skysight-inc/HackerNews huggingface dataset:
Shouldn't be the onus on the regulator's part to prove that Google is selling or not protecting the user's IP address?
Intellectual humility and the loyalty of Trump supporters
Thanks for assuming I’m young, I actually middle aged :)
ok...this is just downright silly and dumb now

on the other hand, always host your fonts
I see a silver lining: When Google no longer has economic incentive to deliver quality search results, new search engines can finally take a market share. For a year I've been using DuckDuckGo and Startpage, and they're both great, but sometimes there's something they just don't give me, and I've felt the need to Google it. Now that Google's results are deteriorating, I find myself doing that less. I've been able to quit Gmail, but YouTube and Search have been hard.

"Searching" has for almost two decades been synonymous with "Going to Google and feeling lucky." -- the fact that searching requires effort (and possibly more than one search engine) feels frustrating and refreshing at the same time.
I know this is a hot button topic. I’ve watched the Jordan Peterson videos about this, including his work with top level female executives to help them develop compensation negotiation strategies. I also understand the argument, based on the idea that men and women in the raw are exactly the same, that this is because women are indoctrinated into risk averse behaviour.

From a practical point of view I have two daughters aged 17 and 18. They’re aiming for university and careers. How do I talk to them about this? What resources does anyone here know of that might help? Anyone in a similar situation, and how did you approach this?

It’s a somewhat rhetorical question, I do talk to them about this stuff. I’ve just tried to explain and discuss the issues and help them come to their own conclusions. Toolikit, not solutions.
When used as an algorithm (as opposed to a sorting network), insertion sort only inserts "as far as it needs to". In other words: it moves the new element to the correct position, then stops going back through the array. This is the aspect of insertion sort that makes it very fast for "almost sorted" data: each element is only moved a few spots. However, this is a branch that is difficult to predict: this is the author's point. For very small amounts of data, branch misprediction for this branch dominates.

This is not the case when insertion sort is expressed as a sorting network. Take a look at this image [1]: the final "insert" has comparators that go through the entire network. The "algorithm" version wouldn't do that: it would stop (using a branch) as soon as the entry hits the correct place. If you remove that branch (which, remember, is the thing that makes insertion sort faster in the general case), insertion and bubble sort are indeed very similar.

The point here is that "sorting algorithms" and "sorting networks" are not the same thing: a sorting algorithm can branch, a sorting network cannot. The same principles of bubbling and insertion can apply to both, but that does not mean that an insight that applies to sorting networks necessarily applies to sorting algorithms.

[1]: https://en.wikipedia.org/wiki/Sorting_network#/media/File:Re...

(PS: I actually wrote most of that wikipedia article years ago! I did the illustrations too! I basically just wrote down and made diagrams for whatever I could understand from The Art of Computer Programming vol 3. The insight about how bubble sort and insertion sort are essentially the same when expressed as sorting network is from Knuth, though I doubt it's original with him)
Sure, but that's not even remotely the same.
Yes. Fuck CIA^H^Hloudflare.
While you somewhat correct, in that the browser sends the request, but it is not a 'can be downloaded' but rather an imperative saying 'get that font from that server'.

In the end, the w3c standards define, that browsers execute the commands they receive from the server and in this case, the server tells the browser to download the font. So the site-owner configures his website in a way, that this site instructs browser to share the IP address.
This comes across as a laundry list of “people who hold views I don’t like” at least the two that started the GoFundMe. And are you saying people can’t start a GoFundMe without being a trucker? That makes no sense, it’s beyond truckers now.

The rest of the names (the ones I’ll take your word are racists) you describe as “organizers” but what does that mean? Involved? Leading it? What? Tweeted support?

And who cares what Trucking Organizations think? Do they represent all truckers? All dissenting voices shouldn’t be heard?

This seems like some vague collection of “facts” and insinuations in an attempt to paint the entire movement. It’s kind of slimy.
It's naive to think you can scale the web we have today on web of trust. If you didn't know, Google Chrome ignores to a large extent the whole certificate revocation infrastructure because it's slow and it has privacy issues[0]. How would things work if you would check every single web request you make against the web of trust? Your peers would know every site you visit, or worse, a notary for your trust would know every site you visit. PKI works because the check is local and based on time and cryptographic signatures.

[0] https://en.wikipedia.org/wiki/Online_Certificate_Status_Prot...
If 10% of engineers in your country end up working for a foreign firm, wont SE make more money and have less costs vetting remote postings?

