skysight-inc/HackerNews huggingface dataset:
They could've sent me a confirmation link since the email was linked but the login credentials were the fraudsters (couldn't reset via email). Though that obviously has issues as well.

I'm not entirely sure, but there was no way I was going to give out sensitive information (imo) to a website that I'm not familiar with. Even at the time I was trying to get support, It felt like the company wasn't even legit.

No great answer here. Maybe escalate to a manager and have a more involved conversation.
> This is absolutely absurd and completely false.

No, it is neither absurd nor false.

> It is not private information that I am running a copy of Audacity or Firefox or Emacs (quite the opposite, I want people to know that I use the superior text editor)

That's your choice. But your choice should not be imposed upon others.

Not everyone wants others to know what software they use. I don't want others to know whether I use Audacity or WinAmp or Clementine or VLC or Firefox or Chrome or Vivaldi or Opera or Emacs or vi or vim or TextEdit unless I specifically choose to tell them so.

> and neither does the same statement apply in real life - "anything and everything a human does IRL is private" is a similarly obviously false statement.

I didn't say anything and everything IRL.

If you're in your own home then everything you do in your home should be private. Likewise when I'm using my own computer then everything I do in that computer should also be private.
Assassin's Creed Infinity reportedly pivoting to live service
I know EU deals with anti-dumping[1]. As of 2019 there were anti-dumping measures for 67 products from 10 countries as mentioned in the annex of the annual TDI report[2].

In section 3.1.4 of the annex, they go into some detail regarding a dumping claim on electric bicycles from China.

[1]: https://ec.europa.eu/trade/policy/accessing-markets/trade-de...

[2]: https://trade.ec.europa.eu/doclib/html/157811.htm
Yup, and the debt was due 200 years ago and worth around 21 billion dollars.

For fun I ran the numbers, at 4% real interest which is realistic for a developing country, that's 2.55 trillion dollars in lost interest.
How can they suggest those tents would be "temporary" with a straight face?

If you're not planning on building more houses except those tents, how do you expect anyone to move out of the tents into houses?
You mean the 2 North American countries? Yes, the U.S. and Canada are similar in that they have functioning economies, and citizenry that is not desperately trying to flee.
I sort of intend a more general sense of “legible” here: something like the sense used in Seeing like a State.

But, in general, I think the sorts of in-road things you’re suggesting are really valuable: “upgrading” our roads this way should pay dividends in terms of the amount of capital it takes to get a new self-driving-car system off the ground: embedding such tech into the roads seems like a public good that would benefit anyone trying to make a public car by lowering the R&D cost and centralizing some of the intelligence necessary for such a system.
I agree on the legitimacy of the overwhelming results of the Gibraltarian sovereignty referendums, but Ceuta and Melilla are indeed different. They are integral parts of Spanish territory as much as the Scilly Islands are integral parts of the UK.
What observations do you have for classifying the Northern Europe population as "basically decent people?"

What defines and motivates the observed behaviors of folks who are "basically decent people?"

How can that answer be distinguished from that of folks who are not "basically decent people?"
Is this a parody? Most of the Go players I've met are thoughtful and well-adjusted - they don't resemble this stereotype at all.
Indeed, npm is not aware of the context of the vulnerabilities. That does not invalidate them, however, and mean they should be hidden. I've worked in offensive security for quite long enough (been a dev for 10+ years before) to tell you that your context, or the most common one, isn't all that exist and someone's going use it the way it makes the app vulnerable. Based on the article's example, someone's going to build an app that builds an app.

A vulnerability is a vulnerability, whether it applies to your context or not. A metaphor might be: "The passenger door is broken on my car, but I'm the only one to use it". Seriously, who, in their right mind, is going to argue that the door isn't broken?

- If your dependencies have security vulnerabilities, apply the updates.

- If you cannot update because there's no fix available, let your org or you assess the risk and go from there.

