skysight-inc/HackerNews huggingface dataset:
You shouldn't share one single company account across the team. Everybody should have their own account, of course on the company domain, and use that one.

Advantages

1. You know who does what.

2. If Google bans an account the others keep working.

3. Permissions per employee, because not everyone need to to everything.

4. If an account is compromised, you ban the account.

5. When an employee leaves, you ban the account instead of changing the password.

6. N people sharing a common password on an account nobody has particular responsibility for, ouch.
If you write real HTML then an archiver only has to retrieve the HTML in order to be able to save the a future-proof representation of the content. (Edit: I'm talking about text-first documents, not interactive webapps here).

But if the content doesn't render at all without javascript, and if the archiver wants to index page or preserve it for posterity, it needs to retrieve all the external assets, and then execute them (because it may asychronously loads further scripts whith are required to load the content). And then wait for it all to execute.

This means that archiving services need do to a lot more expensive work. It raises the bar to exclude smaller, more diverse web crawlers and indexers.

And regardless of that, it's a big gamble to hope that the third-party CDNs that you rely on will continue to host exactly the same JS libraries ad infinitum.
I remember doing a bootcamp for it many, many years ago when I was getting started in Infosec. I was already doing boot2root type challenges but this was a "real" cert and I was really nervous.

I remember the relief washing over me on the first morning of the bootcamp when there were questions such as "what's a shell" and "What's Linux?".

100% of the people on the bootcamp passed.
I kind of omitted that part. Having a YubiKey in or not in the laptop won't really affect things (other than the fact that you will need to get into your account somehow without the yubikey if the yubikey is stolen).
Dog ownership associated with decreased cardiovascular risk
What does "open source" mean in this context? In 50 years time I seriously doubt github.com will still be the same place it is today doing the same things. Maybe older protocols will die out, making accessing content over HTTP(S) impossible, maybe P2P will just break due to advances or newer stacks taking over. Maybe the "internet" will change in some fundamental way, and breakage is part of the "innovation" process.

The way you write a comment on HN is likely to change over the course of decades, I doubt it'll still be the same HTML, HTTP, networking stack etc.
It is not always revenue vs. cost, there is also a time factor. Being frugal might help staying longer in business, it doesn't matter what the competition are doing, not everything is a zero sum game and sometimes success come because of some event and if you are there to capitalise it you might succeed, like what happening these days with messaging and twitter like apps. So it is all a matter of balance and there is no one way to do those things.
First rule of 'Cyber Security': never use the phrase 'Cyber Security' in any serious discussion on hacking. If I was going to hire-on a computer security professional. The first question I would ask is, how many machines have you owned?
Virgin Orbit Just Launched a Rocket from a 747
I might be, I took the article at it's title to mean "2FA does not protect you from your password being leaked"
I think this is true of netpen work, which is heavily commoditized, but much less true of vuln research and appsec, which are the fields you're shooting for by learning to code. I generally agree that developer -> security is the right way to go.
Like you rightfully implied in your last paragraph, there is no incentive for websites to ask people to go to firefox. So they won't do it.

I see companies siding with Google because they'll need to, to survive or grow, in the short run anyway.
You've selected some use cases designed to show that VSCode is inferior to emacs. What you failed to realize is that your use cases are invalid for probably a vast majority of people:

> Read, write and send emails

I prefer to do that in a dedicated app that actually knows how to deal with emails, and not from inside my text editor/IDE

> can I quickly write something that will read an email, and then go and add a TODO in the appropriate section of some document based on the contents of that email

I tend to prefer not to spend my time programming things, but, you know, enjoy life.

If I need a todo from an email, I'll copy paste it to an app that, for example, syncs to my phone

> Use it as a window manager

Why?

> Use it as a file manager

Why?
Define "too expensive". Is $20 really too much? https://www.adafruit.com/product/4687

The larger the display, the more expensive it is, but that's not unusual, and LCDs aren't much different in price until you start to get to really large e-ink panels. (Given the depth of the LCD market, I'm sure you can find unusually cheap panels somewhere... the point remains. The prices aren't that bad these days for e-ink.)
Alright so lots of people are saying certs aren’t worth it here. But as someone desperately trying to pivot from software development (5 year exp) to anything security related (which I find far more interesting), how are you supposed to do that without certs? I’ve done CTF events and performed well, I’ve done HTB for well over a year at this point, and the only time I’ve ever heard back from a company regarding an (offense) security position was basically just to see if I could be persuaded to do software development for their company instead. It’s extremely frustrating.
And plenty people build apps to deliver content they could just deliver using the content delivery bits. (EDIT: or just add random JS to content. e.g. the number of blogs that do deliver a html page with some JS to show a loading animation, despite the content also being in the same HTML file, is surprisingly high. Although that at least doesn't interfere with archiving etc, since the content is there)
I found this text from religios text(Islamic)
Although the star of Süreyya(pleiades) is many stars, Arabs call Süreyya as a star. It is a community of seven stars. Six of them are visible and one is hidden. People test their eyesight by seeing or not seeing it.

