skysight-inc/HackerNews huggingface dataset:
> With its high housing costs, poor infrastructure and transit, endemic gun violence, police brutality and bitter political and racial divisions, the U.S.

At least the first five of these seem to mostly be a problem in New York, where the author is based, and similar cities, not “America” writ large. For example, the author complains about the housing costs, but the national home ownership rate in the US is about the same as the UK or France, and substantially higher than Germany. (And the median American home is twice as big as in those countries.) The author complains about the lack of transit, but the median American commute is among the shortest in the OECD. The homicide rate in my Maryland county isn’t great (about 2 per 100,000) but it’s closer to say Canada or Belgium (1.7-1.8 per 100,000) than those countries are to Sweden (1.1 per 100,000). Racial divisions are a challenge throughout America, of course, but that’s true all over the world. France’s Macron is talking about a government takeover of Islam: https://www.ft.com/content/88c1e898-5269-11ea-90ad-25e377c0e.... And Macron is the liberal! Le Pen, a far right candidate, is polling dangerously close to him at 45-55. As a brown person, I’d much rather be in America right now even with Trump than in France.

What the recent situations are bringing out is not that “America” is in decline, but that “American cities” are in decline. The mayor of Chicago, Lori Lightfoot, recently said that cutting police funding was impossible, because given the union contracts the city would have to lay off mostly black and Hispanic officers! This is a police force that was running Abu Ghraib-style interrogation centers. For what New York is spending extending one subway line a few miles, cities like Copenhagen have built entire new, fully automated, lines. New York City spends $25,000 per student, or about 44% of the city’s median income. London spends just 15% of the city’s median household per student.

You can’t fix a problem unless you can properly identify the problem. Articles like this are willfully blind to the problem.
Absolutely love your work @antirez. Also appreciate your blog.

Using Redis to handle greylisting on a custom Node.js backed email forwarding service:

https://github.com/forwardemail/free-email-forwarding/blob/0...

Also using it for job scheduling (with clustering support on top of Bull):

https://github.com/forwardemail/forwardemail.net/blob/master...

So many things you can do with Redis :tada:
If I understand the model of the hypothetical app referenced above, they send email containing confidential (already, this seems problematic, but let's ignore that) "trip" information to some email address. Within that structure, then sure it's problematic to have to require two different email addresses. Except, you don't have to do that. Don't require an email address to start using the app. Let users enter whatever confidential trip info they want, keep a reference to the resulting DB records in a cookie, and only require an email address when the user wants to, uhh, get an email sent.

Having typed the foregoing, I realize now I'm basically just saying "don't use any third-party sign-in, including SIWA". Maybe it's fine that the ecosystem doesn't always cater to apps of questionable utility...
I like and use Pocket but one of the first things I do after installing Firefox is disable Pocket recommendations. It shouldn't be calling external services like that without the user explicitly opting in.
How can you buy a cardinal direction?
I think new versions of a language, major or minor, breaking compatibility with old code is generally lamentable regardless of version scheme. The version scheme they chose is not the root of my disappointment. Because so many programs will likely never upgrade their version of Lua, this leads to fragmentation of the community.
Many people don't appreciate tape, but for long term offline storage nothing else comes close.

Offline storage is important if you care about things like ransomware.

The problem I find with disks for offline storage is that they're very easy to turn on and very easy to zero. Tapes on the other hand are much more difficult to get to if you're in the business of ransomware.
> The Internet Archive's best bet is to settle and apologize very publicly.

One should never apologize for civil disobedience against unjust laws.
I don't know if it really fits the spirit of the site if this aquisition is explicitly for the people and patents, they announce that the product is shutting down at the same time, and are giving out refunds. The spirit of ourincrediblejourney always felt to me more of when a company puts on a show at acquisition talking about how the acquisition will allow for all sorts of new growth and opportunities and then a few months later the service gets quietly shut down.
I only used it once, but it's clustering story was bad, and I never really understood the niche it filled between Memcache and databases.
Stackdriver did not disappear, but having used it daily for the past 4 years and witnessed its painfully slow and buggy migration into the GCP admin, I can't say it's a product that has visibly gotten much love. We kept using it for some things out of inertia, but I can't say it ever impressed me.
I'm absolutely fascinated by the bus system in Guatemala and other central american countries. It's incredible and blows away any system in the US, in terms of price and convenience, if not in safety and comfort.