There's plenty of opportunities they left on the floor because they didn't like the best deals of that business, sure they could have grown and lowered their average return.
I think the amount of information being leaked here is minimal. i.e. fonts are cached and thus Google only knows you visited health.com and not health.com/scarydisease. unless your landing page was health.com/scarydisease.
They use money mules, the same as US scammers.
Options work differently, you can lose all your money.
It has to do with the economic system and local urban planning. Many cities in Europe have refused permits for Mac Donald's to open shop, and that's a good thing. Because once settled, these megacorps who pay less than 1% taxes will take away all the business because they can have a bigger variety of products/services that a small shop can't afford, at a price driven by economies of scale that a small shop can't afford, treating employees in an illegal manner that a small shop can't afford to go to court over, and avoiding taxes through loopholes which small shops can't afford to know about.

If you can, don't let chains setup store near your home. If you can't, seriously consider getting involved in sabotage operations with people you trust. That's how Google ended backing off from Kreuzberg (Berlin) a few years back. Mac Donald's also had a few famous burnt-down "restaurants" here in France, but sabotage doesn't have to involve flames. A pack of sugar down the concrete-mixer will do the trick. If the shop has opened already, anything to block the locks will block business for at least a few hours.

It's David vs Goliath but if you've got support from your neighborhood you can win. Just don't ever think police and politicians are on your side.
Also note the US government has been using companies like NSO to push its own political agenda since it lets it sell this sort of technology to allies (like Saudi Arabia) without scrutiny.

This is following two other scandals relating to NSO in Israel that are getting quite a lot of press here.

For example the inquiry suggests that police members used Pegasus to spy on opposition leaders who opposed Netanyahu a-la-Watergate.

To be clear this _is_ a watergate level scandal here and you'd be hard pressed to find a news website in Israel not mentioning NSO on the homepage.

(Edit: noted I didn't post any citations like https://www.haaretz.com/israel-news/.premium-netanyahu-gave-... or https://www.jpost.com/international/article-694887 but happy to post references on any of the above since it's very easy to find these references (it's all over the news) and I personally dislike NSO)
I also browse the internet this way, but yeah. This solution is not available to people not using their own computers, people using certain browsers that don't have it, or just people that haven't heard of it.
Google is a US company and the US government can and do ask companies to provide any data on the servers even if it is against the policy Google has written in that document.
Consider the following scenario:

You are logged in to to google and so are your family members.

You visit YouTube.com from IP X with device (user agent) Y.

Your family member visits YouTube.com from IP X with device Z.

Google Fonts gets a request via the API key of mydomain.de from IP X and device Y.

Google now knows that you visited mydomain.de

Edit: I stand corrected that Google Fonts doesn't use an API key.
I suspect they still can correlate the font request with the domain, however I have no proof.

Consider this an example for other services like maps.
I don't know why people use fonts served from Google on their websites. Just serve the fonts from the server the site is on. It's like having javascript libraries served by 3rd parties; it's less robust.
And in addition to not being hacking, it's called taking responsibility - probably along with getting out of a coddled, learned helplessness state.
Turns out with modern technologies it is never ever consistent, nor nice, fast, ergonomic. Heck, sometimes not even usable at all.
I don’t know if this is the answer you’re looking for because it’s not tied to a cryptocurrency but take a look at nostr: https://github.com/fiatjaf/nostr

It’s a protocol that allows nodes to gossip event messages amongst each other. The event relays can be used as a backend to provide data to your web/desktop/mobile apps.
Well, I'd say so yes. It's the same thing that came up when hotlinking was first a major thing[0]. In my opinion, anything but communication with the first party violates expectations. If I visit Imgur, then I expect to deal with Imgur, and not with their myriad of third parties all doing something else that's not directly my business.

People of course don't mind, reality is often like this too.

[0] https://en.wikipedia.org/wiki/Inline_linking#Controversial_u...
"May".

It seems obvious that it would play a role.

Being good at selling yourself, too. And tons of other variables.
That's why the pay gap is a myth, because it's meaningless.

Beautiful convicts gets better sentences. Tall people earn more. Taking a single vertical is just political bs to win female votes.

Besides, women in their 20s outearn men: a big factor in the studies claiming the pay gap exist is old senior men who started working when families could afford to have one parent at home. Those guys are probably rich and they have no female counterparts.
This is also the thing I don't like in Go: sometimes it's really hard to find what interface a type implements, why a type implements (or not) a certain interface and where the f the implementations are.
Why you should still ditch your phone for a ‘proper’ camera
When I specify that the font used on my page can be accessed at a particular URL, I’m neither asking you to download it (the font might already be installed on your system), nor am I requesting that, if you do download it, you pass along a “referer” header. I am not only not making your browser do this - I’m not even asking it to do so.
Note that GDPR talks about data minimisation - data you should not share more data then necessary. If there are no other way then linking to a third party then that would be just fine. But if there is another way to do it that don't requires you to share someone else data you should do that instead (in this case self host the fonts).

