skysight-inc/HackerNews huggingface dataset:
> The users' wishes were "go away, window, I want to see my feed, yes whatever, click."

Facebook will never ask you out of the blue whether you want to share your data with Cambridge Analytica. They have nothing to gain from it.

What happened is that idiots clicked on some kind of personality test (or similar) shared by one of their equally-stupid friends, the consent prompt appears as it should (and is very clear about what data will be shared) and they clicked yes. There are arguments here that these links should've been identified/marked as malicious and thus removed to begin with, but that's a separate issue.

Removing API access because some people are dumb will lead to lots of collateral damage (including towards those same idiots who expect to be able to "Login with Facebook" everywhere and are suddenly locked out of all these accounts), and will not solve the problem - malicious parties will just start asking for raw Facebook credentials or to install malicious apps/browser extensions to work around the lack of API access.

> The fact that Facebook gathered the data to begin with is already a huge problem

Which data are we talking about here? My understanding is that the data obtained by CA is data that the user explicitly put on their profile (such as photos, etc) and "friends" relationships. Ad targeting data (which is the real issue when it comes to Facebook's data collection) was not included.

---

My worry here (and the reason for the relatively harsh language) is that this lawsuit will set a precedent and give arguments for platforms to restrict API access even more and hurt potential competition as well as impose annoying & unnecessary barriers to users who know what they're doing. We already have this issue with banking where some banks insist on using a hardware 2FA device to protect against scams, and it's not really effective because people are stupid enough to use the 2FA device over the phone with a scammer despite the bold warnings about not using it over the phone printed right on the device itself.
>If you saw a website that showed the power consumption of all internet services, would you find that to be a compelling reason to change the way you interact with the internet?

Would be interested to hear this across all tech really, e.g what's the environmental impact of say videogames I mean they're running machines at full pelt too for hours a day for millions of people.
There is a reason why we don't visit surgeons who do it as a hobby.
This is exactly what Verdaccio does, and has been doing since forever. It frankly kind of boggles my mind that other private registry implementations don't.
I’m a middleman for a worldwide site,
For people who wants to promote their ads or market their products through the Internet and get the largest possible number of visitors, Instapage is the easiest choice because it is simply the world’s most advanced landing page platform that provides a landing page design service and it is great for motivating customers to buy your products and the fastest to achieve this by simply click on below link and browsing because it is simply an internationally accredited site used by the most famous international companies such as Sound Cloud, eBay, Vimeo, etc
You can make sure by searching on Internet (in order to reassure your doubts), very simply it is a site that provides simple and easy tools through which you can create a landing page in a few minutes to display all your products and its details so you can ensure that you will get targeted customers or a specific category from visitors or customers, your page will be fully supported on the mobile phone if needed.
Direct link: https://instapage.grsm.io/hanyelkassar2125
In my understanding "effeminate" means one's physical mannerisms, not one's taste
I believe the TXT record validation is only an additional measure, eg to prevent a random developer from registering/uploading a package like org.apache.http2. Surely other authentication methods are used in practice.

I find it hard to believe any high profile organization would allow their domains to expire, or else they would also lose e-mail and websites, right?
Quickly add colorful rings to clubhouse avatar
Of FAANG, working for F or G appear the most unethical and immoral because of the systemic and ubiquitous damage they exact on individuals and society by maximizing monetization through manipulation, amplification of hate, divisions, and atomization of people from one another, and trafficking in personal data (privacy). These factors are more important than given an ability to design your own role in any department, and making $300k to $2M per year. As such, I could not live with myself if I joined such a dystopian leviathan. I don't see how anyone can honestly rationalize, overlook, or refute the above unless their guilt/shame, cognitive coherence, and/or moral courage are currently insufficient to do what they know is necessary to preserve their integrity.

Can't someone find a better organization that does net good for humanity, or at least doesn't cause as much harm? Netflix, Hulu, Plex, Tesla, SpaceX, etc. or Kiva, Goodwill, DWB/MSF, etc.
You should forbid them to program.
At this point I really wish we'd just go with a proper cryptography model, with a discovery overlay to provide names.

What I want as a developer is to establish my trust relationship to developers of libraries I depend on.

`npm install <somepackage>` should first check a record of signing keys in my source code repo, then check a user-level record of signing keys I've trusted before, and then - and only then - add a tentative trust relationship if this is brand new.