Even the most remote places have regular bus service, and there's a whole economy around bus stations and vendors selling things on buses. You can get from one end of the country to another for a couple of dollars and for not very much more, there are pullman bus routes between major cities that are a better traveling experience than amtrak.
Swimming vs 'living' seems intuitively weird to me too. I guess people who are otherwise in poor health tend to avoid swimming?
Of course I disagree. If you would like to have a conversation about what you wrote. We can on discord or by phone. Would you be willing to?
Great to see another layer of transparency in ios14.

Bit I wonder why everyone talking about one specific app?
I see a huge bias towards TikTok in headlines

"iOS 14 caught TikTok and other apps spying on the clipboard" [0]

"iOS 14 beta shows apps like TikTok still spy on your iPhone" [1]

There a bunch of apps like VICE, Google News, WSJ that has been caught doing exactly the same. [2]

I may find the explanation why TikTok did that. In China WeChat blocks direct links to their competitors. So apps like Taobao or Douyin have to find a workaround for deeplinks.
When you want to share the video from Douyin with a friend in WeChat, Douyin generates the following message.

在东京刚毕业入职三个月的职场小白 搬家找房 坚持更新#日本vlog #东京 https://v.douyin.com/J8ceMYY/ 复制此链接，打开【抖音短视频】，直接观看视频！

In WeChat the link is not clickbale. To see the content user has to copy full text and go to the Douyin. The app will read the clipboard and perform the transition to the video. On the link below you can find the video - explanation [3]

Probably they had re-use some code in TikTok. Definitely they need to be more accurate towards data safety but I don't think they really made a pipeline for spying using clipboard.

There is a lot of buzz around TikTok these days, but I want to get an answer from other apps as well.

[0] https://bgr.com/2020/06/26/ios-14-beta-privacy-features-tikt...

[1] https://mashable.com/article/iphone-ios-14-privacy-clipboard...

[2] https://www.youtube.com/watch?v=pRSWdtoUAjo

[3] https://twitter.com/kidrulit/status/1277629462721384448
There are a lot of production studios around the world, of which only a fraction produce movies that end up in theaters or sold on Amazon or iTunes.
I'm not sure "happy with the pay" is a good measure if the alternative is not working / serious problems. So yeah they'll take what they can get.

I'm also not sure the cheap delivery guy is likely working themselves up to much more for each table they carry like you were with each website.
I'll go ahead and say it's probably such an extremely rare occurrence that I highly doubt some sort of forum is required here.

Why an exclusive community about this subject necessary? This topic is not prohibited on /r/offmychest or any other "venting" subreddit. To me it seems like community of common hate and that's just awfully unnecessary.
I'm pretty certain posts of "my spouse turned out trans an left me" would never be removed from any platform.

There's so little value here that negatives outweigh the positives by an absurd margin.
Practices for Building – Linear is now open for all
A full-blown Yubikey has modifiable firmware and a relatively large amount of rewritable Flash storage. I assume those features aren't free.

A FIDO authenticator has no modifiable state beyond maybe some sort of counter, it has a random secret key which makes it unique from its siblings, and that's it. No firmware update feature, no storage.

The crypto hardware is also simpler. FIDO was defined in terms of these nice compact elliptic curve schemes. The keys are small, the operations are simple, I'd be surprised if dedicated silicon to implement this isn't cheaper, and if you're just running it on a cheap microcontroller I'd be surprised if you can't get away with a cheaper microcontroller than you would need to implement RSA encryption and whatever else a Yubikey can do.

