skysight-inc/HackerNews huggingface dataset:
This is actually a very interesting and dep topic. Stallman introduced ethics to the discourse about licensing. He also introduced free/proprietary software dichotomy, as the difference wasn't as clear cut in the past. Finally, he co-created the GPL as a way to express his ideals, and as a way to oppose other FS licenses like BSD. Already 25 years ago many people didn't like this attitude, and this is how the Open Source label was born.

But deep down, can we really introduce ethics to the discourse? Is "proprietary software" really "immoral"? I had several discussions with RMS and while he admits some exceptions, his view is that it's basically a form of lack of freedom, hence unethical.

This idea seems stupid today, but I think we no longer notice how much the world changed because of FLOSS. Today, if I don't like proprietary software, I can easily use Linux and not need anything. Thirty years ago the situation was very different, we had very little choice. Today we are spoiled with choice, so the point RMS was making might seem less relevant.

In any case, recent decades brought another change that FSF still struggles with: the *aaS model which means Amazon takes anything they can, put it on their machines, make piles of money and rarely give anything back. No wonder companies like Elastic are pissed about it, but they can't do anything about it. And it doesn't look like the Aero GPL will solve the problem as it's simply way less popular than other licenses. But it seems like there are cases where ethics actually enters the licensing discourse and you can't avoid it.
That sort of explains why my barn cat likes to spend a day going in one door of my house and out another. We do have a lot of exterior doors, so it's kind of like the Scooby Do hallway scene, but with an orange cat asking to come in and out.
gcc and clang have options to strip paths to support reproducible builds

https://reproducible-builds.org/docs/build-path/
If you want as hardline a view on privacy in web browsing as possible, I recommend browsing through the Spyware Watchdog[1] and this article[2] from one of its main contributors. Many will find that their standards are too high for them, and may seem paranoid or such, but it is notable that both Firefox and Chrome have existing forks that even these hardliners deem clean, so for a browser to be guaranteed spyware-free is not only possible but a present reality. Brave is not private.

1: https://spyware.neocities.org/articles/index.html

2: https://digdeeper.neocities.org/ghost/browsers.html
Preview has been there from the very early days of NeXT and Display PostScript (NeXT worked on DPS with Adobe). Apple’s pdf handling has always been baked in as Quartz is ‘pdf based’.
while it seems like an issue worth fixing, i doubt that GDPR applies here. the Rust foundation is not providing a service to the end users of any of these binaries, and it is at the developers own discretion whether to distribute the binaries rustc produces.

it's equivalent to saying that your self-hosted Postfix servers are violating GDPR because they includes information about which devices your message passed through on your local network during delivery in the header.
The problem wasn't ignored. If you read the issue discussion on GitHub [edit: for the first linked issue], you can see that there's back and forth with the compiler developers about how certain information can easily be stripped and other places are harder to deal with. Eventually the original poster finds a workaround and declares their problem solved.
I've done pentests where we found a vulnerability that allows writing to arbitrary directories if you have sufficient permissions, and knowing the directory structure would make it so you don't have to guess which directories exist. It would also help if you were trying to bruteforce a login because it can show you what format the username is, like first initial + last name.

