virus software that is supposed to protect you actually exfiltrates personal data from your computer.

So yeah if you build an open platform there will be such abuse, but if you position yourself as a champion for privacy you simply can't allow that (or at least you should try to make it more difficult).

There are simple counter-measures that browser vendors could employ: Showing users how much data a given extension sends to a backend and ideally making that data transparent would be enough to stop most of these practices, because people would then realize that their free screenshot app somehow sends every single URL they open to a backend service. Right now this can happen entirely without the knowledge of the user. You can't control what you cannot see and understand.
This seems like a great case for Hanlon's razor ("Never attribute to malice that which is adequately explained by stupidity"). Rather than a huge high-level conspiracy between corporations and government, it seems much more likely that the people drafting the law just didn't realise (or didn't care) how much impact it would have on small companies.
> It's pretty disingenuous to claim they track users

Google lost the benefit of doubt years ago. This is Google 2020 - all they do is "track users":

https://www.reuters.com/article/us-alphabet-google-privacy-l...

https://www.compliancejunction.com/google-loses-appeal-of-e5...

> I might as well claim you're a burglar because there's nothing to indicate you're not one.

Google have been caught burgling houses repeatedly, and have been found in your house with burglary tools claiming "we're just doing, ummm, _browser experiments!!!_" You saying there's "no evidence of it actually happening " isn't useful.
I feel it dreadful to think uBlock Origin might not be trustworthy after all.

But I can’t find any other reason why I don’t think that that isn’t the case.
If regular users were clamouring to be allowed to install apps from places other than the official App Store I think your argument would carry more weight. It seems to me though that it's developers asking for the rule changes for their own self interest but presenting the argument as if it would benefit end users. The App Store clearly offers enough value to justify the 30% cut because developers are voluntarily choosing to enter into that agreement and develop software.

So ultimately both developers and users are voluntarily choosing to use or develop for iOS. iPhones have maybe 15% global market share of smartphone devices so plenty of people are choosing from the alternatives, so I don't think the anti-trust argument can even seriously enter the conversation.

Producers of physical products have no natural right to force supermarkets to carry their products, nor to dictate terms to supermarkets.
Polls are only evidence of the poll's results. It cannot read anyone's minds, nor are they guaranteed to reveal true intentions—especially when the individual being polled is being asked questions by a human.

The gay and lesbian movement has been fighting for over 50 years and made slow but steady progress as the virtuous circle of increasing community acceptance which means more gay/lesbian people revealed to their own family, which increases community acceptance, which means more gay/lesbian people revealed to their own family, which increases community acceptance.

Other groups in the rainbow have not been quite so patient. Look at what happened to J. K. Rowling recently as an example. Regardless what you think of what she said, the transgender community as a whole isn't improved by making enemies of as many people as possible. We need to show people in the rainbow our love and compassion, not find as many people as possible for them to fear or hate.
How to Build a P2P Marketplace
Explore the 4 methods to build a marketplace, the costs, monetization models, and more.
I really hate this current reality of having to use social media channels for a chance of proper customer support. Are there any initiatives that are working against this? I would be happy to contribute to any kind of platform or movement or whatever that aims to mitigate/fix this.
What mitigations exists for the Xorg apps?
http://caps0ff.blogspot.com/ guys have a collaboration tool and they often ask people to help with filling/validating mask image to bits conversion
Thanks - looks like time limit on their servers right. Will try to install on mine and see how it compares to Jitsi.
> NASA is a jobs program

NASA is first and foremost our nation's science program. Everything from the network card driver your AWS instance is using to the planes flying into hurricanes to determine how strong they will hit was built with major contributions from NASA engineers.

LASIK eye surgery, the nutritional supplements in baby formula, solar panels affordable for consumers, OpenStack, even the BowFlex were all developed by NASA or under NASA funding programs.

You could at best say NASA is a jobs program for HN readers. :)
> asking for updated ad block lists

You could only allow GET requests and require the user to whitelist this the first time the extension does it.

Subsequent calls to the same blocklist would go through without a user prompt, but if it suddenly started trying to send your email address or some other param, it would stand out.
But add an AI superresolution model after that and you're off to the races!
oh, the clickbait

it's just shitty chrome extensions gobbling traffic history to resell to ad companies

"massive spying" lol... making it sound like cyber-espionage
The focus of the spirit of GDPR is PII at its core. Communications with the user such as email exchanges, transaction records, etc are fine to preserve as long as all PII have been scrubbed and are dissociated from the user.
It seems to be very clearly as a temporary beta: https://www.mignori.com/beta/
Yeah he's been distributing the app through TestFlight with the link on his website for three years.
How Racism Shapes My Habits
As everything with GDPR the question is - do you need that data for your operations? E.g. if you need to keep it to inform your infrastructure to not store the data anymore, then yes, you can. If you don't need to keep it, then no.

