skysight-inc/HackerNews huggingface dataset:
> It would be nice to see this post describe whether and how they audited what information is collected and why.

We try to push reasonable defaults where possible, and our optional telemetry only consists of encountered hostnames which should generally prevent PII leaks.

Outside of our optional hostname telemetry, we do not collect any tracker data from customer sites for ourselves.

> What's to stop airgap.js leaking my data, either deliberately or accidentally?

Deliberately: Contracts / legal agreements

Accidentally: Airgap.js regulates itself and do not special-case any connections originating from our own library, so our own data emissions are regulated by airgap.js like any other emission.

> How do I disable it before it starts collecting?

As a site owner, you can easily disable the quarantine and replay features for your visitors. We may expose a way in the future for site visitors to signal to our consent manager that they don't want quarantine + replay. For now, you can send an opt-out consent signal automatically with GPC (Global Privacy Control, implemented by Brave)
nice read!

here's to the people seeing the first paragraph tilted, illuded by tilting of the two first plots :)
> without them on their phones day and night society would very quickly splinter into groups that have nothing in common with each other

Yes, I remember the the total societal divide we experienced in early 2000s and before. /s
> A brick and mortar doesn't need your consent to track you on cctv

GDPR is superseded by more specific laws, of course. For example, you can use CCTVs for security, but you also have to prominently display a notice that the store uses CCTV cameras. Also, you cannot store that data indefinitely long, you can't sell it to other parties etc.

So, can websites track and log their users? Yes. Can they sell that data to a million ad agencies? No. Can they use that data to track the user to their home? No.

> The law is just a bad idea poorly executed

The law is an amazing idea. The poor execution is purely on the part of companies (and also developers like you) who have become so used to collecting all the data they can wholesale that they can't even imagine not doing it.

> like what if I use cookies to store the fact that people don't want to be tracked so I don't pester them with the notice?

So, save that cookie, there's literally nothing stopping you from doing that.

> If the EU wanted to ban tracking users they could easily have just wrote that into law

That's basically what they did: you can't collect personal user information that's not required for the functioning of your business without consent. This literally prevents tracking.
Nobody really does investigative journalism any more. It's expensive and has an uncertain payoff.

In the face of declining ad revenue media organizations are much more keen on predictable revenue streams.
Again, this isn't the GDPR at work here, it's ePrivacy, and, well, here's what the UK ICO say about PECR (their implementation):

> regulation 6 actually applies to anyone who stores information on a user’s device or gains access to information on a user’s device, in either case by any method

It's deliberately broad. You store it, you notify them. Full text on this: https://www.legislation.gov.uk/uksi/2003/2426/regulation/6/m...
You are assuming that the 2021 flu variants are anything like what we have seen before. And influenza mutates much more readily that Sars-cov-2. We just don’t know.
Ah, perfect. Was playing with Toit last Friday and it took me some time to successfully flash my device (for some reason could not easily find the instructions).
I also shortened and destroyed my ESP32 (while not paying enough attention :D) and more are coming this week, so will give this a try!

The whole platform looks really interesting.
They're actually kowtowing to money, a subtle difference but essential.
Best tips for a front end developer
I have both a Nokia Lumia 735 and a Microsoft Lumia 535. Both still function as phones. Both have Windows 10 Mobile on them too. I liked the OS, and I spent nearly 8 months on them (again, after a hiatus of years) at the end of 2018/start of 2019. But iOS just suits me better these days. Ironically I have an iPhone 6s... it refuses to die and it still getting updates! It makes what Microsoft did with Mobile pretty sad.
> If something seems like the best solution to you, it takes experience and perspective to realize it's not always the best solution to others.

I think this is exactly the point I was making.
Thanks! Perhaps the wording isn't great in that paragraph, I intended the phrase "println debugging" to mean the general style of debugging, rather than specifically using the println function.
metal machining content and trying to find it, in a language I can at least semi-follow along with

What language are you looking for, and what channels do you like so far? I'm curious how much overlap there is with what I've been watching in this area, and can recommend some English language channels.
I think I understood it.

