skysight-inc/HackerNews huggingface dataset:
> That being said - and it pains me to say this - but there is absolutely truth to the fact that the style of targeting now possible on FB & Instagram has enabled an entire world of very small, hyper-niche businesses that otherwise wouldn't exist.

Businesses like that have no right to exist if their business model depends entirely on the invasion and flagrant abuse of privacy. Even if we assume that these businesses exist thanks to facebook, the ends do not justify the means. The economic value added doesn't offset the privacy violations. It doesn't "make up" for it.

> Facebook's access to user data should be curtailed significantly, and sadly, businesses likely will suffer. There doesn't seem to be a good, evident third option just yet.

There doesn't need to be a third option. Facebook and businesses who rely on such granular data, which is able to be gathered only by massively violating privacy, can and should pay equally massive penalties and/or be wiped out.

Yes, people are behind those businesses, and rely on data collection/tracking for their livelihoods, but honestly, they deserve no sympathy. They can get a job at Subway instead. The ends do not, and have never, justified the means.

Whatever apple can do to drive a stake through the heart of Facebook (and goog and others, honestly), is a positive.
That doesn't mean you can't require a certain amount of safety testing.
If you want to be pedantic... not in the relevant case, no. In the relevant case (the domain is syntactically invalid but the naïve check didn't discover that) the response without MX RRs already tells you that there won't be an A (or AAAA).
Very much this. Gmail (well, all of Google properties anymore) is pretty terrible from a UI perspective. Not to mention the abject privacy considerations with anything Google related.

I would love for Mozilla to start a competing email service that focused on performance, UI, privacy and integrated well with not only Thunderbird but other desktop mail clients.
In my experience, the vast majority of corporate is hooked on Outlook, which is actually quite unreliable in its 365 version and constantly has annoying bugs and performance issues.

It still might be a good idea to host an e-Mail service or create an Exchange pendant.

I often wonder why there never has been a popular open pendant to domain controllers in Windows. I think there were multiple attempts, but I don't think anything really caught on.
Can we get a better link/source? This Axios "article" doesn't have any of the details that the title of this post has (specifically ~$30 or 15min).

Maybe it's just the confusing layout but the "article" under the one linked [0] does appear to have this info in it so maybe the link should be changed to that?

I really hate it when news sites do this multi-article-page nonsense. It makes it so hard to link directly to information.

[0] https://www.axios.com/fda-emergency-use-ellume-coronavirus-t...
> it costs them maybe $20K to send six months worth of clothes to the ISS per astronaut on a Dragon 2

Maybe true now, but this wasn't the case when this 2003 NASA article was written. It quotes >$5k/lbs for the Shuttle. Six months of clothes for a single person wearing each article for a week is still going to run, what, at least 40lbs, or >$200k. With six people on the ISS, that's at least few million bucks per year, and likely more. The ISS must have been planned to last minimum 10 years (without anything cheap like Dragon on the horizon), so I think it's still a valid question why they didn't design a small washing machine.
Substack Reader: An RSS feed reader for tracking newsletter subscriptions
Oh boy, I HIGHLY DOUBT that Brendan "was the wrong person for the job" ...
For people who are interested: https://www.youtube.com/watch?v=Amj4UevyRfU
hmmm, I thought the matrix class was deprecated? At least it says so in the official numpy documentation:

https://numpy.org/doc/stable/reference/generated/numpy.matri...

Anyhow, the * operator does not work with sparse matrices, and you really don't want to maintain two versions of your formulas. Thus, you are unfortunately stuck with @ or .dot

I guess there might be a much more math-friendly library than numpy, but I have never found it.
For me Firefox has been chasing the Chrome market share by trying to replicate the Chrome user experience for so long it's no longer distinct from Chrome in a meaningful way. Give me the Firefox experience from ten years ago and I'll drop Chrome on the spot.
> gitui currently lacks essential features in git like push, pull, and checkout. The priorities are the basics (add, commit), and on features that are making me mad when done on the git shell, like stashes and hunks.