And Islamic history is 1400 years old.
Science tells us no such thing, and when you're talking the ultimate fate of the universe then there is no consensus, just different theories. There's the big freeze, the big rip, the big crunch... all manner of ideas. Then there is the universe itself. Well what is that? What about multiverses etc?

Just to take one such theory emerging from heat death ideas. Once the fundamental touchstones of mass and structure disappear, scale also disappears. The infinitely large universe becomes physically identical to an infinitesimal one, and is reborn in a new Big Bang — with all the mass and energy of the previous universe once again jammed together into a tiny space.

These sort of cyclic cosmology ideas are held by prominent physicists including the recent Nobel prize winner, Roger Penrose.

Like all us, I have no idea what is true but its hardly a closed subject.
Stablecoin is an untractable problem by design, isn't it being solvable in the future by crypto a myth?
The user still has to notice that the personal code is missing in the phishing emails.

If you could trust users with "always check for this personal code in the emails, ignore emails without it" we could also trust them with "your bank will never email you a login link"
Seems the assumption is that nuclear weapons won’t be used in a real war. I think they still attribute to defensive strength, though.

I find it weird that railway/road/waterway coverage aren’t scaled by something like land area/population.

Fair scaling would be hard for countries that have lots of less densely populated areas that they would be willing to temporarily give up in case of war and that, hence, wouldn’t need good infra for defense, or for island countries where lots of transport goes by sea, but I think it should be possible to do better than not doing any scaling at all.

For example, looking at https://www.globalfirepower.com/railway-coverage.asp, Indonesia has just over 5,000 km of railway lines.

It scores about equal to Switzerland, with 4,800 km, but Indonesia is over 40 times the size of Switzerland.
Ask HN: How can I best respond to “If the product is free, you are the product”
I'm having a hard time with this. Whenever a data "scandal" comes up, there are always people that oversimplify things and just throw something along the lines of "what did you expect? You're not paying for the product, you are the product".

I'm a data scientist myself, and I know how and why this is wrong but, what are some simple & powerful arguments I can lay to non-tech people?
> do people still link to 3rd party copies of JavaScript libraries?

Sadly yes. Occasionally, sites use Subresource Integrity (SRI, https://caniuse.com/subresource-integrity) hashes to ensure the scripts are identical to what they expect. But it still surprises me to see secure, sensitive sites loading third-party scripts.
> I'd rather be influenced by relevant ads that could possibly be useful than ones that will just annoy me.

It's easier to ignore ads that are totally irrelevant.

The ads that are targeted are the most distracting.

I'd rather see ads about some detergent than about a new SSD drive that will catch my attention and makes me forget what I was looking for in the first place. When I need a new SSD, I will just visit a shop. I don't need ads for that.
That's why I work at a place where devs are basically required to use Linux. It's a great filter and training mechanism.
People always say that if life is possible, then there must be a bunch of aliens out in the universe. It may be unlikely, but one has to be first, maybe it’s us? It’s a somewhat comforting thought, I like it.
I see whats going on here. One ignoramus to another.
Too bad one of the megacaps hasn’t bought them out.
I had a similar feeling. The net effect of reading that article was to make me want to invest in ETH.
This is pretty much it. Every patent that relies on another patent lists what those are. For this very reason.

A lot of patents have long lists of other patents they rely on. Sometimes the only reason something hasn't become a real thing is because of unresolved patent claims. And in any case, the patent is still useful because they can work on ways to get around the need for using the unresolved patent requirement.

Ie: If my new-widget A relies on patents B and C, but C won't license it to me, it doesn't mean my patent is invalid. It only means I either have to eventually find a way to resolve that licensing issue with the C people, or find a way to replace C with something that doesn't infringe on their patent.

Until then, my new-widget A is protected from a competitor (or even C themselves) selling it before I can find a way to deal with C licensing.
I just moved away from windows because while the devices do everything they don't work properly.

I've now switched to a Mac Mini for a desktop and I use an 11" iPad Pro and apple pencil for everything that isn't code on the road.

I've got to the age where I'm not sitting hunched over a laptop working for half a day and there's not much point in having a laptop if it's going to be docked all day.
The point is that you need to count time spent by the founders as an expense. Roughly somewhere between 15-20k per month per founder. Even if you're surviving by eating ramen in your parents basement there's still an opportunity cost from not having a job. You have to account for it.
If you become a public figure based on a toxicity and bigotry businesses may not want to be associated with you.

