skysight-inc/HackerNews huggingface dataset:
Also, though perhaps with minor practical benefit, during the period when the signing key is still secret it is used to assure the message is as-intended. This strong assurance is needed since a malleable encryption is used (to later enhance deniability).
> what are the benefits?

No google and no samsung spyware integration into the system is a major upside. Lots of people also prefer the normal android distribution instead of the version Samsung designers agreed on.
I would kill for an iPhone mini sized pixel. I use a Pixel 4a and even that's bigger than I'd like. When it dies, if there's still only giant pixels, I'm just going to buy another one used.
Thank you for this. I know some of this from painful experience and will probably want to bookmark that link!
ESP32 IoT security toolkit for “Noobs”
Comments:

Direction of society: If you are a small player like me, you have no control on it. The best that can do is what you can do for yourself along with similar minded people. For those that are disillusioned with people in general follow the link on my profile. ( summary: if you are a misanthrope, actively from alliances with 'level-headed' people, whatever your definition of 'level-headed' may be)

Direction of technology: No comments.
"unlawful, illegal occupation"

Has it been established that that is what it was? Serious question, I didn't follow the details closely enough.
The main key is the password, and we didn't lose the password. What we lost is the secondary, rarely-used-key that you only need when logging in on a new device or at new location. So if you don't leave home much, it's easy to forget that your online account access is totally screwed without your phone anywhere else. My wife's Google account doesn't require TOTP to login, so she never needs her phone when logging in at home, yet the phone is mandatory when logging in for the first time on a new device or at a new place. This creates catch-22 situations for people unaware of this behavior like it did for us ("we need to login to find the phone but we need the phone to login").

We learned our lesson, but I'm sure there are tons of other people that haven't learned this the hard way yet (but will eventually). I could see this becoming an easy way to sabotage/get revenge on people - steal their phone while they are on a business trip/vacation and then they are locked out of all their online accounts with no way in unless they had the foresight to keep physical copies of backup codes in their wallet/purse.
Yeah, I would consider myself full stack, but when it comes to css I definitely tweak and pray like a hobbyist, not a professional. I can change and implement front end as maintenance or evolution, but God help me if I start in greenfield front ends.
The points made upthread would seem to apply to a very narrow slice of jobs. In general, finding info about companies, reaching out to people you have connections with, etc. seems easier than newspaper ads, form letters to HR departments, etc. Though then and now, personal networks are probably still the most effective path for many.
Cost of Netflix minimum (non mobile) plan

US: $9.99=760₹

India: $2.6=199₹
.DS_Store is pretty neat solution to store folder-specific metadata. Whenever a user changes settings on how contents of the folder are displayed the file gets created. And since .DS_Store is a local file it is portable. Nothing breaks when folder is moved anywhere. Some programs use that to present a simple drag'n'drop installation picture. You don't need anything else, just a folder with correctly positioned files and custom background image.

I wouldn't call it a bad solution.
It is not just fair use, Congress has written an explicit exemption for copies and adaptations necessary to use a program on a machine into the law.
How is that disingenuous? It is precisely what is going on here. Between 2 recent bills, the US govt has earmarked nearly a billion dollars explicitly for funding anti-China propaganda in the global media. That's a lot of articles.

Anything can be weaponized or misused; it's a common framework for negative propaganda. "Our civilized technology, their barbaric weapons". It is also not a free pass from scrutiny.
A "release date" field would be super nice!
Right, that’s not scrum. That’s picking aspects of it, doing them wrong, and calling it scrum. Just because that’s what many business chose to do doesn’t mean that it has no value of done “right”. For example, standup is not a “prove that you got something done yesterday” meeting, it’s about making a plan for the day. Many businesses treat as such, but that’s just wrong. And toxic.
> One needs an imprint and data privacy page.

Really? I have a small personal website with no tracking; I guess my hosting provider collects server logs, but do I really need a privacy page for that?