`npm release` or whatever (npm is just an example - every system could benefit from this) - would then actually give me the list of new trust relationships needed, so I can go and do some validation that these are the packages I think they are.
Yeah that's a rubbish claim. The x86 ISA is Intel's. The story goes that IBM considered different CPUs for the IBM PC, and we could almost have ended up with the Motorola 68000 instead of the Intel 8088. What a glorious future that would have been! Instead we're stuck with an instruction set for a CPU that was considered a stop-gap solution until Intel's "proper" new CPU was ready (the 432).
> Ctrl+Shift+F works

It's not working for me (it's also the first thing I wanted). It only seems to search through files that are already open in an editor tab. E.g. in the vscode repo linked from the README search for "nodeModulesPath" and no results, but open bootstrap-node.js and it's there on line 22.
The upstream article was posted yesterday, here

"Dependency Confusion: RCE via internal package name squatting "
https://news.ycombinator.com/item?id=26081149

"Dependency Confusion:
How I Hacked Into Apple, Microsoft and Dozens of Other Companies,
The Story of a Novel Supply Chain Attack,
Alex Birsan" https://medium.com/@alex.birsan/dependency-confusion-4a5d60f...
> Let's take take a look, using the disastrously bad unix libc timezone tools

It seems to me that the author did not initially read the documentation they linked to (https://www.gnu.org/software/libc/manual/html_node/TZ-Variab...) and is now complaining in an annoying and entitled manner.
I agree, mail deliverability is really hard.

In my case, the mailserver is only used to use a custom email address and forward the email, so deliverability was not an issue but other people using my domain name to send phishing emails. By making the fixes mentioned in the article the phishing attacks were stopped.
A wonderful use case for nano is introducing students who have never used a command line before to unix. You can teach a classroom of students to edit files in nano productively in a single 45 minute class period, which means that an introduction to programming class can move very quickly into actual programming. If your goal is to have student produce a working program on day one of class, nano is a godsend.

By then end of a semester, the students will be running into the ceiling of nano as an editor and you can tell them about other more featureful editors.
I’ll give a contrived example, say you’re a property startup, and you want to produce a walkability rating for each house you sell. You might want to do a calculation on OSM for restaurants within 5 minutes walk, maybe a chef rating for whether there’s a greengrocer, fishmonger, delicatessen and butcher within walking distance, or you want to take into account a walk back from the train station and the opening times to see whether the shops are still open after someone comes back from their commute. This is the kind of thing which would be interesting for big cities with a lot of commuting by public transport.

My understanding is if you did this with OSM data you’d either have to make the algorithm that did the calculation public, or the output dataset (locations as keys and the final ratings for each as values).

OSM has exceptions for horizontal slicing (layer separate data on top of an OSM basemap), for vertical slicing (union OSM data with separate data) and for trivial manipulations, but it seems it doesn’t if you do this kind of non-trivial processing of OSM data.

So that means that it’s almost impossible for a company to find an interesting way of processing the data which can give them an advantage over a direct competitor, and there’s no real incentive to do so.

This is my reading of the terms from a few months back, hopefully I’m wrong about it. But I suspect this is why it’s rare to see the data being used like this.
Is this going to be left out of Chromium or is it part of Chromium core?
npm does not have any 'private package' functionality at all, instead you point it at a different registry server (using eg. Verdaccio or Artifactory) which then serves local packages and proxies public packages if they don't exist locally - or at least that's what they're supposed to do.

Artifactory apparently didn't, and served up whichever was the highest version of public vs. private. Which is stupid.

But the bottom line is that when using npm, the exact package selection policy is determined by whatever registry implementation you're talking to, and so it's the registry implementation which should prioritize private packages by default.
Fight the Btcoin Climate Crisis
https://openmaptiles.org/ might be an option, although it doesn't include everything Open Street Map itself includes.
FYI, it's from 2009
Babi Yar
And AT&T was just a phone company that invented transistors.
Programming, Magic or Boredom? – Part 1
There are a ton of counterexamples and things in real life are measured by ratios of good to bad, not by proving that one case is false, like in math.
Surprising Connections Can Save the Ocean
If a crisis happens, which side do you think the military would support, the one they pledged allegiance to or the one paying their wages?
They usually work because people check and notice mistakes.

It gets worse now that you have countries next to each other that are out of sync on daylight saving - America/Los Angeles doesn’t work for those south of the border anymore - but you won’t notice except two weeks a year.

Strangely I’ve noticed some systems give you WAY more cities than in the standard library - and I’m not sure why. Linode had way more options than just America/Chicago but didn’t have St Paul.

And trying to schedule things in advance across the daylight saving time difference is even more confusing.
I didn't know [2], but that was lovely.

That said, the same things you said hold for Korfball as well, which definitely doesn't whip up the same fervour as an Elfstedentocht does.
A new way to look for life-sustaining planets
Please note that all these examples from the quote refer to a certain genre of ads targeted at the general public. Many teach ads I see are completely different. I often click on ads for microcontrollers for example, and I have't yet seen one I would find offensive in any way. They don't make me feel small and unworthy, on the opposite: the make me feel empwered. So it's really about the content of the ad, not advertising itself.