Finally in terms of volume, it makes sense to give all your 5000 staff a FIDO key. "Go to the enrollment page we built by this Friday. Enrol your FIDO key. Call the help desk if you have problems. From next Monday these are mandatory". You can lock down common corporate web SSO solutions with it for example, outfits like Duo will let you just check one box and you can now answer "Yes" to pages of questions your CISO is supposed to fill out every year.

It doesn't make sense to give out 5000 traditional Yubikeys. A dozen to a dev team for PIV? Maybe. But the lady who does 2.5 days per week in the accounts department? She doesn't need PIV. She can use a FIDO key to sign into the accounts web app though.
Chrome team member here, and one of the people working on the portals spec.

This isn't accurate. This feature is being developed behind a flag, as it's still highly experimental and undergoing a lot of change. There is an origin trial [1] for mobile-only same-origin-only portals [2] which people can use to test how well this works in the wild, but it's nowhere near shipping.

You can learn more about the intention of the element in [3].

[1]: https://github.com/GoogleChrome/OriginTrials/blob/gh-pages/d...

[2]: https://developers.chrome.com/origintrials/#/view_trial/-768...

[3]: https://github.com/WICG/portals/blob/master/README.md
Even if you broke the law you don't just role over and give the other side whatever they want. They're inevitable going to ask for more compensation than they are entitled to (why wouldn't they), and you need to push back to make the penalty fair. That's just how our legal system is set up to work.

The EFF is on the right side of the law the same way a lawyer for a criminal is. The lawyer (eff) is fulfilling a necessary function of the judicial system even when the party they are representing is in the wrong.

The EFF has a keen interest in this case because the publishers will be doubt use this case to push for copyright maximalist interpretations of the law, and letting those interpretations become case law unchallenged is bad for society.

Edit: At a glance the vid angel lawsuit you quote is about circumventing DRM, something that is not relevant to this case since the physical books they scan have no DRM.
How Can a Marketing Manager Utilize Nonfig to Capitalize the Market?
North Carolina Transformed Itself into the Worst State to Be Unemployed
So they _intentionally_ set themselves up to lie to regulatory agencies and consumers about real world efficiency. That honestly sounds basically the same to me. In both cases the tests are poor approximations, and in both cases someone could accidentally optimize the test, and in both cases someone did it intentionally to deceive people.
Why would I want content recommendations from my browser, especially Firefox? It's an utterly bizarre feature to ad.

It didn't make sense for Google to have done it but it especially didn't make sense for Mozilla to play the "me too" game. It's a waste of money and developer resources and frankly shows poor stewardship on the part of management.
IPFS is asking for input on integrating remote pinning services
Bank transfers are free because you have to deposit (aka lend) money to the bank before transferring it. And the bank get to use that money for profit while it is deposited.

There's a billion dollars difference between a million and a billion. You can't just plop a billion dollars into your checking account. It's part of a hugely complex context (how would you even accumulate a billion dollars to deposit?)
For anybody interested in the IA's claimed ethical and legal justifications, they summarise and link to them at the following page:

http://blog.archive.org/2020/03/30/internet-archive-responds...
What's a 95% man?
Yes, I'm feeling much better now! 10mg of Lexapro daily and a couple of months of therapy helped enormously.
iOS 14 has a new workflow that lets the user give an app access to a photo or selected photos without the app getting access to any of their other photos. Big privacy improvement on that front at least. I don't know about mic access.
Hello Salvatore,

I normally don't write about what I come across during my work, but in aggregate I can tell you that Redis, Linux and MySQL are the most common recurring elements across 150+ jobs looking at different companies, and using it rarely if ever leads to trouble.

So even if I don't use it myself directly quite a few of the companies we have invested in do, and an indirect 'thank you so much' is well deserved. I am very curious what it is that you will do next besides blogging. Linus had 'git' as his second major project, arguably it has had just as much effect on the world of free software as Linux did, you've definitely raised the bar for yourself :)

Much good luck!
Hotels.com and a host of others did the same thing, indicating that this is not particular nefarious.

However we keep talking about TikTok.

