skysight-inc/HackerNews huggingface dataset:
there are examples of firefox protecting 'less sophisticated' users from abuse while still allowing them to go through with it if they really want to. such as, opening up the inspect element area and receiving a warning + having to type 'allow paste' to be able to paste javascript into the console. there's ulterior motives for requiring mozilla to sign extensions, and it isn't about protecting users.
That's oversimplifying a little. Miners are much more expensive than radiators, so again, the heat is the bonus, you are investing in mining equipment, not a heater, and the resources for making said mining equipment are much more than what it costs to make a heater. Using old junk equipment works but won't make you much.

It's also less efficient than a normal heater, especially compared to heat pumps. The difference is only made up in mining, which is itself a super inefficient process, as we know. Less so when you use them as heaters... but they aren't great heaters.
All, since 2010.

https://www.iana.org/dnssec/archive

Although this is a big "just" because of the amount of fanfare and (literal) ceremony, DNSSEC support on the server side is just about signing zones and being willing to serve the associated RR types.
Ask HN: How do you debug your JavaScript?
I’m getting tired of using console.log all the time, so I’ve finally decided to learn how to debug frontend code the proper way.

What are your favourite javascript debugging tips and tricks?
I'm still expecting the: “We apologize again for the fault in the commits. Those responsible for sacking the people who have just been sacked have been sacked.” - UMN CS&E
Even if they didn't write or perform part of the research, they did act in an advisory or consulting fashion, and therefore could significantly shape the research. Maybe there should be a different way to credit that, but right now convention is to put them in a low position in the list of authors.
I feel you're overvaluing the ability to contribute to the linux kernel - this is definitely a bad thing and the university should work to correct the situation. But when I was looking at colleges and universties (for undergrad - I didn't pursue a grad degree) I didn't ever ask if the university was blacklisted by any open source organizations.

I don't think anyone would notice this ban - it'd just be an odd curiosity and impediment to any student that tried to submit a patch... that is assuming it doesn't hit the main news circuit.... But, if I hear about this on Colbert tonight I'll be amazed.

The fact that the FBI raided Steve Jackson Games[1] over GURPS: Cyberpunk is, I think, completely absent from general public knowledge at this point - even though that incident[2] led to the creation of the EFF which most folks on HN will certainly be familiar with. Notoriety is a fickle thing and no matter how negative the incident is it'll usually either fade into nothingness or give a positive boost to the organization - this is where the concept of "there's no such thing as bad press" comes from. I, at least, am far more aware of UMN now than I was this morning.

1. http://www.sjgames.com/SS/

2. There's some disagreement over how central this incident was to the EFF's foundation, but from what I've read it was pretty darn central.
The react extension is pretty powerful. You can work without it, but it enables debugging techniques that would be much harder without it.
HN thread on the primary source (Signal blog post): https://news.ycombinator.com/item?id=26891811
Automatically open the files with Cellebrite software tools in a sandbox environment?
What’s next? Being pro or anti tax will be considered racist or anti-racist?
We already know that good faith can be abused, it's practically implied in the phrase itself. There is nothing of value to be learned from this "research".
Building 3 Magical Counter Buttons in JavaScript
I'd astroturf for that.
I think you should (mostly} believe reports from China - their lockdowns were unbelievably strict, much more even than here in Vietnam.

As for Africa, yeah, there's probably major undereporting.
ugh, that borderless menu is bad.

my pet peeve about popups is that some of them can't be distinguished from popups created by the website.

for example when firefox asks me if i want to allow notifications, i can't tell if the website is trying to trick me in clicking on something malicious.

browser UI elements should be clearly distinguishable from website elements. hopefully those updated prompts will fix that.
Why Not Discord for Business?
> It takes ridiculous energy to get here.

That's our assumption using technology we are already familiar with.
Microsoft screwed up their reputation with this move big time.
> this removes the ability to do it under the auspices of a university

It really doesn't though. You can claim ownership of that email address in the published manuscript. For that matter, you could even publish the academic article under a pen name if you wanted to. But after seeing how the maintainers responded here, you'd better make sure that any "real" contributions you make aren't associated with the activity in any way.
I wish this was heavier on the details. SQLite on the electron apps seem easy enough to implement but I’m curious how they made the switch on the browser?
The same can be said about any software, really. It’s all too easy for a single malicious dev to introduce security bugs in pretty much any project they are involved.
No. Study the process is not study the humans involved in the process. No matter how many words you put in there, A != B.
Discussion of a different article about the same person here: https://news.ycombinator.com/item?id=26889281
Joke's on you - this was really sociology research on anger response levels of open source communities when confronted with things that look like bad faith.
0.1 ETH to $30M in 46 days
The more accurate anology would be academic researchers sending graduate students to get hired by Microsoft under false pretenses, and then demonstrates that they can introduce security vulnerabilities that don't get caught by Microsoft's code review practices --- and the submits a paper to the IEEE saying that obviously Microsoft's hiring and software engineering practices could be improved.

