skysight-inc/HackerNews huggingface dataset:
Here is an idea: Stop adding crazy marcos and customization and use it like an editor instead of an OS.

I understand this is a very controversial idea, but I have learned that since I'm switching machines and using remote boxes all the time, customising everything 100% to my liking is neither possible or worth the effort.

This of course requires the emacs team to make the barebone emacs a little bit more functional. Otherwise we can simply use uemacs or mg and benefit from faster startup and lower footprint.
Amsterdam ‘stumbling stones’ commemorate gay victims of Nazis
> The more sophisticated child molesters out there will find out about what Apple is doing and quickly avoid it.

I think this is exactly what Apple wants to he the result of their their iMessage scanning.

They are not in this to make arrests. They just want parents to feel safe letting children use their products. Driving predators to use different tools is fine with them.

As far as the FBI goes, this is presumably not their preference, but it’s still good for them if it makes predation a little harder.
He is not gatekeeping being poor. He is pointing out that being poor in Toronto is not the same as being poor in Delhi.

You are trying to lump two things together into a category that are not even remotely comparable.
Couldn't agree more. It used to be much better. I remember on Mac OS 8, the window manager made intuitive sense and got out of the way in most cases.

I don't know when it deteriorated on Mac OS X, but I've recently started to use Rectangle a lot (https://rectangleapp.com/). This has been really useful.
"...we’ve decided to live in this world of limited oversight."

Read it and weep... I can just imagine any of the main players of this sordid state of affairs saying: "You want the truth? You can't handle the truth!"

I have to say though you have to admire how incredible a cleaner Haspel is. Spotless really.
$5B is more than the purchase price of Oculus and multiple years of VR content investment.
if you were about to use a uuid as a primary key in a database, wouldn't it always be better to instead use a composite key with explicit columns for sequence, timestamp, node id, etc.? if you really need to accept client side generated values and there's no opportunity to issue them a unique node id before hand, then explicitly taking their mac address and region seems better than stealthily relying on those things being embedded in a uuid - also aren't mac addresses considered PII?
Meh. Given the option of a secure but adversarial OS and less secure but open one, I will always pick the latter. Then at least there is a fighting chance my data stays mine.
I made a variation on the theme of kpt, you may find interesting: https://github.com/mkmik/knot8

(Rendered manpage at https://knot8.io/, if you like that exposition format)
The other top level domains aren’t as credible, and everyone knows that.
The Problem with Perceptual Hashes
DARPA's PROTEUS program gamifies the art of war
> Depends on the company

I was referring specifically to Apple & iCloud (and I thought GP was as well).
Few beyond .com would be recognized by non-technical people
Can you run banking apps on this without problems?

And can Google block any apps that run on this Android clone?
Right but at some point there must be some return. Sitting on domains is cheap, not free.
WhatsApp is not one of those apps, we only include FOSS apps.
> Then I read the first comment on this HN thread, which is directly comparing this to Toronto.

> [...] Reminds me of learning a new language, where beginners try to formulate thoughts in their native tongue and produce a direct translation, whereas those who are fluent can skip that step completely.

Immigrant brown man living in Toronto here. I don't have any dating life. Because dating a brown man is stigmatized, thanks to racism and media representation. My upper-middle class white therapist couldn't believe that I am at the bottom tier in the dating market.

So it's not just some language or cultural barrier. People have hard times understanding the predicaments of people from lower socio-economic strata even when they live in the same city and speak same language.
Snapchat's is just advertising space. The pie is bigger and big enough to accommodate Snapchat's ability to sell shares at the $100bn valuation.

Every fledgling idea and initiative everywhere uses borrowed or pooled money and tries to go viral by doing their ambiguous "marketing" on those platforms. If you don't, your stakeholders will blame you.