- If you cannot update because it breaks your app, {find a replacement, fix it yourself, let your org or you assess the risk and from from there}.

A sensible org has a process that freezes releases until known security issues are fixed. Freezes can also be opposed by devs and are evaluated on a case-by-case basis (because sometimes they are not relevant to the product, or someone steps up to take the blame for incidents and the org agrees).

We might not like it because it disturbs the "flow", but it's just part of the engineering process. More to the point though, why not take this opportunity to teach newcomers how to code properly, pick well-engineered and -written programs, and handle this vulnerability management process altogether? In any case, I hope newcoming-dev is not going to push to prod anytime soon. ;)

edit: formatting
When someone makes an extraordinary claim, “Bitcoin fixes this,” the burden is on them to explain how that is the case.
Finding the best text editor for you
I really love the ideas expressed here and on the home page, especially (ie., just personally, a side-note if context) as text adventure games have been a focal point between my non-gameing SO and I in an ongoing debate on where to draw the line on what counts as a "game". Anyone got with experience with the "Knights of San Francisco"?

https://play.google.com/store/apps/details?id=egamebook.com....
Except... that's just the first part. Where's the second part where they "do whatever they want" (I assume this meant raise prices)? Even after winning, they haven't done this. Why?
Ah, so I was more getting at a style seen in the Netherlands. The residential neighbourhoods have short sections of roads with frequent choke points (sometimes featuring speed bumps, but sometimes just narrowing of the road to a single lane), together with frequent one way sections and blocked routes for cars but continuations for lighter vehicles.

From the perspective of a vehicle, the neighbourhood is precisely a pod: disconnected from a neibouring region until they filter from the residential streets onto a more main road and then back into the neigbouring residential area. However, to pedestrians and bicycles, there is no real delineation. Mazelike to vehicles, multiply connected and convenient to pedestrians and bicycles.

Edit: so pedestrians and bicycles will typically avoid the choke points since more direct routes are available to them. On the main roads where vehicles become congested (and faster) clear separation of the traffic types becomes increasingly necessary compared to lazy back streets where bicycles and vehicles can intermix (these people will typically be neighbours anyways).
I thought walmart just had lower prices, period, rather than having lower prices when they enter and then jacking them up.
Can you people stop submitting this fraud reporter's content on here? The guy doxxed security researchers working under pseudonyms when they criticized his bad articles. This guy should be yeeted into the sun, not voted atop HN for every piece of blog spam.
Given the Convention of the High Seas was only formalised in 1958 - 245 years after the Treaty of Utrecht - that seems like a bit of a curious drum for Spain to keep banging. A not unsurprising drum, but .. well, Spain.

To be clear - I love Spain and its inhabitants - my folks live there to this day, near Gibraltar. I dislike my own government and I dislike the Spanish government, the latter of which I was subject to many petulant irritations when I lived in Gibraltar. There are no winners there.

The stupid thing is - prior to my moving to Britain at the end of the 90s, I honestly thought that relations were warming to the point where it was not inconceivable that Gibraltar's status with Spain might change favourably. Perhaps even joint sovereignty, or something.

Actions by the Spanish government have since nixed any such good nature and things are as bad as they were during the border closure years. They don't do themselves any favours.

- ed: oh, I should've clicked your link! Yes, that is a better reference than my likely-unrelated CotHS.
Perfect for

https://www.reddit.com/r/ABoringDystopia/
I find it irritating that the BBC fails to mention how bad the new UK legislation on the right to repair is. Neither this article nor the one linked in it mention that the UK law excludes smartphones and laptops (https://interestingengineering.com/uk-right-to-repair-law-le...). Two of the main offenders when looking at if from a consumer viewpoint.
My son has a Greenlight card. It's been fantastic for helping him understand allowance, savings, charity in a more modern age than when I used to get cash I put in an envelope with a table on the front. It's taught him about interest and he's able to see quick results (especially when I started his savings account at something crazy like a 500% interest rate to encourage him).