Why is that?
There has been a bypassable error for TLS 1.0 and 1.1 for several months. There have been error messages in devtools. In October of 2018 the browser vendors jointly announced that this change was coming. [1][2] This is happening in coordination with Chrome. The sites that are affected by this have had nearly 2 years to sort out their upgrade to TLS 1.2 or 1.3.

[1] https://blog.mozilla.org/security/2018/10/15/removing-old-ve...
[2] https://blog.chromium.org/2019/10/chrome-ui-for-deprecating-...
Portals are specifically designed to address the security and privacy issues with iframes. You can learn more at https://github.com/WICG/portals/blob/master/README.md#privac...
Them: “The project description isn’t clear to me.”

You: “Well I’m sorry it wasn’t clear to you but it was clear to me and better than these other things and here’s why it should have been clear to you.”

If someone tells you something is unclear to them, arguing about it doesn’t change the fact that it wasn’t clear to them.
My argument is that I don't think the user's other comments are relevant to the question of whether the statement is racist.

Now, if you think the statement "the SPLC is a hate group" is false that's fine. I think there is a debate that is worth having here on HN - especially when tech companies are using the SPLC's hate list to justify their deplatforming decisions. In my opinion, the SPLC's use of defamation and fear-mongering for profit make the statement perfectly justified.

Calling it "racist" or "racist-adjacent" is a rhetorical attack that does not serve the purpose of mutual enlightenment. "Racist-adjacent" strikes me as particularly insidious since implicit in that label is the admission that the thing being labeled is not actually racist.
> Assume 10% of the cost of the furniture goes to paying people - in the USA that's a larger number than in Ecuador, but still 10%. It doesn't really affect the model.

It makes everything bigger. Instead of a couple guys with a pick up truck making one delivery at a time it's a couple guys with a big box truck making multiple deliveries. Instead of one shop keep with their tiny shop you have one big shop. That scale allows efficiencies which drives down the labor per unit.
Unfortunately most users don't have enough knowledge to make an informed decision like that. It's better to keep users secure by disabling insecure ciphers.
Wow, I just pour my coins into a machine that sorts and counts them for free at my bank.. oh right.. Credit Union!
Attributes vs. Categories (2016)
Even if you're on the shore it's easy to slip and hit your head on a rock. Also, many other sports that are listed self-select for athleticism or physical ability.
I want to use Firefox but find the plug in system to be unusable and therefore prefer a chromium based solution. I have 30+extensions, many developer based, many for privacy and blocking, and many new ones to prevent sites from dictating my behavior like blocking copy and pasting of text. But the most important one is a plug in manager that allows me to to toggle on/off individual plug-ins from the sidebar with two clicks. FFs plug in page is atrocious. It's a Giant infinite scroll page that takes several clicks to do anything and I don't think ctrl f works so I have to scroll and look.. Nope. I just can't.

In an age where the web is becoming more hostile to users by hiding and controlling the info, and forcing things like amqp, I think plug-ins are really the only override to enable user agency and Firefox plug in management is very immature.
Always the first thing I turn of on a new install of Firefox.
Deduplication is naturally handled by content-addressable property of this object store: the address of each object is its cryptographic hash, SHA224 in Perkeep. So if you try to put a duplicate copy, you'll find that the address at which you try to put it at is already occupied by the first copy. Perkeep assumes that you never delete anything (deletion is even simply not implemented, not even for garbage collection/compaction purposes), so if you see that one copy of an object was already put, you can discard any further puts as no-ops.

Then there is also some logic to chunk large objects into small pieces or "blobs". These small chunks are actually what the storage layer works with, rather than with the original unlimited-length blobs that the user uploaded. Chunking helps to space-efficiently store multiple versions of same large file (say, a large VM image) - the system only needs to store the set of unique chunks, which can be much smaller than N full but slightly-different copies of the same file. But I personally I find that it deteriorates its performance to the point of making it unusable for my use case of multi-TB multi-million-files storage of immutable media files. If chunking/snapshotting/versioning is important for your use case, I'd look more towards backup-flavored tools like restic, which share many of these storage ideas with Perkeep.