At least with OSS everyone can audit the code, and run their own security scanners on the open source code. If you think that somehow proprietary software is magically protected against the insider threat, you're kidding yourself. Even the NSA couldn't protect against an inside like Snowden.
> So, as long as you ignore the formatting they presented it with and decide to read it without it, you can come to a different conclusion?

No. It reads that way with the formatting they provided. You can’t take that paragraph break out without putting one back exactly there. It’s refreshingly transparent, and perfect if you expect them not to care about the underlying cause as much as they care about the ban.

> I don't think contortions such as that to link sentences is fair, nor the fault of the organization that put forth for a statement specifically separating them.

It’s not a contortion, it’s just how it reads to me. I’m not taking some deliberately contrarian stance – I was really quite shocked at the multiple comments saying how great the statement was when it inadvertently or otherwise conveyed the very message I believe they should have avoided – the one where they simply do the least they need to do to get unbanned, which may well be closer to the real objective. It’s the difference between being shamed into action and recognising why action is necessary.

I would not want to be the person to have to write such a statement
Now consider what you and the sibling comment say in the context of a representative democracy.

How many of the people that truly have no food to eat will go to vote?

Or, how easy are they to corrupt?
Take a look at the regulations[1] implementing the CAN-SPAM Act, specifically §316.3a(2)-(3) and you can probably figure out where Comcast is technically complying with the letter of the law. You can also check your account agreement. I would imagine they’ve got a broadly phrased paragraph or two saying they’re allowed to contact you with “updates” about the service.

[1] https://www.ecfr.gov/cgi-bin/retrieveECFR?gp=1&SID=cea8be427...
You can also compile OCAML/ReasonML to Erlang.

https://caramel.run/
that'll solve it!
It has been 8 years since proposed: https://bugzilla.mozilla.org/show_bug.cgi?id=836897

MIDI is not very fringe, and far more people have MIDI controllers than VR headsets, yet Mozilla puts resources into that. My roommates aren't too technical, but all of them have MIDI controllers, and one has made an entire EP on the browser (in Edge!).
As existence proof, I buy stuff I see when I'm watching TV at someone else's place or when I use Instagram (which has ads right in the Stories feed). I see no reason why I'm special since I'm a pretty normal user when I'm using these things.
What sort of lawsuit might they bring against a university whose researchers deliberately inserted malicious code into software that literally runs a good portion of the world?

I'm no lawyer, but it seems like there'd be something actionable.

On a side note, this brings into question any research written by any of the participating authors, ever. No more presumption of good faith.
It does seem like ultimately they played themselves by getting permanently banned from participating.
The India variant, B.1.617, is a double mutation that seems to effect younger populations. The new explosion in cases is purported to be related to this variant and is said to be more transmissible than the South African variant.
The suburbs, away from COVID and riot prone areas.
Signal should generalise this into a library so that other app vendors can include these perfectly cromulant files
WSL2 runs in a vm which is integrated with windows, so it actually dynamically requests memory from windows as required. It also can release memory back to windows and is basically is represented on the windows side as a windows process.

Unfortunately like a process there is no way for windows to request memory back from linux (besides killing the entire thing). So its up to the linux kernel to decide what to release back.

What that configuration does is limit the maximum amount of memory it can request (what the linux kernel sees as the total system memory). The reason you need to set a limit right now is that the linux kernel will pretty quickly request most of your windows memory to use as page cache if you don't limit it.

Microsoft is working to allow the linux kernel to use the windows page cache instead of maintaining a separate one.

https://github.com/microsoft/WSL/issues/4166#issuecomment-64...
I think you are misunderstanding what happened. They emailed the patches to the maintainers, and when the maintainers responded "this looks good", then told them there was a bug in the patch. They never committed a bad patch to the source tree. The problem is they were deceptive in their initial email, not that they actually introduced kernel vulnerabilities. No bad code was ever committed, and they had a written mandate to verify that.
No, because that would be active retaliation.

More realistically it is like dropping a file on your private file server DONT_RUN_THIS_BLOWS_UP_YOUR_COMPUTER.exe. You never run it, but maybe somebody exploits your file server, gets all your files, and automatically runs them?