Patreon is not a bank. Patreon didn't even exist a few years ago. They are a middle man to collect money using other middle men. They don't even have a monopoly on this.

This person is also not a US citizen.
Unfortunately, for people who need to type on letter at a time, or type with a mouthstick, there's a need to run accessibility helper programs.
> The web is there to provide functionality and satisfy business needs.

lol

Remember when the web was for people to communicate? Not just to 'satisfy business needs'?
What Parler Saw During the Attack on the Capitol
Simple Is Not Easy
Brazil begins vaccination despite negligent president
It sucks that camera manufacturers don't do basic shit half the time like act like an SD card reader when plugged in, or use USB 3 speeds vs save $3 by making their interface USB 2 speed vs USB 3.
Why are you envious of Windows folks? Windows hardware is generally cheaper, so if you're using Macintosh, you could ostensibly afford Windows.
Or even more critically, a discovery server that supports phone number registration so your existing contacts can find you again after they switch.

The only major discovery server on Matrix is currently the vector.im one, and it only supports email identity registration. As many people have pointed out, most users care far more about usability than they do security/privacy, so a service that allows an optional registration of identity using the currently-standard identity tracking system of phone numbers is pretty much a requirement.
With all the deprecations currently happening in browsers (often driven by Google), I think it's not unrealistic to assume that we will see a whole bunch of JavaScript becoming deprecated and removed in browser engines in the next ten years.
I share your skepticism—myths don’t seem very durable in general. Comparative linguists have reconstructed some proto-info-european myths, but those are probably in the vicinity of 8k years old or perhaps even younger (certainly nowhere near 100k years) and they’re already about as generic as these 7 sisters myths. The only thing that gives me some respite from my skepticism is that celestial myths likely have more durability given the relative stability, ubiquity, and importance of the night sky (it’s one of the strongest cultural touchstones that ancient people had). That said, I have a really hard time believing that even celestial myths have 100k years of durability, and it seems like there must be simpler, more plausible explanations (like yours).
It has became ridicolous how many pages simply render blank without javascript, and many are just simple articles/text-and-images without any functionality at all. I agree 100% with the author of this article. The whole concept of throwing angular/vue/react just for a blog doesn't make any sense in the first place.
> there is only space for battle-to-the-death.

This is passive-aggressive and childish.

In another comment, you were lecturing me on community values. How do you think the above claim, applied to a wide swath of the site's users, fits with those so-called "community values"?

You're pretending to be above politics while engaging in it in a dirty, underhanded fashion.
The real reason is that 1100 players are ranked ~1600 on Lichess. There's a good site that compares FIDE ratings, Lichess ratings, and Chess.com ratings. Lichess is inflated by many hundred points on the low end. Chess.com is more accurate. They converge towards the upper end of the human rating range.
Perfect use-case for Narrator ;-)
Bitcoin's adoption isn't based on technical merit though. It's a Schelling point for digital gold.
This makes sense to me for articles and the like. If the point of the page is information, it makes sense to me that the page should load content first.

OTOH, twitter, slack, and package tracking are consistently changing. It makes more sense for something like that to load content via JS, since there's no guarantee the page looks the same between two loads
> Freedom of speech, also called free speech, means the free and public expression of opinions without censorship, interference and restraint by the government.

> You're welcome to check how the principle of free speech is protected in other democracies as well. I think you'll find it's largely the same: it's about government interference, not the freedom to say whatever you want within any business.

And if a private platform bans a form of speech at the behest of the government, would it then be considered government interference?
Perhaps the website would sue the author of the list.

That does not explain why this comment suggests a browser author was afraid to use the list.

The browser author could easily require the list author to agree that the browser author has no obligations to the list author if the list author gets sued by a website, and the list author must idemnify the browser author if the browser author is named in any suit over the list. The list author must assume all the risk.
I think one thing overlooked is that Google's supposed rationale for providing this service is effectively because they suppose that their plans to "more aggressively block fingerprinting" will leave advertisers with no other choice.

Personally I find this highly unlikely. The very nature of fingerprinting makes it difficult to prevent without some pretty severe compromises, and it wouldn't surprise me if advertisers enter an arms race with Google instead of caving in.

Of course the economic strategy for Google to avoid that is to reduce the price/limits of this service to so low that this isn't worth doing, but if the effort Google puts into preventing fingerprinting is insufficent then this would lead to a "worst of both worlds" situation - Google gets to pseudonymously track the internet with their "privacy sandbox", and nefarious trackers/advertisers can combine that with fingerprinting to create an even more reliable picture of who's who on the Internet.

