skysight-inc/HackerNews huggingface dataset:
> I can't figure out exactly what you mean here. Temporary pins on the stack should be fine, and I don't see why anything else would be necessary.

The browser has a whole native heap (i.e. C++ objects, in current impls) that participates in the JS GC heap as follows:

- If the C++ object is referenced from C++ or from JS, it must be kept alive.

- If the C++ object references a JS object, then the JS object must be kept alive, so long as the C++ object would have been alive per the previous rule.

- It's possible for an object reference chain like JSobject->C++object->C++object->JSobject, and let's assume there are no other pointers to the C++ objects, in which case the last JS object should kept alive by GC only if the first JS object is alive.

- It's possible for dead reference cycles to exist like JSobject<->C++object, in which case both should die.

This requires that C++ has the ability to place references to JS objects in C++ fields.

This is where pinning comes in. It would be quite simple (and memory safe) but also totally incorrect (i.e. massive memory leak) to say that if a C++ field points to a JS object, then the GC just sees that field as a root. This is what I mean by pinning. (Note that "pinning" has many meanings in GC jargon; I'm using the Hermes version of the jargon. I guess I could have said "strong root" or something, but that's weirder to say.) This would be wrong, since it would not allow us to collect the dead cycle at all. Dead cycles are a common case in the browser. It would also cause other subtle breakage.

So, what the browser does instead is to have the C++ heap participate in GC: every C++ object that could possibly store a reference to JS objects anywhere can respond to GC callbacks asking it to account for all of those references. And, every C++ object needs to have a story for being referenced exclusively from JS, exclusively from C++, or a combo of the two. And the C++ code needs to be able to participate in whatever barrier discipline is necessary to get generations or incrementality or concurrency that the JS heap wants.

There are different ways to do this. Blink's Oilpan is probably the most principled, and that's basically a whole GC-for-C++ framework - very complex stuff. So, tons of inherently not-memory-safe code on the browser side just so it can do business with the JS heap.
I'm not sure what these APIs are exactly and why they're there, but Firefox also does something similar. It has special APIs available only to Mozilla and/or Firefox domains, for things like installing extensions, or helping with first-run experience.

A blog post about it was shared here on Hacker news <12 months ago, but I'm having trouble finding it...
Without actually talking to the cat, there's not any way of knowing that they don't perceive walls within some abstraction like "building." All we can really say is that the cat behaves as if the wall is some unchangeable object in its environment. You can't know the mind of a cat. Maybe they just like the idea of being inside something impregnable?
That's the thing about surveillance capitalism. Nobody is going to tell you when they use the data they have against you. When my insurance premiums go up, my insurance company isn't going to tell me that it's because I've spent more time in drive-throughs over the last 6 months. The employer who doesn't hire me won't tell me that it's because of a political opinion I shared on facebook 12 years ago. When a store tells me that their return policy is returns within 3 days and I need a receipt, they aren't going to tell me that they told the last person who asked them the same question something very different based on the score they saw from a consumer reputation service.

The data being collected by companies is increasingly used to influence more and more of your life, but you aren't allowed to know when or why. Amazon's data could be being used to show you certain items while hiding others from you when you shop at amazon.com. It could determine what prices you pay vs your neighbors for the exact same items. It could be used to push certain content on prime. It could influence what ads you're shown. Amazon may sell your data to businesses they partner with (like “Starbucks, OfficeMax, Verizon Wireless, Sprint, T-Mobile, AT&T, J&R Electronics, Eddie Bauer and Northern Tool + Equipment.”) and they too will use that data in whatever ways they feel will benefit them.

Amazon isn't collecting and storing massive amounts of data on every facet of your life just to ignore it. They spend the money required to gather and keep that data because it is highly valuable to them in one way or another. That might mean taking more of your money from you, or that might just mean manipulating you and trying to sway your opinion, but you can be certain that they're using that data every chance they get to their own advantage and you can be certain that they aren't going to tell you when they do it.
OK. That's a point of view. I just thought it should be accurately described.

I think the idea that you will download a web browser from Google and then it won't be able to figure out what model of CPU it is running on is a bit weird, when you think it through. There are lots of features of Chrome that are only "available to Google" for example it will only download updates from Google, unless you've modified its source code.
Being ambiguous as to what "China" means is both vitally important for international relations and also generally unhelpful for the purpose of clear communication. Corporate (and other) espionage notwithstanding.
There is a large cash deposit for recycling them, not so with lithium
> Most lithium-ion batteries currently being thrown out are phone batterie

Source? My guess for number of lithium batteries being thrown away would be for vapes.
>an "ad" for iCloud appears in the Settings dialog hierarchy where iCloud settings would normally be. Also, they are really subtle and hard to notice, tastefully integrated with the OS/color scheme.