Advertising is crucial for everyone. When you have a product or service, you need to advertise it. Even if you choose not to buy ads, you need to find another way, organic or not, to make your project known. If you don't have a products/service yourself, you work for a company who has, and there are very few lucky enough not to need any advertising (because e.g. they secured long-term goverment contracts already etc.). We should focus on how to make advertising human again rather than destroying it completely.
Of course, but it very much a "do as I say, not as I do". i.e. google applies a zero tolerance policy to receiving spam from any domain, but is likely way above any absolute threshold they impose on incoming messages for the spam they emit.
That's the modern justification. Surgery "in the middle of a desert in the insanitary conditions and no water" for "hygiene" is a very counter-intuitive practice, don't you think?
20% time is mostly used for side projects which aren't about coding or products anymore. But back in the day most new things Google was making came out of it.
4. Combine existing products

Examples:

Videochat + 2D Game = workadventu.re

Tinder + workadventu.re = ?

Pokemon + Google Maps + Kamera + GPS = Pokemon Go
You only need to validate the domain once using a TXT record. And then you use another authentication mechanism such as a username/password combination.
Quite misleading, one only needs to expand the FAANG label to see Facebook and Google the odd ones out.
That's probably impossible to quantify. The example next door, Versailles, kind of says you don't need a living monarch.
Ensuring Health: Can a Concussion Cause Erectile Dysfunction?
There's been a great deal of talk around blackouts nowadays, particularly around expert, school, and secondary school sports. In any case, shouldn't something be said about regular folks who happen to wind up with one? Can a hit in the noggin conk out your sexual coexistence? Notably, it very well might. Analysts at Harvard investigated the association that various examinations had brought up throughout the years and went to work to check whether blackouts truly could influence penis wellbeing. It turns out, they can.
Show HN: I wrote an entire book to build a mouseless dev environment
I think quite a few of those also have multi party proportional representation which tend to avoid parliamentary majorities, so checks and balances are their in a different (I would argue better) form.
Turn off internet then. A computer with a bunch of tools to play with and documentation, and no internet.
I tried to download a file from Google Drive with third party cookies disabled a few days ago. Drive told me to enable them and retry, because of security checks or something.
> I wonder what happens if you file e.g. in small claims court against a company like Amazon? They'd probably never get the message, and even if you win due to them not showing up and making their case, good luck enforcing the judgement.

https://abcnews.go.com/Business/bank-america-florida-foreclo...

This is ultimately their weakness. Whether it's the binding arbitration exploit that Uber had to deal with or small claims court default judgments these organizations are highly susceptible to coordinated and distributed actions in the real world.

You need to view this as asymmetric warfare where you're using your opponents advantages against them. If they're bigger then you swarm them with small entities. If they can avoid dealing with the public by using AI intermediaries find venues where they simply can't and repeatedly pressure them there.

"Don't struggle only within the ground rules that the people you're struggling against have laid down."
We need a blockchain for source. It is obvious and we just haven't come to terms with it yet. Then anyone can run anything provided they have the right key.
"I don't want to try i3 or Vim. What's the point using less of the mouse? Such a waste of time!"

That was me, 6 years ago. My colleagues were pushing me to try the tools they were already using for years. They are very good developers, so at the end they convinced me to look at them.

I had to admit I was wrong.

I fell in love with these tools. From there, I built my system step by step, configured it as I wanted, according to my own needs. I had the feeling that I was more efficient with it, but more importantly I really enjoyed using it.

Fast-forward 2 years ago. An idea popped up in my mind: what about writing a book to pass on all the knowledge I had about this kind of mouseless development environment? What about enabling every developer to build their own system if they wanted to?

After shortening a trip in Asia beginning of 2020 because of Covid-19, I came back in Berlin without any job or even a flat, only some clothes and my old Lenovo x220. Fortunately, I found a temporary place to live where I decided to write this book.

I've spent hundreds of hours on it, and now I'm really proud to finally release Building Your Mouseless Development Environment, where I explain in detail how to build a similar system to the one I use every day. This system is based on Arch Linux, i3, Neovim, Zsh, and tmux.

The goal is not to impose a particular workflow; I tried to explain every single shell command and piece of configuration for the readers to be able to shape their systems to their own needs.

If you're curious, you can read the first 30 pages of the book, including the whole table of content there: https://matthieucneude.com/building_mouseless_environment_sa....

If you want to know how this system looks, I've made a short video (https://www.youtube.com/watch?v=67lbLKTm91U) describing the one we build in the book.

Last thing: If you already know and use all these tools, you won't learn much from the book I'm afraid.