Also consent may not actually help here because the principle of data minimisation applies no matter what legal basis for the processing you use.
> You could also say that the user is opting in to loading a font from google when he actively sends the request to google.

Consent is not consent unless it's informed consent. If the user was not made aware of the request in a clear way before the request happened, he did not have a choice. If the person (and by person we mean the human being, not their browser) did not make the choice, then he did not consent. There's no "technically" about it, the question is only if the person knew what was happening and was given an opportunity to opt in.
So turn that off or don't use that browser? Where's your personal responsibility here?
It is possible to host a blog wihout third party services.

Maybe small businesses should focus on minimal websites and build from that.
As you grow, you can more easily affort the costs for lawyers to check if the features you want to build are GDPR compliant.
I’m sure you’ve heard of it, but in case you haven’t, it’s called bouncing when there’s no valid inbox on the other end. Before you object, yes, you can set up a catch-all incinerator, but that’s not the default as is the case here, you have to explicitly set it up.
Restaurant driver is not a highly paid or long term job, so I wouldn't expect the incidence of this is actually any lower amongst restaurant employed delivery drivers.
Germany is terribly backwards when it comes to IT. It's insane that such a backward country should have that much say on EU regulations.

I'm not kidding. Countries like Denmark and Estonia are light-years ahead of Germany in terms of eGov and mobile payments.
Phone is best for one simple reason: the actual price.
Exactly we should just bite our tongue and wait for our dear leaders to tell us when it’s safe to go outside again.

To even question that is “an unacceptable viewpoint” to quote Justin Trudeau.

Just sit down, shut up and the government will tell you when and what to do. Wait for further instruction.
Dig does not throw an error when it does not get a result, instead you get an output like this:

; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 49352
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; EDE: 0 (Other): (time limit exceeded)
;; QUESTION SECTION:
;cock.li. IN A

;; Query time: 115 msec
;; SERVER: 1.1.1.1#53(1.1.1.1) (UDP)

In contrast with a successful run like

; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21996
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;cock.li. IN A

;; ANSWER SECTION:
cock.li. 300 IN A 193.239.85.202

;; Query time: 159 msec
;; SERVER: 8.8.8.8#53(8.8.8.8) (UDP)
Some cryptocurrencies make it impossible to black hole funds by requiring the recipient to prove they can spend the money they're about to receive before they receive it. Needless to say, these cryptocurrencies do not feature smart contracts.
Taloflow (YC W21) Is Hiring a QA Engineer and Project Manager
When I use black or other formatter, I have to exert cognitive effort to anticipate how the formatter will format the code so that I can avoid the inevitable stupid formatting decisions.

I often then tweak the code in a way that is not necessarily better, it's merely rendered better by black.

It just feels like I'm fighting against the tool half of the time.
Sarcasm and anger often gets misinterpreted on online forums, hope you arent continuously downvoted.
How about designing a DR balloon instead? Costs would be divided by mass production.
Please elaborate on the mail scanning @ fastmail? As far as I'm aware they do not do this, beyond ofcourse virus/spam.
It is currently possible to present multiple certificates when the connection is initiated using TLS. These certs are usually a chain - from CA to intermediate CA and then the final cert, but it should be possible to present certificates from different chains. The question is how the clients would be able to handle this.
If you compare bubble sort to insertion sort, bubble sort is preferable if you have a very small error (like swapping just one element).
Lucky for the Mossad they are not building a competitor to the iPhone/iMac/MacBookPro/iPad etc...

They don't have to compete with apple they just have to find an interesting mistake in their code. On phones with tens of years of legacy firmware/modem/protocol code that's very hard to reliably stop.

(NSO is not Mossad and Mossad doesn't use NSO afaik)
Try enforcing anything overseas..
[1982]
Wrong. In this case it's illegal because Google Fonts can be served from the origin server as they are downloadable.

The same does not apply to sideside CDNs.

However, I believe NPM CDNs are the same scenario, so I'd start serving packages from the server as well.
In a perfect world you would be right, but spend some time with a bunch of clueless executives who don't know how clueless they are (or are trying to pretend they do have a clue) and you'll realize there's no amount of context that will help them realize why there's bad news.
> And no, gmails fake "we don't actually send it until you close the tab/wait 30 seconds so you can undo it" doesn't count.

Why doesn't it count and why does it matter how Gmail works behind the scenes?
1) pepesza finds "42424242" <- that is the solution that needs to be hidden from the world

2) Signature = sign("42424242", privk_pepesza)

3) Witness = Circuit("42424242", Signature, pubk_pepesza). `Circuit` program will validate things I've mentioned. a) is 42424242 a correct solution to the puzzle? b) is signature correct for "42424242" as msg and pubk_pepesza as signer? It will return a computation trace - the Witness.