Hardly a better alternative if it doesn't have all the basic features.
Awesome Manifesto
It’s not ~$30, it’s -$30...

They pay you!

/s
I agree. I also think they should own the Privacy/Security/Confidentiality niche as well. Inventing and rebasing on Rust put them in a good position to provide reliable and provably-correct privacy-focused communications platforms as well. Double down on that, and pitch enterprises, govts, and other potential customers on that angle. Secure comms is an increasingly top-of-mind concern these days.
It is one thing to build political alliances for practical reasons (a necessity if you want to achieve anything), it is entirely another thing to take on every and all opinions of your alliance regardless of their merit. That's a personality flaw that everybody has to one degree or another.
yes, back when browsers sucked. Performance is hardly the reason of choosing a browser these days, personal preferences, what you are used to, what is given to you, etc...its a good argument for why Google needs to be broken up.
I fixed CL as my first programming language to learn just 4-5 days back (after 3 weeks of mulling over what to learn) and had installed Portacle yesterday. A fellow redditor kindly listed out few steps like you suggested above, and I tried it for the sake of experience. It was not detailed as yours hence I was stuck until I saw this post on Reddit.

The instructions in your link were fantastic and easy. Thanks a lot for this !!
That's not how orbits work. Shaking something inside the station won't change its orbit a bit. It's because to change orbit you need to change the speed you are going with. And that's just not something you can do by vibrating a mass.

That doesn't mean that vibrations are all safe. They can break stuff on-board, or mess up experiments. If you do it exactly right (wrong?) it can even change the attitude of the station. (after all the reaction wheels and Control moment gyroscopes look kind of like washing machine's drum if you squint enough.)
This is the first I've heard of them. Who are they, aside from "yet another rocket company"? The best I can figure from their web site is "smaller more frequent launches". Smaller and more frequent than SpaceX?
I think the poster is making a distinction between Firefox and Mozilla founders, but it could be more clear. Mitchell, a Mozilla founder, is still around. The Firefox founders, who are Dave Hyatt and Blake Ross, and possibly Joe Hewitt (https://en.wikipedia.org/wiki/Firefox_version_history only states the first two, https://en.wikipedia.org/wiki/Firefox#History all three), have not been at Mozilla since the early 2000s.
> Why not standardize on ISO and SOC2? I dont know very much about it, but I suspect those big-boy standards arent suitable for small-business America/sub-subcontractors

Also, how is that any different? I've been through SOC2 and it was just the same "here's a bunch of questions that the auditors want us to answer and provide evidence for". Maybe a little better, but still something that you could bias by providing answers that were ... technically true...
That's very helpful. Thank you so much. What you said makes a lot of sense, from an unbundling perspective.

I guess one way to start is to experiment with a recipe API that would read through ingredients and takes you to a pre-populated amazon fresh card ready to be ordered.
What is the main feature that makes Gutui better than Tig?
Yes, it is integrated with Google, in that it uses the Google API.

However, relevant to this thread, it's not developed by Google, as Thunderbird would not be. And so Thunderbird could still provide value as such a client.
Maybe it helps them in some way with legal compliance, or just PR (gives them an easy way to fob off people with concerns), the benefits of which would significantly outweigh the lost revenue from the miniscule percentage of Chrome users who will install this.
That is probably to some extent correct. Although this would bite you on a new build, not for anything that is already running in production. My understanding is that that is/was not necessarily the case for leftpad.
Apologies, here's a more comprehensive source with the $30 cost mentioned: https://www.nbcnews.com/health/health-news/fda-authorizes-fi...
Tether is backed 1:1 with USD in traditional bank accounts. Some of it may still be seized and held by the US government, not sure if that's been resolved yet.

