skysight-inc/HackerNews huggingface dataset:
I don't think keeping app shortcuts for SPAs is niche at all. I've seen plenty of people do it.

It is a much better user experience. With things like Gmail or WhatsApp Web I don't want them to be another browser tab, I want to be able to switch to it and control the windows with my window manager. I am never closing these windows, and trying to find them among open browser tabs in different browser windows is not fun.

Browser tabs are a not a good replacement for desktop window management.
Examples of popular apps that can write to the host filesystem (and remember kids, the ability to write to $HOME always means full account takeover, followed shortly by root access if your account can sudo):

- vs code (https://github.com/flathub/com.visualstudio.code/blob/91e589...)

- chromium (https://github.com/flathub/org.chromium.Chromium/blob/1edd4a...)

- sublime text (https://github.com/flathub/com.sublimetext.three/blob/d1f617...)

- obs studio (https://github.com/flathub/com.obsproject.Studio/blob/051f6f...)

The applications above also provide other dangerous privileges, but they pale in the presence of filesystem access.

Examples of applications that have full device access (which is considered insecure and called "not ideal" in the flatpak docs), as well as sharing a bunch of namespaces like network and IPC (meaning these parts are not sandboxed):

- discord (https://github.com/flathub/com.discordapp.Discord/blob/maste...)

- steam (https://github.com/flathub/com.valvesoftware.Steam/blob/beta...)

- telegram (https://github.com/flathub/org.telegram.desktop/blob/beta/or...)

- lutris (https://github.com/flathub/net.lutris.Lutris/blob/beta/net.l...)

Of all the applications I sampled (some by popularity, some random I knew), all gave full device access and disabled network/ipc sandboxing. A significant chunk gave filesystem=host access (not even home, host!).

(I am however happy to see that the number of filesystem=home/filesystem=host manifests seem to have dropped.)

> The fact that you're suggesting two separate technologies in combination confirms this, in my opinion.

Whenever independent tasks need to be accomplished, independent solutions is the superior choice. The alternative are monoliths and semi-closed gardens.
Obviously people think otherwise. We're tired of inflationary currencies that allow the government to devalue our hard work at their whims, because of their bad decisions and their borrowing money with usury. It's their problem, me and so many other people don't want to be a part of it. Deflationary is the way to go.

People keep complaining of the growing wealth gap, where inflationary currencies sit at the very center of the whole pyramid scheme. Look at what's happening in Venezuela or Lebanon.
In practice, excel has all types of issues as you approach a fraction of the available row/column maximums. Your files will be crashing, corrupting, or just impossible to use. If any of your rows or columns have formulas it’s order of magnitude worse at high volumes.

That said. Excel has power query/pivot and connects to a large number of external databases, flat files, etc. and it’s best to just never import the entire dataset into excel. That’s my view as a tenured financial analyst working with excel professionally since version 2003.
More than allowed - in the EU at least, telecoms (wireline at least) is heavily regulated, and monopoly infrastructure providers (i.e. wire owners) are required to provide wholesale services and operate on those services for their own retail arms. Mobile operators have slightly less regulation in the way of competitition but there are similar requirements for vMNOS etc. So yeah, overall margins tend to be smaller and there's healthier competition overall, but telecoms is still flush with cash in general.
Seam carving (2020) [video]
Down for me now, and reports on downdetector indicate also 12 hours ago. Scheduled workload gone amok?
>In the early 1960s, scientists realized that the surface of the

Sun oscillates, expanding and contracting in regular cycles of about five minutes.

[...]

>"Sound waves are characterized by frequency—the number of cycles that pass by a stationary point in one second. Our ears perceive frequency as pitch.

The five-minute cycle of the Sun’s surface corresponds to a frequency of about 0.0033 hertz."

PDS: Don't forget that anything that resonates at a particular frequency -- also has overtones and undertones of that frequency -- although those will typically be less pronounced...
Could Github Pages work too?
HDMI, at least in the Mac mini 2018, is lossy compressed which shows itself in bleeding colors / slightly blurry 4K.
Twitter investigating system irregularity after users report access issues
Excellent technique to gain feedback whilst still in the interview. I'll use that in the future
"what is good for you" is a completely tautological way of defining "a good diet". How can you say you are not just reinforcing your own presuppositions?

