skysight-inc/HackerNews huggingface dataset:
I don’t see why it wouldn’t be possible to make a more granular extension permission system that also has stricter sandboxing. Safari is already going in that direction. The new extension system is more restricted, although I don’t know if there is any granularity to it.
You do know the history of the name doubleclick, right?

Now want to explain why a browser experiment or analytics domain whitelist includes an advertising surveillance domain?

(The answer, so far as I can work out, is that Google thinks "The stupid cattle won't even notice mostly, and the ones that do - we'll just get our stooges on social media to claim they're being paranoid, and that everybody should just keep fattening up on the delicious delicious free browser/email/search we so generously give them out of the kindness of our cold and black corporate heart. Then we harvest everything as per the plan.")
This isn't an argument for putting a Turing-complete language in your config file parser. It's an argument for documenting your config file format so your users can write scripts (in a language of their choice) to generate config files programmatically.

It seems cute to do it this way, but now you have to start talking about removing certain functions from the standard library, running the script in a sandbox, etc.
It's not even just rust; any language with functional features has an option/maybe type, and it's incredibly useful and a great tool to help ensuring your code is correct.
>Any app running under Xorg can see the contents of any other app runing under Xorg.

It's one of the problems addressed by Wayland
At that point not just run an Ultrawide at 1440p?
At least, if you're on Windows you pretty much already have to trust Microsoft, so you may as well not have to trust Google AS WELL.
Lattices, and by extension semilattices, are one of my favourite algebraic structures in the context of programming. Their applications are innumerable, from access control, to distributed systems, to constraining the information flow of privileged information.

For example, CvRDTs (a class of conflict-free replicated data types), are made up of the semilattices over a monotonic operation. If you can prove a few basic properties about your data + the merge operation over it, you can construct a CRDT. It won't necessarily be efficient, but it's a good starting point for reasoning about the problem.

People spend a lot of time trying to sell abstract algebra using monads, but in my opinion it's a lot easier to grasp the applications of lattices.
Why one email app went to war with Apple–and why neither one is right
AFAIK, those are regular dishes with tracking system. Phased arrays do not require mechanical tracking as they use phase shift to direct radiation.
> It will cost you less than $300 a year

Don't forget the cost of buying a new computer that can drive that display.

None of our laptops even have DisplayPort outputs let alone sufficient onboard graphics for that resolution.
Well, EMRs are generally part of older, established presences which have inertia. But companies like Apple and Alto are innovating in the medical space, and they're still governed by HIPAA.
I've 32" @ 3840x2160, and it's a bless, I do coding and product design, my best tech acquisition in the last few years: https://www.benq.eu/en-eu/monitor/designer/pd3200u.html
Firefox already tells you what things an extension can do /what kind of permissions it has, when you are about to install one. You cannot install one and later turn off those permissions though.

Would this fit what you describe?
That would be ridiculously expensive.
That's true, but I don't think it's a huge problem. Listening to an audiobook typically takes at least five hours. Usually you can tell whether you're happy with the narration within a couple of minutes.

While you say "a dump of audiobooks", it is certainly not that for the readers who put in a considerable amount of work for each and every title. And it is certainly not that for the listeners who can listen to books not otherwise available.

I don't think reading or listening to books at random (or based on average community score) makes sense. If you pick books based on trustworthy recommendations, most problems go away. Then just see where that book is available; if it is on Librivox and it's good enough, great. If not, get a commercial edition or a hard copy.

I've only listened to a single audiobook from Librivox. It was a book that has no commercial counterpart. The quality was mediocre but I was really happy to be able to listen to that specific book. On the other hand, I had to stop listening to another commercially produced book (that I also wanted to listen to) because I couldn't stand the narrator, so I do see your point of view.
There are reviews in the Android app, which is what I usually listen to.

Narration is a personal preference, but I've found many of the narrations are pretty good. Even compared to paid ones.

