skysight-inc/HackerNews huggingface dataset:
Weird. I am red-green color blind, and I can't even tell the difference between the red and green diff for dark mode.
Agreed, about 25% of the content on HN seems to be Google hate.
I am curious why that happens. From some Googling it seems like the updater copies itself to a random directory each time it runs [1], and I guess Little Snitch classifies programs by their full path, so it sees it as a new program each time.

Copying itself is odd and probably suboptimal behavior, but it is explainable without assuming malice: my guess is that it’s related to some kind of “before we update let’s update the updater” bootstrapping logic. I could be wrong, but IIRC the updater code is open source, so it should be easy to find out.

[Edit: Oops, it's actually not open source. Their Windows updater (Omaha) is open source, but their Mac one (Keystone) is not. Of course, one can still open the binaries in a decompiler.]

Regardless, moving a program around on disk, or even deleting the program while it’s running (which is possible on macOS), would not prevent it from showing up in Activity Monitor.

[1] http://www.reecefowell.com/2012/11/16/ksfetch-annoyance-on-m...
Thank you for digging in to it on your machine. That level of forensics is exactly what we need in this issue.

Because there is a rich history of issues that only affect certain configurations, and those configurations are typically only revealed in hindsight: your results have to be seen as a single datapoint and not a nail in the coffin.

To others who are curious about this: please contribute more datapoints
There are other costs which can scale pretty high. The overpriced outgoing traffic is one. Certain APIs also charge per request or traffic. The S3 object storage is one example, databases like Firebase another. I believe most of the costs the OP incurred came from firebase and not the 1000 Cloud Run instances.
This happened to me as well. Unplugging my external USB mouse solved the problem for me (lagging Window Server).
The issue creator also points out "It is a concern for me because this W3C document is considered authoritative, and has made its way into government regulations." Pretty interesting thread.
For those of you who are unaware, Comex is one of the most respected security researchers of all time and has done extensive research into Chrome and won Pwn2Own multiple times. He is completely correct, keystone is just Chrome's auto updater. The technical content of this article is super thin. This shouldn't be on the top of hacker news.
I use macOS daily for months at a time without rebooting and have not seen this problem on any of the 5 Macs I've been using for the past several years, for what that's worth. It does seem like it's something specific to your machine.
One of the comments links to a GitHub page [1] with some reverse engineering info on one of the boards mentioned.

[1] https://github.com/xjtuecho/EBAZ4205
This is, in my observation and that of a few others, a serious problem in journalism and serious scholarly work - in which we debate the morality and meaning of materials without showing examples for the reader to make up their own mind, and sometimes even lacking in a description. However, it's understandable too - some material may not only be too unsavory for the content carrier/publisher, but it may even be illegal in where the content is sold. A scholar working in Japanese Studies on the topic of media and sex was stopped at the Canadian border and interrogated when a search threw up documents containing the word 'rape' on his laptop.

Activists, however, may have more leeway. Documentaries on animal cruelty and slideshows from anti-porn activists (to name two examples I'm familiar with) are much less hesitant - their goal is to rouse emotions and face-value judgements, so long as the viewer is primed to interpret the materials in the desired way.
Do you happen to have an external USB mouse?
> None of that matters if you're working on the wrong problem.

This. No amount of technical skills can compensate for that.
Running the AC or heat all day as people work from home probably isn't helping.
A threat is itself just a kind of datum, describing a future intention of variable specificity. When you start to explore that boundary, it turns out to be rather fuzzy and fractal.
It's a shame user stylesheets never took off. It'd be nice if we didn't just have prefers-color-scheme but also a set of standard css variables for colors we could set and get a consistent dark/light mode on websites. I know designers would hate that, but from a pragmatic viewpoint I really like the idea.
Ahhh, okay. That's interesting. Thanks.
The device ships with sample code included. So if you want to try your own use case, this is possible. I will also add it to https://github.com/framelabs-eu shortly.
Ask HN: Worth it to buy the Apple M1?
I know this has been discussed ad nauseam since the release but I’m still on the fence and looking for some perspectives from those who have taken the leap.