USDT also trades freely on open markets against USD. If USDT was being printed without USD backing then those markets would decouple.
In the pursuit of better technology, don't forget that we have already built and are living in a prosperous civilization. The browser doesn't exist to "create" a civilization. It exists to enable the one that already exists, and is evolving every day.
The Flash switch could explain a few months but they had years to do a small project which much smaller companies did for more complicated projects. This seems a lot more like the usual Google problem where everyone involved moved on and nobody had an incentive to do maintenance work.
And in banks, all your money can be frozen by a hostile government, for example.

Diversification.

I DO keep all my money in Western financial institutions, but that's laziness, not out of some misguided perception of stability. If I were optimizing, I'd have some in US institutions, some abroad, some in land, some in blockchain, some in gold, etc.

The US has had a nice 250-year run. Past performance doesn't always predict future performance, and more importantly, if I live 100 years, that means the US has been around for 2.5 of my lifetimes. I think that's a good indicator of the level of stability. There's perhaps a 1-in-2 chance of some major event within my lifetime, consider things like the American Revolution, Civil War, or Great Depression to be major events.

Not all of those would wipe out my assets, but I'd say about a 1:5 chance of my assets being neutered or neutralized within my life.

We tend to plan for the common, minor stuff (typo, guy loses $50k), and overlook big, rare events (like the current, entirely predictable pandemic).
They want enterprise customers, not single developers. So they use the usual bullshit marketing wordings.

Their only goal is to get someone high level in a big company feeling the sentence is cool so that he lets his email in the "get demo" page.

This is just normal enterprise sales, and this is probably why they managed to raise so much compared to most similar services. They really have a strong business focus and a sales team
Orbital Index #95: So many rockets
> My only/major beefs with Arch are the frequency with which they introduce breaking changes, the fact that your system may not work if you miss a news item, and the lack of humility in the community. It works, for sure, but I always felt a bit iffy when doing a massive update after a while, and I felt like I was being dragged along with their choices instead of making my own.

This was my experience with Arch as well. It left me feeling like I needed to check the wiki to see if there were any new warnings before updating.

I switched to distros that release ~6-12mo, and I have found my environment is much stable. Currently on Fedora, but considering trying out Suse Leap.
We talk about this in our design principles [1]. But I'll give you a summary here too. We often use GitHub as an typical use case [2].

In GitHub you might be able to merge a PR in a repository because you are the repo owner, or you were invited to it. Or because you're an organization admin, and the repo is in the same organization. (These are all common scenarios in b2b saas apps).

When a user attempts to merge a PR (or hits the API) you need to make that authorization decision based on what the application knows about the user.

So how do you allow the policy to access this information? Your options are basically: (a) you make it possible for the policy engine to independently lookup the data. You are now building a distributed monolith, since any change to the data requires updating both the policy engine and the application. (b) You send the relevant data into the policy decisions. Knowing what data you need to send to the policy is another form of coupling.

OPA is sort of a combination of (a) and (b). There is an API for sending authorization data to it, and you can also send data along with a request.

The problem is that the line between authorization and business logic is _so blurry_. Me being a member of a github org is fundamental application logic. But also crucial to making authorization decisions.

Because of this, traditionally people write this logic as a part of the application code. Normally a bunch of `if` statements. This is hard logic to abstract well in an app, because it's normally a bunch of conditionals and a decision flow. Which it turns out prologs/logic-based languages are great at solving (same conclusion OPA folks reached).

So given all this, the balance we wanted to strike was: decoupling the logic, but not the data. If your app already defines what a User is, what a Repository is, how a User becomes a Member of a Repository, then write your policy over those things, instead of re-implementing all of that logic elsewhere.

That being said, there are cases where the OPA-style decoupling works fine since there isn't the same kind of business logic/authz logic distinction. Or where the decision is being made over the entire input by default (things like checking terraform files, or other infra use cases).

[1] https://docs.osohq.com/more/design-principles.html#separatio...

[2] https://www.osohq.com/post/building-the-github-authorization...
I feel like you’ve misinterpreted OP. Even after they explained themselves with clear disclaimers.

