skysight-inc/HackerNews huggingface dataset:
Why did you read that it's not the case? I read the opposite. That if the LED broke, you'd notice it because your camera would be on and the light would be off.

Not that the camera never turns on.
Tell HN: 6.3% of HN top submissions in plain HTTP, more than half upgradable
I was using the HN front page to test a library I was writing when I noticed some links that probably should be HTTPS are in plain HTTP. This piqued my interest a bit so I did a little analysis on how prevalent plain HTTP links are on HN. I probably don't need to rehash the harm of using plain HTTP, even for personal blogs -- they can be snooped, and they can be modified to inject either ads or more sinister payloads. In fact, years ago I once disabled my ad blocker by accident and saw an ISP-injected ad on my personal site; never again, I swore.

The methodology is simple. I gathered all links from https://news.ycombinator.com/front ("past" on the navigation bar) for each day from 2020-01-01 to 2020-07-09. These are the top stories of each day. This is a trivial task and resulted in 17566 links (raw data [0][1][2]). There are <100 duplicates, which I kept. Among these are 1112 plain HTTP links, amounting to ~6.3% out of 17566.

Next I analyzed how many of the 1112 plain HTTP links are available over HTTPS. Methodology:

1. Check if the HTTP version redirects to the HTTPS version; if so, done, otherwise record the HTTP response;

2. Replace http:// with https:// and see if the HTTPS URL works; if so, record the HTTPS response;

3. Compare the HTTP and HTTPS responses. If they're identical, done. If not, compare the length of the responses; if they differ by <=1%, record this as HTTPS response almost identical as HTTP, and assume the HTTPS version works (the page may not use relative URLs or omit the protocol, so the HTTPS response may be subtly different while having the exact same rendered output).

The analysis script is available at [3].

---

To be continued in a comment since I'm hitting the 2000 char limit: https://news.ycombinator.com/item?id=23802522
Continued:

Results: out of 1112 plain HTTP links, 642 are available over HTTPS; out of those 642 entries, 143 redirect to HTTPS, 307 serve identical response from the HTTPS version, and 178 serve almost identical response (using the <=1% content length difference criterion); the remaining 14 entries with slightly wider Content-Length gaps tend to be visually identical too upon manual inspection. So we can pretty safely claim that more than half of the submitted plain HTTP links can be HTTPS instead. (We can't be 100% confident without further inspection though, since a page that responds over HTTPS just fine might have mixed content issues that prevent it from working at full capacity.)

Detailed results are available at [4].

By the way, I also tried to match the plain HTTP links against HTTPS Everywhere's rulesets[5], but coverage is rather poor since the rulesets are user-contributed; I only got around ten matches out of the 1112 links.

At the end of the day I can't say this little analysis is in any way useful... Let's just hope more people submit HTTPS when possible. I did notice that certain HN darlings, e.g. pg's blog, are still on plain HTTP without HTTPS counterparts. Also, the "Legal" and "Apply to YC" links in the footer are plain HTTP links; apparently haven't been touched in ages.

[0] https://pastebin.com/raw/qxVjjEyA links.csv.00

[1] https://pastebin.com/raw/3ZWgTJqh links.csv.01

[2] https://pastebin.com/raw/jxRjwfwT links.csv.02

[3] https://pastebin.com/raw/bpsq9DZG analyzer.py

[4] https://pastebin.com/raw/hkzZ0m5f upgradability.csv

[5] https://github.com/EFForg/https-everywhere/tree/master/src/c...

(Sorry about the pastebin.com links. I don't want to have this HN account associated to my real world identity, including my GitHub account and personal sites, so I had to use a non-ephemeral anonymous file host. The raw data file containing all aggregated links is too large for an anonymous paste, so it was split up into three pastes; the data analysis script automatically downloads all of them and assembles them into a single file.)
Man, courts mandated a full recount. The only mistake they found was 13 missing votes. Which the court deemed to be within expected margins (don't ask me, I have zero experience with that). The result was a lost seat for the AfD, and an election deemed legitimate. So no fraud whatsoever.