I work in a laboratory where I can go hours without the ability to even touch my phone to turn something on or off, or change volumes. So far, I've only been terminally annoyed to the point I turned it off, despite wearing acid contaminated gloves. For me, that's a pretty good track record.
Your comment has a certain accommodation to it -- you are probably fine where you are (in INTP land). I'm fine over here (as an INTJ).

But yes, nothing about your comment came across as hypothetical conjecture. The tone is overwhelmingly "here is my conclusion, watch me work vigorously back to it and then insinuate many bad things as a result of my mistake".
Indeed, and more screens is even better! Ideally I would never need alt-tab anymore. I'm still waiting for a VR workspace, screen everywhere, eyes are then focused on infinity, so that's also better.
Try Poland

https://en.m.wikipedia.org/wiki/List_of_national_parks_of_Po...

Or Slovakia

https://en.m.wikipedia.org/wiki/List_of_national_parks_of_Sl...
How do you know they're not using it for tracking, beyond an ambiguous PR statement that actually doesn't even say they aren't using it for tracking? What makes you sure of that?

There are literally billions of dollars on the line.

Does Safari or Firefox implement a similar tracking header? If it's so needed for experiments, why is Chrome literally the only browser sending this data to their advertising network (or any site)?

If Google were using it for tracking purposes, they'd never confirm that unless forced to. Hence the ambiguous PR statement.
How I made $100 from one Medium Story?
Why This Is the Perfect Time to Launch a Tech Startup
I feel like Google Chrome should just have some icon or other visual indicator of when an extension has made a networking request. In addition, use the iOS model of permission and prompt the user when it wants to do something like access the network or read your browsing history. Perhaps if this happens on a frequent basis, give another indication that it's happening all the time with the ability to ignore such warnings. You need to repeatedly show such evidence to users for them to understand what's happening.
Just a little more context. Terry Winograd was Larry Page's advisor at Stanford, and, although I can't be sure, I think that Winograd may have had some influence on Google's early "Don't Be Evil" stance.
> returning `(value, err)` is conceptually the same thing as returning a Result[V]. You can ignore the error case on a result / the None case on an option as easily as you ignore the `err` today.

No, you can't. If you want to pull the value out of a result and ignore errors, you have to explicitly do so. With `(value, err)` style error handling, you can write bugs by simply forgetting to check `err`.
Your link does calculations on $50 a month. That's crazy cheap, not expensive.

Your link's math says that SpaceX is marginally profitable selling 220GB of internet at $50 per month using 2016 bandwidth levels, which is pretty impressive.

Those numbers are from the original 2016 FCC filing, they've got a lot more bandwidth out of the satellites now because 4 years is a long time in technology. Musk says 3Tbps per set of 60 satellites. That's 50gigabits per satellite, not 20. Shotwell has indicated a price of $80 a month, not $50. And you know that's going to be the low price, not the high one. So let's assume that includes a 100 gigabyte cap, which is still about 10X as much as you get with the base plans from the geostationary satellite providers.

Those new numbers increase the subscribers per satellite from 7000 to 38000. Revenue per satellite per month jumps from $35K to $300K. At 60 satellites per launch over a lifetime of 5 years, that's gross revenue of $1.1B per launch.

Re: your other point about latency. They've already got 28 base stations in the US. That's enough to cover the continental US without any hops.
>Any app running under Xorg can see the contents of any other app runing under Xorg.

This is one of the problems addressed by Wayland.
Funny thing about things like that is that you can likely write tools to automatically deobfuscate, if you know the mechanisms. Of course, this takes time and effort, and is beyond most spammers' capabilities.
That would be criminal offense - it would mean criminal investigation and quite probably a fine for ISP (negligence). It is just not worth the risk.

If we go into those waters they can also break into my house, smack me on my head, use rubberhose cryptoanalysis, decrypt my machines and copy data from there.

For 3rd party company outside of our juristiction there is nothing that protects my data, actually they will abuse them as part of their bussines model.