It's not really much on it's own, but it could definitely be used to make other security issues more effective.
There are many pleasure walkers here who seem to be so upset at the guile of someone who dares criticize their beloved pastime that they completely missed the point of the article. The author's issue is with walking "culture" that encourages walking for walking's sake. In other words, walking that ignores surroundings and is more concerned with either the concept of walking or an interior journey where surroundings are just a backdrop to encourage thinking. I completely agree. These type of walkers aren't walking to see nature or observe new surroundings, they're walking to just "be". It reminds me of running hikers or mountain bikers that blow past you on beautiful hiking trails oblivious to the beauty around them. Walking or hiking to these people is more about the personal narcissistic pleasure they can wrench out of their surroundings rather than being receptive and "taking in" the beauty of nature. It's about "running" or "walking" and consuming views. I actually prefer Instagram hikers over runners. At least the Instagrammer is looking for beauty to share with others. The runners, pleasure walkers and mountain bikers are blazing over nature, the rest of you be damned.
There is fairly trivial workaround that you just do the release build in a container (or even plain chroot), which effectively anonymizes the paths. The fact that the workaround is so easy (in many cases) probably partially explains why this hasn't been the highest priority yet.
Good game overall, but terrible end-game. You're playing along, building and making money and no obvious mistakes, and then all of a sudden you get the big pink screen that says "Sorry, someone else made more money than you and decided to buy you. Game over. Better luck next time!"
I can't help but comment rudely here that one of the world's largest manufacturers of devices designed to help discretely in this situation, Tena, is Swedish -- maybe that is your answer! ;-) [1].

[1] https://www.tena.nu/vardpersonal/produkter/slip-allt-i-ett-i...
Wow, YAML has definitely some pretty quirky edges.
Most loved? Seriously?
Normalization implies that there’s something abnormal about going outside for some light exercise, fresh air, and a change of scenery. I enjoy those things but it’s not hard to abstain from other normal activities that I don’t.
IIRC, Gson accepts unquoted keys.
Ask HN: Calling for help from Quora and Discord to shut down underage content
Context: https://twitter.com/thoaionline/status/1378373567352504320

Quora's system sent me a "Space you may like" email linking to an underage public *dating* group. I can't show the url here for obvious reason but this should/needs to be shut down ASAP.

Does anyone here work at or know someone who works at Quora and Discord that can help expedite above request? I have contacted Quora via Twitter & Discord via the Underage report form.

Please excuse me for making a fuss about this. I feel very protective toward our kids as a father-to-be.

I can be contacted via the Twitter profile above.
> When I need docker, I like having a native linux experience.

This is a severely underrated point. If you're not running docker on a linux host, you are running it on a VM and getting all the performance tradeoffs you would get with developing on a VM. There seems to be a lot of developers that are unaware of this.
I wanted to try this, it so I opened the demo
https://codepen.io/klokan/pen/WNoZRyx
and 30 mins later I am lost looking at Hungarian villages for some reason...
Firefox is good enough. Just remember to change your search provider, since they're still tied to a contract with Google. Their multi-account containers have been awesome, and I hope other browsers adopt similar functionality.

For further privacy, there's a pretty radical version of Firefox called Tor.
German trekking bikes are more practical commuting bikes in cities that aren't Dutch-pancake flat. Dynamo lighting, mudguards, pannier racks, trekking gears, sporty riding position and weighing under 15 kg.

https://www.bikester.co.uk/bikes/city-bikes/mens-city-bikes....
If you want a more private browser, then switch to a more private browser. There’s no reason these browsers have to remain niche, and the more market share they have, the more pressure they will apply to mainstream web browsers and websites.

Also, these niche browsers test out advanced features that can feed back upstream, and improve privacy for all users. (For instance, many of the Tor Browser features have been upstreamed and enabled by default in Firefox.)
Funny coincidence. Around 2000, I worked for a company that coined the term "Norway problem" for a different software problem.

Their product used an MVCC database (I think ObjectStore). One of their customers in Norway had a problem where updates to the database seemed to not show up. IIRC the problem was a bug in this company's software that caused MVCC to show an older version of the database content than expected.
I recently switched from Android to iOS and this was super confusing. No plugins, except for on the OS level (like AdGuard) and then those don’t even work in that weird neutered Firefox, only in Safari :s

Oh and Bitwarden does not work in FF. It it does work in Safari! So now I, a Firefox by default person switched to Safari (on iOS at least). I wish full Firefox was present.
Yes but it also means lowered future demand for crypto, which means less money for CB in the future, which means a lowered stock price.
My dad has been a letter carrier for over 40 years. I'm very aware that drivers very openly talk to one another about peeing in the back of their trucks into bottles. Like with Amazon, the only policy is that you'll get a good talking to (not formal reprimand) if you accidentally leave a bottle of piss in the truck for the next person who drives the truck. Nobody wants to drive a car after a bottle of piss has been baking in hot Florida temperatures for 24 hours with the windows closed.

