skysight-inc/HackerNews huggingface dataset:
I wish there was a word for this process, because it repeats itself in comment threads over and over. People getting absorbed by debates over idiosyncratic details and gradually losing sight of the big picture.

Deciding that support for Firefox lives or dies depending on details about how long the text and the address bar is, is completely absurd. Because meanwhile, everything else is increasingly based on chromium which is developed by Google. Having the web depend on a single rendering engine where all the major trends and development effort and support maintenance comes from one company is catastrophically short-sighted.
Tesco say website and app down after hack attempt
I’m so torn regarding Ethereum. On the one hand, there’s so little actual usefulness - it’s all novelty and wild experimentation. But on the other hand, isn’t this similar to when people first got PCs, with 4K RAM and cassette drives, and nobody knew what practical use they could ever have? The most popular and valuable use for Ethereum probably hasn’t yet been discovered.
That doesn't answer the question of what currently available service is an acceptable alternative if Protonmail isn't palatable.
I agree to that quote, and, I think Dishes feel "inauthentic" when they taste not good, or considerably worse, like the BBC rice[1]. California rolls, Katsu curry without katsu - can't have issues with great food.

1: https://edition.cnn.com/travel/article/uncle-roger-rice-food...

ps: The conversation here brought up a question inside me regarding English tea and tea preparation; never had a cup of English tea better than the shot of best Chinese tea I have had in my life. Shouldn't it be considered inauthentic then?
Your accusation can be turned around: Interesting, isn't it, that those most likely to engage in collusion with G/FB are silent on the matter?
Don't try to use political division to redirect people's anger at each other. I'm to the point where I'm deeply suspicious of the motives of anyone who deploys a novel way to recast an issue as partisan. I hope others are equally suspicious.
The worst of AMP prior to this story, for me, was the carousel behavior. When AMP rolled out, any story you clicked from the carousel:

- Left and right swipe events were hijacked, and sent the user to somebody else's website with a related story!

- The back button would go to Google, even if you had right or left swiped as described above...that is, non-google pages were not in the history.

Then, not just carousel pages, these applied to all AMP pages:

- A very tall banner at the top pushed your content down. It had an [x] button that would send you back to the google search rather than the expected behavior of removing the banner.

- Finding the real url was 2 clicks deep

And then just the overall weird smugness about calling it an open standard. Even though the "open standard" required including a google-owned javascript file via a <script> tag, and the validator would fail you if you didn't. You weren't allowed to host it yourself.
Yeah, the social media and the internet is full of these claims and I see how these are pretty easy to believe when told with enough confidence. Which was an interesting revelation for me.

Since the average person doesn't know much about the background (me included!) and since a similar claim takes a lot of knowledge to disprove it just sounds plausible by default. Because if someone makes a more specific claim, like "this is how sars-cov-2 enters the cells" or "this drug works" (or doesn't work) that's easy to check and then, if not true, disprove with published papers. The "we don't know this" is harder. Even if you pull up a paper, the goal post indeed will be moved ever so slightly and if the claim is more broad then you need to be a knowledgable expert to be able to say where the gaps are in the knowledge and how likely, when discovered/understood that new knowledge would change the field substantially.

Since I became interested, I started learning a bit of virology online. Vincent Racaniello, a professor of virology at Columbia has an online course on youtube. This semester he teaches it directly with a focus on the average layperson [1]. Each session is 2 hours long and you can ask questions which he answers. It's not about covid, it's about virology in general but he does include the relevant pieces of information abour sars-cov-2 into every lesson/topic. He actually has his previous courses taught to undergrad (or graduate?) students online as well. Those seem to be just 1 hour long each, but based on a quick look at the slides the content is identical.

Now what it teaches to everyone interested is that they know a lot. They have astonishingly detailed knowledge about how viruses work in general and they have learned a lot about sars-cov-2 very quickly. But given the general virology knowledge, you won't be surprised at the things they looked at first.

