skysight-inc/HackerNews huggingface dataset:
I would pay money for an extension that keeps track on datatraffic of other installed extension and creates firewall rules (or something equivalent) based on my permission/deny. (I know that this is the other way around, but apparantly chrome isn't fixing these data issues...)
Cool story.

I have a similar interest in barley for brewing. I like to find heritage or land race varieties to try.

I often use Maris Otter[1], which is quite easy to obtain. However, others like Hana[2] and Chevallier[3] can be more difficult to buy.

Scottish Bere[4] is another grain I'd like to try, but haven't been able to find any for sale, either whole grains or malted. Seems like only flour is available.

[1] https://en.wikipedia.org/wiki/Maris_Otter

[2] https://crispmalt.com/news/a-behind-the-scenes-look-at-hana-...

[3] http://zythophile.co.uk/2013/04/15/revival-of-ancient-barley...

[4] https://en.wikipedia.org/wiki/Bere_(grain)
I think this is an important point.

The first priority needs to be to make it easy and obvious to do the right thing.

Trying to make rules to forbid doing something insecure isn't helpful at all. If I need to do something and the only way I know how is the unsafe way, there's a big risk I'll pick that way.
Unfortunately, it seems that security work is often just about trying to stop people from doing things, not helping them to do it the right way.
Hmm, may be you haven't but I have.
There is $450m nuclear insurance available on the market. Perhaps you could work out proportional reinsurance using that plus the reactor maker insurance guarantee. Price-Anderson already incentivizes nuclear quite a bit by the US Gov acting as a backer. It doesn't help because nuclear is too risky for the benefit. Same as hydro-electric. Too dangerous for the money.
“Async MMC and FEC (Ethernet) driver probes to do other initialization in parallel.”

I think it is already is
Who needs the separation of powers anyway?
> then some mass spreading events infecting many more

The point is however that it is impossible that the choir selected their members based on the criteria of "members can be only these who will be easily infected with the at the moment still unknown disease." There the existence of the superspreading event to "80% of some random selection" disproves the hypothesis that "on average much less than 80% of the population can be infected at once". That's obviously not true.
IE had bad standards support and bad defaults, while Chrome will actively track you on practically every site by sending an identifier to a whitelist including DoubleClick.

Would you be defending it if it was called "DoubleClick Browser"?

Google wants to secure the status quo with their own browser. What is the status quo? Massive spying, surveillance and tracking.

This is why Safari and Firefox implemented strict measures against third-party cookies which Chrome watered down until it was practically useless or didn't implement at all.

If Chrome is such an open and independent project, what do you think are the chances of a PR being approved that removed DoubleClick from the tracking header whitelist?
Dark matter hunters’ inconclusive signal grabs headlines
I assume you probably can't share the client, but can you share the general domain of the software?
Interesting perception. I looked up the context of this letter: according to the books linked below and https://jamesjoyce.ie/day-24-february/ — the timeline was this:

- In 1917 (when Wells would have been ~51 and Joyce ~35), Wells had written “one of the most favourable reviews” of Joyce's A Portrait of the Artist as a Young Man. This was very helpful to Joyce, and Joyce wrote a letter to Wells thanking him. Even earlier, Wells had helped Joyce secure a grant.

- In 1928 (a few days before this letter), Wells and Joyce met for the first time and had lunch. During this lunch meeting they discussed Joyce's work, and Joyce “as was his fashion” asked Wells for a favour (probably enlisting his support when it finally came out as a book).

- Wells then replied with this letter, which explains why the second sentence of Wells's letter has “I don’t think I can do anything for the propaganda of your work.” Joyce found the letter “friendly and honest”.[1]

I think some of what you said may make more sense for an unsolicited letter, especially one posted in public (like the comments on online communities that you mention) — bothering to write to someone to attack them. Here, though, I'm afraid I can't share your perception that Wells was “afraid of being left out”, or “stak[ing his] entire identity” or “invited himself to a debate” — he was simply declining a request: “Sorry I can't help you in the way you asked: here's why, but good luck anyway”. One part of what you said that I can fully agree with is that it “promotes Wells' own perceptions all the way down the page”: because explaining his perception is the point, and it's one of the polite things you can do when saying No.

