skysight-inc/HackerNews huggingface dataset:
Let me make sure I've got this right:

* Comcast sniffs / records / tracks their user's DNS traffic

* Mozilla announced they would enable DoH by default, to protect end user's DNS data from shady ISPs like Comcast

* Comcast then raised hell about Mozilla's decision (presumably because they would no longer have access to this data)

* Now, Comcast and Mozilla come to some sort of agreement which effectively restores Comcast's access to their customer's DNS traffic?

---

I'm really confused why Mozilla would agree to this. I really hope this isn't one of the ways they're exploring to "diversify" their revenue streams but, in the last few years, Mozilla has made a lot of decisions that I don't agree with so I suppose I really wouldn't be all that surprised.
How would encrypting DNS help me avoid Comcast MITMing my HTTP traffic to inject bandwidth cap notifications? Doesn't the system just inject a script tag into the appropriate place in the HTTP response?
Amusingly, the comment right about yours contradicts this: saying HEY does not feel fast, and a tuned React SPA would be faster.

I would say that there's been a pendulum swing back towards no frameworks, no bloat. But the corollary (important to note) is: this assumes competence & knowledge of performance tuning - in React, VUE, or no framework. Significantly, it means you have to a little more than the defaults.

Because if you don't do any performance tuning, it's possible that a tuned React SPA could beat it. It seems possible that a HEY app written by someone who did that with React could be even faster than what we see on HEY right now, in this particular case.
It is infuriating to see the entire investment we put into adopting and setting up Fleetsmith in our company to be done and they didn't even have the decency to send an email to tell us that. We had to find out here that this happened.

Next time when you want to sign up for a VC backed service, remember how many times they pushed the companies behind the tools we use to this end leaving us holding the can.
A service provider like Google or Apple (a) provides a single point of access to many devices, and (b) is very likely to comply with law enforcement requests if compliance is legally required.
That's good to know. I will definitely check it out. Thanks!
IIRC from looking at this feature somewhat recently, they explain that they are not necessarily deleting the data, only not associating it with your account. OTOH, from what other commenters are saying it sounds like they may want to delete (some of) the data but currently do not do so because it is shown in the account. Presumably they will still keep whatever they find useful.

I hadn't used my account in a while and was going to just "delete" what I could and keep the account. They have a "download your data" button but refused to let me use it claiming they couldn't be sure it was really my account (but not providing any way to convince them), so at that point I decided to delete. Hopefully they did actually delete it. For me, it still showed the older history after I enabled the "delete" older history option (possibly it would have been removed after some delay), so I manually deleted it (it wasn't all that much) and that did seem to remove it.
Ask HN: [is this] The Weapon of Mass Destruction Nobody Is Talking About
I would argue freedom of information is more important than copyright claims. If you do work for the government it needs to be able to be pretty open what is done. I can see that there might be some exceptions but I would not think copyright is one of them.
Ask HN: Has anyone seen a market place of projects out to tender?
I’ve been browsing the UKs contract finder website which is useful for finding public sector projects.

But I’m surprised not to find a private sector parallel. Are my searching skills just failing me? Is this an opportunity?
After observing the mountains of opposition to EARN IT on large tech sites like Reddit and HN, I am starting to believe the "banning encryption" meme was started by tech companies to cripple the bill even though the word "encryption" isn't mentioned anywhere in the bill text. Guessing they are not liking the fact that the bill would force sites to be liable for illegal user-submitted content on their websites:

"(3) MATTERS ADDRESSED.—The matters addressed by the recommended best practices developed and submitted by the Commission under paragraph (1) shall include—

(A) preventing, identifying, disrupting, and reporting child sexual exploitation;

(B) coordinating with non-profit organizations and other providers of interactive computer services to preserve, remove from view, and report child sexual exploitation;

(C) retaining child sexual exploitation content and related user identification and location data;

(D) receiving and triaging reports of child sexual exploitation by users of interactive computer services, including self-reporting;

(E) implementing a standard rating and categorization system to identify the type and severity of child sexual abuse material;

(F) training and supporting content moderators who review child sexual exploitation content for the purposes of preventing and disrupting online child sexual exploitation;

(G) preparing and issuing transparency reports, including disclosures in terms of service, relating to identifying, categorizing, and reporting child sexual exploitation and efforts to prevent and disrupt online child sexual exploitation;

(H) coordinating with voluntary initiatives offered among and to providers of interactive computer services relating to identifying, categorizing, and reporting child sexual exploitation;

(I) employing age rating and age gating systems to reduce child sexual exploitation;

(J) offering parental control products that enable customers to limit the types of websites, social media platforms, and internet content that are accessible to children; and

(K) contractual and operational practices to ensure third parties, contractors, and affiliates comply with the best practices."
You replied to a comment talking about:

> Fathom, SimpleAnalytics.com, Plausible.io, Matomo.org, GoatCounter.com, and (shameless plug but WIP) Chiffre.io

and you said :

> I think self-hosting is the solution. This way, there is no company that will store centralized user data, which is the biggest privacy issue for analytics.".