And no, I have zero doubt the judges would have enforced a result that gave the AfD a seat at the expense of another party, if that was what the recounted result said. Only that it didn't.

This was a legal question, one that was answered. What you or I deem fraud or not became irrelevant at that point.
Maybe that has more to do with almost everything new have been garbage collected for the last decades (and that is such a tragedy) and less to do with C++.

It is a low-level programming language after all. Not being explicit about memory would be a bad thing (it almost always is).
I'm also looking for one now, got Wacom Bamboo Slate, but I didn't notice it only supports Android and iOS devices, couldn't get it to work with Windows and MacOs laptops.
I would like to find something which works with MsTeams Whiteboard as my client is very tied to using it.
Looking at the code, this seems to not block ads but redirect the browser to youtube.com. which in the past did not show ads.

As far as I know, this trick does not work anymore.
> A Tiny Extension to Block (Some) YouTube Pre-Roll Video Ads

Or just use uBlock Origin to block (All) the ads, on youtube and virtually all other sites.
Well if your on prem then you’re probably bit more limited in what you can do. You can’t just go “let’s solve this with x” cos x doesn’t exist so you need to prevision it yourself and maintain it yourself. It’s probably better cos you actually need to think about what you’re building rather than just throwing services left and right at the problems.

I’m also not suggesting optimising and being careful is an argument for cloud. I’m saying that ruling out cloud is stupid. You can absolute have a Low cost solution perform very well on a cloud provider. The OP seems to think it’s not possible.
this is not how real life works, you don’t get to choose all the features and you can’t quit jobs every time you’re asked to integrate a sdk. also, you are suggesting that it is a good option to drop support for all the customer accounts that have used fb login, this is silly.

sometimes i wonder if you people lost all the connections with the reality... or if you were ever employed.
HowBloated: How much does the web eat your memory?
Natural disasters happen all the time, and HAM radio in the past has traditionally been the last to go down and the first to be back up in those situations because it needs no infrastructure at all to work.
As others have pointed out, digital voting systems can be hacked, exploited, or otherwise derailed from centralized location. They also can contain subtle software errors.

Paper ballots can have problems like we saw in Florida (hanging chads).

When I was growing up, we had big mechanical voting machines. I have no idea how common (or uncommon) these were in different parts of the country. The machine opens up and has a set of retractable curtains. You walk through the open curtains and then pull a big lever that closes the curtains behind you. Then you vote by flipping mechanical switches for the candidate (or yes/no for policy ballot). When you're done voting, you reverse the big lever. This action increments the machine counters based on your votes and opens the curtains for you to exit. Once the polls close, the polling folks simply sum up the counters across all the machines in the polling station.

The downside is that the machines are big and heavy to store and move. I'm sure they're not cheap for the initial purchase. However, they're efficient for tallying yet very difficult to hack. In my opinion, they're the best overall voting mechanism.
He is talking about AI as presently conceived when writing. The quote I posted has him explicitly imagining what you say he could not imagine. His critique was in fact INFLUENTIAL for the currently successful approaches.
Lastpass will also send an email asking for verification when signing in from a new location
> Hundreds of thousands of dispersed voting locations means that to pull off a “hack” you’d need to hack thousands or perhaps 10s of thousands of locations all with their own details.

No, all you need to do is play with the distribution of those hundreds of thousands of locations such that "your" voters have an easier time getting to them, on average, than your opponents' voters.

Your threat model isn't quite right. A deliberate third party attempt to fabricate votes isn't the only attack vector. You need a system that is robust against untrustworthy insiders too.
It’s interesting to me that someone can charge $20/month for a daily post (presumably without ads) and subscribers seem more than happy with the value proposition but the newspaper industry struggles to sell an entire newspaper worth of content for the same price. I wonder if newspapers would have more success “unbundling” their columns. Or at least unbundling the sections of the paper.

I pay for two newspaper subscriptions and it’s a lot like a gym membership where I start to feel guilty if I haven’t had the time or made the effort to use it.
NextBSD ("FreeBSD X") operates in a similar space and was also looking promising, but it looks like development stopped.