Dabbling in VR is a tiny tiny tiny part of why the story works right now. Big maybe about the future. But its a rounding error right now.
Normal seems surprisingly elusive.
From my understanding, the only real way to create a password is to make it really, really long. Like, "Sometimes 10 people will get together on Friday night. Wow!" Or whatever you want. Makes it easy to remember. Personally I just usually string a bunch of random numbers and upper/lower/special characters - 40 of them. Just like this: https://www.youtube.com/watch?v=rERApU26PcA
> $20/yr probably isn't going to break the bank

13 year old me would disagree. A .co.uk domain at the time was if I recall correctly about £5/year, equivalent to a week's wages from my paper round. A .com was around £12-15/year which I found too expensive. I learned a lot hacking around with DNS, subdomains, etc. and I wouldn't want to price today's kids out of doing the same. Saying that, back then there were only a few TLDs to choose from. I guess if there are still at least _some_ super cheap TLDs available then I probably wouldn't mind if .com in particular got more expensive given it seems to suffer the most from squatting.
It's not clear from what I have read anywhere on the site if installing CalyxOS is reversible. If you want to get back to Android can you?
This sort of media blitz happens way more than people know. Some are very good and subtle. But many are just 'out of the blue so and so is talking it up'. It is kind of the same game as spam. If you get enough out there and many still walk away you can sometimes get a bit of sticky and make money. It is a fascinating style of pump and dump.
Sure.

> will reduce the comments I see on the internet that try and compare Delhi/Mumbai squalor to LA

You want to reduce comments comparing your city's poorness to another city's poorness.

> It's not really enough...you should experience it for yourself

You're saying I can't talk about poor areas I know about because they're not as poor as your city. That's gatekeeping being poor, plain as day. But more than that, it totally shuts down all conversation about why your city might be so poor. What is happening in your advanced poor city that isn't happening in other cities?
Really? Would you care to elaborate as to why? Why are larger groups (countries) criticizable and smaller groups are not?
Looking at the code on GitHub, this extension may be useful: https://greasyfork.org/en/scripts/2709-linkify-plus
A sealed copy of 'Super Mario Bros.' has sold for a record-breaking $2M
Two of the websites I use everyday do not even require a domain name. I just use the IP address. With the rise of shared hosting especially driven by added costs of https, it's not possible to use IP address with most sites today but it's sure nice to be free from the ICANN DNS cartel and to not have to run DNS software. Before long, I have the addresses memorised. I never try to memorise them, it just happens automatically after a while. Reminds me of how we memorise phone numbers.
I invoked Wall Street because the capital involved right now probably isn’t worth their time. When domains cost 4+ figures from the registrar then maybe it’s worth paying attention to.

This is all a response to the question of what point squatting is too expensive to continue. I submit that it can’t be.
> Also, Apple is quite vague about whether the claim "Apple manually reviews all reports" means Apple employees can view all triggering content, even if it was never uploaded to Apple servers. (How would that work?)

From a quick read of the PDF, my impression is this Safety Voucher is more of an additional metadata generated before a photo is uploaded to iCloud Photo (as oppose to scan photo library to see if it matches and notify Apple narrative). The Safety Voucher is designed in a way that they could decide on the server-side if a photo is CSAM without requiring iCloud to have an ability to decrypt all photos. Safety Voucher comes in three layers:

- The first layer is generating a NeuralHash for a photo and derive a cryptographic header from it based on blind hash provisioned by Apple from a known CSAM NeuralHash (e.g. Apple pre-compute this table for each device). First layer is decryptable if the generated NeuralHash is a known CSAM. (Is it going to be a random data if NeuralHash doesn't exists in the table?)

- The second layer uses Secret Sharing[1] scheme (where a content is decryptable only if >n keys are present) using NeuralHash of a visual derivative as a secret share. Multiple visual derivative is generated for each photo, and certain amount of shares is required to decrypt the layer.

- After the second layer is decrypted, the file is readable.

One thing that doesn't makes sense is iCloud Photos are not currently End-to-End Encrypted, so Apple already have access to all photos. This scheme would only makes sense if they plan to introduce End-to-End Encryption for iCloud Photos (& iCloud Backups?) in the future.

