skysight-inc/HackerNews huggingface dataset:
Simple SaaS listing based on your growth stage, pain-points and industry
We built toolbase.io to help makers, product managers and digital transformation specialists to find the SaaS tools that would be best for their specific pain points, industry and stage.

Start the three-step user journey here. https://toolbase.io
I understand the bit about a video players, but you're not going to want to play a game in anything except exclusive fullscreen due to the massive input latency incurred when using windowed or borderless windowed.
Introduction to Conversion Rate Optimization
I think your list applies to a select few software engineers in Silicon Valley.

> You're doing the thing you love most in all the world, surrounded by people who feel the same way.

The thing I love most is understanding ideas and solving cool problems. Would have stayed in academia if the jobs,job security and money were there. There is plenty of problem solving but it's not an everyday occurrence.

> You've gotten every perk known to man from ping pong to free booze.

Might get some free booze at company events. We have ping pong at our yearly BBQ.

> You're getting paid handsomely, more than any other humans on the planet.

Definitely not true.

> You've created a buffer zone between yourself and the client that could withstand a rocket blast from a scud missile

I'm emailing or on the phone with clients on a weekly basis.

> And you are allowed to wear whatever adolescent threads you choose up to and including socks, sandals cargo shorts and a spiderman T shirt ..

This one's true.
No need for a separate extension, just go to ublock's filter lists and enable the cookies list under 'annoyances'
Yes, strictly speaking the West, the Occident, is born out of the leftovers of the Western Roman Empire.
Recaptcha tries to do this.

Their approach is to make a blob of code which collects all kinds of details about its environment (for example, Object.keys(window) ). It then uses a hash/concat of those details (with some random too) to decode data to decide what else to collect, hashes or concatenates those in too. Repeat a few times. Then send the final data blob back to the server.

The server can then run a tiny emulator to run the code with the same seed random to check the results are the same on a whitelist of allowed environments.
You can still install add-ons/extensions in Chromium, so it wouldn't help at all. Also, most malicious extensions try to siphon data from your web-session (e.g. your open gmail page), so sandoxing through snaps doesn't help, either. Chrome is still a fairly safe browser, and it is well within Google's interests to keep it that way. The big issue is users installing malicious extensions disguised as useful ones, and that's an issue independent of the used browser. You could argue that you are much safer with Firefox. Not because it's inherently safer, but simply because it's lower market penetration means that it is a less interesting target.
I do notice that almost all of the extensions I use have no need to make http requests nor modify the dom (e.g. to add tracking <img> or css url()). I wonder what other methods there are to exfiltrate info beyond that.
Show HN: Bootstrap 5 Alpha Tutorial
Because the statement is deliberately ambiguous, and doesn't say they do not use it for tracking.

"The X-Client-Data header is used to help Chrome test new features before rolling them out to all users. The information included in this header reflects the variations, or new feature trials, in which an installation of Chrome is currently enrolled. This information helps us measure server-side metrics for large groups of installations; it is not used to identify or track individual users."

Okay, so they're saying it is not currently being used to track individual users.

This means they can:

- Track individual users in the future.

- Track devices at any time, for differentiation of individual profiles.

- Track installs at any time.

- Derive information about the individual using this data (for example how often they update their browser, how often they use that device etc)

All of those things are extremely valuable from a data standpoint.

Unless Google explicitly stated that it was not being used to track, differentiate or profile users or devices and will not be used for that purpose in the future, it's extremely suspicious.

Most ad networks collect bulk information from browsers to fingerprint devices and users. Google has a step up on the competitor networks because they own the browser.

Do not forget Google was sued just this month for tracking users while they were using incognito mode.
Definitely, when I ask how to send money to people anywhere in Europe I just get an IBAN in response, which I use in my banking app.
https://toolbase.io
Protip: Instead of saying which metrics you use you could use a opaque evaluation system that seems arbitrary for the subjects.
to answer everyone asking 'why do they do it????' its because of spam, that simple. they dont want:

a) outbound bots that send messages to users created in bulk messaging millions of users.
b) inbound chatbots that answer messages
c) when they had snapcash, they didnt want bots generated collecting cash.

spam is a multi million dollar industry.