If you use it to block the user from using your service or punish them in some other way, that might be very problematic in legal sense.
This will make the rounds because it has appeared on a large news agency and will be amplified louder than Joe Blog could do on his/her own, but this isn't a novel or shocking news.

You don't need to look very far to see how shady the internet gets. Go to any mainstream news website that runs ads and you will see those scam 3rd-party ads(they used to promote bitcoin ads a few years ago until the mainstream outrage) you wouldn't click on in a million years.

Now I'm not saying those ads are connected to broader malware, but if you start there you will uncover these shady operators(I discovered this when I did a little digging on a streaming website that provided content I could not obtain from the 32nd streaming service that I have to pay $10 a month to watch - and the amazing fact is that the same scammy ads you see on majornews.com is no different to the scammy ones you will see on torrentxyz.com).
This kind of post infuriates me. As an iOS developer for 10 years, i can guarantee you that there are probably hundreds (if not thousands) of stories like that, with people getting shut down for no good reason, and having their business killed.

It's now so bad people are refraining from trying out innovative business model or apps just because they think there could be a chance someone at apple validation wouldn't like it and kill the product at any time.

I wish the Hey story makes people realize it is not reasonable to have one actor control the only software distribution channel to hundred of millions of customers.

I'm fine with apple wanting to provide a highly curated experience to their users by having them download apps from a store they control. But this shouldn't be the only option.
The url path shouldn't change on each call, so ask the user to whitelist each request the first time that they are made. Subsequent GET requests to the same endpoint and same params can go through without a prompt.
A non-Turing-complete language can still express programs that require exponential time and space, so is that really enough to provide useful guarantees? And would dynamic limits on resource usage not be sufficient, since the "cannot load configuration"-error would occur at runtime anyway?
Jowanza talks about this live here: https://adversariallearning.com/adversarial-distancing-episo...
Is there a list of extensions that have been caught exfiltrating data?

I look at the 20 I've got installed and wonder which are using the "Access to every website" permission for their own ends.
A lightweight, customizable omnibox in JavaScript
Not really on topic, but what happened to LtU anyway?
yes definitely! I plan to add notifications soon... I assume you would want to be notified right away when activity happens, then maybe not again for a period of time so as not to get spammed?
Prediksi Togel Hongkong HARI INI Kamis 18-June-2020
Having worked at large companies - Apple is not a nice company especially to their app platform users. They will hold your app hostage whenever they want something. They play hardball (read: act like immoral sociopaths) because service revenue is how they justify their 13 figure valuation to their shareholders.
Why my baby is crying? (hablocompany.com)
Hello Community ! How can I understand my baby cry ?
With Hablo you can do it . Download our beta version and let us help you to know the reason behind your baby cry
Mobile App: https://bit.ly/3cNd8SD
PS:it’s FREE
Aside: Zoom stock has risen 252% during this time ($67 on Dec 18th 2019 to $236 on Jun 18th 2020).
I hope we don't get even more locked down permissions for Web Extensions. I would prefer that the Chrome Web Store manually vets every extension and update. Maybe start charging big $$$ like Apple does. Most extensions will disappear from the stores, but they won't disappear from all existence (as changing the permissions model would effectively do). Power users who could vet the extension themselves can install extensions manually (maybe even behind a command line switch to futher filter out computer illiterates). That's a good compromise.
http://www.malinov.com/Home/sergeys-projects/xi-8088

http://tech.mattmillman.com/projects/8od/

http://www.s100computers.com/My System Pages/8086 Board/8086 CPU Board.htm
There's actually 6 lawful bases for processing data https://ico.org.uk/for-organisations/guide-to-data-protectio... though deciding which is applicable in a given situation is not straightforward.

The legal basis is actually quite broad. For example, most companies need to keep records for accounting purposes for several years which would count as a lawful basis. Another example would be keeping client data in case you need to protect yourself against potential future litigation e.g. a gym may need to protect themselves against personal injury claims (otherwise you could injure yourself, ask them to delete the records and then sue them).
I'm not even going to validate your post with a response, you clearly didn't grasp what I was saying and instead to a reactionary stance nor do you have actual factual information; SONGS was only on standby in 2012 after the leak was made public (it continued to be operational for a few days later while they tried to resolve the leak) while they dealt with the legal proceedings in court about how a decommsion would take place and who would be liable for it, and was only shutdown in 2013.