[1] https://www.youtube.com/playlist?list=PLGhmZX2NKiNnVlm_lAvk5...
> We transform your passphrase on your computer into two different, unrelated values. With one value, you cannot derive the other0. We send an authentication token, derived from your passphrase, to the server as the password-equivalent. And the encryption key derived from your passphrase never leaves your computer.

Ah, looks like they still do. My mistake. I was harkening back to the old Sync protocol which just gave you a decryption key, rather than any account system. From this post it seems they've just integrated it with your password, if your link is describing the present method.

What I had in mind was this: https://blog.mozilla.org/services/2014/05/08/firefox-account.... i.e., back in the day you could self-host Firefox Sync, like a Nextcloud. It seems this is still possible, though not straightforwardly: https://discourse.mozilla.org/t/how-to-self-host-fxa-and-syn...
Digital ID – A Single Source of Truth
Do you have any examples of TAIL code? I'm interested in using it as a target for the compiler class I teach
Scientific consensus is just religious consensus with more advanced instruments of measurements.

You're still prodding into the infinite.

CERN and Yerkes Observatory are just peeling off the surface layer of the onion.

To claim anything is objective truth is also claiming you know the universe in it's entirety.
Buy FOX04-DRI for Research
A big discussion of that tweet can be found here: https://news.ycombinator.com/item?id=28974798
That requirement would not be legally enforceable because nails are generic items.

One cannot argue that all C programs must be GPL'd because GCC or Emacs uses main() or malloc().
TPM, at least older version <1.2 were still subject to physical key exfil attacks [1] because the chips communications with other parts of the board were done in the clear.

So it was/is recommended to use a pin/key and/or recovery key to ensure the security of the data. Unless your only threat model was to protect against common thievery and assume the attack had no technical prowess (and that’s perfectly fine, I do this for my company). Not to mention they were kinda used as a warranty canary for Truecrypt [2]. There were suspicions that nation states may have hardware bypasses worked out.

Later there were implementations of hardware encryption found to be vulnerable. So even now bitlicker does everything in software by default. [3]

So I understand why FOSS devs would rely more on standard practice (shared keys) with LUKS and not embrace hardware enclave options like TPM. They haven’t been the most reliable over the long term and are harder to patch/fix.

[1] https://pulsesecurity.co.nz/articles/TPM-sniffing

[2] https://threatpost.com/of-truecrypt-and-warrant-canaries/106...

[3] https://www.technadu.com/bitlocker-to-use-software-encryptio...
He was early, but he wasn't wrong.

We are still headed directly to the place he described.
I'm pretty sure that most previous methods have had their effectiveness significantly reduced by how our society works nowadays.

Most non-IT workers still don't use an AdBlocker, so you're actually getting your ads in front of the majority of the population.

If you did the same with TV or even worse magazine ads you'd reach only a tiny segment of people, as the quantity of people consuming this kind of content has been drastically reduced.
What's stopping you using any other LSP compatible python language server?

Is your argument that if Microsoft develop any programming tool and then allow it to be used via VS Code they must open source it?

Would you place that same requirement on other extensions? (e.g. sonarcloud)
Microsoft is locking certain API's:

Always-on-top, Auto-elevation, DPS statistics, Default taskmgr application preferences (Microsoft hardcoded taskmgr.exe blocking competitors), GPU statistics (deliberately broken on Win10 and Win11 recently) and the DirectUI framework are some examples of features that I want to implement and are currently implemented by Task Manager but are Microsoft-only signature restricted while newer more advanced security like PPL that we desperately need are also Microsoft-only signature restricted.
As I understand it, : and / get swapped depending on whether you use unix APIs (/ is a directory separator, : is plain) or mac APIs (: is a directory separator and / is plain)
What previous methods do you mean? As for data, I guess I can't really see it all, it's inside Facebook. But spending money on the wrong target groups seems to not work, according to my experience. So it does seem like FB collects useful data for targeting ads.
I've uploaded the RSS links (as a *.opml file) here (it's an export from Thunderbird) - it's mainly science/factual/comedy/current affairs stuff:

https://drive.google.com/file/d/1EGr60iRZoCMWoFNZC6cXk7shb9q...
You're missing the point, confirming the generally dismissive or even ignorant attitude. What if there's no deb package? How to make home directory accessible?