[1]: https://books.google.com/books?id=eVGFCwAAQBAJ&pg=PT158&lpg=... and https://books.google.com/books?id=8MkRCgAAQBAJ&pg=PA92&lpg=P... and https://jamesjoyce.ie/day-24-february/
The Coronavirus Will Win
I agree on both of your last two points. Not sure where disagree then.
> Unlike C, you don't need to worry about the heap-vs-stack in Go. […] It's an implementation detail.

I'm really surprised to read that: yes a beginner can get his code working without wondering about stack vs heap (and that's one of the big reason why Go is easier to learn than Rust for people coming from non-system language), but as soon as you care about performance (which many Go users do!), you need to write code that reduces allocations to the minimum, because Go's allocator is really slow (compared to Java for instance). Interestingly enough, doing so forces you to think about the ownership and lifetime of your objects, like you'd do in C (or Rust).
Spec says initialization shall be done at 400KHz or less. You can Google for sd spec
Because Snapchat is ultimately an application designed to trade in porn of amateurs including (and perhaps especially) teenagers.

They have a vested interest in playing dumb to that fact. They can't really do so if the content escapes out into the wild and shows up in congressional hearings, lawsuits, FBI investigations, DOJ reports, etc.
Image Processing is one of the fields in CS i really want to understand internally.Still on to-do , no resources as of now,
but i would first search topics in github, to know what interesting projects are there and then read the description accordingly, github search by topics is really good way to find things related to language,tech-stack,subjects etc :)
> I have a translation of a Russian book of high school physics problems, most of which I can't solve.

Irodov by any chance?
>American gun manufacturers, like pretty much any other manufacturer, can indeed be sued if their product is defective.

The parent is explicitly calling out that gun manufacturers can be sued for defects in the product, and as such the idea that manufacturer liability ends after they have sold the product is patently false.
My theory is evolution. The "more advanced" idea has higher up-front costs so the cheaper, worse idea gets used, iterated upon until it's so polished that it's better than the infant stages of the better idea (the better idea has the potential to be even more polished with investment, but never will be) so everybody uses it and now we're stuck with it...
Bountysource reverts controversial change of ToS
Unspoken HN rule #27: There's a 75% chance this isn't a coincidence.
I'm just referring to the fec driver kernel module, not the user space software. But I might of course be wrong. I've done lots of iterations trying to optimize the boot time on this tiny embedded system, and it's not always easy to remember all details. It could be that the fec driver is asynchronously probed. I guess I have to try it again at some point. =)
Team International's Turn-Key Solution
Possibly the fact that the 432 was so slow and the momentum was with the 8086 and successors following the success of the IBM PC.

RISC, which in some senses is the polar opposite of the approach taken with the 432, also started to generate a lot of interest at about the same time.

There is an excellent paper by Robert Colwell exploring why the 432 was slow and how it could have been speeded up:

https://dl.acm.org/doi/10.1145/45059.214411

Colwell was subsequently recruited by Intel and went on to play a major role in the design of the Pentium Pro.
You'd be surprised how PHP has evolved in the last couple of years. With frameworks like ReactPHP you can really code anything you want in PHP.
Half of those don't even render for me. French quotes seem fair though, since we throw $'s around in languages like every country needs a dollar sign on their keyboards.
They are both really bad for privacy. There's really no point in comparing them based on this criteria.
Seems conservative. IMHO taxis and other urban mobility will largely go electric in the next five years already. The only constraint here really is production capacity for cheap EVs and the average sales price. Both are improving rapidly.

The EVs currently hitting the market are probably getting there in terms of ASP but the availability is pretty limited, especially in the more affordable segment. Around ~30K (for a decent sized vehicle with leg room in the back) is pretty expensive but if you look at the total cost of ownership for a vehicle that is likely to be used intensively, it's probably not bad. As these prices come down in the next few years, it's only going to get more attractive.