> you have 10 000 people who build a liquidity pool

> The dev can also write into the smart contract that he gets paid a percentage as well.

This is literally what TransferWise is. They convinced thousands of people to work together to build a liquidity pool – that's the hard part – and then they take a small cut.
Hey, thanks for replying!

I like the design for your consent pipeline, and the code itself is very readable.

I have some further questions:

1. You say:

> You cannot set up Bugout telemetry in your codebase without first defining your consent flow

How is it enforced? Is it just an API limitation that I could work around by defining my consent block as below?

def much_consent_so_informed() -> ConsentMechanism:
def mechanism() -> bool:
return True
return mechanism

That is, are you relying entirely on trust and/or contractual obligations, or do you have some means of enforcing that the user of your SDK isn't cheating?

> Consent is calculated at the time that each reports are sent back. This means that your users can grant and revoke their consent on a per-report basis, which is the only respectful way to do things.

Correct. I like how you think about this. I assume the SDK user will be ultimately responsible for prompting the end-user for consent; I wonder if you have any "best practices" documents for the software authors, so that they don't have to reinvent respectful consent flow UX from scratch?

> We are also building programs which will deidentify reports on the client side, before any data is even sent back to our servers.

I don't see any code in that Kaggle notebook you linked (I'm not very familiar with Kaggle, I might be clicking wrong). Should I assume your approach is based on training a black-box ML model? Or do you use some heuristics to identify what data to cut?
Why copy-paste the whole config file from pastebin? It looks like complete spam.

A video of a side by side comparison with standard settings vs your optimal 2021 config would be better.
> deprives the body of the energy/nutrients it needs to physiologically repress unexpressed emotions

Citation desperately needed.
Yes, I've started doing this, but living in Barcelona it's quite a challenge. There's not that many local opportunities and getting leads out of the country so far has yielded very little for me.
The lower age limit has been 12 in the US for nearly two months.

https://www.fda.gov/news-events/press-announcements/coronavi...
you didn't leave tech. you just left your desk in the company
I like Medativo as a timer and Prana Breath for pranayama/breathing exercises.
That is absolutely true, but the fact it is possible in some places does lead me to believe this is not a benefit of DeFi, but a benefit of well developed banking infrastructure.

DeFi might be able to provide this, but we don't need DeFi to get it.
After feedback from aforementioned firewall developers, changes were made to network extensions that allowed them to do what they wanted with their applications (for the most part, at least).

I still think that it’s a worse in-practice system than kexts but they are responding to feedback at least.

You can still load kernel extensions in Big Sur by disabling SIP, though.
According to that link, they showed up with a butterfly knife and slit his arm.
Really? I’m outside of China, and signed up for WeChat (for work) but never had to do any of the KYC things. They only took my number to send an OTP.

If they ask for KYC in the mainland I suppose it’s understandable since it serves a lot more than a chat app there (payment, SSO for a lot of other services).
Using simulated slow machines via browser DevTools and Lighthouse.
Run an inlets PRO tunnel server for free on fly.io
In my experience travelling internationally, linking SIM cards to ID (either on purchase, or on activation) is more common than not.
I know, but in most places "remote" actually means "somewhere in US". I'd be willing to take a significant paycut to work at some of those companies remotely.
Coding: Do JavaScript Frameworks Have a Future?
Serious RCE Vulnerability Threatens the Security of Western Digital Customers
When I tried to install WeChat because I was going to travel to China, it kept making me verify my account repeatedly, I guess it was because my phone was rooted...
A man recreating air travel’s most glorious meals
Is that for voice printing purposes, or is it in lieu of signing your name on a paper contract?
I've been meditation in silence for years. Never found something more annoying than a "guiding voice".
I wonder how much infurance could be made of _what_ they're doing on their phones based on thumb/finger movement. Scrolling through reddit/facebook (or whatever the latest cat-picture site is,) tends to have a pretty obvious hand movement associated with it.
Nice endorsement of kidnapping and violence against people who have "too much". Fits every criteria of fascism and yet I bet you don't wear that label outwardly.
With Linux?
Cursive's debugger doesn't, but as one of the other posters mentioned there's a library called debug-repl which gives you this: https://github.com/gfredericks/debug-repl.