The point was, every time Gtk/Qt major version is updated, whole desktop gets obsolete. Perfectly fine applications must be reworked or abandoned or mucking with chroot/docker. Throw in the transition to systemd and wayland.
One bad apple does spoil an entire bunch.
what do you think about that guy's opinion about how ciphers should be handled?
I've been using DuckDuckGo for a long time now and I find Google to generally be worse than DDG.

A lot of crap in the results (SEO doing his bit I guess), more pages taken down in the results and terrible UI.

The code preview cards are great for copy pasting from stack overflow without even opening the thread.
Bangs let you search something in another engine if you can't find what you're looking for.

The only times when I need to use Google are:
- checking opening times of businesses
- checking maps, as Google maps is the only decent thing out there
- I never use Google images but DDG images safe filter doesn't catch everything (you get nsfw in images - maybe this has been fixed, but I experienced it as an issue in the years)
You might be right and there is no backdoor that was intentionally implemented. Although, numerous leaks do show that neither are always law-abiding saints, so a backdoor might not be too far fetched. From what I've heard (I may be wrong since I'm not from US), US company is not allowed to publicly disclose requests from NSA, so proving it would be very difficult.
> I know we're on a google is evil thread, but not literally everything they're involved with is a conspiracy.

100% agree, and yet one of the downsides of their recently exposed behaviour is an erosion of trust in everything they touch. For good or bad. Especially big important security considerations.

The more crap like this I hear about, the less I’m willing to trust their products. For example, I almost chose GCP for a project but decided against it because I just don’t trust them not to hose me due to something completely out of my control.

These things pile up and tarnish their brand and anyone closely associated with their brand.
I wonder how useful more than 4 digits would be. Once our species has achieved interstellar travel, we'll probably use a completely different representation for time.
It's about opportunities.

A story: Fifteen years ago I and my colleague from class we were selected as top engineers of our class fresh from university for an ambitious project. However that project got cancelled two months later. My colleague phoned once and immediately found a different job and left the same day.

Because of my disability I don't phone. I needed three months to find a different job.

I agree with you that remote makes more things possible and makes working easier.

But it is about to find a job at all. And if I found something I wouldn't have the same power to negotiate salary and benefits as others and must accept what is given to me.

Luckily I don't have the need to look for a job.
Yesterday: https://news.ycombinator.com/item?id=28970792 (this is a different article)
I visited a cohousing project in Leeds, UK[0], a couple of years ago. I experienced first-hand the “cult-like” and “suspiciously happy” vibes.

My most generous interpretation (and the one I cling to because I hope to live in cohousing one day) is this: cults and many religions answer big questions for you, meaning you’re not background-level concerned with those things any more. Your stress goes down. They help you sync up your behaviours and world-views in a way that typically many of us struggle with in the “urban West”. I guess/intuit/hope that cohousing does the same. You’re (mostly) out of the housing market; you have (likely) had a hand in planning how you live; you know most of your neighbours and likely have built (or designed and managed) roads, drains houses and gardens with them; you have met or helped set guidelines about the neighbours who weren’t involved with the build; your outgoings are (hopefully) lower; your daily surroundings are (hopefully) nicer and you’re a (part-)owner of them, and have a rota for helping manage them.

