skysight-inc/HackerNews huggingface dataset:
> Hence the ambiguous PR statement.

There's nothing ambiguous about "is not used to identify or track individual users.". Any form of personalized ad tracking would require tracking individual users, by definition. So there's your answer. Your attempts to create weaseling where there isn't any, so that you can continue to exclaim about the potentials for tracking don't actually change the ambiguity of the statement.

> How do you know they're not using it for tracking

Well I mentioned upthread I work at Google, right? Let me ask a question:

Google has historically been notorious for not being able to keep things secret, especially controversial things. How is it that Google is managing to keep this major component of tracking, that has to touch multiple major products and involve various teams a secret?
Yeah, barely anything is compliant. Though I’ve recently encountered a bunch of sites that are, so maybe things are slowly changing.
Yes. If you're passing it to another process then you would need to parse it. If you were using it in the same process and not crossing sandbox boundaries then you could just pass around whatever data structure was generated without serializing it into another format.
Interesting. I have a product which is basically a blog + YT channel full of Elixir tutorials and I recently decided to delete my LinkedIn profile.

I could reverse that, though since they put a 45 day waiting period on deleting it. How would I use LI as a "primary platform" to promote my service or build a community around it?
20-Year-Old Robinhood Customer Dies by Suicide After a $730k Negative Balance
I got a completely different feeling. I read this as 'we have both been irrevocably shaped by our influences into being entirely different types of writer, thinking the other's have little merit - but we may both have merit'.
That's probably an artifact of the reporting process. Most hospitals don't report during the weekends.
Free Alternatives to the Wunderground Weather API
I've seen wildly varying start up times on x86 hardware. I had an Samsung Ativ Book 9+ running stock Debian that with a cold start had fully started X and showed the login prompt before the backlight turned on (about 1 second). I've also had the "pleasure" to manage some Dell servers that took an impressive 2 minutes just to get past the BIOS.

(Well I did turn off the 5 second delay in GRUB to make that laptop boot time possible.)
Amazing, and a bit quaint.

Of course, there's a reason why most of these aren't used anymore and even valves are used in very specific applications (or let's say, not all of them exactly for pure engineering reasons)

Semiconductors blow all of these out of the water. And as technology for higher power/higher frequency gets better they will be replaced more and more by semiconductors.
Is there an article somewhere describing the last point (YC crowd sourcing)? Sounds like an interesting read, but can't find any thing with just these terms.
I really liked the novel "Constellation Games" (c.f review at https://boingboing.net/2013/02/20/constellation-games-debut-...). A federation of alien civilizations pays a visit to earth, and a game developer decides to investigate their cultures by reviewing the aliens' video game systems.
It's very possible to solve this but not without completely overhauling WebExtensions. It's a relatively bad, old API that has multiple security problems paired with a distribution platform (the Chrome Web Store) that is severely neglected and also poorly designed for dealing with security threats. Fixing this would basically break every existing extension, and Firefox is living proof that doing this (for basically any benefit) is very expensive.

Unfortunately since the Firefox team gave up and just adopted WebExtensions wholesale and Edge is dead, the only vendor that's likely to do anything about this is Apple, which means you only get to benefit from a better extension security model on OS X (and maybe iOS, one day).

The idea you describe of tagging data from sensitive sources and limiting its flow is something that's been done in production software here and there, but never to the extent necessary here. It's commonly used to mitigate SQL injection attacks [https://en.wikipedia.org/wiki/Taint_checking]. Part of the problem is that the real issue here is not whether the data is privileged, the issue is whether the use of the data is permitted. If I install the 'Google Translate' extension it wants access to all my tabs, which is technically correct - if I ask it to translate some text in a gmail tab, it's going to need to access that gmail tab. But that doesn't mean I also want it to harvest all my emails and POST them to a server somewhere. You can say "well, disable POST requests", but how are the translation API calls going to hit the remote server?