As others have mentioned, cash is near useless for children nowadays. He used to give me cash when he bought Robux etc but cash is also near useless for me.

I was concerned when I saw this headline but it's not quite clear to me what impact this would have on him, that wouldn't be gathered once he got a credit or debit card as an adult. Maybe because he literally purchases from only three places (Apple Store, Microsoft, Roblox) and donates to a panda charity.
Their data is so wrong.

Fizz for example is for Quebec subscriber only (but offer coverage over the whole country). It's still quite expansive per GB if you get the smallest amount of data, but still you would get for 16$ CAD per month for a 1 GB mobile plan. That means 0.0178$, which is an order of magnitude cheaper than what they said.

I don't know how they got their price, that's really not clear from their page. Canada is a HUGE country, there's not a single provider that has an unique price for the whole country. Some province get far cheaper price for many different reasons (competitive market, population density, type of users, etc...). Even the big providers doesn't keep the same price in every province.
The whole point here is that parents should be able to guide their children into becoming social citizens in today's world - which means online. We're here to discuss parental agency and online privacy for children.

We aren't here to discuss how great your parenting skills are. My ex has a narcissistic personality disorder and ... well. Any time somebody brags about how great a parent they are - especially when it's in the context of controlling children - I automatically think they aren't a great parent. That's probably just me and you probably are a really great parent, but I promise you I'm not the only one here thinking it.
Social Media Platforms as Common Carriers? [pdf]
As mentioned in the article we ran into the same overload and just ended up running `npm audit --production` as part of our CI pipeline since that's what would be going out.
> or that we lost half a million people in the labor force...

This is not true, unless you're considering all ages in the labor force. Stats from this page[0] seem to indicate that COVID-related deaths are <120k for people under age 65. That's quite a bit less than "half a million people" in the labor force. (Assuming, like I am that people tend to retire at 65.)

[0]: https://www.statista.com/statistics/1191568/reported-deaths-...
"Pay more" does seem like the best response here
The larger point is not to send your kid to that store if they only accept a debt card.

They only exist if you keep going to those stores.
> It's circular logic but probably good enough for the fascists...

Er, fascists? We're talking about the CCP here -- these are communists.
> The rules are far more clear.

Can you clarify this? As far as I'm aware, the US govt can dispute anyone's citizenship without recourse, even if you're holding e.g., a valid passport.

From 2016: https://www.npr.org/sections/thetwo-way/2016/12/22/504031635...

As far as I know, nothing in this article has changed.
NYC in 2021 is very different from NYC in the 1980s.
Some might react and say "just move to Linux (even only the servers!)" and while I'll say NeXT/Apple's design of CUPS is great, it's harder to get a good Linux printer driver that's designed for business use (HPLIP is... painful, and I'm pretty sure that's out of most support contracts).
Haitians also continued using slavery - ah, excuse me, forced labor according to academic sources - after their revolution. They don’t really have the moral high-ground there either.
Yep, some vulnerable package isn't even in the compile output. How a dev server that only binds to 127.0.0.1 a serious DOS problem? Who on the earth will want to DOS that?
I will very much concede that luck and skill start to look pretty similar when you win :) I like to remind myself of that pretty regularly.
People on C++ chat balked when I brought up the idea that garbage collectors were not inherently evil things, and that some languages with a (for a few of these, optional) GC -- like D, Nim, and (written a particular way) even C#, could be used for systems programming or OS'es.
It isn’t that people here don’t pick up sarcasm it’s that sarcasm as an entire comment isn’t really welcome here. This isn’t Reddit and comments are supposed to have substance.
Thought this might be about getting "VAX-inated" with the vaccine..... ;)
The US has extraterritorial rights to German military bases to this day.

So they may not have a crippling financial debt, but the loss wasn’t “free”.
I think: “DEA operations everybody stand down. DEA operations everybody back up, stand down.”