[0]: https://www.lilac.coop/
Gun Rights Activists Join Abortion Rights Activists to Fight Texas Abortion Law
That's a smooth attempt to make this an argument about semantics.
Finally some good news!
> modern chips are a lot more reselient against crashes

sorry for a basic question, but im not sure how a chip itself is more resistant to a crash (in os? user space?)...
A lot of super technical stuff I'm googling at work all day I feel like is fairly static content that I think old school google excelled at. Modern Google is great for finding a local restaurant but not so much at figuring out the nuance in some searches.
an who of an average user does need that?
I'm not an average user but I never need that. I also know no one who can't wait to get it or even think about wanting it.
I only read in blogs or HN that one would need it.
I think "you need that because of security" is PR/propaganda from certain companies.
How does it relate to GPL?

In GPL, as far as I understand, if you release a product containing GPL-licensed software, the whole product needs to get released as GPL. Some people love this copyleft approach (RMS), some hate it (as it is a viral license, "infecting" other parts of the codebase). For using it is a library, it is usually a no-go (for virtually all commercial products, and any open source project that wants to keep a more permissive license, e.g. MIT).

> The Free Software Foundation (which holds the copyright of several notable GPL-licensed software products and of the license text itself) asserts that an executable that uses a dynamically linked library is indeed a derivative work.

LGPL seems to make (IMHO a very sane and desirable) distinction:

> A program that contains no derivative of any portion of the Library, but is designed to work with the Library by being compiled or linked with it, is called a "work that uses the Library". Such a work, in isolation, is not a derivative work of the Library, and therefore falls outside the scope of this License.

How does AGPL approach this subject?
Or rather - is it closer to GPL or LGPL, when it comes to the definition of "derivative works"?

(I am not a lawyer; quotations are from Wikipedia)
Virology Live – A livestreamed course about the principles of virology
First, you edited your comment and removed all references to "law"/"illegal" you had made.

Also, I'm saying that your sense of ethics is not universal.
What a metric ton of performative bullshit that is.

It’s a hard no to fly a micro drone under a supervision of a ranger, but it’s perfectly legal to pour hundreds of tons of ecosystem-killing chemicals in the ocean for years.
> Secondy, this requirement resticts my freedom

Your freedom as a middle-man is not important. What matters for GNU licenses is the freedom of the final user.

> Who doesn't? Why should anyone bother furthering your AGPL agenda over own interests and the freedom offered by permissive open source licenses?

> I can't believe this crap topic comes up every so often.

You don't care about user's freedom but only yours, other people feel the opposite. There is ample space for a discussion on both viewpoints.
For a lot of small businesses starting out in digital advertising, the only previous method they had experience with was buying a website or Shopify store and waiting/hoping. We shouldn’t discount “this is a lot easier and actually reaches people” as being valueless.
It might be true, but what's the source? Is there a link to some screenshot of some internal email?
There's a difference between the public school system and the education market (Khan Academy, Duolingo, Brilliant, etc.) Educational products are available to everyone to use. So, companies competing to make "their customers" the smartest is just whoever chooses to use their product, not some restricted class of people. Competition among companies is good when their products are available to all.
>ActivityPub / Diaspora / Friendica were also mentioned

Yes, these are all examples of what's technically possible from a decentralization standpoint; yet have not flourished WRT adoption, relative to the centralized platforms.

>That is very similar to what was mentioned up-thread:

"[..] we need to start by addressing the root cause of this concentration: Centralization is required to capture profit.

I see the article you've quoted up-thread and the author's observation is so obvious as to add little to this discussion. That is, of course it's an issue of profit.

But, I suppose it does underscore that it's not the question of technology that advocates of Diaspora, etc. suggest.