Okay. But can they be permanently disabled?

Windows' OneDrive ads can be disabled, FWIW. There's a switch for almost everything in Windows (which doesn't excuse the shitty defaults, but still).
It's also the case that you don't throw out a car. Car batteries (that is, the ones that ICE vehicles use) have an incredible rate of recycling. It's not like you're going to throw an EV in the crusher without taking the battery out first, and if you don't recycle the battery...what the heck are you going to do with it?
Probably a 'something.google.com'...

But you could have teams with DNS zone delegation who can.create.anything.like.this.google.com
I'm curious- what's their strategy for determining what's true? Is it an Orwellian setup where certain media organizations (eg. NYT, Reuters, Wikipedia) are deemed to be an authoritative ministry of truth?
Canada is… a country, right? Not a city. Nitpicking here, but that doesn’t feel like a BBC headline.
Google knows nearly every Wi-Fi password in the world (2013)
Ask HN: Is accurate reasoning the path to AGI?
If anything in life can be reasoned by first principles, whether it’s physics, computer science, economics or mathematics, would an AI that is able to reason at 100% accuracy be capable of understanding our world in all its detail and derive ideas and outcomes from it, thus leading to AGI?
I think the submission is a bit wrong in editing the title from the original. I understood it like this:

Chrome has a built-in extension that uses public Chrome APIs that are easily available to other Chrome extensions. The issue described is that this extension shares this information to Google's own domains when they're communicating with the
extension, while other websites can't do this.

There's no "special hidden API".
16Personalities, a Myers Briggs website, includes neuroticism on their test. They refer to it as Turbulence and Assertiveness, as in high neuroticism and low neuroticism.
Show HN: I made a SaaS landing page for those who hate CSS shit
Are you tired & bored of making a landing page for your new business/SaaS? With our boilerplate, you can make a stunning page exactly like this one and launch quick AF. Focus on your idea and let us handle the looks
Gift Link: https://www.nytimes.com/2024/07/09/climate/electric-school-b...

Archive Link: https://archive.ph/1LRpJ
HTC Touch Pro 2 and I could type better on that than any phone since. Even managed to get it running Android (it was a Windows Mobile phone which is... old)
Honestly this is a ridiculous take.

Git is the native backend for jj. It is extremely reliable. There is no reason for "things to go wrong" uniquely to jj, particularly if you take basic precautions like forbidding force-pushes to master/main. For that matter plenty of people make mistakes with git itself, and having used both (and being a power user of git) I can confidently claim that there is significantly less surface area for mistakes with jj than there is with git.

I have never, in 25 years of software development, needed to "communicate my workflow" with another engineer. It's understood that if I use a different tool than the rest of my team, I'm on the hook for knowing any differences in the workflow. But it's not even like this is unique to jj; my team uses a variety of editors/IDEs, operating systems, and shells. I use macOS, fish, VS Code, and jj. Others use nix, zsh, vim, and git. Somehow we all manage.

The worst part is that your argument is trivially rewritten to discourage trying anything new. This is frankly a terrible mindset to have.

If you don't want to learn a new tool, by all means don't. But not learning anything that might be different than what other people on your curent team use is a great way to completely stagnate your growth.

That said, the argument I was responding to was that this can never take hold because of git's dominance. My point was that use of jj can grow organically since one person converting doesn't actually require the entire team to do so. Whether or not you're particularly hesitant to adopt new things is irrelevant; individuals can switch whenever they feel appropriate and it doesn't impact others.
That was their foot in the door to the startup scene. Now they are venerable founders with a proven track record of AI-driven solutions /s
yes but that's Chromium, not Chrome (which is proprietary). I think that's what OP was saying
I actually built my own Playwright screenshotting software with this idea in mind too: https://shot-scraper.datasette.io/ - I wrote about using that for my project documentation here: https://simonwillison.net/2022/Oct/14/automating-screenshots...

Really it comes down to the team you are working with. If you have user-facing documentation authors who are happy with Markdown and Git you can probably get this to work.
> It might be that you want to replace it with a new, more capable version

If you're truly replacing your API with a new, more capable version there's a much better option, in my experience.

Roll out your new API, and replace your old API's implementation with a proxy that calls through to the new API.

The proxy will need very little maintenance, as all it's doing is connecting one fixed, stable API (your old one) to another fixed, stable API (your new one). Lock it down to only your old customers, if you want.

The support costs will be basically zero, and your existing paying customers will thank you for respecting their time with a dependable, low-churn API.
... and their job is probably dealing with a lot of space policy, policy organizations, regulations, contractors, etc. not designing rockets. Who is their head of engineering / CTO?
Plaintext can mean a few things - encrypted in transit using an HTTPS connection means it's no longer plaintext.
Node is capable of significantly better performance than the average Jira instance.