In that approach, the BSD kernel was extended to support some Mach syscalls and libdispatch, launchd, and a few other userspace macOS-isms stuck around too.

Slides + Video: https://www.reddit.com/r/freebsd/comments/3iikry/slides_next...

There was also an effort some time ago to get opensource Darwin compiled and booted on ARM development boards:

https://github.com/darwin-on-arm
Replace "faster" with "more incremental".

Trying to get a program to quickly do the exact same thing over and over again is a colossal waste of resource.
The term "hacking" long ago shifted to mean "illegal activity" unless otherwise specified or obvious from the context. In the context of this title it's clear what was meant. I'm an ancient, pedantic nerd, and even I don't cling to the archaic 1970s meaning of "hacking".
If you have an oaura ring you can participate in a USCF study that is trying to determine if it can help predict COVID: https://ouraring.com/ucsf-tempredict-study

I think the idea is similar to what the NBA is doing: monitor doctors and nurses with the ring to try to detect COVID. But they are trying to properly study the idea.
If this is for personal use only, you could also just install PHP from your distro (cli only, not mod_php) and run DokuWiki using the builtin PHP devel server. Low hassle and only running a process when you need it.
Amiga Samplers: Budget dance music in 1990
I know this is completely off topic, but seeing these pictures reminds me of one of my favorite movies Your Name (2016). If anyone has a spare 107 minutes in quarantine, I would highly recommend watching it, or at least adding it to your "queue."

https://myanimelist.net/anime/32281/Kimi_no_Na_wa
> The year after the Great Comet of 1618, for example, Gotthard Arthusius published a pamphlet stating that it was a sign that the Day of Judgment was near.[136] He listed ten pages of comet-related disasters, including "earthquakes, floods, changes in river courses, hail storms, hot and dry weather, poor harvests, epidemics, war and treason and high prices". ... Spectroscopic analysis in 1910 found the toxic gas cyanogen in the tail of Halley's Comet,[137] causing panicked buying of gas masks and quack "anti-comet pills" and "anti-comet umbrellas" by the public.[138]
Yep I remember I had a Voltron toy that was die-cast metal. It was heavy and would have probably lasted for decades (it went to goodwill at some point).
I am in Czechia. I am paying less social security (and am getting proportionally less in return) and exactly the same healthcare insurance as everyone else.

If I was to be an employee, I would (or rather, my employer) be forced to do everything based on the employment law, which has severe restrictions on me as well as on my employer and on the kind of relationship we have, which causes extreme loses to me (as I like to be paid proportionally to returns) + paying more for things I don't want and up until now wasn't required to have.
As a kid in the 80s I would get excited each Christmas by watching ads with new toys on the tv.

Do kids still watch regular tv? My youngest nephews only watch YouTube and Netflix. They only want iPads and consoles for Christmas.
From what I believe, many of the old days Mathematicians were given PhD by various institutes after they got famous.
Not all had PhD, but most of good one got it after being recognized. Also don't forget many people of that time did not publicize their work.
We don't think anyone has done prize-linked savings the right way in the U.S. There were many search engines before Google and social networks before Facebook. We think it's mostly about execution here, and prize-linked savings is a broad term and there are lots of ways to wrap a prize-linked savings product.

Walmart has a huge distribution advantage over startups which has allowed their program to become the biggest, but there's really no front-end, mobile-first approach, and not much fun gamification to it. We also don't think the few startups that have tried something in this space have taken the right approach either by making their products overly complicated, among other things.
The main pusher behind Commander X16 talked a bit about this alternative. It does feel like an 8-bit machine but IMO is closer to an emulator than 8-bit hardware. It's super overpowered compared to what it represents with the most intriguing aspect being it runs reegular old basic faster than a C64 runs machine code. Some of the creations are pretty amazing, but mostly because of today's hardware. It's also been pretty difficult to get a maximite (though this might clear up)
Marvel has been doing quite well for the better part of a decade, too.
You are basically rejecting the idea that something can be fake.

