skysight-inc/HackerNews huggingface dataset:
`While the first version of this app was on the App Store from 2014 to 2016, I removed it in that last year because the app stopped working properly with most Boorus, and it was broken for most users. Since then, I started developing a new version called “Mignori 3”, which has never hit the App Store. It has been on TestFlight for a while.`

So basically he was calling something a 'beta' and distributing it through Testflight for 3 years.

Yep, no clear reason here. Big Apple bad!

Apple has a lot of problems, and I agree, but most of these 'developer stories about mean Apple' always have two sides of the story. I remember the same outrage about Kapeli's Dash situation, and then came out an account in his name was doing fraudulent activities ( https://news.ycombinator.com/item?id=12680131 )
Wirecard shares plunge as EY says no proof for 1.9b € of cash on balance sheet
But it's not just the app marketplace providers. It has become the tech-company norm to shut people out of their systems without rhyme or reason.

It's outrageous, but people rag on Apple disproportionately, as though their model (curated App Store vs free-for-all) is the issue. We need sweeping technology reform from the top. Governments need to start understanding the technology that they oversee, not just dealing on a 'business level' with lobbyists and execs who will do anything to maintain their autonomy.

When these companies are service providers to a majority of the population (in aggregate, or individually) they must be treated as infrastructure providers and held to basic standards of accountability, transparency, and governance.
While I can appreciate your vision, that seems too detached from the current reality.

Software development is a highly distributed system with many human participants with different (and sometimes conflicting) goals and skills. And to make it effective, you almost always need to reuse software
created by many other people that you don't know (which incidentally creates a huge opportunity for supply chain attacks).

In this reality, you get very little assurance about the authenticity and security of anything you use.
Embrace the shake – why limitation can drive your innovation
> If they didn't then there would be no website for you to complain about.

Oh no, my business model of selling everything I can glean about you in exchange for some recycled 'content' is under threat! Oh noes!

If you can't operate without tracking and you can't legitimately and consensually persuade people to participate in it without resorting to dark patterns and hiding controls, your business is no longer viable, sorry. Find a new model or make way for someone else that can.
Have I misunderstood something, or is this app's main goal to view Japanese comics infringing copyright in some way? That's probably the reason it was pulled. Sure it has other uses, plausible deniability, but what did the guy expect?
Bayes behind Simpson's trial [pdf]
> But this shouldn't be the only option.

Switch to Android. You just realized the same reason why I switched 8 years ago.

That and consistently raising prices. Apple is doing this to satisfy their never-ending rising stock-price and it will only get worse.

Ps. Android exploits are worth more than iOS once now. How times have changed...
Then do like Norway and get a US's own Statoil to also socialise the profits.

We can't shame the population to solve a tragedy of the commons problem, it won't ever work, you need a strong power managing the commons to avoid the tragedy.
Dropbox adds password manager, vault, and other security features
It looks like GoatCounter does; it uses a library, https://github.com/zgoat/isbot by the same author to detect bots.

Detecting and deterring spam and sketchy behaviour while using open source software could be an interesting technical problem area.
As London Bookstores Reopen, Eager Readers Return
They have a pricing example for this use case which includes the following caveat:

> First, you should contact AWS Sales to discuss private pricing for the long-term AWS Snowcone deployment
So it was in beta for three years. What of it? That's hardly fraudulent. If something is in beta, then it's... in beta. He wasn't selling it.
Selling software to users? Did you time travel from 1999 or something?
We need third party app stores and there should be a section on the Apple App Store dedicated for installing these.
Depending on how exact of a similarity you're looking for, gTile for GNOME/Cinnamon might be of interest to you. I've also found PaperWM to be very productive.
Wirecard Delays Report Again Due to Missing $2.1B
Would love to try, and love the name! :-)