Your premise was that these companies store centralized user data. That is absolutely not true. So you presented a fake problem (that doesn't exist amongst privacy-focused analytics solutions) and gave a solution.
> simply ban

When you're up against billion-dollar corporations with lobbyists and PACs, there's no "simply" there.

GDPR has been twisted and watered down from "don't collect non-essential private data" into "slap an annoying cookie notice that makes the government look stupid, and continue business as usual".
I can understand the desire to have the brackets at the same indent... but WOW does this break my brain having the inner code not indented from the bracket level. (I tend to prefer the opening backet being on the same line as the condition gate/guard and rely on the parser to inform me of missing brackets. This is even better in languages that have a single format convention.)
Ive never heard of the Doherty Threshold, but looking it up, it seems that its actually saying > 400 ms "is painful", not that its "imperceptible". And that aligns with previous rules of thumb I've used for mobile UX -- you generally want things to be < 100ms, and ideally < 50ms. If something results from user interaction the bar is much closer to the 50ms side of the range.
A sad inadvertent application of Hammurabi's Code.
Seems unrelated since the exact date has bounced around both before and after the 15th over the last 60 years.
The market have shifted. Before iphone, everyone was trying to build the smalles phone possible. Jobs convinced the world for brick sized devices and SymbianOS lost its USP - doing a lot on small batteriess. Had there been a wearables market back then, it could have had a second lease of life.
That seems to just be about picking the correct success criteria. It seems here the key success criteria should be which version of the plane makes it back most often. Which plane has more bullet holes is clearly secondary to that.
Yes, but runc includes the headers for you.
As I understand it, Microsoft Defender may not be open source, so you have to trust that what you're running really is Microsoft Defender and that it's behaving correctly.

Given that, a possible upside with ClamAV could be that you could verify the behaviour of the processes on the installed systems, to make sure you're up-to-date and have the correct software and signatures installed.

That's not unreasonable - Microsoft's software delivery pipeline should be trustworthy and their security reputation could be damaged if an issue were discovered here.
So, here's a question:

If heat dissipation is so fundamental to computation, why aren't we using the amount of required heat dissipation as the fundamental measure of complexity in quantum computing?

In particular, say I construct a box with a uniform mixture of all quantum states on n qubits, and all the unitaries that can operate on those n qubits. how much heat do I have to dissipate in order to refine the state in my box to a "particular" quantum state and a "particular" unitary? There are some interesting, and recent, results about how quickly I can dissipate heat. In particular, T(t) is bounded from below by k*T(0)/t^7, where k is some constant.

Since the number of quantum computers you could want to build in that box is growing very fast with the size of your input, I suspect that your inability to throw away states in the process of constructing your computer very rapidly becomes the dominant effect in how long it takes to go from "which number do I want to factor" to actually getting the factors of that number.
If your app involves a lot of data crunching and that crunching is the bottleneck, then it makes sense to optimize that part.

It's better to have something slow and correct to optimize, so writing it first time round in a slower language isn't a bad thing.

Secondly, shunting work out of your app is easier now than it's ever been. Enqueue and process in a serverless way. Then you can write whatever code that makes most sense for that problem.
There are tech sites and productivity channels who got their hands on it, so far I didn't notice any complaints about Heys UI. I think the bar is quite low because many other apps people use perform much worse.

Btw, I'm a follower of Basecamp and their designers, and I don't like their visual design choices :p
Now this is something I can get behind! Very cool work. I think bash gets a bit of a bad rap and it's very popular to bandwagon hate on it, but it's one of my favorite tools ever.
I don’t think people’s codes are typically that easy to crack
if i maximize discord on a 4k display its unusable, but i guess i should blame something in electron for that
Unsubstantiated rebuttals are fun to say on message boards too, I guess.

It certainly seems like when the de facto government has an agenda (eg attacking Iraq), they all broadcast that message simultaneously. It certainly seems like they choose which presidential candidates are "electable" and then downplay the others (Sanders, Paul, Dean). It certainly seems like they suppress narratives that are unfavorable to the shared business interests of their owners. It certainly seems like they all cooperate with the government to get easy access (embedded reporters, etc) rather than doing the hard work of adversarial investigation.

There are differences of course, like how we get to hear two similar options and pick between them. And how this simple act of choosing makes the population absorb the propaganda better. But I'd call those internal differences in structure, with the overall result being similar.