If I faked a letter from Albert Einstein where he confessed to secretly being a Christian I'm sure people consider it of great value. Would it "destroy value" if someone figured out it was actually a hoax?
Buy a Yaesu.
My last sale of ebay didn't end well so I gave up. They quibbled over the year of manufacture V year of release for a seven year old computer. Get a life. I negotiated a 20% refund to get the case closed.
What if the marginal/toss-up victories like this always end up going to one party? Is that still fair?
Newer Thinkpads are the only laptops I've seen which bring their own camera shutters. Thinking how often you see people putting tape over their camera, it's quite astonishing build in shutters aren't more common. It's a tiny piece of plastic, costing nothing.

Now what I want is a hardware microphone switch, where the off state actually connects to a noise generator.
> Those people are not speaking - they are doxxing and actively harrassing employers in order to get the wrongthinkers fired.

This is not “speech”, this is harassment and coercion.

> Second, threats of unlawful violence are not free speech. Threats not to engage in economic transactions that one is under no obligation to engage in in the first place absolutely are free speech.

Threats are never free speech. The law might not prohibit it or it might simply not prosecute it, but it’s never free speech. It’s the same thing as telling someone she must sleep with you if you are to do business with her—it’s quid pro quo harassment, it’s morally repugnant, and it’s most definitely not free speech.
> but because the compiler authors care about compilation speed

Is this meant to imply that the Rust compiler authors don't care about compilation speed?
A camera cover does nothing to stop snooping, because it’s unlikely to be used.

You still haven't switched tactics despite me demonstrating how it's an invalid argument. Not only do you have zero data to support this conjecture, but he camera cover is not there for the people who don't use it. It's there for the people who do use it.

It was a long time before seatbelts were legally mandated. That didn't stop the safety-conscious folk from wanting and using them.

I have friends now who never wear their seatbelt. Two years ago my oldest friend whom I've known since I was five was killed in an accident because he forgot to wear his seatbelt. Is the answer to take seatbelts back out because some people won't use them? Of course not. The answer is more seatbelt awareness campaigns from auto manufacturers.

The LED indicator is a bit like police, who respond to burglaries after they've happened, while a camera cover is the deadbolt which prevents the crime in the first place. Do you leave your house unlocked at night, too?

You clearly are arguing for argument's sake, and have no interest in actually considering what I am saying, just repeating the same tired points over and over again. I'm done here.
https://www.washingtonpost.com/video-games/2020/04/17/fortni...
Happy to see happening!

But to get the most value out of Rust, one needs to use the Cargo ecosystem too (even for kernel code!) and that will be a much bigger political quagmire.
I'm aware of the irony of claiming this on "Hacker News".
My Journey in Tech: 45 Years in the Making
Imagine you have 16 cores available. Allowing parallel compilation where it is sequential at the moment, you get 16 times speedup on such a machine. 32 cores machine -- 32 times speedup etc. Or even 10 such machines -- 320 times speedup.

On the other side, imagine you can even reduce the "ton of IR" tenfold but if the compilation is sequential, the tenfold speedup is fixed even if you have 32 or 320 cores.

In general, allowing for parallel compilation is much more important topic, and it's worth even redesigning language to make that more achievable.

Which also doesn't mean that producing "ton of IR" is a good thing. But working on allowing maximum parallelism is more fundamental. Also, discovering algorithms to allow all compiler passes as effective as possible is important for something to reach wider usability. But Rust must also get to achieve its promises of being "safer" in the scenarios where C is otherwise used, and I time and again see a lot of "unsafe" keywords in the sources wherever I see some implementation of anything fundamental.
>Gab literally went out of their way to market their service and platform towards the most disreputable