The data transfers are not free, if someone is setting up free DNS resolving (cloud storage, providing emails, operating system for phones,...) there is some hidden profit within (the good old: "if something is free you're the product")

For ISP I pay for their service and this is a huge difference (also regarding laws - a much broader set applies)
Good discussion in the article comments as well, worth a read.
Highly recommend David Clarke's work, especially his Sherlock Holmes readings. For me, he's the best Sherlock narrator I've heard.

He also runs a chain of Houston coffee shops; their mugs sit proudly in my cabinet! Felt great to compensate someone for many many hours of public good.
Where did I say it doesn't deserve scrutiny? Scrutinize it all you want, I'm sure it went through lots of people before being published. "Scrutiny" is not the same thing as actually accusing them of lying though.

> Every single word of that statement was carefully crafted and constructed.

I also don't believe this to be true (their statement seemed plain and clear enough to my eyes), but even if it were, it doesn't affect what I said above. You need actual evidence, not the mere possibility of mathematical loophole.
It's possible that the term existed before Hillary/Trump but your examples aren't it.

In your examples the word "fake" is used as an adjective to the noun "news site". As in "a fake news site".

"fake news" as it used today is a noun in its own right. As in "that's fake news"

See also "alternative facts".
Uber turns SaaS vendor in deal with US public transport authority
Well,once at umiversity I saw Chrome installed on all machines, so I asked, why they installed spyware on _university_ machines. All I got was disbelieve and ridicule. These people are not even aware of what they are doing, nor informed enough to make such decisions.
Actually just started some work on some biometric FIDO2 webapp testing, and there are frustratingly few device options available to use for testing, particularly in linux. It works fine on most modern mobile devices, but I need to get into the guts of things, so I need an actual FIDO2 biometric device so it has been a little frustrating. - I don't suppose anyone knows of any device emulators/simulators our there, to test a webapp?
Yeah I use 1Blocker on safari for both iOS and macOS and I think it works pretty great.
I had a go at writing a type-inferred composable language for database queries a few months ago: https://github.com/KMahoney/squee
More Than Tuskegee: Understanding Mistrust about Research Participation
I was able to use a 5120x1440 resolution on my MacBook Pro using SwitchResX. No idea why Mac OS doesn’t let you select that resolution.
- I know one company in SV that has done that for regulatory reasons, at huge, on-going financial expense. It's not normal.

- if you have engineers with previous implementation experience on HITRUST or similar, it can be done. But it's hard to retrofit if everything that's installed is stale.

- otherwise you end up with "paper certifications" without the engineering to support it. That works for a while, but eventually becomes a problem if an on-site audit is scheduled.

https://en.wikipedia.org/wiki/HITRUST
> You can just execute the script in a container and then grab standard output as the configuration.

In what format, that you then have to parse?
Sorry, I hate to ask but I just have to know now. Have you ever worked in a large tech organization? Such a statement would never be made to the press without being touched by PR/legal.

They may not even be explicitly lying, because the statement is so ambiguous. When you're reading PR/legal speak then every single word matters.
Just curious, is there anything that can prevent developers to charge 30% more when in-app purchase is used for sign-up, with a nice little text around the 'Buy' button:

You would get 30% discount if you use our website for purchase. Here the price includes Apple payment infrastructure cost.

I'm sure there would not be anything in Apple's guideline documents about adding above kind of 'informative' content.
1-2 versions minor versions is pretty great. Most Linux distros that are deployed are the same!
RE notebooks vs monitor+keyboard. I have a work macbook, a personal macbook, and a personal thinkpad. I keep work context on the work laptop, one personal project context (ui dev) on my macbook, and one personal project context (backend dev) on my thinkpad.

I really like that context switching is a physical experience, which feels much more intuitive, concrete and solid as in "it works". I don't have to open/close tabs, do cmd-tab or maybe ctrl-tab to find the right window, or switch to another digital workspace to switch to the other context.