I think also, many cities (especially in Europe) will be keen to get ICE cars out of the city and I expect there will be advantages to operating EVs in the form of subsidies, easier to get permits, charging infrastructure, etc.

So 2030, seems a long way off. Why wait that long?
Instead of just outright limiting extensions you could give users the choice. Give us an option to make it impossible for extensions to send out data for example.
Even KeePass recommends to write the master secret key on a piece of paper. Sure, it must be in a secure place, but we cannot avoid this step for reliability.
I can hear Joyce’s chuckle as he read this last bit from “Yours, H. G. Wells”.
API Access to the Earth Gravitational Model
Every summer when I went to my grandparents home I would climb up the Guava and Mulberry trees to pick the ripest fruits. My big regret is that the house was sold off to some builder who cut it into smaller houses getting rid of all the lovely trees (there were many, including one I don't know what the English name is). Now I live in an apartment in a city with no hope of being able to recreate this experience for my kids. You can't even buy mulberrys where I live, and Guava is worth gold without the lovely taste. But what really is a Rosehip?
GDPR guide for developers
pypy is great. what makes me sad is "they just stay behind cpython 1 or 2 versions"..
But I think handguns would be even harder politically to ban.
You don't need satellites at all to beat fiber. Terrestrial microwave does it too. Starlink can't beat microwave except for places where it's impossible to install microwave, like over the ocean. But without cross links Starlink won't work over the ocean either.
Docker guarantees run reproducibility. It does not guarantee build reproducibility although it does make it easier to achieve.
Blowing Bubbles to Pollinate Flowers, New Japan Tech
It doesn't look like that's had a great track record in terms of actual country building. If they meant seasteading I suppose I can see why they'd avoid using that phrase but then I'm doubly confused as to why they'd point it out as a category for investment.

I'm curious as to how historically "charter countries" are significantly different from a model like imperialism, and if I'm entirely off base here what startups would qualify as a success in this category (that I've obviously clearly failed to understand.)
Lack of privacy is lack of security. This is true even if you're only interested in "hard" security concerns. For example, consider that keystrokes can be reconstructed from audio, which means that being able to record from your mic means being able to gather your passwords.
Are you talking about Chrome or Chromium?
YubiKeys are absolutely fantastic, and under-rated, too.

I used this guide: https://github.com/drduh/YubiKey-Guide to set up my YubiKeys with GPG keys that are also used as SSH keys. This gives me, in a single setup:

* secure 2FA for sites with WebAuthN
* ability to encrypt backups and other information using GPG, with decryption only possible with a physical device
* ability to securely log in via SSH to all my infrastructure

I use keys, in case one gets lost. I did try to use the PIV features, but I just don't live in a world where this is useful — but the FIDO2 and GPG functionality is fantastic in itself!
How about a 1km diameter radio telescope on the far side of the moon? https://www.space.com/nasa-telescope-far-side-of-moon.html
And that defeats a large portion of how programs work by first having root to bind to low ports, etc then forking a worker not to mention you have to restructure your program for seccomp vs ifdef for pledge. There are a bunch of ways of sandboxing on Linux but not many projects use it because implementing it is just painful, compared to pledge even external projects outside of openbsd will accept simple ifdef patches to support easy sandboxing.
Did the 128 Assembler not support declaring variables?

I was already using variables, arrays and structs on MS-DOS/Amiga macro Assemblers.
This is hardly a failing of Lua-morphing-from-config-to-turing language, as it is missing sanitation in the customer interaction workflow.

Like, I get that there are services that require this level of trust to the end user, but why wouldn't I solve this problem by timing the config load and immediately stopping any config process that takes longer than it should? Its the 21st century, we can still use interrupts. ;)
The signature could be tied to a sandbox. Signed apps each have their own sandbox. User signed apps all get thrown into the same sandbox. Otherwise I agree. A signature can't actually meaningfully exist as a security feature in an open source operating system where you are able to compile every piece of software yourself.
Presumably, since, as the list you're referring to mentions, it's a Google owned property, and accessed by a lot of people, even those who don't usually access other google properties, which makes it really useful for analytics on a broader selection of sites/connections.