This video gives a little more info that I found useful: https://www.youtube.com/watch?v=I3AIJH1oAMY
He was using Testflight to distribute it on his website. This has been a nono to do for a long time. You may not agree with it, but them are the rules.
Ask HN: Do you feel nostalgia for the office life?
Nuclear Arms Race Is Worse Than the Last One
This is something called "results oriented thinking" it can be very destructive to learning in noise environments (e.g. poker, investing)
I'm not sure if it's actually filtered - I think they're just tracked and classified. At least that's what I'm seeing in my instance.
You're a Google employee, and you're vociferously defending Google's use of a tracking header in Chrome. Others deserve to know your conflict of interest so that they can read your arguments in the right context.
In what way does "Don't track people without clear permission, make sure you have a good reason to collect data, draw up a privacy policy and have someone be responsible for it" smother start ups?

Because that's basically all you need for compliance here.
Had a horror experience with PayPal. Lost tons of cash. Getting paid became incredibly difficult.
If you decide to migrate off GA, there's very little reason to not use self-hosted analytics.

The only case when you'd get better analytics from a _service_ is exactly a GA-like setup that can track people as they go from one website to another. That is, the real value of an analytics service is derived directly from its ability to invade people privacy, at scale.

Granted, migrating to another service is usually simpler, but it offers NO insights into the traffic that you can't get from parsing server logs and in-page pingbacks. You do however get a 3rd party dependency and a subscription fee.
> And where it matters more, hardware compartmentalization.

With the caveat that you need to use secure air-gapped communication, and you probably want to use Qubes on each of the separate machines as well [1].

[1] https://www.qubes-os.org/faq/#how-does-qubes-os-compare-to-u...
> The big problem is that when Apple tells you that the reasons “are not limited” the ones they listed, it could be anything. They could call my face ugly and remove me from the Developer Program under that reason and tell me it was because of “fraud”.

<rant>

Seriously, just how hard is it for these companies to communicate properly? Would it kill them to send something like "We saw X on your account so we are closing your account temporarily. Contact us.". Instead it is just "We closed your account. Get screwed.".

This is why so many developers are going the web app way these days. Dealing with a closed platform who won't even talk to you is just infuriating.

Sorry for the rant.
It’s a trade off between speed and security, and my assumption is that they’ve chosen to do it this way so that the encryption key isn’t sitting on the device during transit. By doing it this way even if someone can intercept data while it’s being shipped between the customer and AWS all they’re going to get is a disk full of random bytes.
You are speculating though. Do you know for sure that is the fraudulent activity that Apple are referring to?
I found the Matomo interface to be a breath of fresh air compared to Google Analytics! As a non-power user, GA was too heavy and enterprise-like. Matomo is much cleaner, simpler, and more efficient for me to work with.
Intel, Google, UC Berkley AI team trains robot to do sutures
You should add "in your opinion." Just because you couldn't understand or appreciate Ulysses, it doesn't mean that other people cannot, it takes a certain amount of education and reading of other books to be able to "get" Joyce and especially Ulysses.

Do you expect a person to fully understand C++ the first time they use it?
This suggestion is the ideal one. The locals would know better.
I think he means the response frequency, not the frequency of the AC drive (which he states was 10 kHz).
Impudent code serf thinks he's owed reasoning by his corporate lord.
Twiddler chording keyboards were used by wearable computing people in at least the '90s. Looks like some Twiddler brand devices are still marketed. https://twiddler.tekgear.com/
For a more polyglot license grep thing, I built https://github.com/akx/license-grep once upon a time. :)
Or, the law works just fine and "hey, I want to steal user data without any consequences" is just not a good business model. Millions of small companies work just fine and have zero problems with GDPR. Only a very specific subset (mostly web companies that don't want to ask people for money, but instead sell their data) have real problems and cry loud.
In the UK and least there exists a service like that - resolver.co.uk. I have used it once and got a response from the company that I complained about. I thought that was rather neat.
Meeting Mr. Kid Pix (2019)
Link's Awakening disassembly reached source shiftability
[Hasura GraphQL Engine](https://hasura.io/)
I guess there's the implication it had some form of review when he says: "Mignori 3 was published on TestFlight in 2017 and Apple approved it."
Whatever your political stand about China and hk, prepare
It means remove any data that identifies the individual. So saving data that is not identifying is fine, saving a record of there having been a request is also fine, saving identifying that is part of the request is not fine.

