skysight-inc/HackerNews huggingface dataset:
Speaking as someone whose job it is to make sure these issues don't happen at a similar large company:

No org can be 100% perfect all of the time, no matter what processes they put in place. This looks like just a regular process failure.

I don't know what MS's are specifically, but we do everything from training new employees to verifying headers on outgoing releases (much to the annoyance of plenty of engineers who just want to release shit). I suspect they do the same.

Replacing headers with a standard header is pretty common.
However, we require code segregation to prevent the issue that happened here (IE all third party codes goes in third party directories with an associating LICENSE file describing the license/notices). That makes it easy to tell that someone screwed up when replacing headers.

Doing that is uncommon for most companies in practice (at least, when i surveyed my counterparts, most want to be doing it, but it doesn't really happen in practice with a > 50% rate due to not being closely involved enough with engineering and development practices to make it easy).

Most of them are happy to mix up third party code with their own code, or really bad at enforcing, and then when you go to release it, you don't notice things like what happened here.

Then again, we also tell new employees that we care about getting the notices and credits right not because we are worried about legal repercussions, but because of the golden rule (you'd be pissed if you ask for one small thing to use you code, and they can't be bothered to do it, and we don't want other people to feel that way about us).

I suspect that is pretty different too :)

But this seems like an object lesson in proving that. The people whose headers were changed feel aggrieved regardless of the fact that it was probably a simple process screwup / whatever. They don't care about that. They care that somebody decided they really wanted to use it, and that it saved them time/energy/helped/whatever, but despite that, when they made the choice to use it, they didn't seem to bother to put the one small thing the author asked of them on "the list of things to do before release"

(Regardless of whether this is actually the case).
Yes I have been watching the revivied C backend with a great deal of interest! Haven't gotten it to work for me yet, but I haven't tried it for a little while. I would love to see it become a more common and well-supported part of the overall LLVM ecosystem.
It contains several testable points. Does splitting a hive create two weak hives? How do you characterize this weakness and do they recover from it? What is the genetic diversity of the bee population? Is it growing or shrinking? Toxic chemical free forage is it growing or shrinking? Forage diversity should also be easy to measure and track changes over time. Other than the personal attacks what did you find not testable?
Well, if he's "Google's", he's a sell out, by definition.
Tilde.club seemed to be on the verge of starting something like this. SDF has been doing it since the 1980s.

https://medium.com/message/tilde-club-i-had-a-couple-drinks-...
Swarms of locusts invade southern Russia
Hard to imagine this is science. If we want to ensure the guilty do not repeat, wouldn't killing them immediately not guarantee a recidivism rate of 0%? Unless you believe in reincarnation or ghosts at least it has a real mathematical basis.
"Released" is a fuzzy term. If you mean published, well, yes, they should not be published to a peer reviewed publication, but most peer review publications wouldn't bother publishing them in the first case. Preliminary results/progress reports can and probably should be released in many cases, if only to let people know what's going on. That happens a lot, you get "Oh we noticed something with three sigma significance over here, but we don't have enough statistics" and then somebody else can examine their data and say "well I've got five sigma proof that's an artifact" and then more papers are written on methods, cuts, calibration, simulation, etc... while both experiments might still be running.

On one hand, sometimes this act itself can bias people into making bad cuts and stuff. On the other hand, when this process doesn't happen, you also get people working in a box for two years with some systemic error they didn't account for and then claiming a 6 sigma feature in publication that's really an artifact of noisy ADC channel and some massaged cuts.
NYT liveblogged GOP debate directly from Slack
Even though Microsoft has had some issues like this, I'm glad they are open sourcing their code. It's a huge risk for a company like them, but I'd take a poorly open sourced codebase, where they can fix the problems over closed source.

Hopefully they'll learn and get better at it as they go along. I really hope they don't get deterred from open sourcing their code and stop the current trend.
He is not talking about being worse 'constitutionally'. He is absolutely correct in saying that being sent to jail is worse than being searched. I suspect he is correct positing that is why the standards of evidence for conviction (beyond a reasonable doubt) are higher than for search (probable cause).

Perhaps, but my point is that neither standard is being met. If the officer didn't have PC before calling in a dog with the performance history described in the article, then he doesn't have PC afterwards either.

It is not OK to violate one aspect of the Fourth Amendment just because it appears (in someone's opinion) to call for less stringent adherence than other aspects.
Zapstack, app using revolutionary swipe-to-share method, releases to app store
Wow. Definitely a language to check out.

Thanks for the link!
"In some of these cases, we have explicit permission from the authors to relicense sections of relevant code." (from linked page, though only very recently added)
FCC: Do Data Caps and High Prices Hurt Data Access in the US?
One can call it plausible deniability.

There are many examples that have been caught on camera, I see that another commenter posted a link to one of them on this thread.