However, as I mentioned in the article, I've found it's usually better to use scope-capture than a debugger that pauses execution. The main reason is that I mainly work with Kafka Streams atm, and when the debugger pauses one thread other threads start timing out and throwing exceptions.
Want to know when Firefox will support Web Serial API, but turn out they won't since they consider it harmful: https://mozilla.github.io/standards-positions/#webserial
> In the USA

What the US does to non-citizens outside the USA is a messy area. Inside the USA? The rules are far more clear.
Eventually sticking your head in the sand is condoning behaviour. I understand your perspective however given YC's conflict of interest due to investing in Chinese companies I think it would be prudent to stick YC's flag in the ground. Inaction and fence-sitting is radically political too.
very fast one, great job!
They are not going to reuse a wallet for a second double spend attack.
curious about Android side of things.
before uninstalling App, is it better to do logout from App, clear cache, clear data , force stop , and then Uninstall the App ?
There is some oldie : XAppeal (Xtreme) X11R6 for sure...
I don't know this was how I was taught. Mind numbingly boring rote style in 1-6, them a mix of stuff like reading problems and assignments along with practice assignments, by high school it was fairly even mix of progressively harder problems mixed with "reading problems" and projects (geometry, trig, calculus, diffeq)
Do Chromebooks only run a browser? I never really looked into them.
Can you share the references you mention at point 1? Thanks!
> It sounds like any Internet use by children in schools would be a legal issue, then. If IP addresses are considered personally identifiable information subject to consent policies, then ordinary web logging is data collection that a child can not consent to.

It's not going to happen for all kinds of reasons, but there's a lot that could be said in favour of prohibiting _unsupervised_ Internet access to children 12 and under.
I did this with an Arduino and a light when I was in highschool a few years ago! Very fun project 11/10
The USA is exceptional in that that stuff does not happen to citizens within its borders.
The difference is "end up". They can (if appropriate, and if they can't cover it elsewhere) sell small amounts to cover the interest on the loan, rather than the large amount of the principal. At the end of the loan term the usual thing would be to roll it into another loan. The lender wants that stream of interest payments. The only time they care about the full amount is if they want (or need) to call in the loan, which, in the ideal situation from their perspective, never happens.

So the borrower should never need to sell enough of the stock to seriously affect the price, and the tax is only payable on a small number, not a big one.
If I had to guess they'd just say the beard is a symbol of separatism, therefore if you refuse to shave then we might consider you to be sympathetic to the separatist movement, you wouldn't want us to think that, would you?

It's circular logic but probably good enough for the fascists...
Youtube is like Reddit or Twitter: a dumpster fire unless you carefully curate what you do on it. I remove everything from my youtube history unless i specifically want it to be used for recommendations.

I mostly watch video's about bass playing and use youtube to listen music, and even with curating my history i still get the occasional insane political rant recommmended out of nowhere.
Just a small tip replace React favicon.ico for the website.
From my understanding the universe is but a toddler - the longest stretch of its life will be AFTER the last stars have died - this video is somewhat existential dread inducing https://www.youtube.com/watch?v=uD4izuDMUQA
If you piss off the US enough you will become suicidal in a Spanish prison.
china might not hesitate to send such kids to , ahem, re-education camps.
your talking shit that this was just journos, this was scientists shutting down public debate and tech companies banning people for discussing it.