The bar is low.
Is there more of an explanation? I see a baseless claim without any specificity.

I'm not saying it's right/wrong, just that no evidence was presented.
> Honestly this person probably felt they were truly sticking it to the big guy because how dare they charge for internet.

I get the vibe, though I agree this was an unproductive way to pursue it.

I strongly suspect the fee for access is not at all related to the cost to provide service; they’re leveraging the temporary monopoly on connectivity they have to get consumers to pay absurd prices. Cruise ships are similar; I think it was double digits per day for internet.

I don’t think it’s productive to metaphorically “take the ball and go home”, but that instinct would probably be much lower if the fees for access were something reasonable.
Drive.google.com links also work
Am I the only one who is always tired in the plane no matter what and cannot anything but close my eyes and wait til the flight is over?

The idea of pulling out my laptop or even a book is just… tiring. There’s a lot of noise as well (airbus anyone?) and I don’t have noise cancel headphones, so concentration is difficult. Without taking into account that I have spent at least 2h away from home among trains, trams and security controllers. The bad (unhealthy) food available in airports doesn’t help either. Half the year the weather doesn’t help either(it’s either too hot or too cold). Plus the 10 kilos backpack I have on my back is making me sweat no matter what.

So, basically, I’m never in the mood of doing anything in a plane.
I expect that, yes. The cell might die if the DNA damage occurred in a critical position.
Rust 1B Row Challenge without Dependencies
No single dependency used

It starts from a naive implementation that takes 90 seconds to execute, and improves it to just 4.82 seconds!

Key improvements include:
- Multithreading: Reduced execution time to 17.96 seconds.
- Custom Parsing: Improved number and key parsing, cutting down to 6.76 seconds.
- Unsafe Optimizations: Further reduced to 5.16 seconds by skipping UTF-8 validation.
- Custom Line Splitting: Achieved a final time of 4.82 seconds by optimizing how lines are split.
The EV is more efficient, but the energy density of the battery is much, much lower than gasoline. The ICE wastes most of its fuel energy as heat with a fraction going into actually providing drive. An EV being 99% efficient has its range being entirely dominated by air & rolling resistance, whereas for an ICE car the relative impact is lower.
It's wild to me that disposable vapes use rechargeable lithium ion batteries. Presumably it's because it's cost effective?
I'm an app dev. What can I record in the background? What can I track?
I predict that it will be the same for lithium in the near future.
And? Google uses Chrome to retrieve data about the user.

Every Chromium-based browser has 'hidden' APIs only accessible on certain domains. That's how the custom (read: closed source) extensions work. "Component extensions" are used to interact with them normally: https://chromium.googlesource.com/chromium/src/+/main/extens...

See https://blogs.opera.com/security/2021/09/8000-bug-bounty-hig... and https://blogs.opera.com/security/2021/09/bug-bounty-guest-po... for examples of when there are vulnerabilities in those extensions, and how they can be abused for remote code execution.

Any whitelisted domains for these APIs cannot be written to using user-installed extensions, in order for a malicious extension to not be able to inject a script and execute the special API.

At Opera, we previously tried attacking the underlying implementation about how these 'hidden' APIs are accessible. Although we found a lot of Opera-specific issues, the Chromium logic seems sound and a "bypass" for other websites accessing the API is unlikely. It also seems that the developer here was just a bit overzealous in allowing this API to be accessed from all google.com subdomains.
Nice; reminds me of the Redhat Performance Tuning and Real Time Low Latency Optimization guides.
Wouldn't you be able to deploy an app script website, which is hosted on "script.google.com" and make use of this?
Something that looks vaguely similar has happened a couple of times before (far right do well in the first round, but once the non-far-right vote is less split in the second round they do badly) but this was different in that it involved significant coordination; the main opposing coalitions coordinated to drop candidates in scenarios where it could go from [coalition A - 25%, coalition B - 35%, NR - 40%] to [coalition B - 60%, NR - 40%]. (That's obviously simplified; there would be _some_ transfer from A to NR, but in general far-right parties don't do well on transfers).

This isn't entirely unknown in electoral systems like this; it has been done on a small scale in the UK, say. But the scale is very unusual. They arguably more or less coerced their voting system into an extremely inefficient/inaccurate form of STV-PR.

Something arguably kind of similar played out in the recent local and euro elections in Ireland, but because Ireland uses STV it was less remarkable; it was just kind of the way things normally work. Various far right parties and independents did respectably on first preference votes, and transferred amongst themselves, but as the count went on they sank and ultimately did quite badly, because people who vote for normal parties generally didn't transfer to _them_. When filling in a ballot, no-one says "I'll vote for labour, then the greens, and then the person who says 'woke' every three seconds", but they often _will_ grudgingly give the centre-right parties a low preference to keep the saying-woke-every-three-seconds party out.
That is the source code of Chromium, not Chrome.
Just like the US tax code is well documented?
> is also common for a lot of routers to support their cloud/app management functionalities

Why does the cloud need to know the wifi password to support mgmt functionalities? The only reasons I can think of right now are for more "automatic" setup of a second unit for meshing or if you want a factory reset to have the same password. Both of those cases have better solutions.