When you see things like the handler returning to a previously cleared spot and indicating that the dog should check it again; three or four times until the dog alerts, you can assume that the handler has a severe short term memory problem and he just forgot that the dog had previously checked the area and failed to alert. I think it's more indicative of the officer hinting to the dog that "this is where I want you to alert" and their training reinforces the idea that if the dog does what's expected, there will be a treat.
I am not a professional dog trainer, meaning I do not have a CPDT certification nor do people pay me. However, I have extensive experience training dogs at a local dog shelter (minimum two hours/week) in a specific training atmosphere, and I have a fair amount of experience with "nose works" which is somewhat related to "drug sniffing dogs" (nose works is where a drug dog might start, for instance). In other words, if software didn't pay so darned well I could go jump through the hoops and hang out my dog trainer shingle. I also hang out with a lot of trainers who are certified and paid for their work.

With my (albeit weak) credentials out of the way, my quasi-professional opinion is that drug dogs are the polygraph test of the drug war. I've watched bomb and drug dogs at work, and much like a polygraph, I think you can read anything you want into the dog's actions. And unless you're 100% consistent (and even pros aren't), the dog might mis-read the handler. There are retired women who devote way too much time to the "nose works" sport with their dog(s), and in competition even those dogs get it wrong a fair percentage of the time.

For bomb sniffing and sniffing for bodies after a disaster, that's fine. Dog says there's explosives, turns out Fido was wrong, no biggie. A few folks got unnecessarily riled up, but no other harm done. Dog said it found a body, but there's nothing but rubble? Meh, did some digging we didn't have to do, but otherwise little harm done (though we could have been digging for a real person).

Sniffing for drugs? False positives have a greater impact. And just because the dog hit, and there were drugs, doesn't mean the dog was right. Correlation and causation and all that, I suppose. Anyway, I'm explaining this poorly, but I hope the gist gets across.

TLDR: I spend a lot of time around dogs trying to teach them things. They might be more reliable than a polygraph, but I'm not willing to ruin people's day or lives over the word of a dog.
I thought the article would be about a monkey hunted by a cat for dinner.
Updated Let's Encrypt Launch Schedule
The man who profits from redirecting all the unregistered .cm domains (2007)
I have found that you need start a page at a time. Throwing a multi-page document to start with, typically leads to failure.
Segment is hiring engineers to help run our container fleet
If Google disproportionately biased their search results, that would be one thing. However, that's not what we're talking about here. People don't want a link to a map, they want a map. People don't want a link to run the same search on an image search site, they want the image they were looking for. It's not even remotely sensible to demand that Google provide the same level of integration with random third-party sites, many of which don't even offer that level of integration at all.

I fundamentally don't believe the rules should suddenly become different when you become sufficiently successful. There's no size threshold above which you ought to have to listen when everyone wants a cut. Now, if you're colluding to suppress other products that are actually better, that's a different matter; that's wrong no matter how big or small you are. But that's not what we're talking about here.

And I say that as someone who uses DDG for search, and voluntarily chose to switch for a variety of reasons.
They had on-package memory controllers. They were on the chip, but were a separate die inside the package.
I don't understand how this would work. You can't turn money into bees. You can turn bees into more bees, and money can be used to persuade people to put in more effort to make this happen, but at some point the bees themselves have to be reproducing.

I thought the whole problem with colony collapse and the honeybee crisis was that bees were declining and nobody knew how to stop it. If you can stop it with money, maybe that's not ideal, but is it a major problem anymore?
That update was just a README update. Most of the files in the repo haven't been touched in over 2 years and they haven't done a release since 2012.
A command line HTTP client, a user-friendly cURL replacement
Not sure why you were downvoted for asking a question and trying to learn.

The information is coming from publicly available descriptions of vulnerabilities. The affected versions of gems are already enumerated. This tool is a way to make it easier for devs to compare their set of gems against the vast database of vulnerabilities.
As other people have said, you would actually want to have a ROC chart to see the full characteristics of the dog (you are only considering its specificity at the moment). It will probably look something like this (according to the article, not much better than a coin): https://i.imgur.com/PG3Jacn.png
I feel a bit ignorant here, but are there open source license that simply can not co-exist?

For example, could I write program Foo.c (using CDDL license), which uses GPL'ed Bar.c and MIT'ed Dad.c (both unmodified)?
Not if they've already been screened by the police. IE, if the cops only flip the coin once they would have brought in the dog, then it is no better than a coin flip.
Chromebooks in school: How to pick the best laptop for any student
"Cue", not "queue". :)
> How many Europeans use Google? 90%. That's democracy: the people of Europe gets what it wants.