Don't try and pretend like this is just another case of journos making shitty headlines because your fucking lying.
I have similar thoughts and am very divided over this, despite that businesses I'm involved in are suffering losses right now. What am I doing wrong? Is my product bad, mediocre, useless? After all, I'm thinking, if my product could generate profit when I could run cheap ads and have a pretty decent retention rates, then fundamentally, what's wrong with it?

> ... opt-in approaches. Mail catalogues, e-mail catalogues, yellow pages, catalog websites, trade shows, etc. - all kinds of services where it's the user who seeks out advertisements

There's a big problem with this. I don't know what I don't know. Even though I wouldn't voluntarily opt in for ads on my Facebook feed if I had the chance, but some ads are so good that I am sometimes even thankful when I see an interesting promoted product. That's only possible because Facebook knows too much about my interests already. But again, I'm not among those who'd voluntarily subscribe to yellow pages in any shape or form. My IDFA has been disabled since my first iPhone, I have the best paid ad blocker in my browser etc.

All in all, I doubt the industry can make a U-turn and go back to the opt-in model. More realistically we'll have a bipolar world with Apple on one end of the spectrum and the rest on the other.
> when you become the smartest person in the room

This is interesting, could you elaborate on it? Certainly within any group someone would be the 'smartest' providing the most leadership or context. Following this would have that person leaving, then the next and so on.

Or is this another way of saying when you're not learning from your co-workers anymore (as mentioned in another comment)?

I find myself trending to learning more about people and teaching even though staying on the individual contributor track. It's not that there isn't more to learn but the development methods become well known.
Vendor lock-in gives a lot of leverage to the vendor. Migrating away from vendor lock-in after years of development over their platform is a major project (been there, done that, twice).

Using standardised primitives, like the case with Kubernetes, leaves your infrastructure prepared to be migrated to a different cloud provider with much less friction and effort. You will still probably need some shims and/or abstractions for common patterns (caching, persistence, etc.) but if you can decouple completely your platform from the vendor's platform your organisation gets much more leverage, both for negotiation purposes as for regulations, in case there is a need to swap cloud providers your work is more-or-less cut out for you. When you didn't prepare for a cloud agnostic environment you will have years of migration to be done, for services, libraries and so on.

It's a major pain in the ass to be vendor locked-in and a huge cost, in time, opportunities and money.
Don't tell us what you're going to tell us
Really cool, but just to nitpick a bit not entirely correct in some ways.

Logical systems still sell their NuVAX machines, see https://logical-co.com/product/nuvax-4400-system/

They also do PDP/11 systems and hardware.

I think they might be built using an emulator on PC hardware with some interfacing hardware, but still I would call it a "new" VAX for most purposes.
Millisecond Latency MLOps and the CERN for ML: An Interview with HuggingFace CTO
Fascism is a tool of the rich to use those fallen from (some amount of) grace against organised labour that might otherwise mount a successful revolution. There’s a reason the first targets have always been communists and labour organisers, not industry owners.

Look at what fascists do, not at what they say.
Nah, the new argument is "we need this to prevent spread of covid"
Congratulations on the launch Kyle!

I feel there's need-gap in solutions for finding a co-founder and Hope Co-Founder Matching addresses it.

P.S. I've added it to my curated list of startup tools - https://startuptoolchain.com .
"You need to enable JavaScript to run this app."

Yeah, I'd say you might have gone a little bit overboard, for an "app" that just shows a text article.
> A "microdose" is enough to alleviate symptoms of depression without risking one's psychological stability.

Not only the body weight of the person is going to matter, yields of active substance varies heavily and there is no consensus on what a microdose is. Cut-off can be as low as 0.2 grams.

Psychedelic use is correlated with an increase in neuroticism though, and not as a function of the badness of the trip. Plus in a susceptible person even 0.5g can trigger a first psychotic episode.

I find such claims of safety unfoundedly bold and honestly irresponsible.
I think the trick is also to watch pontential extreme videos linked from some place else in private mode so that your feed doesn't get messed up.