4) Proof = Prove(Witness). This `Prove` program is specific to a zksnark flavor that is being used. Some flavors will produce Proof of constant size.

Now pepesza sends the Proof and pubk_pepesza to zamadatix. Zamadatix runs:

Result = Validate(Proof, pubk_pepesza). If Result is true, both a) and b) are correct. This allows zamadatix to learn if pepesza actually has a solution to the puzzle. Note that Validate(Proof, pubk_zamadatix) will return false.

`Validate` is the program which can be automatically compiled from the Circuit (and things that are dependent on the flavor of zksnarks used).

The whole thing revolves around two properties of zksnarks. First - they allow to prove any(*) computation. Second - they allow to use so-called hidden inputs. In example above `pubk_pepesza` is the only public input. "42424242" and Signature are both hidden inputs and don't have to be revealed. Thus Zamadatix can create a Proof' that will result in true = Validate(Proof', pukb_zamadatix), but that would require an independent discovery of "42424242" string. Or a hack of pepesza's machine.
I know, which is why I said: "and maybe with good reason, if it turns out the average citizen is not actually able to configure these kinds of decisions."
It's always the Munich court making these stupid rulings. How long until they fine an ISP for forwarding my packets over a Google AS on the way to its destination.
There's really no such thing as settled law. E.g. Roe.
Managing Availability in Service Based Deployments with Continuous Testing
Giving an IP Address to Google including referrer header is. They can do a lot with this and as long as the Google Font hosting service doesn't give out assurances (they can be sued for for breaking) that this data is not used in any way which would enable Google to track a person.
Why? That is the far more correct way of presenting data.
Yes, definitely. Ad absurdum, browsers could be mandated to have the user opt-in to every single instruction that is executed. It's technically possible, the user has control.

I think it's a slippery slope to imagine/enforce a transfer of agency between the website user and provider, where the latter will try to make the opt-in appear as simple as possible. An ideal opt-in is more than the click of a button, it's an understanding. A button accompanied by a wall of text isn't understanding.
> When I specify that the font used on my page can be accessed at a particular URL

But this is not what you are specifying with Google Fonts (usually). You are saying: "To properly see this page, download this instruction file (CSS) from this other host". It doesn't matter if I have the font already installed, I still ask the CSS file to Google.
Random idea but:

Leave and set up your own business/startup doing dev work similar to what you do now, ideally serving customers you are familiar with.

Hire some young people, trainee dev, secretary etc.

Better social and a career move forward. Even if you take a pay cut you are going from dev to more a ceo type thing on the cv.
While it's still true that a DSLR can do things that a phone camera can't, photographers do have a history of being really conservative about newer, smaller, more convenient formats. There was a time when anything less than 8x10 sheet film was considered an amateur format.

At the same time, if you just google for '100 greatest photos', you can see that the most iconic images of the past 100 years or so don't rely for their impact on technical quality. Indeed, many are grainy, blurry, or not perfectly in focus.
Well technically you share a lot more data. IP, browser agent, time (which in combination with IP can tell exactly who used that specific computer) and cookies set on the *.google.com domain.

So it's actually interesting that the court only focused on the IP-address although the ruling would probably have been the same even if they widened the scope.
I doubt that WWW was designed with intention to allow that. A bunch of different people with different goals do stuff they want and the result is something that just happens without anyone's intention. And we have legal systems and regulations to clear up such situations.
> I’ve had food sitting at restaurants for over an hour before while Uber attempts to find a driver.

If you're in a metro area ordering during ordinary hours and having this happen, it's almost certainly because the restaurant has developed a bad reputation and people refuse to work with them. The thing about Uber's intermediation is that if you had this sort of experience by ordering directly through the restaurant, you'd rightly associate the experience with the restaurant's failures, but with Uber, it feels like Uber failing.

> a particularly frustrating instance where Uber told me to cancel but didn’t refund me for me

UberEATS drivers are like Fedex or USPS for food. They have no special powers here. Expecting one to refund "for" you is like having a mail person show up at your door and then berating them for the screwup of whatever business sent you the wrong thing, etc.
The first transaction must always be with a very tiny fraction of that money. Assuming you know something may cost a lot.
> And besides, big banks still have to deal with checksum-passing iban typos on a daily basis. IBANs only have two check digits.

Actually the checksum was designed especially to deal with typos. As such, dealing with typo errors is usually not an issue at all.

What they do have to deal with is maliciously created IBANs though. However, if the account an IBAN should point at doesn't exist then the transaction usually just bounces.