waitwhatwhoa

We did a study of this a few years ago[1] and the code for the instrumentation is available on github[2], the data is dated but you can see a cross section of popular apps and how far behind they were lagging over a 3 year period on page 11 of the pdf. Re: child comment, our main concern in this research was patched vulnerabilities persisting in electron apps and how damaging that could be. Details in the paper :)

1. https://www.usenix.org/system/files/usenixsecurity24-ali.pdf 2. https://github.com/masood/inspectron

This was fixed after we reported it a few years ago while working on the paper.

Paper author here, here’s a valid link: https://www.cs.uic.edu/~polakis/papers/favicon.pdf

The STEM OPT _extension_ is an additional year on top of the one year that all graduates get. I believe the article is arguing for getting rid of that extension, not all OPT.

When can we submit witness slips? Is there a mailing list for updates we can join? Good luck!

It's been exciting to see Docusaurus [1], VitePress, and Starlight [2] all under very active development, with the first two being React- and Vue-based respectively, and Starlight being built in the Astro Islands "bring your own UI framework" model. Docusaurus ended up feeling a bit too heavyweight and opinionated for my uses, and I've been happy with Starlight so far, with the developer/author experience being very similar to what I've seen during experimentation with VitePress.

[1] https://docusaurus.io/

[2] https://starlight.astro.build/

Previously (including several comments from CF folks including cofounder eastdakota): https://news.ycombinator.com/item?id=37674097

Passwords are sent all at once from the client to the server. This feature is for obfuscating your keystroke timing within the encrypted connection.

tldr: the election only happens after significant organizing and demonstrated worker interest in forming a union.

Currently it’s a two step process: get a threshold % of workers to indicate interest in unionizing, then hold an election over all workers to see if a majority want a union. The ruling makes it so that if the company interferes with the election, the NLRB deems that initial interest level sufficient for allowing a union to form and recognizing its authority to collectively bargain on behalf of all covered workers.

This was in 2021; it appears the fire was extinguished by July 11 [1], investigated by Vice later that year [2], and seems to still be being cleaned up by US EPA [3].

1. https://www.ehs.com/2021/07/morris-lithium-battery-fire-high...

2. https://www.vice.com/en/article/m7vj73/everyone-thought-the-...

3. https://www.epa.gov/newsreleases/epa-resumes-cleanup-hazardo...

https://wiki.installgentoo.com/index.php?title=File_Picker_m... Will get you the content without the NSFW go away message.

I am not an accountant or tax attorney, however Signal is a 501c3 so this deduction almost certainly qualifies.

There are a few news organizations somehow battling it out to survive without advertising and I applaud them, but most comments like these simply remind me of this sentiment: https://thenib.com/mister-gotcha/

If you want to build a ship, don't drum up people together to collect wood and don't assign them tasks and work, but rather teach them to long for the endless immensity of the sea.

--Antoine de Saint Exupery

At first I was worried that this is yet another Raft implementation, but it seems they're building on etcd's version [1] which should be a win for everyone trying to prove correctness for the various implementations.

1. https://github.com/docker/swarmkit/blob/a78a157ef66adf0978f0...

http://www.whatsthefare.com

cool! another approach to that task: http://conferences2.sigcomm.org/imc/2015/papers/p495.pdf

Chicago's bike share is very well built out (IMO) and if you're in a neighborhood serviced by it (many low income neighborhoods just aren't deployed at all) you should be no more than two blocks from a station: http://www.divvybikes.com/stations

I wanted one too: https://31.media.tumblr.com/9f889585e1f6611f216ddced210fb134...

David - posting duplicate replies will dead-ify all subsequent dupes (I just learned this too).

Most tech ads seem to be in "show, don't tell" mode, which is probably a good approach. I have to say, I like the tack they took, simply explaining up front the features of the watch.

If the watch weren't so ugly and taking your phone out of your pocket so easy, I might even entertain buying one.

To answer your question: build compelling software that requires inbound connectivity. If users (voters, customers, ...) want to use their Internet connection where the server is in the home, the providers will eventually step up and take notice. I hate "let the market decide" as much as the next guy, but I don't quite see a better way to do this. One plug[1] is worth a thousand deleted Google accounts.

1. http://meetplug.com/launch/

Presumably this person was annotating movies with which actors were on screen when, and possibly where in the frame.

Would love to see them do Chicago as it's the "setting"[1] for the game and the city has great data sharing[2].

1. http://www.youtube.com/watch?v=kPYgXvgS6Ww 2. https://data.cityofchicago.org/

I'm the faculty member on this research project. I'd be happy to answer any questions in this thread if people have them.

"some beaches are private" is actually incorrect - all beaches in California are public from the water to the high tide line.

You are braver programmers than I - trying to parse my modest sized email archive dug up more encoding issues than you can shake a stick at.

It's kind of like encoding on the web, except no one ever looks at it, everything is inline, and there are just as many ways to get it wrong.

We've built a prototype that does this: https://cloudsweeper.cs.uic.edu/. It works for gmail only, doesn't require full account access, and is completely server side.

Currently we only search for and redact/encrypt plaintext passwords, but the same workflow can work for whatever the user might decide to encrypt.

We get around the javascript cryptography issue by performing encryption server side. Very unintuitive for a privacy primitive, but our goals are (a) security at rest and (b) providing an improvement over what already exists (plaintext storage everywhere).

Our other design decision is to only encrypt the (as identified by the user) important passages. This allows server side search to (usually) still work which is nice. We're currently exploring other methods for identifying "lucrative" information in someone's cloud based data store.

I talked to Eric Grosse, VP Security @ Google, about trying to get a definite time limit on how long it takes for "old" versions of stored messages to no longer be accessible by Google. While there is a FAQ that states that old messages cannot be undeleted after 30 days (can't find the link right now), he wouldn't give me a straight answer for when the old email blobs are no longer accessible. It's anyone's guess regarding what the absolute security is here; regardless, for a non-state attacker, it's Probably Good Enough.

(please don't post this link to the front page, it's not currently engineered to handle HN style loads)

Certainly not a new problem (this paper is from 1982, so old that my University subscription doesn't cover it). This might be a better link to start such a discussion: http://jrs.sagepub.com/content/99/4/178.long

Ariya Hidayat & co have put a monumental amount of effort into exposing the inner workings of webkit in phantomjs - I'm not sure I see the necessity for a python rewrite. Taking a quick look at the code, most everything I use phantomjs for outside of screenshotting is not available. A great start for sure, but unless there are some fundamental shortcomings with phantomjs that I'm unaware of, I agree with boothead that python bindings are probably the way to go.