I have an old Dell gaming laptop that I dual boot Pop!_OS. It works well but has an Nvidia GPU that makes it heavy and I’m getting tired of lugging it back and forth to work (yeah, back in the office now).

Before the M1, I was planning to get an Intel MacBook and dual boot Linux on it. But with the performance and battery life of the M1, I’m on the fence. I know Linux isn’t supported natively yet, but I spend most of my time SSH’d into a headless Linux server anyway, or in a local Docker container. I hear Docker isn’t perfect on the M1 yet either so I would probably go all in on the headless server. I also do some React Native dev and the idea of a faster Xcode build is intriguing indeed. Thoughts? Would I be better off with a native a Linux experience or are the perf/battery advantages of the M1 worth putting up with Apple’s telemetry, etc?

Curious what others have experienced so far who bought an M1. Was it worth the money, and do you have any regrets?
You are overthinking it. You don't design fantasy cards with art to make sure all the technical details are right. You design them for fun and to make sure that the intuitive ideas and recall of all the python std functionalities remain at the tip of the tongue.
Apple's other attempt right now (on iOS) is Shortcuts, which is graphical-programming-y. But it's disadvantaged a bit because it started life (as a third-party app Workflow) outside the system, unlike Applescript.
I didn't mean to generalise all modern philosophy, but I think it's fair to say that unlike philosophy in the past (e.g. The philosophy of antiquity) I think it's fair to say that this is one of the defining characteristics of modern philosophy.
> and of course, for german keyboard layout devs, rebinding capslock to alt-gr.

I went the other way: use a US layout keyboard, and bind capslock to switch to German layout while capslock is being held down. I find that I need my fancy braces and brackets more than my umlauts. :)
Sure, I meant web pages.

Its frustrating to see replies discussing the definition of the internet.

The point I wanted to discuss is that there are not many choices for browsers and it takes a lot of effort to build one from scratch. Thus the competition is lacking.
Glad to hear it was fixed, although it's unfortunate that such an error was published. Mistakes do happen, I suppose. His articles are usually pretty thorough.
Ms. Fan’s legitimate rights have been fully ensured

Anyone knows what those are?
There are still communities that are like remnants of tribes.
Open-source browser history page with analytics
I've always thought that some cool insights could be drawn from examining a person's browser history, so I went ahead and built this chrome extension. It overrides the default history page with a better ui for searching and filtering, plus I've included an analytics page that provides some neat information about your browsing habits such as top sites and a category breakdown of your history. My friend suggested open sourcing this project because nobody wants to give an extension access to their history for obvious reasons. The extension has no tracking, no database, no user accounts, etc so its totally private for a user. Just figured some people might be interested in having the analytic of how they spend their time on the web. Hope some people find this interesting!
Facebook allows people hunting for bugs to find them on approved subdomains following their bug bounty policy.
https://chrome.google.com/webstore/detail/browsertime/gaafoj...
Having not tried, I would expect ksql to not work until transaction support lands. That said, perhaps there are some ways to configure it to avoid dependencies on those underlying APIs.
Asking the question "wonder" is not really assuming bad faith is it? I don't see any intentional deception there.
Channels can't monetize "Adult Content" according to "Advertiser-friendly content guidelines" from YouTube [1]. Each video I encountered was clearly marked by AI for such content. It requires human intervention to successfully verify a claim that the content is educational. I doubt most of these spam YouTube accounts are doing this. (I'm claiming spam because separate accounts are copying and pasting the same video descriptions.) It's sad to see really. Naked yoga is really great outside of this exploitation. Videos with no verbal instructions and non-instructional shots of genitalia kill the spirit of the practice. Such a shame.

