skysight-inc/HackerNews huggingface dataset:
> Also, why not just PWA ?
Apple won't get 30%. They'd have to put effort into making PWAs work reliably, which they don't want, and they'd open up the opportunity to get real app-like experiences without the 99 dollars per year + 30% of sales.

There's no incentive for Apple to support this because they can only lose money. If they do release it, they'll probably make you pay for something to use all of the APIs, like for a messaging platform or for access to certain entitlements for full sensor support.
I really like Tom Duff's http://www.iq0.com/duffgram/com.html to compile and run in two commands.
There was that government OPN hack not so long ago with all that gov PII. And consider the tempting target these keys will make for state actors.
There's a good book called "The Drunkards Walk", that describes a woman who was jailed after having 2 children die from SIDS. They argued that the odds of this happening is 1 in a million (or something like that), so probably the woman is a baby killer. The prosecution had statisticians argue this. The woman was found guilty.

She later won on appeal in part because the defense showed that the testimony and argument of the original statisticians were wrong.

This stuff is so easy to get wrong. A little knowledge of statistics can be dangerous.
Just curious, what strategies were you going to take to help them build it out, and just how much "build out" were you planning to do?

And just to be clear, I don't mean this in a sarcastic cynical way. I am genuinely curious on how people built out such platforms and surrounding infrastructure during the initial build-up of the WWW.
It’s been surprisingly easy to support various Apple devices.

I think the notch and home-screen-bar layouts were a bit tricky but they did have APIs in place and it was OK.

The biggest issue really was the 32-bit to 64-bit hardware transition; I remember seeing weird graphical issues because floating-point results were slightly different with float vs. double.
Honestly it takes an American 7 years for a career to take off.
GOV: Is it true that your servers hold encrypted data.

AWS: Yes.

GOV: Decrypt it, please.

AWS: Lol all we have is the public keys, bruh.

GOV: Use the public key to decrypt, please.

AWS: Uhh...
Or option B: american racism doesn't stop at blacks.
People just keep wasting their precious lives on archaic stuff that has no future. Perl is dead. If these smart minds want to contribute to humanity, they should abandon this sunken ship and move to something more meaningful.
"I enjoy that John D. Cook doesn't pad his posts."
Many of these larger epaper displays are meant for very low refresh speeds - I'm talking 5 seconds plus. This one takes 6 seconds.
One of my writer friends accomplishes a similar workflow by just having a writing account on his laptop, where everything is disabled except a text editor.
Nope, as long there is _any_ proof (i.e. implementation logic), you can use it. Similar to software -- if you're happy with a library's interface, you don't have to read its source code in order to use it.
Extending Drupal 7's End-of-Life – PSA-2020-06-24
Well maybe not Uber, but for sure for things like scooter or bike sharing. Now that I think about, do people really want to touch a bike or scooter that’s been lying around given potential exposure to Covid? Anyway I think there will be plenty of use cases for App Clips. And to add to that, I think Android/Google has had the Instant App feature for some time now, it’ll be interesting to see what sort of opportunities arise from this App clip/Instant App ecosystem.
Graduate programs drop GRE after online version raises concerns about fairness
You're assuming they want to fix the problem
Shameless plug for the minimalistic no-faff blogging platform I'm building: https://mataroa.blog/
I wouldn’t assume that’s the only reason for how these apps exist. Most businesses pay considerably more for an app than it would cost to have a website. In some cases that’s due to something like robust offline support or tracking not allowed by the web security model but there are plenty of more common reasons: the owner wanted to be able to tell their friends that they’re in the App Store, they perceived it as more modern/cooler, they got a sales pitch about how this would boost revenue or customer loyalty, etc.

One way to guess about what’s happening is to look at the app quality and update history: if it looks like it launched in the original App Store round or has a hideous UX which is never improved, it’s probably not actually doing enough to be worth spending more money on.
Canonical's Ubuntu 20.04 Linux now available on Dell XPS 13
How is that strange? Many different viruses can cause some level of myocarditis while also infecting other tissues to varying extents.
Apple sells between 10-20% of smartphones per quarter[1], that implies Android makes up 80+% and Windows/Blackberry a neglible amount.

How can Apple be a monopolist from such a small position, or have a "stranglehold" when they are outsold 4-8x by the competition?

[1] https://www.statista.com/statistics/216459/global-market-sha...
It wasn't very fast. Since you could see the characters being typed I would say it was about 150-200 wpm? It seemed both very fast and painfully slow...

FYI, port speed on PS/2 was 7–12 kbit/s and Apple's was 10 kbit/s.
The fact that you think it matters which one is the problem.
Maybe because working hard and doing good work that people value adds to life satisfaction and status.