There are also limits placed on this by other laws. For example tax agencies often require companies keep sales records for multiple years. A request for deletion doesn't remove all invoices from sales records with their name on it. I imagine there are more examples, but I think it gives a good indication that GDPR is not where the buck always stops.
Delaware Quietly Fielded an Online Voting System, but Now Is Backing Away
Yes, you can do even more, you can put all those user data to some offline storage as long as you can justify that you need this (which is very often the case).

GDPR is mostly about processing user data, not storing them. So user can execute "right to be forgotten", so the data will not be accessible in any way and you are not allowed to process them, however you have full right to keep those data if you believe that this user might show up five years later and try to sue you for a, say, undelivered order, etc.

In that particular case you need to be able to prove that user wanted to delete the data. Otherwise user might sue you that you've deleted those data without agreement and caused some business losses in that way.

Someone third party might also show up and accuse you that you deleted data as a part of conspiracy with the user (think of angry former wives/husbands).
> But to get feedback and develop relationships one has to constantly engage with people on social media.

Most of my "engaging with users" is via email. Social media such as YT comments in my case, can help but it's a miniscule portion of my time. It's also rarely as deep or as useful as email or voice calls.
I'm honestly curious, are all the analytics tools, which rely on making third party queries, still efficient with extensive use of adblocking these days?

If not, then logs of webservers are the only 100% reliable place (if available of course), so old-style tools like awstats, Webalizer, etc [1] should have a rise in popularity again.

[1] https://en.wikipedia.org/wiki/List_of_web_analytics_software
"It took nine days for the number of infections to grow from 6 million to 7 million, and less than eight days to get to the latest million, so the pandemic is not slowing down." https://www.abc.net.au/radio/programs/coronacast/the-global-...
To be more precise, the focus of the spirit of GDPR is processing of personal data.

When you receive a deletion request, you must delete the data and stop using it from anywhere you don't have a legitimate reason to continue processing it under one of the reasons for processing personal data without user consent.

Which is easier said than done, because it's against general development practice of having a single copy of any data that you use everywhere without much checking. Instead, you have to either check a flag before using data (do I have consent? Has it been revoked?), or keep several copies of the same data for distinct use (for example, one copy for your app, one copy for legal reasons). The first approach helps you to be able to prove consent. The second approach helps you when you need to archive data past its retention date.
Autopen
Kind of. Normally network access is fairly restricted, as well as administration rights on machines but developers quickly are exempt from this for productive work. I remember sins like modifying SSL checks for several package managers.

lie isValidTLSCert(){return true;//suuure}

Today is is mostly a configuration issue. Of course you will never be praised for the security of a solution. If something bad happens security quickly becomes the most important thing of course.
The consequence of playing in a walled garden.

Is there still no way to release an iPhone app out with the iOS app store?
1) There are plenty of paid apps: https://appfigures.com/top-apps/ios-app-store/united-states/...

2) Taking his argument in good faith, he also means "free" apps with microtransactions, because in both cases the same situation exists: The iOS App Store is too big a market to ignore. Which leads to the same problem, regardless of whether your app is paid or "free", that if Apple suddenly decides it doesn't like you, you're screwed.
If you define untrusted software as anything not coming from your distro's official package manager, many people run lots of untrusted software on their Linux systems.
Think of PPAs (Debian/Ubuntu/etc), the AUR (Arch/Manjaro), and many other package managers (pip, conda, npm, cargo, etc.).
My late father did a number of recordings for LibriVox.