The speaker definitely has a Southern American accent. The caption under the video makes it sound like the speaker was part of the security(?) team responding to the intrusion/assassination which is perhaps why there is confusion about the assailants speaking Spanish/English.
Even if photos don't match, tbh.

Pictures on IDs are generally years/decades old. I'm sure that anyone can sit in a plane with someone else (non biometric) ID without any issue at all. Hell, my son is literally 2 months old on its ID photo and this thing is valid for 10 years !
I think this is a really great article and highlights an important weakness that modern security tools in this context have: they don't distinguish between vulnerabilities that can be triggered by malicious developer code, and vulnerabilities that can be triggered by malicious users/websites.

For a proper assessment, such differences need to be encoded in the security advisory, and the audit tool needs to analyze if the code is called at run time or build time, and then act accordingly.
> … "get to the actual point, and target mass surveillance and collection of huge troves of personal data no matter the purpose."

This! Exactly this!
> Private relay will egress from the same general region as the client source location.

It's supposed to, but that is definitely not currently the case.

If that will be fixed during the beta period is unclear.
Off the top of my head:

- Gitlab

- Bitbucket

- Beanstalk
Agree, people often seem to downplay or ignore the power of incarceration.

It's a completely different type of power than ad tech and a myriad of other lesser powers, it is the most in need of thorough checks and balances.
Why even running a Windows 10 instance in that case? Esp. if it's for backward compat with old crap; run a Win 2k, it will be lighter. And only marginally less maintained, which does not even matter if you isolate like that anyway.
> one of that alternatives is ivermectin.

The old, safe antihistamine/anti-serotonin drug Cyproheptadine is promoted by a few lucid doctors as basically an antidote for the serotonin storm that underlies severe cases of COVID-19. @farid__jalali (tweets are now private, maybe he got tired of harassment?) is one of the major advocates for this treatment strategy. He liked my recent comment about "missing the forest for the trees" [0].

> Im not saying go out and get covid but people are already getting covid

A lot of people have already had a case of SARS-CoV-2 (and are therefore already immune), as it was spreading like wildfire well before the tests became available in March 2020 [1]. I had an odd headache in the December 2019/January 2020 period; in June 2020 I met a woman who claimed the symptoms of her eventually-diagnosed COVID-19 started December 7, 2019, "soon after [her] friends came back from their trip to China."

I had a blood draw for the T-Detect test last week. This will determines if my T-Cells recognize SARS-CoV-2. T-cells are a more long-lasting indicator of immunity than antibodies.

> and we need to lower their chance of hospitalization

The problem with hospitalization is that doctors have forgotten that pure oxygen is toxic and causes a cascade of harm to the whole body. I've put some effort into exposing the routine use of oxygen by our medical system as #MedicalHyperventilation [2]. The tragedy of routine hyperventilation is that the antidote is simple, effective, and profoundly therapeutic. While most doctors are aware of #OxygenToxicity, they are not aware of the antidote. :(.

p.s. Welcome to Hacker News, I noticed that your first comment was ~5 days ago. Here's some upvotes. :)

[0] https://twitter.com/TaxiCabJesus/status/1412654755415879690

[1] https://news.ycombinator.com/item?id=27750472

[2] https://www.taxiwars.org/2021/06/folly-medical-hyperventilat...
1. Humans require natural resources to survive

2. All private property that can be claimed will be claimed before you are born

3. You are now reliant on someone else's private property to survive, creating a relation of subordination.

So, unless you own enough wealth to live passively from, you will have to subordinate to someone else to survive. And empirically, this is true, the vast majority of people need a job, and where I live employment relationships are legally relationships of subordination (French civil law), in the rest of the world it's not de jure but still de facto.
It's very buggy so far.
Depends a bit on your definitions, but Google did it with Photos.
This reminds me of housing problems in boom towns. People move to the towns because reasons and overwhelm the basically static housing supply. Towns are reluctant to build out infrastructure because it's expensive and time consuming and they aren't sure how long the boom will last. Developers are reluctant to build because they don't want to take the risk of building out more housing and then just as they open everyone leaves, again.