But, all that ignores a few things:

1) Look at that original tweet. So dismissive of the POSSIBILITY that anybody would EVER do such a thing. "Amazon is such a great place to work! Who could ever believe such an absurd claim!" The people who work in corporate clearly are so disconnected from the lives of their drivers that they have no idea how this is a weekly occurrence for a large percentage of drivers. Imagine what being so disconnected means in terms of setting policy for those drivers! Now apply that to a million other policies. People who do office work have no idea what it's like to do the job.

2) There were level of managers out in the field that were very aware of this. The official policy, if you read the emails, was (a) stop pooping in the Amazon bags, they'll trace you if you do, and (b) don't leave your piss bottles behind for other drivers to find. This is related to the first point, but what does it say about communication that something so commonplace didn't spread up the chain of command as a problem?

3) Amazon is saying they don't know the solution, but they'll try to come up with one. This scares me. The most likely scenario is a crackdown on drivers, as opposed to giving paid time for this purpose. Keep in mind, it could be that a driver is half an hour from a public restroom. This is expensive to solve. But what's not expensive is a crackdown on drivers. Look out for "zero tolerance" policies for those who get caught. It won't have an effect on occurrences of it happening, but could at least stop people from leaving their piss bottles behind as frequently.
Life is short. Get a cat.
Just focus on doing the best you can. What can't get done was never going to get done

Also check what your priorities are to ensure your not wasting time
I can't critically evaluate the quality since I have no high quality mp3 nor Hi-Fi audio devices. An old recording of mine http://marcodiegomesquita.tripod.com/rda.mp3 sounded with very unsaturated bass; which is good, I think I recorded/mastered it wrongly or the software I used at the time decoded it like amp decodes it. It actually sounds really good with amp.

But yes, it uses very little cpu. Maybe less than dosamp.
“Trucker bombs”.

You can find bottles filled with yellow liquid all along major highways.
It's a general category of assemblies / structures that mimic a material with unusual or even impossible properties: https://en.wikipedia.org/wiki/Metamaterial
Not really. In an attempt to use some DWIM to avoid surprising the user (“Text”Edit supports styled text not just in RTF but HTML) they introduced a bunch of new surprises (opening a seemingly inert text file actually allows code injection). It’s hard to say that this is clearly respecting the “wishes” of the hardware owner (I suppose the hardware owner might have wanted this, as per the article’s example, but surely that is the minority).

They don’t stop the hardware owner from opening the file in an actual text editor such as Emacs or vi.

And you can still download and run anything you like from the net, though by default they add roadblocks anyone can simply move aside. That’s probably the right thing: in my extended household of 9, really there are only two people downloading arbitrary binaries from the net and running them. And neither of us disables gatekeeper.
Just a non-rust specific tip:

- If you ever build, pack or otherwise "prepare" any kind of software always do so in a container "CI-style" (but not necessary in a CI, for many more reasons then just privacy).

- Always considers stripping debug symbols from binaries if you will distribute them using a post compilation step, potentially also keep the un-stripped binary for yourself for certain debug purposes.

- Generally consider using non-relevant user names on single-user desktop systems, there are ton's of programs leaking your user name.
I hate to say it, but universal ID and a deny-list would stop it easily. You let the bathroom verify your ID, and if you leave the place a mess the you no longer have bathroom privileges.

It would let you keep great public access, keep toilets simple, and only pass the "costs" of bad-behaviour to those that deserve it.