Naturally gtranslate isn't going to exfiltrate my emails, but if the translation extension was maintained by a smaller vendor, some state-level actor could buy them overnight no problem.
> What is the "tracking" aspect?

See this post I made when X-Client-Header was introduced.

> But they claim [1] this X-Client-Data header is used for experimenting with Chrome, not for tracking.

They claim a lot of things. Sometimes they even modify their claims years after they first made them. Even if they were making 100% innocent claims now, they are not guaranteeing[2] they won't change how they use the data in the future.

> But you're claiming they're using it for tracking, so you're claiming they're lying...

Not at all - as I point out in [1], Google is saying they are tracking people with that header, but the claim is obfuscated by some blatant doublespeak and the hope that you only consider the X-Client-Header (or any other field with >0 bits of fingerprintable entropy) in isolation. That is never true, <i>which Google also admits</i> when e.g. they casually mention they can deduce a HTTP request's country of origin.

Asking if the X-Client-Data is "used for tracking" is the wrong question. They are tracking people using the combined set of all of the tiny pieces of data they are able to exfiltrate from you. Any specific piece of data isn't important; if that header was missing or corrupt, it's just a small amount of noise added to the already noisy correlations they do to fingerprint you to infer whatever they are interested in about your pattern-of-life.

[1] https://news.ycombinator.com/item?id=22236778

[2] https://news.ycombinator.com/item?id=18466647
> How do the current listeners (on HN) of works here decide what to download or not? Or is it just a matter of “download, listen and see if it’s good enough or move on”?

Pretty much download, listen, move on. But after a few, you might start recognising the reader, and have confidence in them. (It's been a while for me since I made heavy use of Librivox, so I've forgotten the ones I preferred.)
This was a few years back but I had token generation working with something much simpler than Corellium using https://github.com/unicorn-engine/unicorn emulator [You will need to set up CommPage, handle system and mach traps, load dyld, etc]. They've probably added more security since then but back when I looked at it some of the data that was encrypted in the token off the top of my head was:

- Request Path
- Timestamp
- Snapchat Binary Size
- Bit Flags for various hack checks such as jailbreak, checks for various tweaks, etc.
- Device Type
- iOS Version
- A pair of counters, I believe these were being used to detect real devices being used as signature proxies.
- A unique device ID generated at startup

I can't remember which one of the tokens this was for. There is a X-Snapchat-Client-Token used at login if I remember correctly and X-Snapchat-Client-Auth-Token which is used for every request.

I never ended up using it for anything but it was a lot of fun getting token generation working through emulation. I'm not sure if I was actually able to bypass all their checks or if it would have been detected had I actually tried to deploy it for something in production.
Mark Zuckerberg’s Facebook: A Deliberate Cocktail of Arrogance and Ignorance
Of course, that's how it works in Safari.
This is surprising, because we aren't talking about searching for ä and matching Ä or vice versa...
You realize that the tracking headers are headers as part of the requests that you were already making to doubleclick. So, what's happening here is that if you make a request to doubleclick (say because you're viewing an ad), extra information is included that allows Google to understand which experiments were enabled on your browser.

If you never go to doubleclick yourself, chrome won't ever send data to it. It's not like a sneaky background thing. It's extra data attached to requests you were already making.
https://www.youtube.com/watch?v=i7kh8pNRWOo
I am not sure but I wouldn't think so, unless you have to serialize/deserialize or otherwise transform or inspect function call arguments in some or other way, as you need to do when binding JavaScript with C.
Is there any hope that Linux will ever become a microkernel?
You can answer no to that and still be GDPR compliant. You’re allowed to save personal information that is critical to your business. People can’t buy stuff from you and demand you have their payment data deleted before you charge them, or right after they do a charge back of money paid to you for instance.

It’s probably healthy to design systems that are build to let people manage their own data though. I think people will slowly start to expect that of you in the future as more and more solutions start to offer it.