Additionally, those devices being laptops allows me to use them almost anywhere under battery. Whenever I put a sweater under them, I can get them in a comfortable position. Managing multiple tiled windows on one screen is overhead, and so I am fine focusing on one window at a time, and so I am able to show slightly larger font which means I don't have to squint of bend forward too much.

I do think it would be nice if I had slightly larger screens.
People want to use IE6 and have security at the same time. History must repeat.
The gist is that it's almost impossible to detect fraudulent extensions without extensive human review. Google should only allow extensions which it has signed off on.
There are also these things quality I bookmarked:

https://gdpr.algolia.com/

https://gdpr.eu/

https://techblog.bozho.net/gdpr-practical-guide-developers/
It's not. What's more common isn't that it's from Israel, but that people bother to mention Israel when that's the home country of the responsible company.
Seems useful.

TL;DR on my questions:

- API

- Leverage tooling for infrastructure monitoring

- Clients (Python, or others)

- CLI

- Hooks (launch scripts on events)

- Events abstraction to connect different systems (cloudevents.io)

- Groups

Have you thought of treating it like events in production and leveraging monitoring tools for humans? For example, we do work with events to monitor infrastructure and trigger actions, but that is what many of us do for a living, and not usable by most people.

You can have a "Human Reliability Engineering". If you bring the tooling to monitor infrastructure to regular folks, that could be something. Because then you can leverage tools with common abstractions and language (metrics, events, etc.) You can then leverage Grafana, Prometheus, Elasticsearch, and all the tools that do that very well for infrastructure.

Speaking of abstractions, have you checked cloudevents.io[1]? You can then open yourself to various protocols and destinations that understand these events, and people could build applications on top of your service.

Also, have you thought of opening the API and adding a client or CLI so people can control it without opening the mobile app?

For example, as a user, I could generate API keys from your site and then use these keys in a client (Go, Python, whatnot) to pretty much do anything I could do with the application, get data, push data.

Also, have you thought about adding hooks so I can write a program that says: whenever I add an event, run scripts in certain directories. Similar to Git hooks.

The script is executed with the event as an argument, and does whatever I want it to do. It can be as silly as the following:

I add an event of drinking a cup of coffee. There's a script that gets that event, and decrements a counter somewhere of coffee capsules, and if the coffee capsules are under a certain threshold, trigger an alert or something.

If there are groups, I can have a hook that alerts several people in a group that we're out of coffee.

This may be useful for people recovering from an addiction, for example. A group trying to quit a certain substance. Every time a member of the group consumes said substance, it triggers an event.

They could monitor themselves, but they may also monitor each other and see that member A is doing fine, but member B is starting to drink more and more this week. What's going on? Let's check up on them, talk with them, support them as they may be going through a rough one.

Someone more experimented could see _patterns_ of events. Substance consumption, missing workouts, increased spending, etc. Is there disengagement?

Once you generate that data in a standardized way that can be leveraged by mature tools, people can build things on top of it and you can get many ideas and use cases.

[1]: https://cloudevents.io
It would be more accurate to state "levels off before 10-20% develop antibodies". The author wrote an article that covers other mechanisms by which the human immune system can fight viral infections. The definition of what 'infected' means is a total gray area. The human body is constantly fighting low-level viral infections.

PCR positive doesn't mean you are seriously infected or an active 'spreader'... just means they found some viral RNA in your mouth/throat/nasal-passage.

Just means you were definitely exposed and are carrying the virus. Many of those cases were completely/almost asymptomatic, right?

N. Italy is it's own unique situation... don't have specific comments there...

With an enclosed dense population situation like a prison or a naval vessel... it is interesting that the spread would stop short of ~100% infection once it crosses the 25-50% threshold, given what we understand of the overall high transmissibility of this virus.
The Revolutionary Tech That’s Turning Waste into Energy
Terraform templating + SQL plays together pretty well. Certainly helps a fair bit with pattern reuse
Incommensurability
Number of daily tests has been broadly flat for the last three weeks and is ~20% lower than the peak testing in mid-May.