Having ID to take a piss is a bit weird however.
Seems like every third vehicle in my area is an Amazon branded van these days.
and its my place to make sure people like you know their place.
Here in Germany we have stores that are literally named "Asia Markt" (Markt is German for Market) or "Asia Bistro". Usually you can buy food from Japan, Korea, China, and India.
A lot of math is based on word problems and has ambiguities from language. E.g. "Alice gives Bob half her apples and Bob gives Alice half his apples". The number of apples each of them has depends on whether the actions were simultaneous or sequential and whether "his apples" refers to the apples Bob just received from Alice.

It's just good teaching to highlight these ambiguous cases because they do happen in the real world when talking about mathematics.

Some ambiguities are general, but some are also aligned with racial/cultural/linguistic backgrounds. E.g. double negatives.

There exists a mathematical language to unambiguously specify these differences, but we don't make kids read the principia mathematica for a reason.
You might look at JSON Next variants (if you remember - "classic" JSON is a subset of YAML), see https://github.com/json-next/awesome-json-next

My own little JSON Next entry / format is called JSON 1.1 or JSONX, that is, JSON with eXtensions, see https://json-next.github.io
I can confirm MSVC. Not sure about clang. Although you can disable this. The default release builds, with optimization, leaks: paths, names and symbol names.
But when a PR is submitted that modifies an Actions workflow, shouldn't GitHub run the old unmodified workflow until that PR is accepted?

IIRC, they already treat the .github folder as a special case; you can't push modifications to workflow files with a personal access token. So why not ensure that an action or workflow will only run if it is checked into the base branch?

That wouldn't stop PRs from modifying scripts that the action runs, but the current behavior seems a bit counter-intuitive.
No. There's existing tooling to get reproducible builds with those compilers, and it's fairly easy to produce output that doesn't include full file paths. Passing relative paths to the compiler is one of the more common ways to use them, and this only leaks relative pathnames which don't reveal information about the system they were compiled on. You can also redact information like __DATE__ quite easily, just by adding e.g. -D__DATE__=\"redacted\" to your command-line. Bazel does this by default because using __DATE__ interferes with reproducible builds. Other projects like Debian have also made efforts to make their builds reproducible. Not 100% of Debian packages are reproducible, but a significant percentage of them are, and using GCC or Clang is not a barrier.
Priorities?

I'm pretty sure they have 200000 other problems to care about too.

Why should they start with this?
Ask the developers of Insync, UKUU and Aseprite.

They sell licences via their sites, with activation codes or Google authentication.

But if you want to make a living, I suggest making a Linux phone oriented application store first and foremost, and figuring out the DRM that way. Developers will come if an ecosystem is built for easy deployments and selling software.
But python has instead the "insert \ sometimes" rule, which isn't better.
> I'm not sure that's relevant for privacy - for privacy, the specific thing you need is content blocking, right?

Yes, and for example (to my knowledge) there is no good granular script blocker (e.g. umatrix, ublock origin, noscript) in any browser available for iphone because there is no extension support in browsers like Chrome and Firefox.
> So what normal person is saying this today? Or is this a straw man?

Not normal persons, but people in the tech community who quietly cynically sympathise with fascist ideology, and some more or less actively working as apologists.
I really, really enjoy how even after all these years, still almost nobody knows what GDPR actually entails and how to actually be in compliance with it. Great work, Brussels, great work.
I also wrote a hypertext-like front-end with Turbo Pascal, pre-Internet, back in the day .. there was a 3rd-party UI framework that made it so reasonable to mix graphics and GUI elements in MSDOS, so .. we made a bunch of internal company apps that rendered the data off the network, allowed the execs to point and click things, change graphs, etc.

I remember seeing a plethora of amazing GUI plugins for Delphi too ..
Well, it was the first Windows based on the NT kernel that found its way to consumers' computers. Well, at least the computers of enthusiasts and power users – as far as Microsoft was concerned, the 2000 was still meant for workstations and servers and did not have a "Home" edition. For home use there was the much-maligned Windows ME which ended up being the last non-NT, not-memory-protected, still-sorta-just-a-fancy-shell-over-DOS Windows that Microsoft released. Only with XP did Microsoft completely unify their "home" and "professional" lines.
Not really. If your rendering engines does the spying for you than blocking other tracking and adware still leaves you without real privacy. Coupled with a lack of fingerprinting protection, simple content blocking may not even be enough to reasonably protect you from third party trackers.
It's not a violation at all.
I Am Not a Machine. Yes You Are. Debating the impact of machine-created art.
Every English dictionary I can find disagrees with this site; “performant” is a word.