Regulations are not trying to fix "what is wrong with google". They are trying to keep the competition going, which ideally results in a better product for the consumers.
Got it. Thanks. I look forward to checking this out.
Three Key Email Marketing Strategy Tips
Reading the thread, there seems to have been an automated translator involved that looks like it did not retain comments.
I usually nap. More often than not, I wake up with a solution. Check this link for a good napping procedure http://www.artofmanliness.com/2015/02/18/hypnagogic-nap/
If that's actually the case, then the QPL/GPL license headers must be replaced.

Note that the commenting individual is the founder of the company acquired by Microsoft that provided this code.
I'd say that Go is a better "better C" than Rust, for already functional C programmers. The syntax of Go is as removed from C as Rust's, and it's more mature.

TBH, Rust looks a bit stillborn - too weird to live, too rare to die.
My code is cleaner, and much more intelligible after attending this talk.
Sometimes. Apparently it's not actually enforced fully in all of the countries? And it's a pretty new law.
Actually, that sort of accounting oversight is required by SOX controls, which someone in management has attested to. I'm thinking there are a pack of very humorless folks at the SEC warming up some very uncomfortable questions for the Ubiqiti executive team.
I'm not in the US but this seems to be the biggest study there http://www.sciencemag.org/content/339/6127/1611

>Using historic data sets, we quantified the degree to which global change over 120 years disrupted plant-pollinator interactions in a temperate forest understory community in Illinois, USA. We found degradation of interaction network structure and function and extirpation of 50% of bee species. Network changes can be attributed to shifts in forb and bee phenologies resulting in temporal mismatches, nonrandom species extinctions, and loss of spatial co-occurrences between extant species in modified landscapes. Quantity and quality of pollination services have declined through time. The historic network showed flexibility in response to disturbance; however, our data suggest that networks will be less resilient to future changes.

News article: http://www.theguardian.com/environment/2013/feb/28/wild-bees...

Pesticides are far from the only factor, but adding that to habitat loss and climate change is hardly helping.
> ... to what was in fact a reasonable question.

There was no question. It was a statement.

> Yours is a needlessly inflammatory response ...

I'm sorry, but what word would you use to describe the theory that selective pressures that decimate a population will eventually result in a superior specimen?

It may be inflammatory, but that's the only word that came to mind.
You can acknowledge the prevalence of the XY Problem and expect geeks to act on it in a manner which is not presumptive and condescending.

Geeksplaining involves the presumption that the geeksplainer knows what the specific inquirer wants better than the inquirer because of the geeksplainer's presumed superior general knowledge of the relevant domains.

Even where the latter presumption is correct, it often doesn't justify the former presumption, so its always best to validate an belief that the questioner may be experiencing the XY problem rather than assuming that is the case.

Its fairly simple to do, provides an opportunity for learning, is generally socially more acceptable, and provides a better chance of actually resolving the inquirer's actual problem.
Yep, but by then I'm working pretty hard on imagining the alternative scenario and trying to ignore the actual drugs-related scenario and I can't trust myself to think straight about it anymore.
> That's what governments and elections are for.

Forcing others who disagree with you to go along, yes. That's a very big hammer, and should not be applied lightly. (I'm not saying it should never be applied at all; there are fundamental aspects of society that only seem to work with that pressure applied.)

> People pay a bit more for for a bit worse service, and tax rate for everyone gets lower because of reduced unemployment benefits and increased tax income. Everyone locally gets it a bit better.

"a bit worse" is downplaying it quite a bit; sometimes the result is quite a lot worse. And when you're talking about services with network effects, sometimes the result is "fundamentally not the same service at all". If you're stopping people from participating in the same Internet as everyone else, you could just as easily be slowing your own local economy and breaking opportunities for them to create the next service that'll actually be the best for everyone. And unless you're prepared to make your country completely self-sufficient with no reliance on the outside world, "increased tax income" isn't going to help you when it turns out the services people actually want aren't made in your country and never can be.

As an alternative to dragging others down, if you really want to spend a pile of money boosting your local economy, and you want to do that via government, how about supporting local businesses as they improve, and encouraging them to compete with services provided elsewhere? "Keep up" is always better than "wait up".
And license auditing is usually just a matter of grepping for license blocks or LICENSE files. Basic due diligence. It will not catch a case where someone takes one file and strips off the license header.
That's the location of the snippet to be inserted into the page. If you take a look at the file being downloaded its not a complete HTML page, just a snippet. Like I said I hope to remove the js requirement but it will take some time to refactor the code. Also if you use the link you mentioned the site navigation won't be on the page. Anyways thanks for reading.
https://c0nrad.io Interested In AppSec/Dev role

Location: NYC

Remote: No

Willing to relocate: Most likely not

Technologies: Go/NodeJS/AngularJS, Pentest Tools

Résumé/CV: http://c0nrad.io/resume.pdf

Email: c0nrad@c0nrad.io
> Using a weak classifier to serve as the basis for getting around a constitutional right is pretty messed up.