Oh well.
> lamenting that they were going to potentially bring up mechanisms for having to treat every committer as malicious by default

I think "lamenting" is very much the wrong attitude here. Given all the things that make use of Linux today that seems like the only sane approach to me.
Tracking aside, ads are essentially malware for the mind.
Dialyzer is such a weird beast, it's overly optimistic IMO. We have code that almost literally is

-record(outside_error, {
reason :: term()
}).

-record(inside_error, {
reason :: binary()
}).

-spec to_inside_error(#outside_error{}) -> #inside_error{}.
to_inside_error(#outside_error{reason = Reason}) ->
#inside_error{reason = Reason}.

and it typechecks just fine. I mean, yeah, we actually always used to have binaries in #outside_error—until now. Now we've started to sometimes pass a map in it. And so, somewhere down the line calls to unicode:binary_to_characters/1 suddenly start crashing because a map is not a binary, duh, but! it all still typechecks. Amazing.
CarbonPlan is doing a great job bringing transparency here by analyzing and publishing proposals to the major carbon removal programs to date (Stripe and Microsoft): https://carbonplan.org/research/cdr-database
Each bit used halves the potential encoding space, e.g. 2^32 -> 2^31 possible instruction encodings.

For thumb, 32-bit instructions can be allocated up to 3/32 of the potential 32-bit space, and 16-bit instructions can use 29/32 of the 16-bit space (3 of the potential 5-bit opcodes denote a 32-bit instruction.) Which is probably a better ratio than 1/2 or 1/4 of each, for instance. Though I'm not sure how much of that encoding space is actually allocated or still reserved.

Related, I believe ARM has allocated about half of the 32-bit encoding space for current A64 instructions.
I wonder if informing anyone of the experiment would be frowned upon as it might affect the outcome? However, this research doesn’t appear to be fastidious about scientific integrity so maybe you are right.
IANAL, and I don't speak for Apple, but as far as I can tell, the part about Apple is nonsense.

CoreFoundation is open source: https://github.com/opensource-apple/CF

libdispatch is open source: https://apple.github.io/swift-corelibs-libdispatch/post/libd...

ASL is open source: https://opensource.apple.com/source/syslog/syslog-349.1.1/li...

The objective C runtime is open source: https://github.com/opensource-apple/objc4/blob/master/APPLE_...

icu, pthread, zlib, and libxml did not even originate at Apple.
Why I distrust Google Cloud more than than AWS or Azure
The original title is much more informative (though probably over the character limit):

> Microsoft revokes MVP status of developer who tweeted complaint about request to promote SQL-on-Azure

> Programme members were asked to make noise ahead of Amazon Web Services conference
I was trying to be as less inflamatory as possible above.

If you think it still should not be there, feel free to delete that post.

I'd say the original post is tactless in its wording, and is expressly offensive.

Even if any point can be drawn from it, it wouldn't still be possible to twist, or rephrase it without still sounding offensively.
FWIW, I put my books on Amazon with DRM turned off, but I get what you're saying. I'm honestly not certain about the state of DRM in the other ebook stores. As I understand it, you actually can back up your ebook library using Calibre, because all DRM systems are breakable.

I think more people are likely to lose access to their crypto wallet that contains their books than Amazon will cut people off from their libraries.

As much as I like the vision you're presenting (and I do! there are real reader wins for that), I'd rather see BookFunnel build a full storefront. They already have their own reader/audiobook player app and keep track of books you've bought. They can transfer those books to your device of choice (Kindle, Nook, etc.), so you're not locked in. Worried about BookFunnel losing your account? None of their books have DRM. They could even make it so you can download your whole library to make a backup.

Thus far, BookFunnel is an author service company. Authors pay them to distribute their books. Adding a storefront would be a big shift, but they really could put together something great.

Of course, adding resale when books don't have DRM is essentially impossible. Which would you rather have? DRM and the ability for the merchant to remove books from your devices, or no DRM but the ability to resell the books?
I didn't say bias is not a thing, bias is very real.

All I'm saying that the collective bias that was stipulated, spanning across tens of thousands of users and dozens of languages, would need to be very organized.

Which has nothing to do with wikipedia editors being typical of the population, but a lot with trying to stereotype wikipedia editors as supposedly all sharing the same political bias.

When in many cases they don't even share the same language, nor the same conceptual framework about political dimensions/currents due to often very big cultural differences.
No notification from ParkMobile on the breach to their customers. Wonder what class-action lawsuits that might trigger.

“It’s also curious that ParkMobile hasn’t asked or forced its users to change their passwords as a precautionary measure. I used the ParkMobile app to reset my password, but there was no messaging in the app that suggested this was a timely thing to do.”
Hack the Planet o/
I prefer the icon menu bars with text underneath the icons. iOS Apps use this a lot: https://developer.apple.com/design/human-interface-guideline...
Laws exist ideally to limit freedoms whose exercise comes with externalities that end up reducing the freedom for others. These range from freedoms to cause harm to others (steal, assault, enslave), to freedoms to sell food without disclosing ingredients, to freedoms to run a business without transparently reporting financial information. The idea of greater freedoms depending on lesser restrictions is not novel.