[1] https://support.google.com/youtube/answer/6162278?hl=en
I didn't know this website (sausage roll) before but it seems like very terrible and sensational to me.
Can you elaborate a bit more? I don't understand how this responds to the commenter's critique. Under the hypothesis, almost all stars in the universe would be so far from Earth that we would see at most one photon from their light by the time it reached us, for whatever the applicable time interval is. Would that single photon be sufficient to register the star's existence?

I'm not a physicist so presumably I'm wrong. But why is this wrong? As far as I understand it, this paradox is the reason we have the theory that space is expanding at a rate which makes objects in effect move away from each other faster than the light they emit.
I appreciate these essays. Cannot believe all of the negativity and cynicism in the comments.
Interesting, but missing words and strange/missing punctuation make this a bit hard to read.
Ask HN: What's the best pricing strategy for SaaS?
I'm building an editable 3D & flat illustration library. The idea is, users can change the color of a 3D or flat illustration and download it directly from the browser (PNG/SVG).
Users can use these in their site, blog thumbnail, or app.

I'm very close to the launch but not sure about the pricing yet.

Option A: I can put a monthly price, but churn would be higher as people would just download as many as they possibly can and unsubscribe. (e.g. $12 per month)

Option B: Just yearly subscription. (e.g. $69/year)

Option C: The credit system. Get 100 credit for $50. 1 credit = 1 asset.

You can check snippets of my product here: https://makesumo.com

Please let me know your thoughts. This is my first SaaS product.

P.S. There would be freebies on the site as well.
An attack on "whiteness" is often paired with an attack on scientific and/or capitalist principles. In my experience, if you see someone use the word "whiteness", what follows is blatant bad-faith racism, often attacking the foundations of every productive institution in society. Somehow, it is granted academic legitimacy. See for example:

https://twitter.com/ByronYork/status/1283372233730203651

https://twitter.com/RealPeerReview/status/120378402114834022...

https://twitter.com/ConceptualJames/status/12906450395724963...

Paul is painting with a broad-brush here. "Hermeneutic" for example is sometimes used in good faith inquiry. But academia has burned so much credibility with me as it has become more of an activist enterprise, that I understand the impulse to dismiss it. At this point, I put the burden on defenders of postmodern linguistics to convince me that a piece of writing isn't dishonest, evil, or fluff.

Here's a recent paper from Seattle Public Schools on adding social justice principles to Mathematics. It includes such topics as "What is my mathematical identity?", "Who holds power in a mathematics classroom?", "Who gets to say if an answer is right?" and "Can we change mathematics from an individual to a collective enterprise?". The end of this line of thinking is to destroy mathematical education and leave children ignorant. But at least when they underperform in life, they will be left with the political tools to blame it on "hegemony" and "whiteness". This is an ideological cancer.

https://www.k12.wa.us/sites/default/files/public/socialstudi...
Chrome can/does definitely run in the background if you have chrome Remote Desktop enabled. It wouldn’t surprise me if they had a daemon always running in case you want to enable Remote Desktop.
Devs: Are you getting contacted by Chinese devs for collaboration?
So basically I was contacted by 3 developers that are from China and they want to collaborate or I dont know. They contacted me because I have my profile based in the US. So once I say I am not based in the US they immediately exit the conversation/hang up. Did this happen to me only?
It's literally Chome Bad = upvote
Ah man, humor! I like humor too.

I bet me liking humor puts me in a sizable minority, if not even silent majority, of HN readers.

Another thing I don't like, which I've seen many other HN readers express that they also don't like, is over-politicization. That leads me to realize there's more about that line that I don't like besides just being dumb. The joke is lame, and by using the word "whiteness," it's deeply, unnecessarily, politicized.
My WindowServer usage was over 90% before but it went back down to under 10% after I did what he said. I also only needed it to test one site I was developing. I had the exact same things he did: MBP slow even when nothing is running, WindowServer always running high. So I think I can vouch for it being true. It seems to have worked for me also.