In the public sector of Denmark we give people access to all their health data. When I have blood drawn for analysis (not English and I don’t know what it’s called sorry) I can log in and see the results exactly like the doctor sees them. When I’ve been to a doctors consultant and she’s written stuff in my journal I can log in and read it. People are going to want that stuff once they get used to it.
Because most of these jobs will then move abroad, together with some people who actually enjoy working 40+ hours.
It was not coined by Donald Trump[1][2]:

> Author Sarah Churchwell asserts that it was Woodrow Wilson who popularized the phrase 'fake news' in 1915, although the phrase had been used in the US in the previous century.

> The term actually dates from the late 19th century, when it was used by newspapers and magazines to boast about their own journalistic standards and attack those of their rivals. In 1895, for example, Electricity: A Popular Electrical Journal bragged that “we never copy fake news,” while in 1896 a writer at one San Jose, California, paper excoriated the publisher of another: “It is his habit to indulge in fake news. ... [H]e will make up news when he fails to find it.”

[1] https://en.wikipedia.org/wiki/Fake_news#20th_century

[2] https://www.csmonitor.com/The-Culture/In-a-Word/2019/0726/Su...
Indeed they are not.

What they are hoping is that -
a) Nobody is going to hold them to real compliance
b) User fatigue and dark patterns will make you just click "OK, fine" to everything and then they can claim to have permission.

The problem is that 'b' there pretty much rules out the possibility of freely given, informed consent, and makes the whole exercise pointless.
The UX for the dynamic permissions and fine-grained permissions is, to be generous, not good. I never saw any expressed desire or commitment from the Chrome team to improve on this which is likely why so many extensions still just request blanket access instead.
They're confusing, but I wouldn't say "really deceptive".

The big circles seem to be satellites that are at final altitude, showing range equal to altitude, so slightly lower than 45 degrees. The small circles are satellites that aren't there yet, and the size is meaningless.
GDPR is a massive inconvenience. in theory it sounds good, in practice you just have to click an annoying number of accept buttons. there should have been more debate around this set of rules not just a diktat top down that is disconnected from reality.
But to no small extent because of people who have not yet acquired the wisdom of experience. It would be interesting to see the societal effects of a larger fraction of the population having grown up.

And one could always opt out...
In light of Covid-19, which industries might struggle in the coming years?
The most important code management tool SQL has are views and the WITH clause.

https://modern-sql.com/use-case/literate-sql

Something like "polymorpihc" views would be extremley useful, but is not there yet (in standard SQL).

In other areas there are sublte features like the explicit WINDOW clause to avoid repeating similar OVER clauses. Breifly mentioned at the end of this doc:

https://www.postgresql.org/docs/current/tutorial-window.html

This was adopted in recent years by many FOSS-DBs, but not yet by the big commercial ones:

https://modern-sql.com/static/sm-blog-2019-postgesql-11.over...

Similarily the chaining of grouping sets can be helpful in those very rare cases you need them.

The Oracle Database intrdouced "SQL Macros" recently. For my taste, they are too 'rude' to make me happy on first sight (much like C #define):

https://blog.dbi-services.com/oracle-20c-sql-macros-a-scalar...
How would the browser detect an extension that gets access to information that should not get out, then mixes it into a unrecognisable (by the automatic analysis) wad of data that is sent to some server, and actually is decodable by some third party? This is bad. This is what Chrome apparently does with X-Client-Data. For reason that I would relate to Godel's theorem I think detection cannot be done automatically.

Therefore, any access to private information makes any extension tainted somehow.

What about an extension that does not explicitly ask for information? In this post-Meltdown world, private information can be inferred by any program running for a sufficient amount of time. So, any program or extension could be considered tainted.

Also, even a "neutral" feature, for example implementing a faster alternative to HTTP, could exfiltrate data in non-obvious ways, if only via playing with timing.

TL;DR open-source only, code reviewed software is the only hope in sight , but it is currently weak enough to allow channels mentioned in these threads.
The publication year is cited on the archive.org page. It is indeed 1978.

Maybe some difference between publication and release date?