They meant that online ads have enabled small businesses to target niche clientele and make cool things, without burning money competing for adspace with everyone else.

This is absolutely true, you can ask lots of people, including tech nerds on HN who buy off Instagram ads.
Maybe lying is the wrong word. But the conclusion that "the longer you play the more you enjoy the game" is very misleading.
Apologies, I realise the way I wrote this wasn’t clear enough:

> Eventually, you’ve potentially gotten it right when ... the person you’re speaking to understands

I can see that I wrote poorly here myself, and here you (and child) are correctly correcting me, while simultaneously arguing against that happening, which is kinda ironic!

What I failed to adequately express was that human languages are a lot more forgiving of errors, and as long as the message is understood, you’ve gotten it “right”
If I understand this correctly. Mozilla let the author go, and the author still went out of their way to write a comprehensive and clear minded article full of feedback and honest recommendations.

If I see one big problem with Mozilla, is that they chose to let go people like the author. Engineering & product culture only follows.
I like this idea, thanks for the link. Just noting that it's funny for an article about effective communication to have a prominent typo in its key graphic ('concreet')
The short version [0] and the long one [1]

[0] https://kenkarlo.com/articles/the-scamming-of-tether-on-bitf...

[1] https://www.kalzumeus.com/2019/10/28/tether-and-bitfinex/
Well, that's how you discover things. You go fish for correlations, and publish any interesting findings, so another group can get independent data and check them.

On the meanwhile, a news reporter gets your (probably spurious) correlations and announce them for the entire world as "the TRUTH! science says so, and you don't doubt science, do you?"

That's basically how science gets done on any complex field where we can't test things directly.
There are a ton of open source:

https://github.com/awesome-selfhosted/awesome-selfhosted#pho...

If you're ok with non-free:

https://github.com/awesome-selfhosted/awesome-selfhosted/blo...

If your files on disk are already organized how you want them, and your library isn't very big, many options above will suit you.

If you've got tons of duplicates (which include things like jpg+raw pairs, downsamples from Google Takeout, and edits), want support for sidecars, want photos and videos checked for bitrot before being imported, would like everything deduped and organized, need automatic video transcoding, cross-platform (macOS, windows, Linux, docker) cross-machine libraries, and need it to scale to track millions of files, you might want to try out what I'm building: https://photostructure.com/faq/why-photostructure/
If Google decided not to pay Mozilla someone else would. Google would lose traffic and eyeballs in that case.

Though I do think there is some truth to the monopoly hedge as well.
Agreed (other oso cofounder here).

Would even be great to move beyond terms like attributed-based access control (ABAC), which many devs aren't familiar with even if they've actually built those features (e.g., a user can read her own data). ABAC is technically so broad, when in reality it's the underlying patterns that matter, e.g., hierarchies, sharing, multi-tenancy...many more.
Hahaha, and here I thought my eyes were just playing tricks on me and I didn't look closer. I even saw the "-" and initially thought the same thing but then I, wrongly, assumed it was just the font and it was a subtle "~".
I recently had to buy an such an add-on (Owl), because my umiversity's IT department killed IMAP support and only offers Exchange (which is stupid, but what can you do?).
Try https://github.com/gTile/gTile

or

https://regolith-linux.org/

regolith works only under ubuntu though but both should work under gnome.
I actually missed that too, I guess because it wasn't where it seemed he was going after the previous paragraph.

So looking at that section again, his argument seems weak on that point. He is promoting founders as leaders because they have innate clout and don't have to engage in consensus building, but that should apply to Mozilla's founders too.
I'm trying to make the neovim lisp world a little more pleasant with Conjure :) just for those that absolutely can not switch to emacs long term (like me)

https://github.com/Olical/conjure

It's written in a lisp, runs as lua and supports: Clojure, Fennel, Racket and Janet with a bunch more to come.
That is subjective. I have not warmed up to curses UIs that have window frames. YMMV.
There were definitely enough dark patterns and advertisements around Chrome to increase its market share. Chrome may have been faster, but it was also had more rendering issues early on.
The test is made by Ellume. Here is their press release about the approval:

https://www.ellumehealth.com/2020/12/15/fda-authorizes-ellum...