That may have been incidental. It makes financial sense to market to those whom you expect to be most inclined to employ your services. In this case those who feel that they cannot freely express themselves on the competing products. That group is necessarily centered on those who's honest expressions receive the most attention from deplatforming activists.
Why not just boot up the vice emulator and give them a true c64 experience? The CM is a neat project but if you're going for retro seems the worst of both worlds: modern, under-utilized hardware with artificial limitations. To me the later is the goal to force creativity; the hardware in this case seems superfluous.
Seems like you’re making a pointless semantic debate. “Speech” in an ethical philosophical context is “expressing ideas”. Threats are not this because the intent is to intimidate or coerce somebody. To your point, there is a definition of the word “speech” that means something like “any communication at all”, but of course that’s what precisely no one is talking about in a debate about free speech.
Not really. Unless you want LTO, the object files generated by GCC and LLVM are compatible, and can mixed without issues.
CB = Citizens band, it does not actually prescribe a modulation method unless you want to apply some geographical limitation. Nothing technical stops CB from being FM (in many places it is), and SSB is technically just another (improved) form of AM.

The main technical restriction is simply that at the frequencies that CB typically operates at an FM modulation mode would use too much bandwidth. Enter the UHF version of CB which allows for FM modulation.
Isn't this more of an artifact of our memory architecture and the way we (de-)allocate memory? In that sense, the C++ flying-by-the-seat-of-your-pants approach and Rust's borrow checker solve the same problem, and I'm sure a lot of C++ insight has made it into the ideas behind the borrow checker, but I'm not sure that makes Rust in a way derivative of ideas extant in C++-land.

To me, the borrow checker just feels like an additional type layer I have to reason and think about. In that sense, my thinking when reasoning about lifetimes in Rust is a lot more along the same lines I do in Haskell than something I would be doing in C++ (which I refuse to code in, I'm not capable of writing secure C/++ code.)
As per the guidelines:

Please don't post shallow dismissals, especially of other people's work. A good critical comment teaches us something.

...

Please don't complain that a submission is inappropriate. If a story is spam or off-topic, flag it. Don't feed egregious comments by replying; flag them instead. If you flag, please don't also comment that you did.

Give them a read: https://news.ycombinator.com/newsguidelines.html
If work in the US weren't "at will", wouldn't an employer be legally unable to fire someone just because of an angry mob?

(:philosoraptor:)
> the long standing majority would make up the election commission staff and other election related positions.

This is the problem. Part of the voting system is dictating who has the right to manipulate the votes at every point in the process, and ideally, after the ballots are sealed, that group should consist of everyone who has an interest; membership in that group should be self-defined. Practically, most people will be happy with a representative rather than showing up personally, but if everybody wants to watch, everyone should be allowed to.

If you abandon this principle, no technical solution is possible. It's like trying to make a computer perfectly safe against physical compromise; the only way to do it is to destroy the computer.

Honestly, the main problem with digital voting for me is only obliquely related to that objection - there are not enough qualified code auditors for everyone to have an auditor they trust, and massive, system-breaking changes can happen with the change of a semicolon. So the provenance of an individual vote from the voter to the commingled pile of votes is impractical to depend on. It may be possible to get it to the standard of a paper system, but it would be extremely expensive.
Funny, before your comment showed up, I was actually going to edit in an addendum to link to

https://robert.ocallahan.org/2018/10/the-costs-of-programmin...

... to pair with the mbeddr link.

You seem to be at a place where you think of Rust as already entrenched, but I'm at a place where I still see Rust as a proposition—one that could lead to that place, or not if we think better and nix it (following the reasoning above).
AAR Maintenance
Anecdotal, and I think expanding on the "portal" idea, I've just downloaded MAME + GENS for my two (young) boys (2 hours ago). The timing of this article is relevant for me.

Metal Slug, SF2, Sonic, Lion King, Toe Jam, Earth Worm, these were the first games I ever really played as a kid for me were my own portal to gaming which expanded into an early career at Uni although now it's only recreational, I can't help but think I enjoyed the gaming when I was 10 years old, than I do now.
This is what happens when you design in a vacuum, ignoring the lessons learned by those who came before you.

I know, every language suffers from this to some degree, but somehow it feels like go gets bitten a lot more than the others (except maybe PHP).
See also the PushPin project [3], which uses React+Automerge, along with Capstone [4]

[3] https://automerge.github.io/pushpin/
[4] https://www.inkandswitch.com/capstone-manuscript.html
Tackling racism – The new ideology of race