An imprint is something I've only seen on German websites (I recall reading somewhere that those are required by law there).
I want a phone I can operate one-handed. I.e. while holding it in my hand, my thumb can reach any point on the screen without changing my grip on the phone. Roughly a 3" screen. I don't need a camera at all. I don't think such a phone exists.
Two data points. Trying to quit caffeine in my 30s always led to splitting headaches; no headaches at all in my 50s and 60s. And, FWIW, drinking filter coffee in the morning on an empty stomach is always a disaster, but espresso (with steamed milk) on an empty stomach goes down just fine without tummy troubles.
> But we're talking about what became easier, right? Not about what became more ideologically correct, semantic, etc.

Then think of it this way: it became easier to make the content/UI both good looking and fully accessible (e.g. to screen reader users, for whom layout tables are indeed a hindrance).

I think the same applies to the other hoops to jump through; they're solving a real problem, just perhaps one that doesn't directly affect many of us so we tend to ignore it.
New World – Amazon's $200M Blunder
Oh boy you have no idea how horrible it is.
Check out the latest rulings in that regard. Google Fonts is a big no now.
Everything that "transmits PII (including your IP address)" is problematic.
Its just a matter of time until all those free static site hosters (github/gitlab pages, netlify, etc) are targeted, cloudflare probably too. Our legal council already told us to "at least add some notification that people are leaving the site" if they click on the social login buttons ... because it could be considered transmission of the IP because of the redirect.
Reduce Process Interference with Task Manager Efficiency Mode
> They would need a unique IP for every single repo

I don't think this is true. If your CNAME myghpage.example.com points to <somerandomstuff>.github.com which then routes you appropriately, all Github has to do is remove that <somerandomstuff> subdomain when you delete the page and that's it, myghpage.example.com will fail to resolve and you're safe.

This would work even if Github only had a single public IP address.

edit: The issue with Github pages is that they make you point your CNAME to something.github.io not something.youraccount.github.io, so anyone can recreate something.github.io after you delete it. If they simply created the pages as something.youraccount.github.io you would be safer, unless you lose your account name. That's why the random subdomain is preferable.
Honest question, it seems this was tied to her via initials and email…

Couldn’t anyone in theory have made a donation in her name ? Or with those pieces of information if they knew them?
Oof. Not a good look for edge.

I'll be the first to admit I think this protest is about a bunch of idiots with a victim complex. They should just get the vaccine like 90% of the rest of their profession have done. It's safe and is what anyone should do to help their fellow humans.

The Emergencies Act is law. If Edge wants to do business in Canada they have to follow it. I don't see this ending well for them.

Maybe I'm an old curmudgeon, but I also don't want to see ANY financial company using memes in an official press release.
It is kind of unclear, but in this case, she is not a regular government employee but rather the political staffer of a minister of the government (who in Canada is also an elected official that sits in the legislature). So this isn't like the government terminating a bureaucrat, but rather like a member of congress firing one of their staff.
Because the article was modified.

[Note] Another HN user mentioned that the statement was dubious, cited the original statement, got downvoted to hell: https://news.ycombinator.com/item?id=30406644
I suspect it's pretty hard to make the case that the average Rust program is harder to write than the equivalent C program. I suspect it is quite the opposite. The language provides so many tools that didn't exist in the age of C -- high level concepts like Iterators, destructuring match statements, deriving debug printing for free, etc.

But both of our opinions are just opinions.
I don't know anything about chip design and manufacturing, so I might be way off, but could you just send working Commodore chips to China, and have someone make a clone. It seems like replicating 25+ year old chip technology should be easy enough, or are there simply no plants left that can create compatible chips?
Yes but a lot of academics moonlight in blockchain as consultants on their tools. Some are more public than others, such as PL guys like Philip Wadler, but just because they’re a professor at a university doesn’t mean they’re not also working on external startups.
Canada’s protest laws are different (and much more limited) than those of the US. Any protest that significantly disturbs the peace is not protected.

https://www.justice.gc.ca/eng/csj-sjc/rfc-dlc/ccrf-ccdl/chec...
I agree. My SO is nowadays so frustrated by all the security hoops and pseudo-security hoops like Gmail regularly stopping to work with her Thunderbird (she regularly needs to setup a new app specific PW). Other spps/sites sending SMS, others forcing you to use their app for verification and not one standard to get used to.