But yeah I'd second that. My feed is mostly video games, music & crafting which fits my interests pretty well. I don't get any political or violent content suggested at all.

I also wonder how much this gets influenced by tracking data gathered outside of YouTube.
I think that this approach kind of dissolves the power of the word "consent"

> plainly and unambiguously expresses LACK OF CONSENT by a user

in GDPR terms, consent can never be assumed. In order to be valid, the consent has to be a result of a conscious, explicit action from the user. Things that are opt-out cannot use "consent" as a legitimizing premise
No longer (it now also runs Android* and certain Linux applications), but at the time Google proposed Web(MIDI/USB/Bluetooth) ChromeOS was only a browser-based operating system.

* Works on their x86 models, but depending on the specific application it's slower due to translation. Android apps runs best on ARM models.
There's a well-known open secret that every kid in South Korea have perfectly memorized either their mom or dad's citizen ID (the full 13 digits). There's also a statistic that the distribution of age in kid's popular online games is centered around the 40s/50s... you get the idea. Children usually borrow IDs/phones from your parents or other adult acquaintances (whether it be with or without permission.)

Though PC-bangs (Internet cafes) are where you can't get away with this restriction - usually they check your IDs and kick all minors out when it becomes 10pm. What really sucks for kids in South Korea is that cram schools (hagwons) also end at 10pm (another national restriction) - which means that after a stressful day in hagwon they have no time to actually play without circumventing the rules...
Another example would be userspace network drivers that directly talk to the network card. Those tend to be much more performant than using the kernel driver due to avoiding the need to context switch from userspace to kernelspace.
Isn't the hand movement basically the same if you're just reading long text?
I think you are right. My impression is that all the UI is dedicated to fool the user perception of the catalog, to make it look better than it is.
I'd rather have them work/chat on their phones than pretend to be interested in listening to a manuscript being read that they have read before.
RDP is not a systems administration tool. Windows ADK is table stakes. It and its associated tools can handle any scenario from two-person startup to tens of thousands of employees. This is why Windows Commercial alone is a multi-billion dollar business, and these third-party RMM tools are pilot fish.
Seems like a vague way of saying that locks 'don't scale' or aren't composable, which is certainly the case but straying from the topic of memory models.
The effect a natural deterrent causes in species that it didn't evolve to deter is pretty random. Even if the effect is positive sometimes, as long as its presence yields an overall fitness advantage (or at least no particular disadvantage), then evolution preserves it.

Like humans can be outright killed by touching some jellyfish, while turtles just eat them. I wonder if to turtles, jellyfish taste pleasurably spicy due to what chemical poisons us, like onions taste for us, which poisons insects. Overall, they're still good deals for the jellyfish and onions, since the traits are preserved.
Someone Interested in a C++ open-source Project?
I wonder how Linus Torvalds feels about God taking credit for Android being open source?
Rings 1 and 2 don't even exist on AMD64/x86-64.
is the sourcecode available somewhere? i would just try to undertand how this AI works.
The mortgage income tax deduction means paying interest comes at a discount, paying principal doesn’t so the effective nominal payment increases over time. However, when inflation is high after 10 years the mortgage becomes trivial to pay. That dramatically increases housing affordability over a lifetime. Making a stretch purchase becomes reasonable, but if inflation is very low making the same nominal payment becomes less affordable every month.

Worse insurance and property taxes are indexed to value and don’t care about inflation. Further people can’t make the same down payment when property values increase. Identical down payments at different interest rates don’t lower monthly payments equally, and at ultra low interest rates their not even a good investment.
In the UK, software engineers outearn doctors. Doctors used to have trouble securing work visas when there was a limit on the number of visas issued. When the limit is hit, the applicants will be prioritised according to the number of 'points'. Higher salaries command higher points.

https://workpermit.com/news/uk-tier-2-visa-cap-exemption-doc...
https://www.imgconnect.co.uk/news/2021/04/nhs-doctors-pay-sc...