In fact in the last conversation I had with him, he said to tell the people on the LibriVox forums "Cheerio" from him, so he had certainly enjoyed being part of that community.

After he died and I posted his farewell message there, it was quite emotional reading through the tributes to him and his skill as a storyteller. Later still I found a dozen or so "fan mail" letters - so he knew he was appreciated.

I'll always be grateful to LibriVox for giving him an avenue to exercise a talent that wouldn't otherwise have been public.
Thanks for the feedback.

- I'll add an option for this.

- What songs were you searching for? The search feature uses Last.fm for music. They've had pretty much everything I've ever searched for, but maybe they're missing certain categories. I might investigate other/additional search APIs in the future. In the mean time, adding songs via URL is a decent option. The way the algorithm is implemented currently, it won't make a difference, and eventually I'm planning to add a cron job that'll go through the URL items and classify them as the correct content type and fetch additional metadata (with manual intervention as needed).

- I started working on this today; should be fixed tonight or tomorrow.
The copywriting example is amazing indeed.
> we're witnessing a very fast pace of drug development and testing

Anything short of a successful human trial is ... nothing.

SARS-1 in 2003 even had animal trials, but no results in humans. (Covid-19 is SARS-2.)

The false hope of a vaccine or cure has caused some US governors to announce waiting for a vaccine before ending lockdown. 2022? What if that vaccine never comes? How do you base policy on mere hope?
Zoom will be the new Skype in 2021, post-covid.
The Empty Promise of Vitamins
>It's now so bad people are refraining from trying out innovative business model or apps just because they think there could be a chance someone at apple validation wouldn't like it and kill the product at any time.

This is very true. I know of many people who have legitimate App ideas that would flourish today had it not been the extreme restrictions that Apple and Google is putting on mobile devices. Sadly, I can testify, that Apple and Google are actively putting obstacles in the way of innovation because it hurts their business models.
Just be wise. In perspective of 10-20 years the cost of living in cheap countries might skyrocket and the currency might appreciate diminishing value of savings in dollars.

Just read ThaiVisaForum (thaivisa.com) - endless stories of expats who over last 10-15 years went from comfortable living on pension in Thailand to destitute.
OP if you're the author, FYI first link to previous post ('this is a follow-up to') is broken:

https://mkhan45.github.io/2020/06/12/Lua-integration.html

Edit: Ah, 'Lua' should be lower-case.
> it'd be financial suicide to not be on the App Store.

I find it amusing that people and businesses are willing to put their future in the hands of a company that has historically destroyed anyone who gets enough users on their platform.

If this is the best option, I think that the best option would be to actively work with a platform competitor. Do developers have a sense of stockholm syndrome ?
Shorter "American Alpine Journal" (circa 1970s): we were tired, hungry, cold, low on oxygen, and that's when we made this stupid mistake and ${colleague} died.

I don't know what current standards may be; around the turn of the century there was a proposal that a team should include someone at base camp radioing simple math questions "6 times 9" and timing the response. If the response time increased significantly, they'd say it was time to turn back.

(Viesturs on how to train to climb without supplemental oxygen: he doesn't think he trained to do it, he's just lucky to be a freak)
Why I specified "fixed URLs", to close that loophole
yes, you can i heard instacart for example uses their enterprise cert signed app for their drivers/deliverers. Drivers are instructed to go into settings and change things to allow loading that app
I disagree. there are so many constraints today imposed on developers, and so many risks by trying to develop innovating apps, that i think a new ios store would have a lot of interesting apps to offer.

Also, for startups, making sure you have an alternative option to distribute your app in case it gets shut down on apple’s store makes it almost a guarantee that they’ll try to deploy on as many different stores as possible.
> What is the largest GDPR fine yet for a violation specifically about website consents?