I am used to this from work but even there MS pesters me to install MS authenticator while I clearly always just use my regular 2fa solution.

And because I think the state of 2fa is not user friendly my own solution is not very secure by using Authy with a client on every device. So there is no second factor. I just copy paste from the app on my computer and don't need to grab my phone.
I have plenty of views. But you declared right from the start that you have chosen to blind yourself from the truth, and I know exactly how pointless it is to try to argue with someone in that position, so I simply will not.
Ignoring the wider issues, is this specific headline concerning or interesting? Of course they would be fired. They’re contributing money to a protest movement against their bosses that is deemed unlawful. You can’t expect to work for the government and fund a movement against that same government.
Awful.. Like a page from a magazine lying on the sidewalk.
What's the deal with the "hypothetical" IE5 source code that looks very much like actual IE5 source code?
That's not the case. Generate a unique ID on activation. Ask us to CNAME => <unique-id>.pages.github.tld. Drop the record when page is deactivated. Sorted.
If they'd make those dang things waterproof I'd be all over them. My phones get a dip in the Gulf of Mexico from time to time.
I don't believe Chrome provides support for BSD, which explains why it's missing.
Actually, this shows why using Google Drive as a backup storage may be a bad idea.
I think that's important.

I don't have citations, but my understanding is that what the truckers are doing directly is illegal, but that police haven't taken action in order to avoid violence or to fuel the grievances of the protesters.

Is it illegal or violent to donate to them?
It's not a good look for the Canadian government.
There's a crackdown in Utrecht as well: https://www.duic.nl/algemeen/utrecht-legt-flitsbezorgers-aan... (Dutch)

It does feel magic to order groceries and have them at your doorstep in 10 minutes (literally). But it's rarely useful.
You make a good point here -- the time-to-deployment is significant as well as the time-to-resolve.

It's also true that once a fix is available in any Linux source tree, advanced users can begin to use it from that moment onwards.

Arguably some users could develop their own workaround or solution even before one is available upstream, should they want to (because the code and tools to compile it are all available to them).

(similarly it'd be valuable to analyze how long it takes for the majority of end-users to upgrade across common operating systems. something like this chart[1] of Firefox version traffic history, but for security fix rollout)

[1] - https://web.archive.org/web/20201220010043/https://paulcalva...
California startup wants to be the Pony Express of electric trucking
I know - I no longer care about Karma on HN because if you chat about crypto regularly it’s entirely based on which Pro vs Anti group has seen it more. +1 from me because the space needs good questions :)
You can fire your employees for PR reasons in Canada. There is no due process or appeal, because it's a valid reason to fire your employees as a politician. If you don't like this, you can lobby for stronger labour protections.

If she was a government employee, then she wouldn't have been fired, as their union would have protected them.
Not necessarily.

The existing managers get their bonuses from the cost savings and move on to other things. 3 years later, a new generation of managers take over, realize the goodwill is already gone, and it would take an unrealistic herculean effort to reverse public sentiment. And it would take years. They take the easy route and try to squeeze even more money from the services by cutting more costs (yay AI!).

That's how giant companies fail.
57k post Brotli. Measuring the decompressed size of your page's static text content is like measuring your static image content by the size of the decompressed bitmap the browser generates instead of the size of the PNG (or whatever format). Server side both examples should be precompressed as they are static assets.
I'd never heard of this, thank you! I was hoping for people to provide more examples of things that have gotten easier in this thread but I'm happy to see one or two at least :)
Everything? The default state after checking out a git project with submodules is for them to be in the wrong state! Keeping the state of submodules and the main repo in sync is a complete shambles.