@3eed i guess it's not considered obfuscation but you gotta pass the correct version # or you won't be able to connect either, old versions are immediately obsolete.
40 Years of Human Experimentation in America: The Tuskegee Study
Which extensions were compromised? Not seeing a list anywhere.
Eleventy and Snowpack and Sass and PostCSS
Stylus is the only one I had installed in Brave at the time you asked.

I have several in Chrome but the thing is I no longer really use Chrome for general browsing. Chrome has been relegated to development activity; I isolate developer tools to that browser and leave them out of my day-to-day browser (Brave.) It's a nice arrangement really.

Decentraleyes is interesting. Thanks for pointing that out.
Small launcher Rocket Lab plans to pull its first mission to Moon next year
"It's Google. Everyone uses it. The defence rests."

No-one gets fired for choosing IBM.
I Built My Blogging Platform – QuickPublisher
QuickPublisher is a simple blogging platform which provides monetization support without using ads
EXAMPLES:

> Rapid response vaccines, non-carbon energy, solar geoengineering, VR/AR, biological manufacturing, new education formats, new medicines, affordable housing, and charter countries.

I think none of these are moonshots except "new education formats"

I think this is a problem.

Moonshot doesn't have to be, we wish this existed.

It should be, this field hasn't had much work and no one has gone down this path, it's about exploring a new world.

VR/AR are done to death for instance and will continue to be done. Someone will just loophole this with a interesting X (that's done to death) and add the word VR to make it sound like a moonshot.

Moonshoot idea - setup a framework that allows people to accurately identify moonshots.
Documentary – How startups survive C19 – 5 lessons
> Is it just a coincidence that the Eemshaven (eu-west4) datacenter is close to a coal plant then?

Presumably, since:

"Our data center in Eemshaven was the first to be powered by 100% renewable energy from day one."

https://www.google.com/about/datacenters/locations/eemshaven...
Why not satellite internet then?
You can hide all cookies popups with uBlock Origin and the annoyances filter.
Docked doesn’t guarantee reproducibility anymore than a tar file in that context.
Markets are geared towards individualised, itemised solutions. They have all kinds of perverse incentives. For example there’s no incentive for car companies to make public transport, or a cheap efficient car. Hence we’ve been seeing cars get larger and fancier instead.

In New York and other cities, financiers and banks buy up entire apartment blocks and let them stand empty to drive up property prices.

The advantage of the government is it isn’t tied to a profit system.
DoubleClick is owned by google. Seems reasonable enough that its one of the run experiments domains.
oh whoops forgot they also dont want scripts following users then logging all their private pics/posts without flagging it as beeing screenshotted which defeats the purpose of the app.
Proper limits are needed regardless of how the config is loaded. In this example I would expect add_body to fail after adding some number of objects well before the loop limit is encountered.

More troubling are loops which consume CPU without hitting memory limits. I would hope Lua provides a way to limit the number of instructions when evaluating expressions. If not then delegating reading the config to a limited subprocess could work at the cost of still more complexity.
> It's like an actual desktop when you can spread out all your stuff.

But you can't spread out your stuff any more than you'd do on a 24" 4k monitor...
Israel is in a state of permanent war, and they can't even trust their traditional allies. It's in their best interests to invest heavily in traditional and cyber warfare, and try to be a step ahead the rest in terms of intelligence.
I was wondering if there are any steps a developer of a small app can take to add such a header and lock down the API so it only answers to said header.
This level of obfuscation doesn’t seem doable for smaller shops. Is there something simpler, that is “good enough”?
Argentinian here, can confirm. Just look up Nisman death AMIA bombing.
They hardly ever sold them here in South Africa, I guess that is my experience.
First Tesla Model Y in Netherlands Spotted Undergoing Autopilot, Supercharger
Single techies live in SF because they want to get laid, and that won't happen on the peninsula.