The only intuitive difference I see in those scenarios is that one has less calories and less fat (which are obviously both essential components of any diet).
Globally yes, but the thing about contact tracing is that it is inherently local. So getting 1/6:th (if we assume most of those downloads are in Italy) of a single country would probably be helpful in preventing spread.
SolarWinds hacking campaign puts Microsoft in hot seat
According to the status page, no issues in the last 180 days. But I can't login.
https://status.twitterstat.us/pages/history/564314ae3309c22c...

Why the lack of transparency?
Gold has a lot more intrinsic value than bitcoin will ever have. It’s quite reasonable to explain a large part of gold’s price as speculation on continued demand for jewellery.

There’s a 5000 year history of gold. But only a few grams per person in this world; and a great number of people feel some sort of pressure to buy a few grams for their spouses.

Obviously what I’m saying is an oversimplification. But if we imagined a world where gold did not have its lustrous history, it might still be sold at the same price. In this world, gold would still cost around 800 dollars an ounce to mine; but the only difference would be the market cap for gold would be very small and would serve its niche applications (comparable to the market for terbium or platinum).

Gold might be overpriced a little bit. But the debate about bitcoin is if it’s worth anything at all.

Disclosure: I work for a bitcoin trading firm.
I don't know. When I wrote my comment, it was the second comment in the entire discussion, and it seemed like an important issue to raise. Someone upvoted. Someone replied with a workaround, and I replied to thank them. I haven't seen this other comment that some of you seem to be referring to, so I assume it was subsequently deleted, but whatever it was had nothing to do with me.

It would be nice if we could avoid silly conspiracy theories and meta discussions on HN, but if anyone really wants to check, the link to my profile is right above this comment. It's the one that has been an HN member for well over a decade. You can't see that most of my comments across a broad range of issues get a few upvotes, but you can see that very few go down overall and I average around 1000/year in karma, which I think is a reasonable benchmark for being a real person who is contributing constructively here.
HTML, the dom, css and JS in browsers are far from simple. IMHO we’ve been tacking on more and more “application stuff” on top of a document viewer since the mid 90s. The whole reason React and other virtual dom frameworks exist is to wrangle the original document viewer into an application platform.

Yes, after all those years browsers are top notch when it comes to accessibility, but it comes with lots of additional complexity.

I am hopeful that with things like WASM and Canvas we are finally starting to move away from this document-based paradigm towards more app-focused paradigms.

Although there is still lots of work to be done to make approaches like this work with accessibility tools.

Sometimes i think that we are deliberately not adding dom support to wasm in order to not make the same mistakes we did when trying to make html/css/js suitable for apps.
Here’s a link to the original makers own account of running the site: https://notfunatparties.substack.com/p/inside-a-viral-websit...
It did, but perhaps the grounds that made countries and governments make sense no longer apply? After all nation states as we knew them today are a rather new innovation.
You're aware that telcos have massive amounts of physical stuff needed to make that happen first? You can't "cloud" hand wave away things like massive metro scale dark fiber networks for backhaul. Or things like inter city long haul DWDM networks. I assure you there's a lot more going on hidden behind the scenes of a modern ISP or 4G/5G carrier than just some antennas and software in a VM somewhere.
Lock you to Nvidia ecosystem
>I'm not sure if you can be more destructive than that without it being obviously visible.

I don't know if it the damage was greater than NotPetya but you definitely can have something more destructive without it being immediately apparent. If you lose credit card numbers and PII from your customers you HAVE to report it to the public but there are different rules for the loss of incredibly valuable intellectual property.
> Almost any static analysis suite

Yet not the most important static analysis suite, which is included in the compiler, and enforced on all code: the type checker ;)
I like this about elixir, in the documentation you can use exdoc to make sure that the code examples actually work, and provide code samples that are tested. It makes reading documentation for projects quite nice.
Unless using machine learning to process based on more granular criteria.
Oaklahoma Joe's Highland BBQ. It's an offset smoker BBQ which can also be a grill. Got one a few weeks ago and it's incredible. Built like a tank. 3mm cold rolled steel.