Here is the product page:

https://www.ellumehealth.com/products/consumer-products/covi...

I cannot find any pricing info, but I doubt that a Bluetooth enabled at-home virus test is $30. I would image that the consumables for one test would be $30/ea.
Why would I ever use this over figma?
I suspect corporate is hooked on exchange, not outlook. Outlook 365 just goes along for the ride.
I think the idea is that instead of generating the original http content based on your DB, you have static webpages which have JavaScript call out to your dB-backed API to modify the content in an SPA. This can then be made more efficient with automatic server side rendering.
judging by the url ("the next web") I expected something related to web3 or p2p and then was kinda disappointed to see yet another react framework.

Side note: somehow my ISP (vodafone) has problems delivering me this domain, only was able to visit via opera with their vpn enabled.
This is the one hole I haven't been able to fill. Between guilt about not contributing to people's channels which I genuinely enjoy and the ads on the tv, I commited to buying premium next year.
FTP is fine if you have any sort of signing verifying your code. Your initial install probably shouldn't be over FTP, so that you know what you're verifying, but it's fine for updates.

The issue here was that their update pipeline was compromised and they were distributing compromised updates.

Stop kneeling at the altar of PKI.
Yeah but that would require developers intentionally building an anti-adblock solution, while funding a solution like DoH allows Google to save face
Does Brave have ad blockers as feature rich as uBlock Origin and uMatrix?
Congratulations. Well deserved to an awesome service and company!
They could've just ported features to HTML5. Not sure why you're trying to justify clearly sketchy behavior of billion dollar company, but maybe Google's recruiters scour HN, so I might be the crazy one
For anyone else wondering about the benefits/downsides of the various tests (why do one that takes multiple days when you can do that takes 15 minutes?), the FDA has a pretty good page on this subject:

https://www.fda.gov/consumers/consumer-updates/coronavirus-d...

The tests that swab your nose or throat and take multiple days are called "molecular" tests and are considered highly accurate. They use controlled heating and cooling cycles to convert the virus' RNA to DNA, which can be detected by specialized lab technique after binding probes to it.

Tests like this 15 min one are called "antigen" tests and are still accurate/helpful, but are known to produce more false negatives and false positives compared to molecular.
My concern with this is that it will likely take at a minimum 1-2 years for tire manufacturers to research new compounds that eliminate this chemical. Then it will take probably another year, at best, before manufacturing plants are transitioned over to build this new compound and we start to see the new compound trickle down into new tires. Then it will take 2-4 years to propagate that compound across the entire product line and/or industry.

Once the compound is readily available across the industry, then we can rest assured that new tires will be "safe". But tires have a usable life of 2-5 years depending on the type of tire. So it will take many more years before people with "non-safe" tires purchase new ones that are "salmon-safe". Remember also that some people (generally as a result of financial concern) may drag tire use out to 8 or even 10 years.

This puts a timeline for "safe tires" at 10-20 years from now! I hate to shout "doomsday", but the Salmon may not have that long. Salmon only live 2-3 years on average before spawning. According to this article, 90% of them are dying due to this chemical during their trip up Puget Sound urban rivers to spawn. Salmon are already operating at low population rates. So we may not have decades to sit and figure this out.

As a more immediate alternative, I would like to see if there is a way to neutralize or catch this 6PPD chemical with some type of "filter" in the road runoff pipes or a road-coating that could be installed in critical areas. This would seem like a more immediate solution that wouldn't require global or national "buy-in" from tire manufacturers.

And of course all this assumes that tire manufacturers care enough to save the salmon. This is the type of thing that regulation is useful for instead of relying on tire manufacturers to "do the right thing".
Toll roads exist.
What are you going to charge for?
I really hope this company finally goes under. Facebook is pure evil.