Try mercurial to see how to do it correctly.
This sort of highlights how the dividing mechanism works. You pick a group of people known for some fairly reasonable (asking to end mandates that have little effect given the ~90% vaccination rate anyway) and other unreasonable (blocking highways) actions, and you switch focus from the exact actions to affiliation and support.

Then you can convince the public to turn against your political enemies by framing their support for the cause as support for the unreasonable actions, ignoring any good faith intent they might have had. You double down on this by finding some fringe groups (e.g. actual neo-nazis) sharing the same identity (e.g. being white) and linking them to the person you are trying to destroy, and the public eats it up, completely ignoring the matter of the discourse.

The only way we can stop it is start distinguishing between affiliation and concrete actions. "Blocking traffic is bad" or "vaccines should be available, but not enforced if the hospitals are not overflowing" are much less divisive statements than "freedom convoy and all their supporters are bad".

Edit: funny how this comment's karma keeps swinging up and down. I guess, this take itself is somehow divisive these days. I truly wonder what stance could be accepted a fair compromise by both sides...
> Oof. Not a good look for edge.

Predictable one though.
Do explain
Kudos to Edge. This is a ridiculous request.
https://en.m.wikipedia.org/wiki/GNOME_Web (WebKit)
If machine learning (ML) is trained on human behavior it can never be better (for some measure of better) than people are. So if racism is widespread, it will influence decisions trained into a ML algorithm. That raises the question, can we train an ML algorithm to make the decisions we _want_ rather than base its decision making on what people currently do. Training on generated data might be one way to do that, to build in implicit biases because we want more fairness in decision making than people currently exhibit. But then who gets to choose what those "goal" biases are? Someone could add a bias that improves life for people of male gender and worsens it for everyone else for example. This seems like a really important problem that has no clear answer. It's very much related to electing politicians where the choice of politician is also a choice of future goals. We don't know of any objective way to always decide what goals are best for everyone (voting certainly is not objective since many voters are not aware of all possible policy/goal implications and can be tricked into voting against their own interests). Yet it seems certain that researchers are working to introduce selective biases into algorithms, if just to adjust for known biases that are problematic. As an opaque input into an opaque algorithm, biases become invisible in deployments and could become very difficult to reverse or fix later. Even with continuous learning, if people's behavior is the input, the result will never be better than people are currently, which can create problems for the future. Some kind of intentional bias aimed towards goals seems necessary, yet also seems very dangerous since it can introduce biases decided by a very small set of people.
Yeah, Cloudflare Pages is out, same as Github/Gitlab Pages, Netlify and all the other free offerings Hosted by a US Company.

Social Login Buttons are probably a problem too, if they automatically redirect. Could be considered a transmission of IP.

Game Servers that connect to Steam on client connect are probably a problem too.

I like the idea behind GDPR but the implementation is a fucking shitshow.
We are at that point in history where your financial moves will have direct impact on your life. The small fish even, those who donate $100, are no longer too small to cancel.

This is a tragedy. Leaked, hacked data being used to fire and harass everyday people is a slippery slope that we are already slipping down.
Well, I found this money quote on release train:

" The more alignment you have, the more autonomy you can grant. The one enables the other.

© Scaled Agile, Inc.
Include this copyright notice with the copied content.

Read the FAQs on how to use SAFe content and trademarks here:
https://www.scaledagile.com/about/about-us/permissions-faq/
Explore Training at:
https://www.scaledagile.com/training/calendar/ "

Note that I copied only the quote. But you can see this quote is eminently copyrightable. Hence the copyright notice.
Asset seizure is a big step, I agree.

They should just cut off their mobile data. Going without Joe Rogan podcasts and Jordan Peterson tweets will eventually hit hard.
Interesting to read all the supposed systemic reasons that manufacturers do not want to serve the market for a compact phone. Is it the lack of a flagship camera array? Battery life? Screen size? Less powerful but battery-thrifty CPUs? The fear of a hostile review from the press?