200 million for British Airways according to https://www.enforcementtracker.com/
I highly recommend dbt (data build tool) for a modular approach to sql; postgres, snowflake, bigquery or redshift.

https://github.com/fishtown-analytics/dbt
Yes, I immediately wondered how to do the same kinds of things in OpenSCAD .. seems like adding a spreadsheet control to OpenSCAD would be low hanging fruit, also ..
> You have to watch over the users shoulder of have video.

Perfect advice. Sadly...
No, I can't say for sure, but it is A reason to terminate the account, and since this post is called 'Apple is threatening to terminate my developer account with no clear reason' I believe it is the case. We will never know the real reason as Apple probably won't provide it, but there is a violation of their rules, even if the termination was because something else, they are still entitled to close it based on the violation.
Yep, I had rejections too and I have always managed come to an understanding with the review team. I even had the reviewer call me to explain why he would reject the app and give me an idea to fix the issue. He even gave me his phone number and working hours so I can call him if I had further questions.

It wasn’t a fun process but I like having a human contact on the other side of the things.

Sometimes I think, people having issues must be omitting some part of the story because I am not a big-time publisher, I have no privilege but at the same time, I don’t have these problems of ”evil Apple destroying the little guy” sort.

"Apple threatens to close my developer account" is a very different situation from Hey's disagreement with the business practices of Apple.
Thank you for clarifying. I'm not advocating for bitcoin, just fact-checking their (for me the strongest) argument for wider adoption.
I still use my 11 year old Thinkpad together with my newer Thinkpad. I use both laptops alternately. My productivity does not increase when i use the newer one.

That's said my extra 20 inch monitor helps me to visualize.
The "mystery" company behind the extensions is Genimous, parent company of Polarity Technologies. Polarity owns the extension referenced in the Awake blog post:

https://awakesecurity.com/blog/google-doppelganger-malicious...
I wish the Hey story makes people realise that we can't depend on benevolence of two corporations and should be working on open platforms.
> Showing users how much data a given extension sends to a backend and ideally making that data transparent would be enough to stop most of these practices

Exactly! I find it abhorrent that not even Firefox has something straightforward like that as a “first-class” feature. Most of the extensions I use shouldn't need to communicate with any server at all to begin with, so having to just trust the author's words or manually audit the code on every update (or stop them altogether) and maybe fork the project (if that's even possible)... Doesn't make sense.

The one thing I'm aware of that these extensions could do to sidestep such a mechanism is to inject scripts on pages that then exfiltrate your data, but injection could also be blocked, and as a last resort I trust uMatrix would have me covered ;)
makoto shinkai /studio 4c

venus wars
What's your alternative, since there isn't any, except to completely change your industry or business model?

iOS users are known to pay for apps they like. Android users less so.
No, rent is about supply and demand. What people can afford -- how much money they have -- is a component of demand, but supply also matters.

If you look at countries that restrict supply less than the US, you'll notice that rent doesn't go to such high extremes in booming cities. For example, in Germany, the most expensive cities, the ones that have been booming, have average rents that are around 40-50% higher than the national average. In contrast, in the US, the most expensive cities have average rents easily double or more the national average. Sometimes even getting close to 3x.

You could also look at NYC vs Tokyo. Japan has much looser restrictions on housing supply and it shows here. NYC has 50% higher salaries, but rent isn't 50% higher, instead it's nearly 3x as high: https://versus.com/en/new-york-vs-tokyo
Not unless you make it open source and require your users to download and compile it to their device with Xcode on their own. Not going to work for most, and without a developer account, they'd have to redeploy to their device every week, since that's how long the license lasts.
> Mignori is a client for Image Board websites (we informally call “Boorus”). These image boards are popular in the anime community, although there can be image boards for anything you can think of.

I just googled this, found some references to the anime image boards. Most were Hentai / Porn. If the main purpose of an app is viewing adult content, its main purpose is viewing adult content - even if you have to add the ressources yourself. (I might be wrong, I don't have a clue about the Boorus community).

So prop. Apples "Freedom from Porn"approach?
So you mean Bash is a high level language compared to Go? /s