That's all the rest of us have going for us. Passing on billions isn't even an option.
It should at least be very clear at the paragraph level what is established fact and what is speculation/opinion.
In theory yes, but there is some building that I'd need to do to make that easy. You can make it happen now by restarting the processes with and without the agent, but the goal is to have it configurable in the UI.

If you like to, I could try to get back to you once that's built?
There is as yet insufficient information on exactly what covid19 does to our biology, and consequently there is a lot of guesswork and misinformation flying around. Researchers are in hair-on-fire triage mode, there's an enormous amount of pressure to just "figure it out", people keep forgetting that the first word for this infection's official name is "novel", and they keep likening it to things that they do understand even though it's not really any of those things.

So we don't know. Nobody does right now. It takes time. It is really unfortunate that it keeps getting compared to other diseases. It's a lot like encountering malaria for the first time and saying "it's basically yellow fever". We should be behaving as though there's a mysterious new illness sweeping through populations across the world, with unknown short-term and long-term effects, because that's exactly what's happening.

The earliest severe cases all presented as pneumonia, so this disease got treated that way. But, it was quickly discovered that the pneumonia didn't behave quite like normal cases of pneumonia, and then shortly after that, there turned out to be a strong correlation with cardiac and stroke events. So, although people still think of this as a respiratory disease, there is something else going on, we just don't know what yet.
Recently I found some old floppy drives at the back of a drawer. I manager to find an usb disk drive, inserted the floppy, what do I find? Sure enough, Perl code I've written back in 2000! Indeed, those were the days :)
How much of this not "good for agriculture" is a result of a mispricing that doesn't factor in the unsustainability of the current mainstream approach? Like many areas this may involve more human workers before later transitioning to smarter machines in the long run.
I think I did a poor job of explaining the situation I was referring to. My point was I could’ve made a better job explaining a concept, but I just wasn’t prepared for or had the capacity to do so at the spot. Explaining complex things in an ad-hoc fashion with no preparation is hard, is what I’m saying.

Locality is about having the code for one feature in one spot. If you can remove a feature by deleting one piece of code at one place, for example an entire file, then the feature is local to that file. It allows you to make changes and remove features without understanding the entire application. Without it, you have to understand the entire codebase to make any changes, which goes from hard to impossible as the project grows. This is why globals are a pain.

Locality is related to code cohesion and loose coupling.

React encourages locality because you’re only supposed to pass data one way, which gives you a sort of tree structure where you can remove a branch without affecting other branches.

Of course you can mess this up in React as well, React is no silver bullet and you can do it without React.

There is so much to talk about here, but none of that is relevant to the point I’m trying to make, which is:

I should probably have been able to explain all of this to the person asking, but it’s a lot harder to do so verbally with no preparation than it is to write it down like this.
Yes. EARNIT from earlier this year was bipartisan.
http://cyberlaw.stanford.edu/blog/2020/01/earn-it-act-how-ba...
To me it comes down to the language barrier. Not having a good command of English (or the local language) hinders your ability to integrate with the locals. Learning English for a person from a Western country is way easier than for a Chinese person.
Smooth Operator – Human-like self-driving with reinforcement learning
I think its interesting in the Northwest, Huge Dams were built on the Columbia River to power Hanford (and the Manhattan Project) and the large glut of power after it was scaled back made it cheap to move Aluminum Smelters there. (and to Send 3GW of Super High Voltage DC power to LA from near Portland) Then, in the 90's, when power got more expensive (and more environmental rules) they moved them all overseas. That left a huge glut of Power in the area. So now, Facebook, Microsoft, AWS, Google All built their datacenters there.
A few options if you want to maintain MFA:

For my Okta account, they support push notification to their app on my phone as an alternative authentication measure.

Another approach is a bluetooth (or NFC) enabled device (like your phone) that actually caries the private key. When using a borrowed computer, the signed attestation data is shared with the borrowed system, but that can only be used once, since the private key is never transmitted.

So basically you can either have a side-channel to another MFA method, or a relay where you don't need to trust the intermediary beyond the current session.
I actually LOVE this idea. And we develop an app for people to get personalized information from their local government (https://polkadotskysoftware.com).

What I love is that we actually get access to a whole swath of people that want quick information but don't want to install a whole app for it. In fact, we want to make our stuff available on any platform, because our goal is to get as many people to use our system as possible.

When it comes to parking vendors, they get their money no matter what (either from a government contract or as a slice of parking fees, not from number of app installs), so it's in their best interest to INCREASE engagement.

Our main problem is that our mobile app is written in React Native, so I'm not sure how this would fit in near-term. We are loathe to add too many native features because the whole workflow in React Native is already a bit brittle.
> The bill also allows the attorney general to create a competition with a prize for anyone who can come up with a way to access encrypted data while protecting privacy and security. Security experts have long noted that this is an impossible request.