If you're happy within the Overton window, then of course it looks like Wikileaks is some crazy actor that came out of nowhere. But if you see mainstream media repeatedly acting in concert, then Wikileaks is a predictable reaction.
It's not necessarily ignorance, but also risk management. Who is the CIO to say that Linux is exempted from that condition? He'd need a stack of evidence that it's not commonly affected, which would need to be kept up to date .

Easier just to say "AV on everything".
Author here.

> 1. If emulating aarch64 (arm64) on x86_64 is 6x slower (on your system, btw, it's not an universal constant), it doesn't mean emulating x86_64 on aarch64 will be 6x slower. It'd probably be worse, or at least that's my gut feeling.

Yup, performance benchmarks are inherently flawed and nobody knows anything right now without the hardware. However if ARM -> x86 emulation is anything like x86 -> ARM emulation, I would expect a really big performance loss.

> 2. Generic container images like the Ubuntu mentioned usually have aarch64 (arm64) support, so running the x86_64 image makes no sense for the presented use-case.

Ah actually I address this in the article, and even run an arm64 image. The short version is, it would be a lot of work to convert your whole backend infrastructure to ARM just because you got a new laptop.

> 3. You won't be able to use most software because they don't release ARM binaries ... and the example uses `wget` && `tar xf`, with no binary signature check. As someone who has been porting stuff from x86_64 to aarch64 for a couple of years, I admit I've seen this pattern frequently. The most obvious solution is to build from sources, which would have been better off on x86_64 too, instead of fetching a prebuilt (and unverified) binary from the internet. Maybe there are some CPU flags the compiler could notice and apply optimizations which are not included in the prebuilt binary.

Yes, if only everything were built from source! I'm not saying there's no solution, just that the solution would be a lot of work. If the library is obscure enough and the errors are strange enough, it might be so much work as to be impossible to the busy web developer.

My goal was to write a kind of hand-wavy article to get people talking about this problem.
Reminds me of this anecdote from Guatemala. They are boarding the plane and the women notices that the pilot is very young. She asks, "Are you sure you're old enough to be flying this plane?" He replies: "Don't worry ma'am, I come from a long line of pilots. My grandfather was a pilot and my father was a pilot too."
Supercomputers on the Internet (1988)
Pull Requests – checklists, metrics and best practices, a definitive guide
Congress Introduces Bill to Ban Federal Agencies from Using Facial Recognition
Snowden: Tech Workers Are Complicit in How Their Companies Hurt Society
Lonergan on a World on Fire
Not discussed here - there's literally BCD instructions on x86 that take an ASCII string and treat it as a number. I don't know of performance though since these instructions are definitely archaic.
See: Hin Leong Trading for a current example.
Not sure if you intended to link to some QAnon propaganda account, but there are other sources of that same info.

Here's a video showing the vehicle in action:

https://www.youtube.com/watch?v=_j0eJ0xB7LU

Vendor's product page:

https://dillonaero.com/product/convoy-escort-vehicle-cev-2/
I'm not sure that "can this be technologically pulled off right now?" is the right question to ask if you are trying to create a successful business. "Is there a market?" is way more important as it means you can actually actually make a profit one day. It also leaves you open to adjust what your business is to find a market. Focusing on technology may lead to a myopic viewpoint that never materializes anything of value to consumers.
Yep, I'm only familiar with the V2 one and I never used the old Windows app.

It's true as a painting program it is more comparably powerful. One thing I have to be careful of when using it to edit existing images is that it doesn't support colour profiles AFAIK, so edits can be lossy if the image isn't sRGB.
Fighting Desyncs in Melee Replays
If they spent all this time and energy into building a high performant and minimal react/vue app instead of using their over-engineered in-house front end frameworks the result would be even better. Maybe they should just embrace Vue.js which, like rails, is also an indie open source project ,not backed by big co. Vue 3.0, while still in beta, brings lots of improvements on the table and the new custom renderer api would make it easier for their team to also target native mobile apps.
They're relevant details because they directly affect the health and safety of the ambulance staff, and protocol dictates that they call in on anything that could be hazardous to them. Not to mention that those details could affect the treatment of the patient.

See? This is the problem. The filtering is more important to some people than actually doing the job correctly.

This is why speech must be free, because I don't want a paramedic who's treating me to be debating exactly how to define me to dispatch. I just want them to save my life.
i have to admit i don't get it. there seems to be zero compelling reason to use hey over; eg, fastmail.

fastmail is to this day the fastest website ive ever used
I use unix pass https://passwordstore.org and a self-hosted git repo to sync my passwords across devices. I don't trust any browsers with my data passing through their servers.
Internet Delay Experiments (1983) [pdf]
> I'm surprised there is no "right to privacy" spelled out in clear terms.