EDIT: Maybe it's just placebo. I checked the CPU usage on WindowServer before and after deleting & restarting.
Ask HN: Best books you've read in 2020?
I had no idea, just searched and there are thousands of them, very very explcitit, genitalia closeups, etc
I can basically agree with those generalizations, but in particular I've always been puzzled why British English tends to use "hospital" without any determiner, but American (really, U.S.) English almost always does. As a native US English speaker, I don't think I've heard one of my compatriots say something like "he was injured and taken to hospital." Always has "the" (without regard to the audience knowing which hospital) or "a" but I've virtually never heard an article used in British English.
What Is Gemini?
$7500? Why are these bug bounties so piddling?

How much would an exploit like this be worth on the black market? What's the potential loss / liability on Facebook's side? Hundreds of thousands? Millions?
There's no particular reason. The OS layer is just another variable which needs to be accounted for in the planning stage, so pulling the rug out like this is a nuisance.
One reason is that storage functionality isn't always bug free on all devices, and chasing long tail on all devices takes a lot of effort from the dev team.

Also think about TVs with small amount of flash with lifetime of 1000 write cycles, etc.
Places with a bug bounty program typically publicly state rules for what they think is ok for a researcher to do, specifically to avoid that problem. Without permission like that, yes, such an investigation can quickly move into legally dangerous areas, and not all companies have gotten the idea that if someone is willing to tell you about a problem you want them on your side, threatening or suing them just means the next time someone finds something you're not told. (of course that's not a free-for-all for researchers, if you start actually poking in private data or hack actual peoples accounts that's a problem)
Ask HN: Most interesting things you've learned/discovered in 2020?
so cool suggestions in this thread but a little bit for prog rock punky stuff seems to be missing. favourites:

-swans

-godspeed you! black emperor

-godflesh

-viet cong

-yonatan gat

-the monks

-captain beefheart

-frank zappa

-xiu xiu

-the fall

-the dead c
The cipher is very hard to break by small teams of amateur cryptologists. Considering that it is, in a very simplified form, a monoalphabetic cipher combined with fancy transposition, I'd bet even the poorest nation states could break it easily but would not comment about it to avoid leaking its cryptanalysis methods and capabilities.
I suspect this is an ESL post.
BigIdeas2021: What to Do in 2021?
National security “endangerment” is the bane of journalists/messengers all over the world ranging from Julian Assange to so many countless others. It seems they are not safe anywhere.

From the article:

“Chinese authorities have detained Haze Fan, a Chinese national and Bloomberg News staff member working for their Beijing bureau, on suspicion of national security endangerment, Bloomberg reported on Friday.”

From Australia:

https://www.theguardian.com/australia-news/2015/apr/27/asio-...

From the UK:

https://www.theguardian.com/world/2013/aug/20/nsa-snowden-fi...
Casio's Game Console: The Casio PV-1000
With the amount of rebuttals in this thread, I'm impressed `chromeisgood.com` isn't taken.
Why not use an extension? I think most HTML content and well labelled with classes even if that is not a public information.
Since about March or April we've had a not insignificant number of people armed with Molotov cocktails, what difference is there when they are armed with factory made weapons?

Those people with molotov cocktails have been almost exclusively targeting property rather than people, and specifically corporate rather than personal property. I'm not suggesting you should approve that, but it is categorically different.

As for your question, it makes a huge difference. While any weapon can be used to inflict harm (by definition), some make that significantly easier than others. It's facile to ignore this and pretend all harms are equivalent.
Be Employable, Study Philosophy
Can't stop wondering what Jordan Peterson would think
Checkout chromium and try that on its tree. Or rgrep. Then try searching it with vscode and compare the timing especially with second and following searches. And vscode is smart enough to search files that where opened recently first bringing useful results instantly.
What's wrong with nudity?
Ironically PG founded Ycombinator, which is "an implementation of a fixed-point combinator in lambda calculus"

---

The company wasn't called Y Combinator yet. At first we called it Cambridge Seed. But that name never saw the light of day, because by the time we announced it a few days later, we'd changed the name to Y Combinator. We realized early on that what we were doing could be national in scope and we didn't want a name that tied us to one place.

http://www.paulgraham.com/ycstart.html

Why did you choose the name “Y Combinator?”