Well, with current encryption techniques this is impossible, but depending on what is meant by 'access', there are certainly ways of encrypting data in such a way that it maintains privacy while still being able to question if the data contains knowledge of certain things.

For example, you can have a child pornography machine learning detector that operates over completely encrypted data via homomorphic machine learning. You can also use zero-knowledge proofs to ask a properly stored piece of data whether or not it contains a particular fact, without actually having to read the data. Depending on what is meant by 'access', this is a reasonable request.

Requiring homomorphic encryption of encrypted data channels while government overreach perhaps, seems like something that can satisfy both a desire to have encrypted, unencryptable data, while still being able to examine the data in flight.
Arduino-like environment for Android devices
Which, if any, of these Twilio competitors will allow me to CC: a SMS to an email address without involving third party providers ?

I have begged Twilio engineers in person at multiple Signal and over email/support channels as well as the CEO and here in this very forum: For the Love Of God will you please add an 'email' twiml verb ?

If you want to CC: a SMS to email currently, within Twilio, you need to build functions, sign up for a Sendgrid account, authenticate in sendgrid with real names and physical addresses ...

It's a no-brainer use-case and it is nothing but pain to implement.
I am talking about people on HN and not Apple.
What exactly does attestation do vs not having it? Can someone here explain clearly?
Client certificates suck in a bunch of ways that WebAuthn, specifically designed to solve this problem, does not. Example:

If the certificate used to sign into Hacker News as "sneak" is also used to sign into PornHub then I can correlate that to discern that "sneak" on HN uses PornHub. Whereas you can't do that with WebAuthn credentials - a separate credential is spun up for every single registration, it's completely useless everywhere except the one site it was issued for and can't be correlated to other credentials except via a cryptographic attack on the underlying primitives (ie breaking WebAuthn itself).
How many of these sophisticated and non-lazy criminals are there?

If you have a lot of sophisticated and non-lazy criminals, my guess is that there is something very wrong. I'd like to know more about these characters and what kinds of crimes they are committing.
Train your own ML models without writing a single line of code
is it more believable to think they could hit a pedestrian?
Fair enough, I guess my memory on RAM was biased by my environment (mostly around developers and CS students in that time period).
Have you tried emacs with evil-mode? It could save you a lot of trouble, as the ultimate editor is already written. ;-)
With Okta (since gp mentioned it), you would sign in with a password, then click the "yes its me" button on your phone, or you could use TOTP, or even a yubikey.
It may be convenient use other ids besides bank account numbers, but it adds another avenue for mistakes.
Can anyone confirm if this happens in countries with functioning consumer protection? Or is it just an Amazon.us thing?
I agree 100%.

For the longest time I meant to write about the experience of working on my startup as a solo founder. I kept putting it off as it felt like a daunting task.

So I set a strong constraint for myself that I'll just talk into the camera every morning just while I have my second cup of coffee.

I'm very happy with the output and I actually enjoy it now https://www.youtube.com/channel/UCHkgOonAQd5haT8HHJhpg6g (Building a SaaS business)
Dynamic Water Demo with Godot
Dang, I've just explained my reasoning in more detail below, in response to a comment earlier than yours.

To be very clear, my comment was intended to be complimentary, not negative. I stated it was impressive. The author's opinion about Google is totally valid and widely shared -- and that's what makes the article such a clever vehicle in which to insert a call to action on behalf of Hey. <-- no direct evidence, just my opinion, of course.
It was that way even at the Windows CE times. Truly a shame, MS and Blackberry essentially owned that market, and they let it slip away. Now both are fucked in that space.
Are those web apps or web pages though? Like I don't think blogs are what OP had in mind.
Yep, there is some point between building a product that customers like and sending pig heads to people who have wronged you...before the "pig head" phase is probably best.

Being serious, some people aren't meant to lead. It is why police need oversight, it is why politicians need oversight...95% of people will fold instantly when put in leadership (that this was triggered by the CEO's wife suggests true fragility). Some can't make decisions, some ego hard...but most people shouldn't be there. It is that simple.

Btw though, I wouldn't call the board great. Again, the Compensation Committee Chair is well-known as one of the worst retail executives of all time (up there with Ron Johnson of JC Penney fame). The board is largely composed of people like the CEO whose only proven ability is being able to bullshit other people about their failure. That is what being a CEO/director usually optimises for.

Everyone fails but these guys don't learn and are delusional about their failure. They are agents. Make the directors invest 50% of their net worth and take all their pay as variable compensation. See how many Wenigs they hire? Zero. Very easy to make bad decisions when you are making $400k/year base (add a bonus) for twenty hours work.