FYI, this[0] appears to be the explainer of what Privacy Sandbox actually is, and it's quite vague, presumably because the actual implementation details of this would be difficult to determine.

[0] https://github.com/michaelkleber/privacy-model
Webpack is supposed to solve the inevitable “left-pad 2.0” problem. The downside is that each website serves their own copy of the libraries defeating cross domain caching (which browsers are starting to prevent anyways). It also requires setting up a build system. The upside of Webpack is that it does “tree shaking” which removes code that is never touched which makes the browser have to download less.

Tradeoffs...
[Never mind]
By his logic all the games and animations originally built in Flash should be lost to the sands of time now that Flash support has ended and Flash content is blocked within the Flash player. But that didn't happen. Ports were made over to WebGL and emulators were built to make it possible to continue to play these games and animations outside of a browser. People thought they were so important that they made efforts to preserve them. They were anything but ignoreable.

I think JS is quite fine by comparison.
Wait a second. An armored personnel carrier? What's the conversion funnel here? Do they send it to you? Do you get a discount if you equip your own personal motorized infantry battalion? Is there an update channel for anti-air?
I don’t remember any such time, and I had a 14.4k modem.
In case you don't know, like Gitter, Freenode has a public Matrix bridge!
Ah, I see your point. But it could just as easily be made in nearly any language, the difference at the level of “is abstract-able” is meters rather than kilometers.

The problem is that as soon as you need something more than a command line call the engineering burden explodes relative to languages that natively support greater abstraction at the lexical and logical level.
I completely agree with this
Science wins again.
Has NetCraft confirmed that Emacs is dying yet?

I keep reading on Hackernews and elsewhere that VSCode will solve world hunger. So I try it. And after a week or two, I realize what I'm missing from Emacs and go back. This has happened several times, because I keep thinking, maybe I didn't give VSCode the fair shake it deserves. But VSCode never lives up to the hype, is not compellingly better than Emacs such that I want to switch, and is in some ways worse. Emacs gives me a computing environment that I can shape and mold to my needs quickly and directly, as I use it. VSCode is extensible; for Emacs, extending it is an integral part of working with it.

What's more, VSCode is not even open source. It's more like "open core". The editor core is under an MIT license, but the binary you download from code.visualstudio.com is proprietary, as are many of the most useful plug-ins. Source ports like VSCodium are not first-class in the extension ecosystem.

Emacs, by contrast, is the next thing beyond open source: it's software that describes itself. Whether that be the tutorial for new users, built-in documentation for every function or variable, or the ability to M-. into the implementation, whether in Lisp or C, of any function, the guts of Emacs are always at your fingertips. I get the feeling RMS intended "free software" to be a baseline, a bare minimum for protecting the user's freedom. To truly emancipate the user, something like Emacs where the software actively aids the user's understanding of its internals, is needed.
Hey, glad you are intrigued!

If you click the "Download Omnii Beta" button on the website, it should take you to the Google Play Store listing and allow you to download the Beta version of the app.

One restriction at the moment is that the app is closed to the U.S., Canada, Mexico, and India. If you do not reside in one of the listed countries, shoot me an email with the country you live in and I can see if we can open up the Beta to your country.

My email is: tyler@omnii.co
> People don't care about 10 years from now

But they really effing should. 10 years is not a long time at all.

> it's usually not the hobbyists who pack their sites with all the modern fancy js.

BS. News outlets, Google Anything, Facebook itself, etc., are usually way worse.
Makes sense. I just use qwerty, side of palm for Ctrl and thumb for Alt. I understand if that's not intuitive to new users, but it becomes comfortable and efficient pretty quickly.
Hackers Used Zero-Days to Infect Windows and Android Devices
lr;dr = Login required. Didn't Read.
Yes because the only thing better than a medium sized company that won’t license its patents is a megacorp that won’t license its patents /s

No the solution is to incentivize patent licensing and in the case of software make it simply not patentable. The corporate overlords won’t save us from themselves. If they had their way patents would simply never expire.
I would think these astronomers would have considered that possibility. One thing to note is that stars were probably less important prior to the advent of agriculture, at which point tracking the seasons became important.
Book Notes and Review: The Power of Habit by Charles Duhigg
We should distribute software in a way such that its dependencies are completely described. So when we pull something from the internet (be it a JS file or some HTML), the system will know what other software to pull and it will just run. The current way of doing things works most of the time, but it is fundamentally flawed, which becomes apparent when viewing stuff from a decade ago.
"My name is Ozymandias, King of the Kings/Look on my posts, ye mighty, and despair!"