Like, the function you're referring to, `IsGoogleAssociatedDomainUrl`, seems to only be used to log some information about https. Or at least that's all I found from searching for it. So it's even less innocuous, the use appears to be "we'd like to know if our sites are broken under HTTPS", vs. just HTTPS being broken in general.

[I work at Google, but don't work anywhere near chrome, and I know basically nothing about it]

Edit: You were referring to a different spot (experiments), where what I originally said applies. Having more analytics is really useful when trying to diagnose problems.
Coronavirus (Covid-19) Map
I remember playing around with Lua but didn't look too closely at sandboxing facilities but what you say makes sense.
Or with cheaper launches you can assemble it in space instead of using that crazy elaborate unfolding mechanism that accounts for much of the cost.
... with 600ms latency. Starlink will blow them out of the water.
Huh? What does Haskell's (lack of) adoption have to do with any merits of Go? PHP, Visual Basic (perhaps?) and Javascript have even better adoption than Go, if you want to go down that route.

If anything, you should have asked about the prospects of OCaml, shouldn't you? (Spoiler alert: they are grimmer than Haskell's.)

Mostly, Go is full of wasted opportunities. It would have perhaps been a worthwhile language had they come up with Go instead of C in the 1970s. https://github.com/ksimka/go-is-not-good is a good summary.

I would suggest having a look at D as an example of what an evolution of C could look. An evolution with fewer wasted opportunities.
While I only have limited experience writing extensions, this seems doable.

You can most definitely add a hook for every outgoing request, though I'm not sure if the browser lets you know the origin of the request, i.e. the browser window or an extension.

If it could, at the most basic level it could write outgoing data to a log file.
The rear view camera system almost always runs independent of the main Head Unit (HU) or In-Vehicle Infotainment (IVI). In most cases the rear view camera view is a single application specifically coded for the target micro processor (SuperH for example) and is the only thing running on that micro processor. The HU and the rear view camera share the display. While you are driving in R the HU is booting Linux or QNX and when you move to D the screen switches to the HU. The rear view camera application keeps running uninterrupted.
> It if were parallel construction, the intent would be for the forward construction to seem more logical to you.

Yeah I agree that when parallel construction happens they make the parallel case a logical one. But that involves making a parallel case. You're saying that the shirt -> Etsy -> Poshmark -> Linkedin chain was not created in that order and was created in some other order. I don't see how it's logical that it could be created in some other order, even with illegal evidence.
Chromium, but they're effectively the same. The average user doesn't know what Chromium is.

https://chromium.googlesource.com/chromium/src/+/e51dcb0c148...
if you are a broker-dealer caught bucketing orders, you are absolutely violating the law. though i have no idea how to even categorize robinhood.
Will fix it at some point =)
Following your logic, I can't claim anything, because there is always someone, somewhere, who will come up with a contrary opinion.

I do respect your opinion, but I still hold to mine. I also think this discussion won't lead anywhere, because we are glossing over the terms. Not every "developer" is the same, not every "software" is of the same complexity. I can fix CSS in a single 80x25 terminal, I can't do that when thinking about changes in an ERP system.
> This region is built on the idea of professional opportunities

I'm pretty sure the region existed before tech blossomed half a decade ago. It was definitely a different place even 20 years ago. Also, like 99+% of folks here don't work for a startup.

The people with the money don't seem to care about fixing the region's problems. The other people can't afford to. This area seems like it will just continue devolving into some sort of dystopian, cyberpunk future.
Cyber spies posed as recruiters for US companies on LinkedIn to hack European
I think it's mostly about funneling money to Northrop-Grumman.
Could someone explain the joke to me?
The entire time I'm reading the post, I'm thinking the yellow background really hurts my eyes...
Daily Notes in the Terminal
memory training is slow. on x570 you should have a debug code indicator, follow the codes there to get an impression where the time is spent.
I've done nothing like this. Nor have most people.
Does anyone know if there is something similar for Linux?
Ah, I see what you're saying. You're responding to the historical question of veracity of details as if I wrote them to say that Wells was literally just a this or that, but I'm writing metaphorically to intuit Wells' psychological position. A metaphorical debate--he wrote _as if_.