I'm in the UK too.
Nvidia GeForce RTX30 lineup to receive new revisions with cryptomining limiter?
Yes, it's a lot of work to create a good GUI toolkit. But it's not impossible either, and Flutter developers have already put in a lot of work into getting things just right on mobile, so I think they have a good shot at doing the same on the web.
how deep is your desk to be able to use all that screen real estate? I already suffer eye strain with my 34 4k as it's already too high
How is BTC mining a Ponzi scheme in a way that gold mining isn't? Neither require any insider information and new entities can join in the mining. In fact BTC mining has lower barriers to entry because it doesn't require license, land rights, etc.
Never. Most humans are not willing to make the changes that are required to fix this. Instead we should focus on mitigation and adaptability.
"But honestly? We shouldn't bother. Consume every new information with a critical mind, and don't expect editorials to do the thinking for you."

I completely agree.
> Why would Google want to exclude sites from calculations just because they don't make use of the FLoc cohort themselves?

I think it would make sense as a measure to mimic the old behaviour of 3rd-party cookies and avoid the whole "my site is being used for tracking even though I didn't include any trackers" problem: Sites that use FLoC would effectively behave as if they had all joined the same single ad network. Calling document.interestCohort() would be equivalent to including a tracking script. (Site owner gets infos from the script, at the same time the ad network gets infos about the user and about your site)

If course the tiny difference is that with cookies that was an actual hard technical limitation, while with FLoC it's just Google doing this out of the infinite goodness of their hearts. As such, I don't really trust them on this and they already seem to muddy the waters with the origin trial exception.
Nice link. I'd be happy if an implementation just turned that into a compiler error. I can see use cases for reaching in and mutating like that, but also seems like dynamic scope is a better solution for when you want that kind of action at a distance.
“So, yesterday I wake up, and I’m barely awake, you know? So I head to the bistro and order a coffee before work. The coffee is HOT, so naturally my clumsy ass spills the entire thing in my lap as soon as I sit down.”

Ordinary people in natural conversation will use the present tense to tell stories set in the past. So, “the coffee is hot” can sometimes mean that the coffee WAS hot.

It’s not something that we ordinarily notice or talk about, it just happens in ordinary conversation. So if we want to understand what “present tense” means, we have to take care to avoid being confused by the name, “present tense”. “Present tense” is just the name of a tense, but there are several different ways that it is used.
@cyberlab: “Is there the rare case that we shouldn't update because the update could contain a malicious payload?”

You don't ever update your security “computers” from some third-party outsourcer. What you do is have your own people constantly probing their own systems for potential vulnerability and patching it themselves.

* jeez ..SolarWinds run their stuff on FTP and "active directory". It's got to be a joke.

* “computers” .. not allowed to use the 'W' word ;]
Reminds me of how NIS used to work on LANs. Oh what fun was had in college with NFS mounted home directories...
Instagram Python Bot to send direct messages
The other user is apparently a bot.
Open-Source Deep Dive: Broadway
Bert hubert has another great article that is referenced[0]

[0]https://berthub.eu/articles/posts/how-tech-loses-out/

This article hits the nail on its head, and i can see it happening all around us, not only in the telcom/tech world.
Boeing is a prime example for instance, but also the general death of manufacturing in the western world has resulted in this.
There's something disturbingly dystopian about governments competing for access to private individual data, and us having to consider which one we're more OK with...

How about "no" to all of that nonsense?
> Alt insert generate equals method, select fields, ready.

This sounds like you're not programming in the Java language, you're programming in some sort of graphical macro language which compiles down to Java (presumably built-in to an IDE of some sort?).