In my opinion, if they were to enable E2EE for photos, this scheme would be slightly better for privacy than Apple having an ability to scan all photos on the cloud (e.g. they can't retroactively decrypt a photo that already has Safety Voucher uploaded to iCloud if the matching NeuralHash doesn't exists at the time of blind hash table generation), but significantly less than having E2EE and not having this system in the first place.

(As someone from a country that is known to abuse this sort of power, I'm not happy about this system existing.)

[1]: https://en.wikipedia.org/wiki/Secret_sharing
Actually you can swap fn/ctrl keys on the trackpoint 1 USB keyboard. I wrote it down here: https://github.com/lentinj/tp-compact-keyboard/issues/32#iss...
> and create segregated services that only cater to certain subgroups

I fail to see the "segregated" and "only" parts. Marketing to a particular demographic and reflecting the life experiences of that demographic doesn't mean that other demographics aren't allowed, nor does it mean that nobody else is going to be interested.
The other aspect to this is that you can install a custom OS on the Pixels and still re-locked the bootloader, which means you get Verified Boot and all the security guarantees that brings.

https://source.android.com/security/verifiedboot
Is there a specific reason for this? Does the Fitbit app rely on Play Services?

I don’t care too much for on wrist calls or anything like that. I just want to use the Fitbit app to sync stats and mostly display notifications from WhatsApp and my personal apps.
Il sistema sanitario irlandese colpito da un ransomware
Are you using https?
2 seems to be the final number for business stuff. CustomerReportv2 or UserModel2 or /api/v2/ are wildly more common than 3 IME.
site needs a copy editor, or something.. "Scroll to see how creepy people find these products!" reads like they are talking about "creepy people"
But these are just variations of known pictures to recognize them if they cropped or scaled.
The hash of a really new picture isn't similar to the hash of a known picture.
Yes, they do that. But they often use Xshm to upload those pictures to the display server, and that still means sending them to the peer for server-side blitting.

Further more, by using TCP/X11 for the wire protocol, any dropped packets have to be retransmitted before you can update unrelated portions of the display because it requires in-order processing by design.

This is why high-quality, high-frame-rate remote displays never use that design.
Those may all be perfectly good shows. But there is space for them (BlackOakTV) if the market is really underserved.
https://www.theguardian.com/news/2018/feb/15/why-silicon-val...
> Why do people assume that the Mozilla foundation is a clueless scammer?

It's not an assumption, it's an evaluation they are continuing to earn by quacking like a duck.
UUID v4

Are you concerned about the 0.0000001% chance of collision after generating a 100 trillion UUIDs?

Or are you trying to include metadata in your identifier? (Not the worst thing, but it's also not super useful info.)
That's eracist.
How technical founders learn enterprise sales
The corporation is a wholly owned subsidiary of the foundation. It's effectively one organization structured to minimize taxes. What exactly is your point anyways?
Whenever there is comparison between something in India and west, almost always its not apples to apples. There are 1.3 billion people, and very wide range of social & economic spectrum, which inherently makes comparison very difficult. for the sake of example - for "X", you will find many many Indians spending vastly more than western people, at the same time you will find millions of Indians who could not even dream about X. replace anything in X. Another I have seen many families who give freedom to girl on whatever they want to do, at the same time there are several conservative and hardliners families. its very hard to generalized due to sheer size and diversity of India.

IMO without meaningful context comparison between west & India is pointless.
Thank you, that sounds very promising.