Being able to buy a domain name doesn’t give you a veto on the language.

It also often has a very clear meaning in-context, especially when used comparatively. Is it sometimes used vaguely? Sure. But that’s not the word’s problem, it is because the user is deliberately being vague.
PHP: strtotime +1/-1 Month Bug (2003)
There are several problems with it. The license prevents me from paying some one other than ZeroTier Inc. from hosting it for me, and providing related services. This is a business risk because ZeroTier Inc may have diverging business needs from me. THey may even go bankrupt or be bought out by some one who abandons the product. This would mean I would have to host it myself (Until the version I need becomes Open Source), and I may not want to do that.

It also makes it hard for a fork to develop traction, as a fork would have to start at a much older version that is Open Source, or the ecosystem would have to forgo the opportunity for third-party hosting services to support it.

The freedom to fork is an essential freedom. Without it, I would not feel comfortable contributing to the project. Nor would I feel comfortable basing critical business infrastructure on it.

Others may be fine with proprietary source-available software, and that is fine for them, but I strongly prefer Open Source for my needs, especially for core infrastructure.
"you can disable this" is the critical difference.
Yeah, there's no way this is a violation of GDPR. There's a trivial workaround, build in a container. The article is being overly sensational and should have fact checked the commenter's statement.
Perfect. Although I agree with the writer, context is everything. It is like static vs dynamic typed languages. If typed was really better for every case, dynamic wouldn't be as big (or bigger).
I’ve found it depends more on which hardware you use than on which browser. Firefox is unusable on some of my machines, where Chrome is OK, and it’s the opposite on others. (All are low end machines.) I think it mostly depends on video drivers.
This is why implicit typing is an invitation to errors.
That’s their problem, not ours.
>A similar system is in use on Mount Athos.

Liturgically, both Catholics and Orthodox (and I believe various other more traditional Christian denominations) refer to dawn as the first hour, roughly midday as the sixth hour, etc.
the current status is that rustc has flags to remap the file paths, which I think makes the situation with rust the same as the situation with every other build system.

pretty much every build system will by default leak paths and times and whatnot from the builder, and need to be configured to not do that. AFAICT, the open issues are that some people want that to be the default and a few people are upset that changing the default requires an RFC.
But they are largely (supposedly, but not really) "independent" contractors.
It varies quite a bit in the US also. My local park has public restrooms in several spots.

The 'downtown development authority' provides public bathrooms in the (run down) commercial district.

Highways in the state have relatively evenly spaced public rest stops.
The article actually says that you cnn work around the issue using containers.
JSON5 is the best option currently. A fair number of tools in the JS ecosystem support it.
I read the comment you’re replying to as being sarcastic, but good points nonetheless.
Requirement number 007 addresses that.
It's not really physical collectibles that need this, it's digital ones. (Physical collectibles have popularly accepted professional grading services that authenticate and certify) So then I guess the question is why isn't a central database maintained by a trusted authority (ies) just as good as a blockchain maintained by everyone?
Hungarian villages are fascinating. Are you tuning into something, in particular, about them? (For me, its the village sun alignments/road-parallelism that fascinates..)
Obviously this should be fixed, but as a work-around, does blotting the paths out of the binary with something like this not work?

perl -pi.bak -e 's|/home/kfairmasterz|xxxxxxxxxxxxxxxxxx|g' a.out
C# does not compile to native apps by default unless you're using dotnet core or whatever it is called. Powerful language sure, but there is definitely a bit of a divide between the languages just because of that even if they have a similar syntax and high level design