The fact that people resort to such things is evidence that this is a valid criticism of the Java language.
Wait, really? Not like I'm a heavy Twitter user, but I did have an account there I used daily a few years back, and another I made just a few days ago for a bit - thus, a recent visit to the login page. And I have never seen that glitchcore stuff before.

edit: Google Image Search doesn't seem to know much about it either, with only four results, all from Pinterest [1]. I'd expect a lot more hits, if it had been Twitter's login page background for as long as you seem to suggest here. Maybe I've misunderstood what you're saying?

[1] https://www.google.com/search?sa=G&hl=en&tbs=simg%3ACAQStgEJ...
Well, you just presented yet another proof that living languages are deeply flawed. :(
The website mentioned in the article https://amazingribs.com/ is excellent. And it will help you skip a lot of the BS/myths that people are exposed to when starting out, because Blonder and Meathead (the main host of the site) do a number of pretty well-controlled experiments to mythbust or test methods as systematically as they can.
Thank you! The app is more like a Siri/Google Assistant/or Alexa but focusing on developers and potentially other occupations as well. I also did some thinking about using the term "Virtual Assistant" and found out that it - like you said - usually means people helps you out remotely. But on wikipedia, other similar AI-powered Assistant like Siri, GG Assistant, Alexa have the term "virtual assistant" in the definition. So I decided to go with it. I think Sunday is closer to virtual assistant than "chatbot" because it has speech recognition feature in it. Do you have any suggestion?
This article is a case of [a lot of] Monday morning quarterback[s]. Except for Mandia, I wouldn't allow any other exec(s) to speak about this, publicly, as to the why and how. Side note: I bet Bejtlich wishes he was still in that team ;-)
What do you use for the interpretation of so many languages? Did you just build a bunch of sandboxed vms?
Even if everything was in Chinese, hiring a Chinese translater costs pennies compared to any disaster that this could cause. The translater doesn’t even need to be Chinese; there are probably enough Europeans who have studied in China and returned.
> I'm sympathetic to the argument that Ponzi schemes inherently have a small group propagating the fraud

The existence of a group of insiders runing the scheme is really a detail when it comes to understanding how the market works. If it works like a ponzi scheme, does it really make a difference for the victims whether or not some people get arrested?
Using rotations is exactly what the poster proposed:

> I think that the most sensible universal angle unit is "rotations". So, 360 degrees is 1, 45 degrees is 1/8, and so forth.

It was a bit confusing because most of the post was about radians, then switched to degrees. It could have instead read:

> 2pi radians becomes 1 rotation. pi radians becomes 1/2 rotations. pi/2 becomes 1/4 rotations.
> You can't have both. If the service has account recovery after you lose your password or encryption keys, it can only mean that there is no any meaningful encryption.

Incorrect. Check Notesnook[1]. It solves both of those things.

[1]https://notesnook.com/
(no legal advise)

I think you also have to provide a postal address on the website (I think that also applies without gdpr)

https://www.termsfeed.com/blog/privacy-policy-contact-inform...
That is why I think Dell XPS 13 is top: three external monitors via a Thunderbolt TB16 and a desktop experience only plugging a single cable.

This is not to say that the XPS 13 is perfect (need to change battery every two years in all the notebooks at the office and the notebook gets hot) but the notebook is great in many other factors.
Imagine how much more peaceful, productive, and happy the world would be if this ended up being permanent.

An interesting metric I’d love would be: how many suicides per year could be stopped if twitter didn’t exist? I wonder if their is any number high enough to get them to stop what they’re doing.
Nice. Maybe they should keep it that way.
Work in Blockchain and Cryptocurrency
"Only thing I never did was lie on the resume."
And you don't have to.
You may want to speak to someone who can professionally advice on the appearance on your CV.
The same things can be expressed in many ways. Also, you may need to pepper your CV with keywords,so I'd go past recruitment software filters.
Examples of large production-grade, open-source React apps
I'm not sure what using the vectors for fluids has to do with this or what the parent asked. Fluids can use vectors, optical flow can produce vectors, but that is about it.