Is there a specific device you would recommend for long-term CalyxOS support?
I'm surprised no one has given Namezero's concept another try.

https://www.crunchbase.com/organization/namezero

There's probably ways to monetize now that aren't trivially bypassed with a line of JavaScript. Think CloudFlare and their app injections. New Namezero could require you to use their ad-injecting/enforcing nameserver.
I remember reading an advice column where the author told a woman who was vexed that her children insisting on texting their friends instead of just calling them, "take solace in the fact that one day they'll likely be asking their own children, why don't you just text your friends?" I don't use apps like Whatsapp myself but it seems like they appeal to a lot of people for one reason or another.
I didn't get an email, so I just called them. I needed to connect with a supervisor, but then they were quite helpful and gave me the $70 credit. Wasn't able to get the ebook credit as well but whatever $70 is still a lot more than $0.
then maybe it should be forbidden to renew domain if you haven't use it for a year instead of increasing prices for everyone, how convenient for domain registrars
Looks promising.

Any plan to support Matomo (formerly Piwik) analytics as a data source?
What are your thoughts on the performance of wavefront tracing as opposed to regular path tracing approach?
Doesn't follow.

Namesquatting, ticket scalping, house flipping, Amazon book reselling, quant trading, etc. are all forms of arbitrage. There exist buyers who are willing to pay significantly more than sellers are willing to accept. Somebody gets to the seller first, buys the good, sits on it, and waits for one of these high-demand buyers to show up, then charges them the maximum that they're willing to pay.

If the seller just raised their prices, there would be no profit for the arbitrager. They would capture all the consumer surplus and deal directly with the buyer. If Gandi charged $1B for a .com domain, nobody's going to namesquat - they'd lose too much on the common English words to make it up from the major corporations.

I suspect a lot of the problem is the extreme power law in how much people are willing to pay for domains. Dropbox.com or Facebook.com is a bargain at $1M for DropBox and Facebook, but nobody is going to pay $1M for their personal homepage, and few local businesses are going to shell out more than a grand for a restaurant domain name. That indicates that perhaps some better pricing system (auctions?) is required. $16.99 is way low for a business domain name though.
It currently costs me 3x$8.18 a year to renew my personal domain, my parents, and a hobby site. It will cost me $409ea over the next 50 years. $1200 vs $3000 isn’t nothing to me.
Mozilla knows what side their bread is buttered on.
Not at all the determining success factor, but a good indicator at how much they value engineering, privacy, and their users.
That's remarkable to me - I feel like my internet life hasn't been so sheltered not to come across this before, but it also feels so obvious in retrospect. Do share some examples if you don't mind.
Came here to comment along those lines.

The WHY often will be elaborate enough that it deserves a design document that includes things like: who is the owner of those requisites, what is the rationale behind them, who are the stakehilders who signed off, what interactions it has other components, what alternative designs were considered, etc.
Windows' FILETIME uses a different epoch, though. It counts since 1601 (the then-most-recent 400-year leap-year cycle when Windows NT was designed).
I'm totally aware climate won't have time to deteriorate enough for my lifetime, but for me it's like a duty to minimize my environment footprint, I'm really close to nature, I eat foraged fruits (figs! currently) and not polluting (bike, local food, minimal consumption/buying) is like a nature bro-code that I can't break. Picking up plastics wastes is one of my ways to thank nature for its food, I know it sounds maybe "spiritual" for you, but it's really my mentality, and I live right inside a place of over-consumption (French code d'azur), so I'm a bit like a marginal there, so you're right in sating "almost no one will care", but I hope more people will see the point for such a lifestyle (healthy, simple, happy, and environment-scalable)
The US is really doubling down on the narrative that the WHO has been covering up the epidemic. The pettiness and lack of honesty among US politicians is staggering.

"In the original report, we laid out many of the ways the Chinese Communist Party (CCP) and the
World Health Organization (WHO) went to great lengths to cover up the initial epidemic, and how
their cover-up likely turned what could have been a local outbreak into a global pandemic."

This government document is a really weak attempt to twist the facts. Their conclusion, in direct conflict with the WHO, is:

"While much of the public debate was initially focused on the Huanan seafood market in Wuhan as the
origin of the pandemic, the preponderance of evidence now suggests that the virus leaked from the
Wuhan Institute of Virology."