> Lack of competition is what lets developer's exert power over users, and while copyleft licenses help with that, they're neither required nor sufficient to prevent abuse of power.

Copyleft/FLOSS alone is a necessary but insufficient measure; I wrote about other measures in a blog post [0].

[0]: https://seirdy.one/2021/01/27/whatsapp-and-the-domestication...

TLDR: open platforms/standards-driven and implementation-neutral development, implementation diversity, and simplicity are also necessary. Once all that is accomplished, you have a platform that prevents abuse of power: anyone can use any implementation they want, and implementations are simple enough for community members to fork and maintain. All of this prevents vendors from exerting power over users.

> At the same time, copyleft doesn't come free (ha), as developers who need to earn a living will choose to work on problems where they can actually extract some profit to compensate for their effort. Not everyone is keen to work for free, or work as much / as hard for free as they would if they could make a living off it. So yes you might get free-er software, but less of it.

From the article I linked:

> The key to making money with FLOSS is to make software a commoditized complement of other, more profitable services. [1]

[1]: https://www.gwern.net/Complement

> Examples of such services include selling support, customization, consulting, training, managed hosting, hardware, and certifications. Plenty of companies use this approach instead of building proprietary software: Red Hat, Collabora, System76, Purism, Canonical, SUSE, Hashicorp, Databricks, and Gradle are some names that come to mind.

> Managed hosting isn't a basket worth all your eggs if giants like AWS can do the same at a lower price. Being the developer can give an edge in areas like customization, support, and training; it doesn't offer as obvious an advantage when it comes to hosting.

In other words, developers should be paid for service rather than copies of software. AGPL makes it hard to sell copies of software, but doesn't stop you from offering any number of services. This makes sense, since labor is a scarce resource while copies of software require artificially-imposed scarcity to directly bring revenue.
Oh god, please stop with the UI/UX churn. If I knew nothing about Firefox outside of browser updates I would think the parent company was overflowing with money and devs/designers were hunting around for makework projects. It would certainly explain why they keep "improving" the UI every year by changing, breaking, moving, adding, removing, redesigning, and redesigning again all of the basic functionality.

It's all a massive waste of time for what users they have left. Most people just want their browser to be a reliable tool that lets them get to the content they're interested in. Facilitating that appears to be towards the bottom of Mozilla's priority list, below random hobby projects, talking about social justice, UI redesigns, and increasing executive compensation.
I've never heard of an ice cream district. Supporting articles welcome. (I'm aware of, say, fashion districts or restaurant districts.)

I'm genuinely interested in what kind of research one should do if they want to successfully start a restaurant. I will likely look around myself at some point, but if anyone wants to give me links to good stuff, I will totes give one whole free upvote in exchange.
Hello joadha, your first paragraph comes across as ranty and even arrogant (i.e. implying you are the authority on UX choices). You offer no valid support for your argument.
He is an adjunct that just trashed university's reputation. I'm sure it would even fall into firing for cause
Your senator makes decisions based on public will and letter writing is a proxy for that. They have a team to deal with the inflow. Your average PhD student isn't equipped in the same way to deal with an outraged public.
It’s a tradeoff - you’re starting a business. It’s risky and time consuming enough as it is. You go with what’s quickest and where the users are. Thinking of vendor lock in is low on your list of priorities and rightly so. When you grow big enough then it takes higher precedence but till then there’s bigger fish to fry
> To get more specific: CS department leadership didn't know about the back and forth or publicity about this work in December.

"_or publicity_"

I think that says enough about the U of Mn.
Sending a cease and desist to Cellebrite for shipping their DLLs in their product I imagine.

Obviously there may be some backchannel, but that is probably how it would go if you assume Apple and Cellebrite have no relationship.
The Economist is a step up from The Daily Mail or The Washington Times. But that’s not a high bar. Despite the name, it has almost nothing to do with academic economics.

Short Economist articles are not remotely comparable to literature reviews in top peer-reviewed journals. Such an absurd comparison demonstrates a lack of basic familiarity with either The Economist or Nature.

This particular article consists of a few paragraphs of unsubstantiated dogmatic whining, centered on a facile, grossly misleading comparison of San Francisco to Cambridge MA. It cites zero economists. No reputable scholar would be willing to attach their name to such drivel.

> That's literally a logical fallacy

You don’t seem to understand the meaning of “literally” or “logical fallacy”.