This person asked about clustering and segmenting into more than two separate groups.
As a curious polyglot, this is great.
The problem is playing in WOTC sanctioned events which do not allow for proxies. I can get why they want to do this, the whole point of these events is to sell more cards.

However there is a gameplay advantage as well. The high price of cards keeps players more stable and invested in their decks. You don't see players constantly running whole new decks, and sometimes people get creative due to financial or card availability constraints.

I was a part of a weekly legacy group that ran with a house rule of 10 proxies allowed. This hit a nice compromise between people being able to play decent decks while still having some kind of stability in the local meta.
> In a modern telecommunications service provider, new equipment is deployed, configured, maintained and often financed by the vendor. Just to let that sink in, Huawei (and their close partners) already run and directly operate the mobile telecommunication infrastructure for over 100 million European subscribers.

> The host service provider often has no detailed insight in what is going on, and would have a hard time figuring this out through their remaining staff. Rampant outsourcing has meant that most local expertise has also left the company, willingly or unwillingly.

100% reflects my experience working in Huawei BR a few years ago. Carriers are mostly customer facing companies and very limited technically.

Our customer (million + subscribers BR carrier) often hadn't the slightest idea how their own network was built and worked.

Banning Huawei is absolutely impossible, at least in Brazil.
If you try to switch accounts, that's it. You can use Twitter, but you can't login.
You could require authentication (and as other posters pointed out, make sure to spoof any wrong authentications for maximum deniability).

It is also simple to serve some pages over HTTP alongside the proxy functionality so that the server appears to be a typical web server. Just turn on mod_proxy_connect in addition to your existing httpd configuration if you use Apache for example.

I use this method on my domains, although I've never tried using it from within e.g. China
The cofounders already claimed their "trained Marxists", then removed it from their website.
Yes. While syntax highlighting is getting rendered, scrolling lags a lot which is really annoying when you want to get to a specifc part of the file quickly. Once I noticed this, it was very hard not to see the same lag everywhere.
LSP-I don't know how this works.
That's all I've ever seen it to have, too. Maybe a recent A/B test with a low experiment cohort % or something?
> No incidents in the last 180 days

Guess, there is issue in https://status.twitterstat.us itself - it parses Twitter API, and that is why there are NO issues (Twitter API is working even now!).
I agree with you, but I don't like the argument.

Something of it smacks of hypocrisy. I think you should be guilted into donating 5% of your wealth by that reasoning. Yeah you don't have 100M, but just like them a 5% donation won't materially affect your quality of life. How do you feel about that? Do you still feel it's anti social behavior not to do that?

Because I call hypocrisy otherwise.
Yeah, it's not that it eavesdropped, but that it gave itself the opportunity to do so, and that no systems were in place to keep track of that - i.e. that whether it happened or not, KPN would not be able to have evidence of that.

That said, a month ago it was reported [1] that Huawei did explicitly add a way for them to access customer data of one of KPN's subsidiaries, and that it used that "regularly". Could theoretically be e.g. to aid debugging or something, but not a great look.

[1] https://nos.nl/artikel/2374551-huawei-had-onbeperkt-toegang-...
ET: The Extra Terrestrial – Remake of the Atari Classic in 10 Lines of SAM BASIC
Indeed, SS7 is based on a whole host of assumptions that just can't be relied upon. Since SS7 doesn't even bother to try to verify who anyone is (you'd only peer with trustworthy people, right?!), it's also very hard to hold anyone accountable too. And since the idea of SS7 signalling is that it can be forwarded and passed around, it simply needs to be replaced by authenticated, access-control validated signalling. Then you can at least have some confidence you're actually hearing from a network that has a reason to be communicating.

Too much of SS7 comes from a world where anyone can do anything - there's no legitimate reason in 2021 for an arbitrary network to be able to request a user's network location and cell ID, but the protocols support it. SS7 firewalls try to plug the gaps, but ultimately you just innovate in how you try to get the network to hand over what you want, and eventually you'll find a way the firewall doesn't spot. Cat and mouse continues.

Telco networks are "zero trust", just not in the right way(!)