This despite that the WHO after two thorough investigations in Wuhan dismissed the Wuhan lab leak hypothesis, and concluded it was unlikely that the virus had originated in Wuhan.
I'm not in support of a mandate on EVs. I'm strictly talking about pricing and accessibility. Should have clarified that in my original response.

Edit: I also said "If you're buying a new sedan". That is a qualifier on my recommendation, which is Tesla.
This page promotes companies that make it impossible or very hard to delete accounts or data

https://backgroundchecks.org/justdeleteme/
A good way to try out waterboarding is swimming with a face mask. It’s not for everyone.
Because DNS over HTTPS (DoH) is browser based instead of OS bound, it is actually much easier to have browser instances that point to a different DNS root (or multiple DNS root services).

A lot of people have been very negative about browsers adding DoH but they're missing the big picture: We now have a real opportunity to create competitive roots/new DNS.

Browsers really need to look at allowing multiple DoH connections concurrently that resolve different namespaces. I'm legitimately surprised this hasn't happened already.
Most ulid criticism surrounds the ill-advised (and optional!) part of the spec that tries to achieve sub-ms ordering at the cost of requiring a singleton or cross-thread atomics to try and generate random values for the random portion of the blob from a range that would end up providing additional sort order bits. The reference implementation in JS doesn’t even offer this (although that’s likely because JS doesn’t even support multiple execution threads within the same context).

Apart from that little misadventure (last I checked, there was a request for comments on a proposal to drop that from the Ulid spec altogether) there’s really nothing else that’s not same and straightforward in the spec, and little else to complain about.
Yes, but at least you can still buy US ETF's unlike in the EU. And Interactive brokers has a bank account in Israel you can wire money into, so one can get by.
TrackerControl doesn't encrypt your DNS queries, though. You'd need to proxy DNS requests to another app like http://github.com/ch4t4r/Nebulo which supports DoT / DoH3 / DoH for that.

(disclosure: I co-develop a FOSS TrackerControl alternative)
> Their fear is real, but it can not be solved by any technological invention or policy change, including Apple's current system. Because you're telling me that they're scared regardless of what the reality of the situation is, you're telling me they're scared regardless of what the stats are.

Not really.

I’m agreeing that parents will be afraid for their children regardless of the stats, and are unlikely to believe anyone who claimed they shouldn’t be. The ‘stats’ as you put it won’t change this.

Not because the stats are wrong, but because they are insufficient, and in fact predation will likely continue in a different form even if we can show a particular form to not be very prevalent. The claim to have access to ‘the reality of the situation’ is not going to be accepted.

You won’t be able to solve the problem through education or emotional support because you can’t actually prove that the problem isn’t real.

You actually don’t know the size of the problem yourself, which is why you are not able to address it conclusively here.

What I am saying is that we need to accept that this is the environment, and if we want less invasive technical solutions to problems people think are real, and which you cannot prove are not, then we need to create them.
Facial recognition is already part of all camera software today.
With respect to LaTeX, I only started to use it semi-recently in the cloud and I'd recommend it to anyone (but only in the cloud).

I don't want to master an editor anymore. I want to get work done. Pretty much the same with LaTeX. When I want to improve something in a doc, I look it up and do that. When I go back to the doc later, I don't always remember what that magic meant. But that's ok, I'm writing a doc. I'm not trying to master the writing of a doc.
My problem is: Where do I put the line? When I install Linux, should I still use Spotify, Steam and Reddit? No, because none of them are open source? Can I still use Google services? YouTube, search, mail? No? DuckDuckGo? But how do I know they're not invading my privacy? Do I have to use an open source email provider? Is that even a thing? Should I install a VPN? Do I constantly have to use Tor? Do I need to live boot Tails from my USB stick so I my usage can't be tracked and buy a prepaid Nokia 3210 that I put into a metal bag when I don't use it? And even if I go all the way down the rabbit hole: How do I know that my hardware isn't compromised? And do I constantly have to revaluate my privacy choices because one component of them could be compromised? What kind of life would that be?