The Y combinator is one of the coolest ideas in computer science. It's also a metaphor for what we do. It's a program that runs programs; we're a company that helps start companies.

https://www.ycombinator.com/faq/

Then he named his startup incubator after a LISP function.

https://www.quora.com/How-did-Y-Combinator-get-its-name

I want to say that I read somewhere -- maybe in comments on HN -- that the Lamda part of that is also a reference to the starting letter for Lisp which stuck in my mind due to the mostly forgotten two quarters of Greek I had eons ago. But I'm super short of sleep and can't be arsed to go digging for more explanations/citations for why it got the name it got as random crap to do on a Saturday afternoon while failing to be productive due to the aforementioned lack of sleep.
I don't think so, a lot of them seem to be shaved.
Not the person you're replying to, but I'm up the chain and interested in this topic.

It's like this: I buy a house for $500,000. What a great deal. A year later, I sell it for $600,000. Hey cool, I made $100,000 profit. Of course, quietly I've handed the original seller a briefcase with $110,000 cash in it. The extra $10k was to keep his mouth shut, but in return I've converted $110,000 of dirty money into $100,000 of clean money.

But maybe it's not just one house- maybe it's 10 houses. Maybe it's a huge mansion worth $5m (which I negotiated a great deal on at $4m). I'm not cleaning the full value of the asset, I'm cleaning some portion of it's value.

What those other parties do with the dirty money is up to them, but it's easier to deal with smaller amounts of it, spread out, than it is to deal with one big pile of dirty money. Maybe they work construction as a general contractor and buy their supplies for jobs using cash, but get paid in clean money. Many hands make short work when it comes to cleaning money.

All that said, every large purchase - homes, cars, boats, etc - leaves a trace. Financial Intel agencies get a report each time you move $10k or more. And if you move too much, too frequently, they start investigating- how come this guy bought 5 houses in 3 years, each one below market value? Sooner or later, someone under questioning by the police gives you up and then it all unravels.
It does cover backwards incompatible API changes - read the second link I provided:

>Further, Google will notify Customer at least 12 months before significantly modifying a Customer-facing Google API in a backwards-incompatible manner.

What are you referring to with forced sdk/software changes? Maybe it's the same exception I mentioned for App Engine when a previously supported language runtime goes out of support by the upstream language community?

As for the famous Google App Engine price hike everyone likes to point to, the lower price was only at a pre-general availability launch stage.

You're right that they don't make any specific guarantees that they won't hike prices on short notice, but within the scope of Google Cloud Platform features that have already reached general availability, when have they done that?
Absolutely; to tweak the analogy a bit, you wouldn't have much luck with the point-and-nod "interface" if you were trying to do something more abstract or complicated, like getting a loan or hiring a gardener.
There's a trend of following your device's dark/light preference, but I personally haven't seen many site pushing dark-by-default.
Generally companies prefer if you find bugs and disclose them before malicious parties find and exploit them.

Most websites have a “responsible disclosure” policy. If you can’t find this linked on their main page, you can often find it at /security.txt or /.well-known/security.txt

[0]: https://securitytxt.org/

[1]: https://facebook.com/security.txt
Beheadings are ok as long as they're against westerners.
In general you are on shaky legal ground.

However, some companies (including Facebook) have a bug bounty program that provides a prescribed safe harbor that you can operate within to discover vulnerabilities within their products or infrastructure in exchange for some kind of recognition or award.

The terms of Facebooks bounty are here: https://www.facebook.com/whitehat

Based on a cursory glance and the fact that this individual was awarded in their program, it appears they operated by the book.

Prosecuting activity that happens outside of these parameters has definitely happened in the past and will continue. It's not always a cut and dried decision. It can be difficult/expensive to effectively prosecute and you may find a lot of social backlash depending on the nature and impact of the activity.
Many of these guys are based in Third World countries, it's more complicated to go after them over petty stuff.