I was playing the devil's advocate, in case you missed that part, and my point was that a classifier being weak does not necessarily make it bad, as evidenced by AdaBoost.
I suspect recursive is pointing out that if you don't know what a gemfile.lock is, then the site is not useful or easy to understand.
But I thought PC couldn't count a officer's inarticulable hunch towards that "totality of the circumstances".

For example, let's say that the dog is not sufficient probable cause. Consider the cases:

1) drug dog indicates + suspect driving erratically

2) drug dog indicates + "I just have a feeling"

Am I correct that 1) might be PC but 2) could not be, no matter how accurate that officer turns out to be in practice?

(In case 2, the dog's finding more drugs than the base rate would not validate its accuracy, as the results are being pre-filtered to have a very different distribution.)
See this classic blog post for a counterpoint: Pounding A Nail: Old Shoe or Glass Bottle?

http://webcache.googleusercontent.com/search?q=cache:weblogs...
So the proffered solution is ordering new bees from the internet. That seems like magical thinking. I don't think Amazon has figured out how to fabricate bees from base atoms, so presumably somebody, somewhere is breeding those bees for sale.

Don't those breeders have the same problems? What's preventing the magical internet bee source from having their colonies die off?
this is what is wrong with people
You need a lawyer versed in contract law.
What do you mean? If I look at the latest block hash and difficulty I can actually measure how much hashing power went into finding such block (and it's a lot). How would you simulate that with timestamps?
Can you be more specific about what these toxins are, and how it's known that they kill bees or cause cancer over a period of twenty years?
All this doesn't matter until the root cause is fixed. Police will find a way. The root cause* is mentioned in the article, property seizure laws. As long as there is monetary incentive Police will be compelled to violate the constitution.

* The real root cause is the criminalization of recreational drugs. But ending Prohibition is basically a non-starter.
Yeah, really disgusting. It's so disheartening to see growing inequality make private security (good 'ol fashioned poor/minority beaters) become popular.
This may be a bit like hair-splitting, but the language doesn't die, only the implementation does. As long as the language was specified in enough detail, a new compiler could be written for it, and be able to compile the old source code in the language. There is an interesting parallel to natural human languages here as well, a language like Latin is considered dead because no one speaks it as a primary language, but humanity still has the ability to translate and understand Latin texts. The same applies to say Egyptian Heiroglyphics as well. In any case it's interesting to think about.
Actually, for drug offenses I'd take the two-tailed coin without hesitation. Prohibition doesn't work. Never has. Never will.
>But if the dog is right 55% of the time? This is excellent probable cause for a search.

Going back to the original case, even if we assume that every time the dog doesn't signal there wasn't drugs (so the dog never missed a drug), had the police just searched without bringing in the dog they would've had similar rates. So why isn't the police's 'I think he had drugs, can't give any good reason though' not probable cause if the success rate is nearly 55% when the expected success rate of searching everyone is under 1%?
That would be a fair point if the dog were given the opportunity to make both type-1 and type-2 errors. With the process behind a roadside traffic stop, we actually have no idea how often the dog would generate a false negative. We don't know its specificity in the real-world contexts where it actually matters. We just know that it is very, very sensitive... to something other than the presence of drugs.
The phrase may put you off but I think the sentiment is sound. Too many dismiss something/somebody in entirety because of one flaw. I think it's better to try to find value in everything; even if it's 99% shit, you can still learn from that 1%.
They should just use the Apple ObjC runtime, not that it's the cleanest piece of code, but... a lot of work has gone into it. Ditto for CoreFoundation. Oh well.
I'm not so sure. I have a large backyard garden and I'm surrounded by neighbors who also garden. I was chatting with some of them the other day and we've all noticed a significant drop in fertilization amongst our plants this year. My tomato plants are typically overloaded with fruit by this time of year but now only have four or five tomatoes each. Same story with the tomatillos, the squashes, the cukes and the watermelons. Production is less than half of a typical year.

My neighbor kept bees but lost his colony last year. I can't say for sure that CCD is the root of our problems--home gardens are more popular around here than ever and perhaps the bees have an overabundance of food--but it certainly feels like something is wrong. Obviously home gardeners and beekeepers don't have the funds to bolster the bee population like a large commercial grower might.
Before the US revolutionary war they were called "General Warrants" and allowed British soldiers to search and seize as they pleased.
Class-Free React Component in ES6 Using Gulp, Babel, and Browserify
Do not touch: This frog has venomous head spikes that could kill you
Would the French "Company" only have 49 users? http://i.imgur.com/SLwl1Gl.png
Much of the use of these tools is to extract data from government or corporate sources that while required to publish the information may not want make it easy to access. Thus they prefer PDF's.

Those of us trying to extract the data bound up in these PDF's do advocate to get access to the original data, but we have to deal with what we have today.