Put a spike in the middle of the steering wheel, you won't get many speeders.
In that case you may be glad to see how many major discussions like that HN has hosted in the past few weeks.

https://news.ycombinator.com/item?id=23624962

Sorry not to have listed the titles, but there are many tech-overlapping threads in there, and many more that I didn't list. HN Search can help—for example:

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...
There is an even more advanced solution: homomorphic encryption lets you operate over fully-encrypted, undecryptable data, and compute new derived data from it that -- if decrypted with the same key -- is as if the computation was done over the decrypted version to begin with. This can be used to create 'blind' machine learning computer vision models that can detect objects in encrypted data but still can't actually 'see' what's going on.
Is it time to give Drupal another look?
> And I guess Perl also never had its Django (or Rails).

It’s got two of them - Catalyst (older still works fine) and Mojo - newer and shinier.

I think python is a better fit for mathematical work. I like to say that python helps you think more like the computer does, and that perl helps the computer think more like you.
Last time I checked, efficient ad blocking worked only in Safari. If that did not change, it's another reason to stay on Safari.
One of the reasons I left Android for iOS was just this issue. 2 years of updates, then you're expected to purchase a new device. My iPhone 11 I expect to have for many years. Hopefully 5+.
An excellent book that will be understood by beginners and teaches all the important things, written in a clear and simple language without any shenanigans. Great work!
Aren't you confusing a theorem with a proof of that theorem ?
I wrote a quick Node Proof of Concept for a high-throughput data processing pipeline before the "real" team came in and rewrote it in Java.

Not only did the "real" team try and gaslight me into thinking my implementation didn't work (It did, they copied it wrong), but it took 3 engineers twice the time it took to copy my work into Java as it did for me to do the original development. The kicker: The Java process was so bloated it took nearly 2x the compute resources to get the same throughput.

TL;DR I challenge every time someone says "This is complex/high throughput, so let's use Java instead of Node"
> water feeding system can be led all the way to the ocean

If you're thinking pipes, the water might become toxic after 500km or so.
> Perl is dead.

Seems like DuckDuckGo didn't get the memo.
I dont know that "Android" has a two-year policy - certainly all of Google's recent devices were updated longer than that.

Pixel 1: Release Date October 2016, Last Update Dec 2019 (3 years, 2 months)

Pixel 2: Release Date October 2017, still current (2 years, 8 months and counting). Android 11 beta also available. If it is kept updated throughout the 11.0 cycle, that will be ~4 years or so.

Pixel 3, 3a, and 4 are newer but also still current.

Android 8.0 (released August 2017) was updated this month: https://android.googlesource.com/platform/build/+/refs/tags/...
How would you do the signing part though? Given that most CA don't do client certificate at all, nor it issue certificates with signing flags.

Even if CA does sign client certificate, and website is expected to store its public key, it expose some privacy concerns since a public key is now Personally Identifiable. If a website must provide its own self-signed CA and require user to provide a CSR when registering for an account, then it becomes a huge overhead for both website and user to just login.

I work with enterprise and the requirement usually requires client certificate. I never had a good experience setting it up even with a limited number of parties.
> All of them will leak? Seems like if each key is in possession of a different party, and you need all keys to decrypt, and at least a few are air-gapped only available for warrant holders via manual retrieval... the probability would be vanishingly small.

There are always tons of assumptions we make when we say these things.

We assume that the computer used to generate the keys was never connected to the internet, has not already been compromised at the time of key (re)generation, there are no backups of the computer, the engineer that performs the key generation is extremely trustworthy, the room this is done in is perfectly isolated from surveillance, etc. If you start calculating these probabilities and multiply them together, you start observing them moving further and further from 100%.

> but in reality nobody has put out significant resources and made an honest effort to try

These just seem like No True Scotsman fallacies. If anyone comes up with evidence of an effort, are you going to move your goalposts?

IMHO, the incentives don't exist. Law enforcement can't even secure their own technology and vendors (eg. BlueLeaks, OPM hack). The tech companies tasked with this project only see it as a cost center and see it as a potential massive risk to their brand if this system is misused. During the Snowden leaks, there were accusations of NSA contractors using the search system to spy on family members, dating partners, etc.

Human behavior is too predictable to naïvely assume that we can increase security while increasing the number of keys/people who have access to a massive tranche of data.
Lol, that’s great. Would love to have grazing animals in the future but we’re not quite ready to take care of them yet. Also involves decisions on fencing etc. I have been warned a LOT about goats and their ability to destroy everything, and evade even the tallest fences.
Not really, there are often other options. Different lots nearby using different systems, for instance. Or the option of simply not paying and risking getting towed / a ticket.

A parking lot clip could use the time-based notification to warn you that your meter is almost up and give you the option to re-up. Without having to walk back to the lot to do it. I imagine this would be especially useful in a tourist-heavy area since somebody who isn't sticking around won't want to download a whole app for the purpose.
That was a weird time. They also charged some trivial amount (I think $2 or $3) to upgrade the wireless drivers for OS X to support 802.11n.