Brutal commute, though.
The article specifically points out that there could be herd immunity in a certain population without any antibodies.
Twitter has been caught using phone numbers for security purposes / tackling fake accounts in the past for marketing purposes. Zoom has a very dubious history, involving China, lies and a complete lack of security.

As for the same old same old? It hasn't been precisely in that form but criminals have used Facebook, Tor, Email, Discord, YouTube, Usenet, Skype, MySpace, and other technologies / sites to facilitate abuse. This is merely the newest iteration.
Let me put it another way. Do you think the average user knows of or would approve of Google Chrome itself sending information to an advertising network that could be used to track their behaviors and identity?

Do you think this "feature" is adequately disclosed to customers downloading Google Chrome, that it includes a DoubleClick tracking backdoor that no other ad network or website receives.
> Any smaller and I can't fit enough on the screen at once and my productive decreases.

But that's nothing to do with physical size and everything to do with resolution.
The Uplifting yet Distracting Effects of Daily Small Talk at Work
In fact they did contribute to Firefox by paying engineers like Ben Goodger and Seth Spitzer, but clearly they weren't happy with that level of control. Goodger was lead developer for Firefox. They pulled all those people to work on Chrome instead, a step that immediately hurt Mozilla.
New Book for Self-Assessing Digital Habits
Yeah, and that sounds totally plausible. That Google need to send "experimental headers" to a hardcoded domain for an advertising company they bought a decade or so back - because of course the results of web browser experiments should go to an advertising company (or these days th advertising division of a company) ad not, say, to google's own domain? /s

Google are totally lying here.
Author is surprised by convenience of describing data in Lua. I think he's in for another surprise if he re-implements simulation on Lua side. The LuaJIT is so fast, I can just code the most naive implementation and never go back to refining it. It's the simplest fast language and to me optimal choice for fully utilizing a single CPU core.
> then you probably need reading glasses

Maybe, just maybe, one could talk about how crisp text appears on 4k _without_ being rude.
Semi-Retired in France · an American in the Languedoc
I have no clue if they're lying or not, and I'm open to the possibility that they are, but you're not really making a good case for it here. It's pretty disingenuous to claim they track users and base it on lack of mathematically airtight evidence that they don't. That's not how accusations are supposed to work, right? I might as well claim you're a burglar because there's nothing to indicate you're not one.

If you want to say you think they're tracking people because of reasons X/Y/Z, or that what they're doing looks suspicious, that's a lot better of an argument. But to claim they are with no evidence of it actually happening is really pushing it.
For just $40 a month, Indians can beat lockdown blues with a long-distance pet
memory controller training takes fraction of a second
If Google wanted to support open standards and reduce reliance on IE, they wouldn't have targeted Firefox customers with Chrome ads on YouTube and Google aggressively.

Now, Firefox and Safari will protect customers against tracking (measures against third-party cookies) while Chrome won't do anything -- because that's where the cash is.
I've been developing Chrome extensions full-time for about a year now [1], and it's honestly terrifying just how much access extensions have to sensitive user data.

Best practices I've adopted for my own extension use:

- Create a separate test Chrome profile to try out extensions

- Delete extensions that ask for the overly broad "Read and change all your data on the websites you visit" permission unless (a) the extension is open-source (b) backed by a reputable company or (c) has a very good reason for requesting it, and I trust the makers

One of the biggest issues with extensions today is the permissions model. On more established platforms like iOS and Android, all sensitive permissions have to be requested at runtime rather than at install-time, which forces developers to explain why they need the permissions they ask for. With browser extensions, there's no such requirement, which leads many developers to ask for all the permissions they can get because there's no downside to doing so. That's why over 80% of the top 1000 extensions ask for access to ALL domains [2], which means they have the power to steal any of your data (emails, passwords, etc.) on any site if they wanted or became compromised.