The description starts with "On July 2, 1978, the last hot lead edition of the New York Times rolled off the presses."
Not OP, but from experience it could be 2009 prius.
A Machine Learning Odyssey: Interview with Kaggle Master LUCA Massaron
In the same way that DNS requests can exfiltrate data, requesting URLs can also exfiltrate data. This is trivial to perform.
> Google is saying they are tracking people with that header

No they don't. Nothing in your comment sounds anything like Google claiming to be tracking people. And as mentioned elsewhere in this thread, they explicitly claim to not be tracking individuals.
What are the finance modules in most ERP systems
Don't typical query builders allow for composing SQL from smaller building blocks?
Workplace from Facebook leaks customer data on public CDNs
The Chrome extension install flow is like this too. The problems are many but a few, briefly, are:

* "What the extension can do" is very poorly specified, using language that casual computer users won't understand

* The granularity of permissions is poor so in some cases one operation requires a seemingly unrelated permission. (Android historically has had this problem too)

* While Google have recently made some steps towards improving this specific issue, per-website permissions are something that WebExtensions barely handle. You can technically put a specific list of domain names in your permissions list, but if a site changes domains or adds a new subdomain your extension won't work until you push an update that requests the new permission... and that update will disable the extension for everyone on the planet until they dig around in the UI to find the permission request warning. The last time I checked Google's new solution for this was to allow the end user to narrow the 'access everything' permission to specific websites, which is... something, I guess.
You are right. The rights of the user depend on the legal basis you choose.

This is covered here[1]

Basically:

* The right to object is not applicable if your processing is based on contract, legal obligation or protection of vital interest

* The right to erasure is not applicable in case of a legal obligation or public interest

[1]https://github.com/LINCnil/GDPR-Developer-Guide/blob/master/...
And his Puritanism. Don't forget Dugout Doug's fright at the idea that people might enjoy sex. Japanese porn is pixelated to this day because of him.

MacArthur was an entirely overrated historical figure who had retired before WWII even broke out. His troops didn't like him, he was just really good at snowing the people above him. He had a minor version of Steve Jobs' reality distortion field.
Yes, I run those programs in a separate Xorg session. If I need it on the same session I simply spin up a Xephyr window.
Nah its better push out something out, and then amend it over time, than spend 20 years discussing it and bikeshedding.
رقم صيانة كينوود متاح 24 ساعة
اتصل من اى مكان تريد على رقم صيانة كينوود المتاح على مدار ال 24 ساعة لتتمكن من الحصول على مختلف الخدمات من الصيانة والتصليح لجميع انواع الاجهزة الكهربائية و المنزلية
Easily convert images with Glide Image Utility
> The reason I bring it up is because I know a number of ISPs whose sysadmins were on the take and selling bulk regular dumps of DNS resolver data under the table to other parties for years.

Can you substantiate this claim? I've heard of ISPs in the USA who sell data, but what you're describing sounds a little bit far fetched.
Thanks to this information, it is easy to see that the health tracker has all the features you need. Not only is the pulse measured on demand, but also an ECG is generated. In addition, the watch counts each step and monitors the distance. The GX Smartwatch only turns on when you raise your wrist.Our lives are hectic, and that makes us miss out on a larger part of things, even our health once in a while. A product that will guarantee you are having a very good health shape is Gx Smartwatch.Click Here https://apnews.com/5afb4214fedfd1df458d00ac5d427882

https://charity.gofundme.com/o/en/campaign/gx-smartwatch
Israel is used for ethically questionable stuff many "allies" don't want to do in their own countries. The NSA cannot contact random developers to spy on users, they would be caught yesterday. But it probably isn't antisemitism to state that you can sell any form of security product to more conservative Isrealis.

But yes, saying Isreal does undermine privacy to a disproportionate amount is probably false.

Not only sigint, weapons tests in general are also conveniently outsourced.
There is a thing called: compatibility.

Even when you don't have a hub anymore and Ethernet is not shared anymore, it is just a "anymore", which means it needs to respect those old things and need to test for it.