These all sound plausible, except for one thing: Why does Apple sell the SE (which is rumoured to be due for a refresh in March), the iPhone 12 mini, and now the iPhone 13 mini? Are Apple unaware of all the reasons why they can't make money selling a compact phone?

Apple have literally no reason to sell these phones except to make money. It's not like the market is flooded with compact Android phones and they have to sell a compact phone or lose out. With a dearth of good competitive options, Apple could decline to sell a compact phone and still make out like bandits.

I conclude that there is a market for selling compact phones, and Apple is doing just fine in it. If there's a systemic reason compact phones won't sell on Android, there must be an android-specific factor in play, because clearly there is a demand for these phones and a willingness to pay a premium to buy one from Apple.
That's what's reported here, but considering that it already happened maybe there's a more incriminating detail not disclosed (i.e. bank/card details)? Otherwise it would be definitely a hasty fire.
The title makes it sound like it is the macOS users fault and this is totally Googles fault.
If you're willing to increase the screen size to 5.6 inches you can get the Pixel 3a, although it's not actually a small phone, it just feels like one in comparison to everything else.
I don't think Google v Oracle had anything to do with the GPL. The Java API is not licensed under the GPL, even if the main implementation, OpenJDK is. Alternate JDKs (Microsoft's old JDK, Visual J++, for a famous case) had to obtain special licenses from Sun and later Oracle, that included terms which are very different from the GPL (in particular, these JVMs had to be fully compatible with Java, you were not allowed to create a partially compatible JVM; and there were further restrictions on JVMs that targetted mobile/embedded devices).

The whole trial also stopped at the copyight-ability and fair-use grounds, it never looked at any license Google might have had (they didn't have any license to use the Java API, but the SC finally found that no license was needed, as even if the API may be copyrightable, Google's use would fall under fair use exemptions).
> Cross-compilation (Go and Rust ship with cross-compilation support out of the box)

That's not right? Go has builtin cross-compilation. Rust does not, you need to bring your own cross toolchain even after adding rust-std for the target with rustup, unless there are recent changes I'm not aware of.
Ask HN: Thing that used to be easy, but are now hard
Currently, the "Things that used to be hard and are now easy" article is on the HN front page, but I wonder what the opposite list would be.

What do you think, in IT, used to be easy, but is now difficult?
I think https://www.tarsnap.com/ might do the trick for you.
Historically, wouldn't society just use visuals to identify if you're in a broad class such as the peasant or slave class? And all individuality would be subsumed under that.
No, that is obviously not the only kind of value you can have. That is one. I am saying bitcoin has none of them.

And, again, mathematically, bitcoin trading is negative sum. This has nothing to do with what the price is. It can go up, down, or stay the same. The game is still negative sum in the end.
OpenSea Investigating ‘Exploit Rumors’ as Users Complain of Missing NFTs
Great write-up. Great reading if you're a dad to be. But don't fret, if you don't get a chance to read something like this, eventually you learn all the nuances of child rearing in due course while you're on the job.
Hopefully she sues GiveSendGo for leaking the source of her anonymous donation.
I don’t think I’ve ever seen any public signs that explicitly state “Protesting Permitted”…with that in mind, I guess any protest can be called an occupation. Some very sad times we’re living through!
Isn't significantly disturbing the peace kinda the entire point of protest? I would wager many of the protests and demonstrations done during the Civil Rights Movement in the US "significantly disturbed" the peace, and yet they were effective at creating needed change.
I don't think we'll ever get a total picture on the first two items from Windows or MacOS, so that's difficult to compare.

What's the issue with Linux's architecture? Hybrid kernels aren't shown to be any more secure than a monokernel to my knowledge. There is something to be said that we don't make kernels for device drivers, which are basically their own operating systems, but that's common to all kernels.