It's difficult to match new case numbers against specific tests given aggregated data sources, lag etc., but the rough positive test percentage looks like ~2-4% currently vs >10% mid-May and >20% in April:

https://covidtracking.com/data/state/massachusetts
Aside from the whole (alleged) "organised crime setting forest fires in the exclusion zone as cover for illegal logging operations" thing [1], which releases plumes of radioactive ash and ends up with contaminated wood in people's furniture and fireplaces.

But yes, when left alone nature does reclaim the lands rather effectively.

[1] https://www.aljazeera.com/indepth/features/chernobyl-radioac...
I see this as an argument in favor of native apps. I mean really native, not Electron-esque ones.

As you more and more turn the browser into an OS, you have to treat it like an OS. Don't allow unprivileged user to install unsigned kernel modules.
100% of our customers would not accept the costs of strictly follow this requirements. They are for sure good advice, but not much practical into everyday web dev life.
World’s biggest liquid air battery starts construction in UK
We're using Google Meet, but for the very Microsoftian reason of "it comes with our GSuite"...

While we pay lip service to Zoom's super shitty security stance, we now run a video meeting service where it's trivially easy to click the "turn on captions" button, and see how good a job the world's biggest advertising agency is doing of transcribing all the audio in our most sensitive business WFH calls... :sigh:

(I have my own Jitsi Meet instance running on AWS, but there's me and about four of my tinfoil headwear sporting friends who care enough to bother using it...)
Dart Meets Rust: a match made in heaven
Chrome was great (and offered some unique advantages at the time), but it's absurd to say there weren't high quality browsers on non-Windows platforms. Firefox was fine, and WebKit was good enough for Google to decide to adopt it. They raised the bar by throwing engineering muscle at the problem but there was nothing "low quality" about Safari, Opera or Firefox at the time.
And that's ok, there's nothing wrong with tools being specialised for certain small markets. It makes them significantly better for those people than being forced to use a ill fitting tool for someone else.

Consolidation and lack of competition makes for a worse experience.
Typically seed funding is to prove the concept. Series A is to start scaling it. With Apollo you need to already have a proven concept ("We expect you to have a big vision and a “Tesla Roadster”—a concrete first step") before Apollo will invest. That's what makes it a Series A.
As a beginner to Rust I'm surprised by this. Given the Rust compiler is able to figure out the lifetimes in the recursive case, you'd think the lifetimes within the tail-optimized loop would be same. Doesn't the lexical scoping of the loop's body have the equivalent lifecycle of a recursive call (drop at the end of the loop vs the end of the function)?
@saagarjha

can you share your nano configuration?
> Sorry, I hate to ask but I just have to know now. Have you ever worked in a large tech organization?

Sorry, but you're not going to.

> They may not even be explicitly lying, because the statement is so ambiguous. When you're reading PR/legal speak then every single word matters.

Then say it's ambiguous, instead of saying the opposite is true, is all I'm saying. You misinform people that way.
You're going to want the ability to pull in shared config files whether you're using a scripting language or not. And the way you need to sandbox those paths is roughly the same either way.
Apple says it's an exclusive experience, which is obviously sold to absolutely anyone who can cough up the dough.

(Snark aside, the Apple is rightfully famous for their tight integration, high-quality user experience, and that basically requires a walled garden. And it's easy to find edge cases.)

And you're forced to because they are not a charity and because they can get away with it. (Both in a legal and market forces aspect.)
People rarely run untrusted software on FOSS systems. If you can't trust your package manager and your distrobution you have all kinds of problems the least of which is sandboxing applications.

The only untrusted programs I run are Steam games and FPGA tools, and for those I created a separate user account.

The notion that every application must be 100% sandboxed is mostly security theater and will make your life with daily work in the real non-theater world a living nightmare.
The un-cuddly truth about pandas