So, sure, my original point that we'll always tend towards centralization on platforms that benefit from network effects relies on the assumption that we'll continue to have a capitalist economy.
I haven't personally seen a huge uptick in resignations where I work. What I have seen, though, is that it's very difficult to hire anyone. We seem to be losing people at the offer stage. And I work somewhere where an opaque "compensation group" in HR makes the offers, so I have no idea how out of touch they are with the market. We have many positions that have been open more than a year.
i love firefox as secondary browser (mainly some performance issues or minor hickups with certain kinds of web apps that rely on certain animations) and also donate regularly to mozilla, but the dev tools are the main pain point for me. nothing beats the usability of chrome dev tools and working in firefox always makes me feel limited in little ways i cant even point my finger to. in effect my own apps are optimized for chrome first and only improved for firefox as second step wich will then lead to the same small problems making other people use it as secondary browser.
Ask HN: What's the subject and body of your first email ever?
Agree completely. The sentiment that this is all a shell game and advertisers are being completely manipulated always seems to come from people who don’t have much domain expertise.

I’d be quick to throw digital advertising to the wolves but the reality is that it’s extremely effective. Is there a level of opacity? Yes. Are there tranches of junk traffic and ineffective tools put forth by the ad networks? Absolutely. But these are problems at the margins, and don’t invalidate the fact that advertising on Google and Facebook in particular are very effective, and measurable to enough of an extent that it makes sense to keep doing it and growing your level of investment.

The majority of advertisers both large and small get that they can’t let the quest for perfection in advertising attribution be the enemy of progress.
> which does not match calendar year everywhere

Yes, this is the reason that ISO-8601 ranges are not sufficient and a Quarter indicator is necessary.
You're really making the Nuremberg defense?

https://en.m.wikipedia.org/wiki/Superior_orders

By complying they also risked their entire existence.

Their brand seems destroyed already.
The Pasts and Futures of the Floating City (reading list)
I think maybe it has to do with isolation.

For most of us, we just tolerate the job/company we are currently at. Social events, camaraderie and a sense of "we are in the same boat" causes people to continue on. Then lock-downs came and suddenly all of that is gone. You are now stuck in isolation with the thing you actually deep down dislike or resent. Previously, going to the office was like fighting in a pit, but at the end of the day you got to escape by going home and decompress. But if you workplace is also your home, you don't get to escape anymore. The same computer/screen that used to bring you joy, now triggers ptsd/resentment feelings. Thus you are stuck with your demon, consistently, without reprieve/escape. Thus people let those feelings build up, often without knowing it, and when that bubble burst, they feel they need to run away and quit. Some might even start questioning their whole career path and the nature of the work, and thus the nature of our society and economy. Thus the whole drive to work gets short circuited by those feeling of resentment when you want to work again.

That's just my personal feelings around it. I get the feeling when I look at our Jira board. Those 10 minutes before standup starts, feels like an eternity. Our scrum master is no longer my "friend", I just see them as a person that cracks the whip at this point. All while being unable to escape it all, since I have stuff that needs to get paid. Oh, and all this is at good employer doing meaningful work. Cannot imagine other peoples' dread if they get stuck in the same loop.
Yes, because governments are trustworthy entities incapable of unethical behavior! /s
Tesco website hit by hackers, leaving thousands of customers frustrated
Take that with a grain of salt, from experiments run by myself and others I can share this does not scale linearly.

Hope some performance experts can chime in but this might be related to data structure sharing between caches or allocation contention in the JVM.
Prison because someone implemented single sign on/sign out? The way people are maximalist and hyperbolic about every issue these days is disturbing. Not just on HN with regards to tech but all of the cancel culture on Twitter and other networks.

When I log into my iPhone it also logs me into iCloud and starts using iCloud services for various phone related functions. I expect this rather than having to separately log into these things. In fact having to type the Apple store password is annoying. When I lose Keychain access I’m also “punished” by losing access to things it was helping me to sign into.

To me this is straight up a usability issue. Passwords suck, and having the browser manage all of your credentials and authorizations is a huge win. About the only thing I might agree with as iffy is loginning you into chrome if you log into gmail without prompting you, but does Chrome actually do this without prompting you at least once?

Before we send people to the gallows maybe some confirmation is needed.