Any feedback, positive or negative, is welcome!
> The packages had preinstall scripts that automatically launched a script to exfiltrate identifying information from the machine as soon as the build process pulled the packages in.

Pre and post install scripts in NPM packages are such a terrible idea. Even when it’s not malware, it usually just a nagging donation request with a deliberate “sleep 5” to slow down your build and keep the text displayed.
I mean in some aspect I agree in spirit with your point but your point is off topic.

It may be questionable to have your stuff advertised on a page about the history of Germany...

But lets be honest... that's not why these things are being taken down. They aren't being removed because advertisers are complaining. Please show me where anything of that sort is mentioned - either in the OP of this thread or specifically in the article about "buckle-less belts"...

In the example of this thread... they are being removed because someone (presumably a competitor) reported their app for SUPPORTING "rape and pedos". A dictionary with a definition of rape getting removed for "supporting" rape by defining it - while competing dictionaries aren't removed for also defining the same words? Why aren't they getting removed for having a definition of rape that advertisers don't want to be listed on?

Please... show me where I'm wrong that the dictionary application was removed for 'advertiser complaints'... or the original article has its stuff removed for advertisers complaining.
Uploading Images to AWS S3 in Golang
Make Your PWAs Look Handsome on iOS
I feel stupid for using npm for so long without knowing about this command. In hindsight it's obvious that install was updating the lock file each time, so why should it have been any different on the ci server?
it’s depending directly of SOCI. I offer a wrapper around everything they do :)
Yes, I moved my comment right after posting as there were two alternative discussions going on, and I wasn't certain on which one to post.

> If you didn't act bad in the past I would trust you, but this is not the case.

I apologize if I posted too often once again.

If anyone finds it useful, I just discovered HN has a "delay" feature:

https://news.ycombinator.com/item?id=231024

I just set it to 5 minutes - in my case it's enough time to edit/review the comment before it's visible.
> Python, being a multi-paradigm language with the strong functional side

I would doubt that. Surely, things like Numpy are written in a functional fashion, but Python relies very much on statements, iteration, things not being an expression, almost every named symbol except string and number literals being mutable, and there are no block-scoped name bindings which are essential to functional languages.

And the attempt to add the latter to Python might end in a far bigger train wreck than C++ is already.

Mixing OOP and functional style works, more or less, for Scala, but everyone agrees that Scala is a hugely complex language. And in difference to Python, it has immutable values.

What could turn out better would be to create a new language which runs interoperable in the same VM (much like Clojure runs alongside Java and can call into it). And that new language, perhaps with the file extension ".pfpy", would be almost purely functional, perhaps like a Scheme or Hy, without these dreaded parentheses. That would at least leverage Python's existing libraries.
They're completely unrelated examples. I'll try to explain why.

Iran's (authoritarian, human-rights-abusing) government wants to prevent citizens from communicating with each other using tools that are resistant to interception by their secret police. HN supports the basic human right to privacy, and thus wants to help Iranians circumvent unjust laws or government actions.

White supremacists (who happen to support Trump, because duh) are being banned by Twitter -- a company, notably distinct from a government, and thus incapable of "censoring" anything. This prevents them from using Twitter's platform to publish hate speech and (arguably illegal, definitely unjust) calls to violence. HN supports the right of a company to decide who can publish content on their platform and agrees that it's cool to tell racists that they aren't welcome there.
>> Tradition is a set of solutions for problems that don't exist anymore

That'd be reductionist rationalists' position.
"War criminals" ?
> But all of these alternatives are strictly less intuitive than the original expression.

I agree; I was just trying to show how pattern guards work. I would only resort to pattern guards if I need a `cond` (like my last example), or on a few cases of a more 'natural' pattern match, e.g.

match foo():
case OK(msg):
return success(msg)
case NotFound(_) if isQuery:
return success("No results matched query")
case NotFound(msg):
return failure(msg)
...

If I were to implement your original example (i.e. 'which of these constants do I have?'), I'd probably still go with a "dictionary dispatch" (especially since it's an expression, so it works in lambdas, etc.):

return {
NOT_FOUND: default,
OK: response,
}[getCode()]()
It would be done by statute. The only grounds necessary would be that Parliament is sovereign.

Of course, it would need a majority in both Houses, and in practical terms would require popular approval too.
Signal put forward the TLS-proxy as a way to circumvent specifically the block on signal. This suggests they want people to be able to access signal despite it being illegal.

The feature is 'use access in Iran despite it being illegal'. If that is your pitch, then 'being detectable as doing the illegal thing we want to enable' counts as a vulnerability for that feature.

Whether software has a vulnerability or not cannot be determined without knowing how that software is meant to be used.
AT&T, as Bell Labs, was a phone company that created the first working version of the transistor, a concept invented and patented by Julius Lilienfeld twenty years earlier.