I've written about this issue before [3] and the good news is that with Manifest V3, the Chrome team is planning to require that host permissions (which specifies the domains an extension can run on) be requested at runtime. I think the team should go even further and enforce the runtime restriction for all sensitive permissions, not just host permissions — if you agree, feel free to chime in on the post I made about it on the chromium-extensions mailing list [4].

The extension ecosystem is pretty broken right now security and privacy-wise, but with the upcoming changes, it's headed in a better direction.

[1] https://news.ycombinator.com/item?id=22936742

[2] https://docs.google.com/document/d/1nPu6Wy4LWR66EFLeYInl3Nzz...

[3] https://www.notion.so/dkthehuman/Day-4-The-Dangers-of-Chrome...

[4] https://groups.google.com/a/chromium.org/d/msg/chromium-exte...
Your warning at the end doesn't seem to square with your willingness to eat new varieties you've never seen or heard of before. How do you know beforehand that whatever mutation caused that Mulberry tree to produce fruit all season didn't also add toxic compounds to the berries? Is this a do as I say not as I do situation?
If you really want to start with a Joyce, start really small with The Dubliners. Those are his short stories, and if it’s to your taste, move onward.

Wells would say don’t, but fuck Wells ;p
GitHub Design Preview
I wonder how much time is spent on getting the processor from 16-bit Real Mode and up to the full 64-bit mode.
The George Floyd Uprising and Anti-Racist Culture Change
I'm currently working on mathematical programming applied to telecommunication networks (using queueing theory models) and the more I learn the more I find those things fascinating
I used to when I ran dual 24" monitors! We had really sweet old IBM monitor stands that could tilt, raise and rotate. You had to be quick to grab them from the copy room before the electronics pickup. I swiped one from the still warm desk of a colleague on the way to their farewell happy hour.

So I had a '14 13"(? Might have been 15" but probably not) RMBP on the left with email and chat stuff, 24" main monitor in landscape and then another 24" monitor in portrait on the right. I think at some point I put a newer panel on the IBM mount. It was sweet.

Back then we still had desktop PCs at our actual desks so there was a KVM on the main monitor! What a time to be alive!

These days I do prefer a single monitor workflow if possible. It's just cleaner and move convenient.
thought this was gonna be about master/slave controversy

i'm relieved its actually about a real issue
Skimming, looks like a lot of these are generally good ideas regardless of GDPR. For instance:

"Assess the value of adding each dependency. Some commonly used software bricks are only a few lines long. However, each added element is an increase in your system’s attack surface. In the case where a single library offers several functionalities, integrate only the functionalities you actually need. By activating the minimum number of functionalities, you reduce the number of potential bugs that could occur."

The context is that an external library can mishandle personal info, but this is true even if you didn't care at all about security and privacy.
Caltrain summary:

- no wifi

- relatively expensive for a return trip

- 4th and King terminal is nowhere. You still have to get to FiDi or somewhere

- runs hourly after a certain time, ending at midnite (pre-corona.)

- if you forget/can't prove you paid, $200+fine and interrogation

There is garage parking downtown after 6 pm, but that's $20+.
Racial Bias in Perceptions of Others’ Pain
As for me, three monitors is just too much information. There's no thing I do that requires me to see so many things at once. I do make extensive use of virtual desktops instead.

I like one large 4k monitor right in front of me, and the window manager is set to allow splitting windows in thirds. Laptop off to the side with music, terminal, and other auxiliary stuff.
Maybe also introduce a paranoia button where every request can be vetted in its context, so every request you get to see the code and a button permit or not.
I'd be fascinated to read about your old team's work!
New Zealand ends Covid-free run with two cases from UK
Given that

> that it includes a DoubleClick tracking backdoor that no other ad network or website receives.

is false, yes, I think the disclosures are reasonable. Your standard of disclosure is that companies need to disclose things that they aren't actually doing. That's ridiculous.
These cold viruses circle the globe too, and just because some children had colds and transferred them to adults, does not mean that they had exactly the strain that could potentially give partial Covid19 immunity.