The problem is, there is no definition of the word “privacy” in the context of “right to privacy” that a majority can agree on. I highly doubt even the niche audience of HN could agree on what they feel is private or not. I think the EU took a decent shortcut around that debate with “right to be forgotten”.
What. A lovely article and some of the comments show that its context isn’t understood (despite the author’s efforts to imply it!)

I’m going to start by ignoring this in my code. Just make it work correctly, right? But as we get closer to deployment performance probably matters (it does to us). Then we start to notice lots of important coupling. For example input validation typically* isn’t required inside the system: datastructures and generated and used by our code. Validation applies at the “surface” or external inputs of the system. Log records which are generated by one part of the system may need to be dredged rapidly — forcing the representation to be fixed means the code that parses it can make assumptions the library code cannot. Metering will tell you where optimization opportunities lie.

* super long-lived applications sometimes need to do consistency checks even on internal data to avoid subtle corruption issues that could have hardware or software origin and could be very expensive to encounter. Things like phone switches and spacecraft that need to go years or even decades without a reboot.
Who is more powerful: The President of the United States, or me?

While it's indeed possible that there are ambiguous cases, that doesn't invalidate the idea in general. Unless you legitimately believe that it is always impossible to determine when there is a power imbalance in a relationship. But we make that decision just fine in many other situations, so I don't know why speech would be different.
>I might get caught in an 18-month loop of watching the same videos forever...

sounds like a feature (for them) to me. why bother showing your users new videos when they're perfectly content watching the same old videos over and over again? Better than not showing anything and them leaving your site because there's no more relevant/new videos.
"conditions are unsanitary and dangerous to the crew and patient is confused and ucooperative yet is requesting assistance"

That seems better than "there's a homeless guy with a bunch of needles and feces" in terms of descriptiveness.

Edit: aren't communications protocols a very standard thing among first responders / military / hospitals / etc?
Fair enough — I've used Oracle's products enough to know that software distribution and packaging is not a priority there.
Show HN: Open-Source Calendar Library
Oh yeah but I was talking about motivating the developers. I think it might be challenging to hire people who just work on porting.
Well, for what it's worth, the last supported Mac Mini is 8,1, which is late 2018 model, only replaced by 2020 with the same CPU. But other than that, yeah, not holding my breath.
Isn't congress actively working to limit encryption for everyone else at the same time?
Personally, I always thought my Alice in Chains Markov chains were pretty funny.

https://git.mar77i.info/alice-in-markov-chains

For anyone trying to run it, the URL in the collect_lyrics.py script should be the band's page on AZLyrics...
Its quite challenging to anonymize location data. With your example one would simply observe these sets of 10 locations and then look for the most realistic route between them, fully deanonymizing the location.
No, it doesn't. If I'd made the statement "all you need to do is…" then it would have involved some assumptions. What I said was "I did this and all it took was…" no assumptions, just experience.
I don't know about the nuclear weapons program.

But I defiantly believe they are a bad ally. I don't know what exactly they have done to get such a high status as an ally in the US. I think it never made sense really and the US has not benefit from the alliance.

I know some of the history of how it came about but even if you read those, the strategic calculus behind it was flawed.
> The firmware on these chips erases the keys before firmware updates. I encourage you to read the detailed information available rather than just making assumptions about it, or even just the short blog post I linked which states this explicitly.

I read the blog post _and_ the third party security audit. The audit only documents that rogue actors within Google would leave a attestation trail if they tried to push malicious firmware and be noticed by Google proper. My concern isn't rogue actors but Google itself. Additionally the Titan chip in my pixel has received firmware updates without wiping it's storage.

> In the San Bernadino case the FBI had physical possession of the HSM, so Apple could have attacked it physically. That's not related to the reasons why the FBI gave up on that case.

Right, so the legal distinction between "we want a piece of information in your possession that you have decided to lock from yourself" versus "we want your help receiving information that we have in our possession but can't access" is a very very big difference from a warrant perspective.
What do you build that requires those things?
What about this is unbelievable to you?
I don't think where this is coming from, but you seem to imply that there is case now with FB.
Off-line support is trivial. https://twitter.com/javan/status/1274168003773566977
Despite protests and reopening, Bay Area Covid-19 data is stable for now
Apple Maps to tell you to refine location by scanning the skyline
If only people writing applications could find some way of testing that their apps function properly.
The refreshed Wit.ai: GitHub login replaced by Facebook login
Very nice! Ansible can be a little heavyweight for some of the things that me and a lot of people do. I'll definitely be taking a look at this.
Would also like to know the team size. Sounds like 3 people with a good amount of experience. But it's a very impressive accomplishment no matter how you look at it.
Yes, so an effort to write an optimized version and benchmark it should include such checks (plus, of course, checking for reaching the end of the input).