Sorry I can't be more clear for now but this kind of mixing of language interpretations happens sometimes. For example in MBTI soft-theory land this happens quite often on a tech site like HN when an INTJ writes metaphorically and an INTP consumes literally for logical analysis. Instant disagreement is common.
Why I Quit Academia
'Unexpected events' found during the most sensitive dark matter experiment
The changelog-nightly digest will send you a list of trending repos, if you care about that.

I used to keep up with the trends, even on the trending page, but it’s often that a big company will release something and it comes on the top. Stars are just a vanity metric, it says little about how popular is the project at the moment, how well it’s maintained, etc.

But GitHub as a company is doing so much great things lately. Actions are a nice built-in way to skip setting up a CI. And the little things which improve dealing with PRs, for example, checking the file as reviewed, review suggestions, multi-line review comments, automatically changing the base if the base is merged, and the list goes on.

It might not be fun for the trend/hype seeking, but it’s a great experience to work with it as a VCS tool.
sure it does. the drives are specifically designed to be rugged enough to handle transportation (and are tamper resistant and tamper evident), and I imagine amazon probably uses their own delivery network to transport it, which means if it is lost in shipping, it is amazon's fault (and presumable can be corrected). It also wouldn't surprise me if at least some of the product contain GPS to make it less likely to get lost.
What about your ISPs employees? Do you trust a sysadmin pulling 40-50k a year (or less) to not sell your DNS resolver data?

Do you think your ISP has better controls and a security team than some of the big CDNs and cloud providers to detect and prevent this?

The reason I bring it up is because I know a number of ISPs whose sysadmins were on the take and selling bulk regular dumps of DNS resolver data under the table to other parties for years.
Check out:
https://space-search.io/?search=starlink
for another type of visualisation of starlink!

Doesn't include coverage yet but I do plan to add that with some kind of heatmap. I think these static circles in the OP are a bit deceptive in indicating 'coverage' as these satellites are constantly moving.
Is Chromium safe to use, or at least safe to use as packaged with Ubuntu's snaps? I know, I know, snaps are a difficult topic on their own, but my point is that, if Chrome's (and Edge's AFAIK) general hunger for data is a generally accepted fact at this point, then wouldn't employers/enterprises advising to use Chrome in their corporate networks not put themselves under risk of being sued for gross neglect in case customer data were leaking from Chrome sessions?
This would make sense if they needed to collect that information organically, but there's already requests made to Google as soon as Chrome launches. So, no, it's not required for analytics. [1]

That leaves... ad tracking. Chrome will send a tracking ID to DoubleClick with every request to that host. Doesn't this prove that Chrome is a trojan horse used for ads and tracking purposes?

[1] https://twitter.com/jonathansampson/status/11654932064417792...
Golang Package for Key Synchronization
Shotwell said $80 a month.

https://spacenews.com/spacex-plans-to-start-offering-starlin...
This talk by Bryan Cantrill on the history of OS-level virtualization is great.

https://youtu.be/hgN8pCMLI2U

Apparently the first version of Jails was a few hundred lines of code.
What does the “c” flag do?
buying options is no big deal as well; the most you lose is your investment. when you sell options, either naked, covered, or in a spread, the rules are much more complex. should be left to expert marketmakers or full time prop traders. very bad idea for amateurs.
Why do people often attribute inventions with only a single genius?
Re security measures: these features have sadly been put under "enterprise" stuff but they are there:

https://support.google.com/chrome/a/answer/9296680?hl=en

I wonder if there could be a community pseudo-enterprise that could eg have a reasonable whitelist of extensions...

edit: whoops, that was a windows-only guide despite the title, here are linux / mac links: https://support.google.com/chrome/a/answer/7517525#permissio... https://support.google.com/chrome/a/answer/7517624?hl=en&ref...