If it's for setting a new password I don't see why they need the old one, if it's for remote management access using the wifi password as the access credential then that seems both bad (access to my network should not mean access to manage it) and like it can be done a lot better if actually needed (send just a well salted and hashed password).
Without understanding the nuances of the issues, it sounds like the issue of case randomization could be fixed with changes to iodine while sacrificing some bandwidth.
FYI this is the predecessor to a reusable rocket patterned after Falcon 9:

https://en.wikipedia.org/wiki/Ariane_Next

Would love to see at least one other provider get into reusability.
I'm not saying it's an efficient range, but in relative terms to EVs the range impact of doing that speed is lower.
Its in the chromium repo:

https://source.chromium.org/chromium/chromium/src/+/main:chr...

https://source.chromium.org/chromium/chromium/src/+/main:chr...
I have never owned a car (lived in urban areas all my adult life) and I find that when I visit my parents in their suburban home, everything is less convenient when driving is involved.
What about anything on sites.google.com?
This is a little different than Office being able to use some useful OS integration feature that LibreOffice can't use.

This is allowing Google to do something TO you that no one else can do to you, and that you assumed no one could do to you.
It would be a vacuum I guess, but generally not in the normal sense because this is the case with most metals. You don't really consider the interstitial space between the atoms in the crystal lattice a vacuum even though there is space for small atoms (He/H) to diffuse through.
The power of git bisect is the best argument that I've seen for using git rebase. When you rebase, you get a much cleaner commit history. Which makes it much easier for git bisect to work and find the correct commit.

I still lean against git rebase because I've suffered from the disasters that it can lead to. But I certainly appreciate the power of git bisect.
Web apps also get your IP. Why aren't you using a VPN if you care about that?

Web apps can also get the rest if you click accept when it asks for camera access. What exactly do you lose by installing an app?
Google Meet uses source separation technology to denoise the audio. It's a neural net that's been trained to separate speech from non-speech and ensure that only speech is being piped through. It can even separate different speakers from one another. This technology got really good around 2021 when semi-supervised ways of training the models were developed, and is still improving :)
I'm a day late to the comments, but...

I like the lens of the Big Five model of personality. I think what's at play here is

(1) Low neuroticism = resilient and confident

(2) Low agreeableness = willing to go against the prevailing tide

and then you need

(3) high openness = inventive/curious

The first two personality traits without the third = stubborn

Add the third = persistent

(some people don't even need #2 to be stubborn, when they consider their tribe to be correct even if it goes against prevailing thought in the broader world)
It's actually a better way to live.

I don't know how to express the freedom and joy that comes from having your kid say "I'm biking to my friend's house!" instead of "Can you drive me to my friend's house?".

Not to mention that I made a lot of my current friends by just meeting them while walking around town.

And cities designed for cars aren't even easier to get around, because cars may be ten times faster than walking, but once you add all the parking, roads, shoulders, etc. to make it easier to drive, everything is ten times farther apart.

I really wish it were easier to convey that a low-car life is a much higher quality of life.
In the early nineties, before logging into work from home was a thing, my friend created an email based terminal tunnel: he'd send emails with Unix commands to this account, executed the command, and returned an email with the result.

There were no security checks whatsoever: everyone who know the magic word that triggered the start of the commands could do whatever they wanted on the Alcatel servers.
And who built the OpenWRT firmware? I bought a gl.inet that comes with OpenWRT but since it's made in China (like every other router) I looked at the OpenWRT blobs and for all I know they're built in China too.
> there are no hidden variables such that a particle really took only one path to a point and we just don’t know which one it was.

We don't know that. It is a statement of your belief in such interpretation of quantum theory.

But I wasn't suggesting hidden variables predict which path will be taken - that is a different idea. I admit my description was somewhat confusing. My point is that retrodiction of trajectory is much easier than prediction of trajectory, because of records of the past. In other words, past is constrained by existing records of the past, while future is not constrained by records of the future, because those do not exist yet.

This retrodicted past is still loaded with uncertainty stemming from the records having uncertainty, and is speculative and not experimentally testable, of course.

> It really did go through all of them. All the ones that are consistent with the current state of the system.

This is also a speculative statement that is experimentally untestable. And I agree it is consistent with quantum theory, if we add "...and consistent with records of the past". So both stances are just an interpretation of what is going on, there is no experimentally testable idea here.