I uprooted my entire Life because of this situation and how badly it was handled by the local Government, Edison, Mitsubishi, NRC etc... I lived in a neighborhood with mainly workers from SONGS! I had conversations with one of the lead engineers (one my neighbors) from Mitsubishi where I tried to get as much information as I could to make my eventual decision to leave.

I was an activist on the front line, I was there and I lived in San Clemente: How are you going to tell me what happened? Because you read something you think you have greater insight on the situation than someone who lived it on a daily basis?

> Football fields would be tiny in comparison to the immense amount of land...

You took what I said out of context, that was in reference to Mars colonization.

Again... this is horrible post and you should be downvoted and be ignored entirely on the matter and perhaps on any other subject if this your approach to argument/reasoning.
10 months doesn't sound all that temporary.
Startup idea for anyone who is interested:

Paid customer service where the customer pays money (say $100-$1k depending on how serious the issue is) and each company can have a special channel to respond to these paid requests and be compensated (say 80% of the fee the customer pays). That way companies will have the will and ability to attend to serious issues and filter them out from the "useless" customer requests that flood any large size business.
Guessing a lack of good results :)
Yeah probably this can be related considering "Mignori 3 was published on TestFlight in 2017 and Apple approved it."
why would you want to have an extension able to do network calls anyway? my opinion extensions should not be allowed to do so.
Yes you can code well on tiny laptops with poor 1366x768 displays - but double or triple set ups are more efficient.

Its more about maximising productivity in my opinion.
Facebook’s Acquisition of Giphy Could Have an Unexpected Chilling Effect
I used to trust the authors of unlock, adblock, adblock origins. But they all sold out. Why do you think this time it's different?
It is more like 3 years.
Have you tried https://cordlessdog.com/stay/ ? Was working relatively well on my macbook before I switched to an iMac
If Apple doesn't back down, they should be broken up by the DOJ into a phone/hardware company and an iOS/Mac/Services company.

The same should happen to Google with search, Chrome, and Android. You can't use dozens of entire markets as your product moat.
Web Page Analyzer Free Tool
That sounds plausible. He claims to have 200 beta users without having been through app review. TestFlight only permits 25 internal testers [1] (you can have 10,000 external testers but the app has to go through review first). Something smells off.

[1] https://developer.apple.com/testflight/
Just saying, certain people are very very happy to point out the violence of the oppressed, yet throw a hissy fit when people point out the violence of the oppressor.
Not surprising since the EU was created for the US benefit in the first place : https://en.wikipedia.org/wiki/American_Committee_on_United_E...
Based on the name and it not being mentioned at all, I guess this is US only? In general, websites seems to always mention the countries where you can apply from, except US websites that simply assumes everyone is in the US or otherwise knows it's restricted to the US.
There is very little interest in actually enforcing the GDPR, that's the problem. In the UK I've reported a dozen companies, (both big and small) to the regulator and it led absolutely nowhere.
> the biggest lockdown since the spanish flu

what lockdown has there been in place during the Spanish flu? afaik[1] it was a big cover up in most of the world:

> "the reason why it was even called Spanish flu was because Spain was not involved in the war, having remained neutral, and had not imposed wartime censorship."

--> hence I assumed Spain was not affected by the propaganda/cover-up efforts and reason for it's spread was precisely the lack of social distancing and lockdowns throughout the world as war ravaged on.

[1] https://en.wikipedia.org/wiki/Spanish_flu#Etymology
Yes, Apple is both a monopoly and a monopsony for Apple devices. Just like Marks & Spencer is for Marks & Spencer products. But M&S isn't the only supermarket and Apple isn't the only smartphone manufacturer. In fact both have pretty low marketshare.
I was going to shitpost "people wouldn't be using Chrome if they minded being spied on" but your take is much more eloquent.
I think it really depends on your underlying dynamics, but I just want to point out that f'/f going to zero does really not imply that f will converge.

If for example you are in a still strongly growing (but no longer exponential) regime where you can approximate the currently infected number of persons as proportional to t^2 , and there is some constant IFR, then f'(t) is also proportional to t^2. f(t) will then be growing as t^3, so f/f' will go as t^-1, which will look quite similar to an exponential decay at the timescale of the process.