BTW, even that Ethernet is not a shared medium anymore is wrong. In Industrial and Automotive Ethernet we are back at SPE (Single Pair Ethernet) and working shared medium, because switched Ethernet is way to expansive.
Most people would click on any warning without even reading, unfortunately.
Ought to become easier? I'm already feeling motivated to consider getting going again.
One of the examples they list is a school district. If I were the commissioner (or whatever) for that district (which is now out $10m), I'd never have signed off on this without some cast iron insurance. How does that guy still have a job? How hasn't he been run out of town? That's what confuses me.
Biomechanics of cheetahs inspire researchers to build much faster soft robots
ShapeUp is great! I don't think a cool-down phase is good though – if something is important to someone and it is indeed important for the business but still doesn't get planned in any iterations that means either

a) it's not actually important compared to other things so having someone work on it in a cool down phase is likely not well-spent time

or

b) there is a dysfunctional team/organization in which important stuff doesn't get prioritized correctly (typical example for this being 100% product management driven organizations in which refactorings etc. never get any time assigned)
Next up is a firestorm over broken extensions, followed by baseless conspiracy theories on how this is all ploy for Mozilla to ban adblockers..

Web Extensions caused lots of outcry, when it was mostly about making extensions async and better sandboxed.

EME caused similar outcry, when in fact it migrated us away from plugins riddled with security vulnerabilities (hint Flash). Today most DRM crap runs in a sandbox -- DRM still sucks, but it doesn't compromise my browser :)

I'm suspect, extensions will be sandboxed further, but this will take time.
Japan is an Eastern country.

If you want to define "the West" as "First World countries" you'd be wrong. There is an intersection between these two sets that does not encompass everything.

Unless you're trying to say that only Western cultures can be modern stable democracies, but of course you wouldn't say something obviously wrong like that.
Well, many subcultures have been destroyed by an influx of newcomers. The newcomers bring money, the money attracts sociopaths, and the sociopaths destroy the subculture and move on to the next one. It's a real fear and has happened many times. See: https://meaningness.com/geeks-mops-sociopaths

Lots of subcultures would rather keep the high barriers to entry and stay in the happy eternal summer phase even if it means they never get popular.
As the virus rages on shore, merchant seamen are stranded on board
Missives of Appalling Idiocy and Envy Embarrassing to Behold
This is creeping a little close to populist rhetoric. The crimes you've described are obviously awful but angry politics will only lead to knee-jerk solutions.

In which ways do you think it is underfunded?
How to Program iOS on iOS
Medicine and Pharma
Insurance
Finance and banking
FMCG
E commerce
Supply chain and logistics
E learning and related industry.
In my experience, SafeteyNet bypass on rooted devices has been a solved problem for a long time through Magisk Hide.
They are also absolutely everywhere in formal semantics and especially in abstract interpretation. They are cool constructs!
Those who do have the skill to find it probably have better places to work for than a barely profitable company whose only revenue stream is to push trashy clickbait.
I find this article resonates with me on many points. Particularly, high DPI and high refresh rates are not gimmicks, they have meaningful impact in making the user experience better. It's something that Apple has been pushing for years, from Retina to ProMotion. Sure, not everyone will appreciate the difference (Some people are happy with Macbook Airs, some need Threadrippers), but that doesn't mean it's not a meaningful difference for many users.

One area that I disagree though:

> The idea of a 4k monitor is NOT to get more pixels but to get the pixel-perfect, high-density UI rendering. Otherwise, a normal 1440p display would work better.

Not in my experience. Sure, 2x scaling is ideal for sharpness. But there's a tradeoff with screen real estate. I regularly switch between a 1440p monitor at work to a 4k monitor @1.5x scaling at home. Fonts are still noticeably sharper on the 4k monitor.

4k @1.5x scaling is not pixel-perfect, but definitely sharper than 1440p.
Check out this Liz Rice talk on implementing container tech from scratch. Very clear. https://www.youtube.com/watch?v=8fi7uSYlOdc