cbr

What distribution?

(I don't think I've ever used a system that didn't have ed installed by default.)

They ask for details about many voluntary activities: travel, education, work, etc.

Human vision has much better dynamic range than the dashcam video they released.

In the literature you see small margins because many of the things that really matter in practice (data quantity, data quality, engineering) aren't generally of academic interest.

Probably automated tools doing things like golding an enormous number of requests drives up the average.

My guess is that it opens them up to legal liability not to: https://en.wikipedia.org/wiki/FOSTA

(I work for Google, but I don't have any inside information on this; it's just speculation.)

The standard argument for why student loan debt survives bankruptcy is that otherwise students would declare bankruptcy on graduation. At least with our current system, where bankruptcy is wiped from your record after 7 (or 10) years this would be a good move for most students.

But it may be what the grandparent recalls receiving

The email reminders I get look like:

Subject: You are using Google Location Sharing to share your real-time location.

Hi Jeff,

To protect your privacy, we would like to remind you that you are sharing your real-time location using Google Location Sharing with [wife] and [close friend and housemate].

If you didn't enable this or want to stop sharing your location at any time, please go to your Google Location Sharing settings.

Thanks,

Google Location Sharing Team

"objects normally fall at the same speed (9.8 m/s^2)"

That's ignoring air resistance, which in the case of flying machines is substantial!

If these are automated, though, they can be done in parallel. A camera pointed at the propellers can be checking them for cracks at the same time that another camera is checking that control surfaces actually move.

     15 minutes? If you flew in a small aircraft regularly,
     you would know it takes 40-60 minutes to prep a plane
     from park to airborne in zero traffic

How much of that prep is eliminated by going full automation? Isn't most of the prep the pilot running through a checklist?

If there is unavoidable time consuming checking, you could do that in advance and provide the plane as an autonomous taxi. So it shows up, picks you up, drops you off.

I like calendar notifications, reminding me it's time to go do something

"Making your children more aryan looking, not so much"

People strongly consider race in dating; we're kind of already there: https://blog.okcupid.com/index.php/race-attraction-2009-2014...

Could you say more about how you expect this outcome would be harmful to people?

They have a lot of trouble too: https://timtaubert.de/blog/2016/09/tls-version-intolerance/

When I was working on mod_pagespeed I wrote some about how we decided to parse the UA: https://www.jefftk.com/p/why-parse-the-user-agent

(Summary: feature detection requires more round trips, and slows down pages.)

That was a DRM thing. Eventually Firefox added support for EME: https://www.pcworld.com/article/3183742/data-center-cloud/ne...

    a web performance best practice (for non-H2 sites) is to
    inline images into the HTML... and there are some auto-
    optimizing libraries that will embed SVG as <SVG> tags
    instead of as a data: URI...

When I worked on mod_pagespeed (a website auto-optimizer) we wouldn't have it touch SVGs at all because there are so many potential security issues there. (And it wasn't widely used enough to be worth it given the risks.)

    How many of those $10B companies are actually really
    worth that, not just an inflated result of funding
    rounds?

The parent is talking about S&P 500 companies, which means publicly traded ones. The thing where private companies have inflated valuations [1][2] doesn't apply here.

[1] https://www.benkuhn.net/terms

[2] https://papers.ssrn.com/sol3/papers.cfm?abstract_id=2955455

This is why Chrome is going to be marking all HTTP pages as "Not Secure" in v68+: https://security.googleblog.com/2018/02/a-secure-web-is-here...

Most sites are built on lots of unaudited untested (by them) third party code sever side. Adding some client side isn't great, but also isn't a fundamental change to the dynamic.

(I used to make web server software)

That doesn't really solve this problem, it just slows down both the rollout of the subverted version and the rollout of the fix. People aren't auditing the (minified) javascript they put onto their sites.

SRI is good for use with a CDN, where the same entity controls both the HTML that references the JS and the JS being referenced. In that case it keeps someone who subverts the CDN from being able to XSS the site.

    Want to know how you can easily stop this attack?  What
    I've done here is add the SRI Integrity Attribute and
    that allows the browser to determine if the file has
    been modified, which allows it to reject the file.

SRI does not fix this problem. If you put an integrity attribute on the script, then the next time BrowseAloud releases to prod their script will stop working on your site.

This is a product that works by running a script on your page to make changes. There's no option for defense in depth here: either you trust that their processes are secure enough that they're not going to XSS you, or you shouldn't run their code on your site at all.

The bar for including javascript from other sites should be a high one, but there are times when the tradeoff is reasonable. For example, I have Google Analytics [1] on my site, and I trust them to handle this responsibly.

[1] Disclosure: I now work for Google

I wonder why we didn't go for stronger legal protection for these symbols? Water bottles with the biohazard logo on them and other gratuitous uses reduce how much caution it induces and diminish its value as a symbol.

I don't know, these lyrics make about as much sense to me as most songs written by English speakers.

This is also the game people in click fraud vs click fraud detection are playing.

It sounds like you're describing a Content Delivery Network (CDN). Many sites use CDNs in order to serve content from as close to the user as possible, often from within the ISP's network. This is unrelated to Net Neutrality, and has been common practice for years.

Using a CDN is one way to speed up your site, but there are lots of other important steps like reducing dependencies and compressing your resources.

(Source: I used to work on mod_pagespeed at Google, now I work on other things there.)

Expanded this into a post: https://www.jefftk.com/p/google-losing-its-memory

Sorry, all five. I wrote the comment with three, then thought more data would be better and tried two more.