Redundancy and backup is handled by configuring storage layer ("blobserver") to do it. Perkeep's blobservers are composable - you can have leaf servers storing your blobs, say, directly in a local filesystem directory, remote server over sftp, or an S3 bucket, and you can compose them using special virtual blobserver implementations into bigger and more powerful systems. One such virtual blobserver is https://github.com/perkeep/perkeep/blob/master/pkg/blobserve... - which takes addresses of 2+ other blobservers and replicates your reads and writes to them.
Excellent quote- "We already have plenty of protocols, REST isn't one"
> Just to clarify, the Danish mobile payment system (cleverly named: MobilePay) is based on debit cards, not bank to bank transfer.

This is incorrect. MobilePay started out as a layer on top of Dankort (Danish debit card), but after gaining sufficient volume they made a deal with all Danish banks to enable direct bank-to-bank transfers (without using the Dankort infrastructure).

The only difference between Swipp and MobilePay is that Swipp started out only supporting bank-to-bank transfers (thus only supporting a few banks) while MobilePay started out using Dankort (thus supporting all banks). And, as soon as MobilePay had sufficient volume, all banks were interested in circumventing the Dankort network.
Incidentally we may not have the Internet Archive in the future, depending on how the lawsuits brought on it by several publishers for copyright infringement goes.

https://news.ycombinator.com/item?id=23691297
I don't mind the design - but the functionality of the bar annoys me to no end.

If you try to use a relative domain name (typing webtest01 instead of webtest01.mydomain.com, when your DNS resolves those two to the same address), for some reason Firefox thinks I want to search the web. I don't understand why.

Even worse, if you use a full domain name (web.test), and even if you specify a port (web.test:8080), Firefox thinks you want to search. Those are valid domains that resolve on my network.
Risk isn't binary. There's certainly no such thing as "zero risk" for somebody buying pharmaceuticals, but I don't think it should be so controversial to say that buying blackmarket pet drugs is a riskier activity than going to a properly licensed pharmacist.
Depressing and appalling, but can't say I'm surprised by any of this.
Thank you for the feedback. I'll keep this in mind too. I'm definitely not advocating JSX usage. I favor hyperscript myself, but I understand it's an acquired taste.

Idiomatic JavaScript alternatives that don't involve compilation include:

- https://github.com/zaceno/hyperlit, and the aforementioned
- https://www.npmjs.com/package/@hyperapp/html
I'm doing it. I'm boycotting China. From now on I will do my best to ascertain any relations potential purchases have to China and if there is one not buy it. I know it won't be perfect, I know it will harm innocent Chinese citizens. But I can no longer with good conscience support this Chinese government with my wallet as I have been doing.
Can you explain more about the walking part? Is it because pedestrians get hit by cars a lot? Otherwise it seems walking should be incredibly safe.
Portals was designed/built for AMP according to the official design document in the background section: https://docs.google.com/document/d/1ITizGVUmfFGktOOynHFhx87c...
Apple doesn't pay a bounty until after they release a fix. So if Apple decided to de-prioritize a bug, you never get paid. But Apple doesn't tell if you they've de-prioritized a bug, they just want you to remain silent forever, and they say "We're still investigating."
Most roads in the US are public, and funded with taxation. Granted, it requires a private car to benefit from them. Still, this suggests that anti-government sentiments can only partially explain this aspect of US transportation.
Not all of them reduce to bad programmers. It could be either of malice or stupidity.
In this age when data is valuable, it is better to be safe and assume malice.
I know exactly the sentiment. I think part of it was that growing up I truly believed the content I put on the internet would stick around. I didn't understand why things needed to be archived for posterity—the sites that were seemed to deserve such a fate anyway. I remember having so many interesting and free thinking discussions with members of various forums (computer repair, graphics editing tutorials, shurtugal to name a few genres). I honestly thought facebook would be the same, but with more familiar faces to names. Oh how I was wrong. Alas, Facebook was new web.
i hope you checked the code afterwards. i can't code when i am not fully awake. but somw of the best documentation i once wrote after pulling an all-nighter.