People are spending their summers, remotely working, in a winter resort town. But what happens when the winter comes and the town isn't so fun anymore. Or when the SV office wants you closer to home. Will some of these remote working migrants be willing to take on a pre-construction loan and 30 year mortgage? Probably not, which is why housing is the way it is. Everyone is grazing and trying to figure out this new era of labour.
This argument might be missing the distinction between humanity as a species and individual existence. No doubt humanity has thrived, but most individual human lives face significant struggles and hardships. We are here because we've been able to adapt and survive in relation to the rest of nature, but nature doesn't make it easy for us, and everybody dreams of having it easier. We continually fantasize about having greater power to protect ourselves from nature.
The Lessons of AWS Infinidash
I like fixing things rather than discarding so I’m in favor of the underlying principle. But I’d prefer a free-market solution rather than a regulatory one.
I’d rather someone creates a private civil society organization whose gives a stamp of approval for products that meet the repair standard.
The market can decide to pay a slight premium for products that go through approval process.
I don’t see why this standard should be forced on everyone, and it create more regulatory complexity, more government overhead to enforce, and so on.
related / other thread from this netbsd list a few days ago

New Vax Implementation https://news.ycombinator.com/item?id=27742540
"robotic collection system", "historic art book collection that was previously not accessible to the public", "1,230-plus linear meters of shelving", "up to 450,000 books", "library for the visually impaired", "two million books".

Surely those are part of what people generally regard as essential library functions.

What more specifically are you looking for?
Since Blender made Godot its default game engine, their integration really has become almost seamless. I hate to say it, while I learned Godot on GDScript, which is similar to Python, you do get a bit of a performance boost by switching over to C#. I'm not sure it's enough to learn, if it means not making games, don't get me wrong. Hating the language and the process can mean the difference between producing and not producing, so do what you're happy with =)
Hmm, I'm not convinced it's better—but it depends a lot on your threat model.

For preventing malware from using stolen cookies on a botnet, it's reasonable to argue that it's easier for the malware to steal the TLS client cert (which is no less accessible than the cookie jar itself) than it is for the malware to maintain access to the "good" client IP. As silly as IP-binding of sessions is.
Jailbroken devices have this ability. At one point I had rclone daemon syncing iCloud files to Seafile through the terminal. You can also run scripts through Shortcuts by local ssh
> Are the capabilities of Apple's user-level APIs sufficient to replace most legitimate uses of kernel extensions?

I would have trusted literally anyone else to do a good job at this. Apple's in the business of brokering power though, I see no reason why they'd be motivated to make those APIs as rich as kexts.
Macros to make C resemble Algol68 (1979)
How'd that sentence make it into the first edition? And who wrote it?
I think they meant “lost” as in “not participating” not “lost” as in “dead”

I haven’t looked up the change in labor force stats myself, but they’re not simply the total number of living people in a certain age bracket. There are plenty of people between 18-65 who aren’t part of the labor force: i.e: disabled, retired, stay-at-home, incarcerated, etc.
>Because sex is(/was?) considered an identifying feature, in the same way eye color, skin color, height, weight, and other physical characteristics are identifying.

Do American passports have all those things?
I recently had to swap the headphone/proximity sensor/face ID illuminator assembly on an iPhone X. The illuminator is cryptographically coupled to the phone, so you loose face ID when swapping in a new part.

I understand why Apple would secure the fingerprint sensor, the dot projector and the depth camera, but I fail to understand why Apple did that with the illuminator. It doesn't seem relevant for security? Anyone got an idea besides "lol fuck consumer repairs"?
They’re aware I’m not a republican voter and don’t go to church, no one has had an issue still. Is it possible things have changed since you left or you’re being fed the media version of it still and choose to see that? I’ve had respectful disagreements over even vaccination here.