So while I agree with your general advice about sources, I don't find your "apparently" to be apparent at all.
>Native Americans and pre-Christian pagan Europeans had a lot in common.

Other than not having the Christian religion, no, not really.

>Both cultures that honor seasonal cycles, animals, nature, ancestors, animism etc

"Both cultures" ? What cultures ? Neither pre-Colombian Americas nor Europe shared a culture on their respective side. Even if most of Europe shared a common Indo-European root, religious practices were varying widely. Be it from the cross-pollination with different tradition (pre-Indo-European, Semitic and whatnot) or social changes. It's very hard to argue the official Roman religion as practiced in cities was any more "closer to nature" than Catholicism is.

>the Abrahamic judeo-Christian capitalistic worldview

Any more grand words to force into that sentence ?

Making the Christian religion itself being the deciding factor in your reading of history is a position that's very... Christian.
AppStore Drama: Apple 30% fee vs. Basecamp
Perhaps what is broken is not our operating systems, but the notion that a computer program running on one's own computer can be an untrusted agent of a third party. I don't the tools in my collection to be isolated from each other, dangerous creatures in a computerized zoo. I want them to be composable elements of a cohesive whole. I want them to share data so promiscuously that is difficult to tell where one program stops and another begins. Today, this vision of computing is best realized in the free software world, and I don't believe that is a coincidence. To make it work, your tools must be trustable, and the problem of trustable computing is fundamentally intertwined with the issue of free software. Can it be reconciled with a commercial model of software? I don't know, but if it's a choice, then I've made mine.
I’m surprised that no one has mentioned how this is actually accomplished. The answer is: largely automatically, at the compiler level.

Snapchat acquired Obfuscator-LLVM and the people behind it in 2017, which was actually partially open source for a period of time. It is a compiler backend for LLVM that obfuscates your code for you. You can read a bit about some of the techniques used on their old wiki:

https://github.com/obfuscator-llvm/obfuscator/wiki/Features (outdated)

https://www.bloomberg.com/news/articles/2017-07-21/snap-hire...
Windows Mobile was as good as dead on most markets. If anything, the competition was against Symbian, and to a lesser extent against Blackberry.
It's an advertising company making a statement about a "feature" in their browser that phones home to advertising domains with information that could be used for tracking purposes. You don't think that deserves extreme scrutiny? Do you think that statement was made by a random developer or filtered through 100 PR and legal people?

Every single word of that statement was carefully crafted and constructed. Knowing that, why is it so ambiguous?
The NodeMCU[1] environment for ESP8266/ESP32 microcontrollers is pretty neat too -- it targets a $2 microcontroller with wireless network access (and Bluetooth in ESP32), with builtin functions to make HTTP requests and interact with external devices.

[1]: https://www.nodemcu.com/
It's not as much theories as science reporting.
> notebooks are not good for development. They are great in mobility and convenience, and this argument might outweigh everything else for some people. I accept that. But still, a desktop monitor + external keyboard are always better than a notebook.

This!

I can‘t understand how some folks can make dev work with the display of their laptop alone, without an external monitor. And then the trend of trying to setup the ipad pro as the sole working environment, with an external keyboard and a trackpad. Watching those (youtube stars) trying hard to make the setup work, them looking down on a tiny screen, the angle alone! We have had much better setups for years, why giving up on this to work with an inferior setup.
Don't think it counts. That's a neccisary condition to multi tenancy cloud tech. It's a product feature that customers require and ask for.
Britain's Contact Tracing for Coronavirus Falls Short of Promises
The business model of watching people's web browsing history and selling them adds? You mean like Jumpshot (through antivirus Avast -- Czech), Facebook/Twitter/Pinterest through their pixels (US), every ad tracking network (US/China/Europe generally), and Google through its search engine history & ad platform (US)?

It feels very unfair to malign Israel here when the majority of surveillance on the web for money is happening in other countries.
So basically typescript?