skysight-inc/HackerNews huggingface dataset:
I think he did touch on that though. Essentially he's selling bread, and he's got to buy scarce flower at high prices in a convoluted system from a small number of farmers, and be forever at the mercy of the flower selling farmers. Only it's data instead of flower.

Further, the data sometimes is bad and causes inaccuracy issues for customers without him knowing, this causes lots of complaints that he has no control over, something that isn't feasible when charging money to commercial users. Not just that, but the price of data is ever increasing, free data is becoming restricted and he needs to restructure as data suppliers go out of business or restructure their API.

I mean there are obviously solutions, like generate his own data etc. But it really looks like he's got other opportunities to earn a living and this isn't the lowest hanging fruit for him.

What I DO find strange is why he's not selling it. I just can't imagine not at least one of the company's he's buying data from wouldn't buy this at a discounted price if need be. Some money is better than nothing.
CSRF attacks are very real, but the impact is generally taken into account before calling things a "vulnerability".

e.g you can have a SQL injection that's not a vulnerability because the input passes through a substr($_GET["id"],1,1).
Mark Zuckerberg scolds employees for defacing ‘Black Lives Matter’ slogan
There is a better way to parent than the nuclear family
Yes, it makes a difference.

Copyright law is activated by the action of distribution -- you make something, you share it, copyright law checks whether you had permission to share it.

It's legal for someone to distribute you code under one license, and someone else to separately distribute you code under a different license -- it has to be. Once you combine them on your machine, you've created something that would no longer be legal were you to distribute it. But you don't plan to distribute it, and as long as you don't do so, you haven't violated any copyright licenses, because you didn't engage in any acts of distribution for copyright law to have power over.

But the distribution is on you, not the person who gave you the source. The thing they distributed wasn't violating any licenses.
For those of us that can read source code there are a couple of strong indications that the Linux copyright holders still believe that Linux kernel modules may not necessarily constitute derivative works:

1. Every Linux kernel module can tell the kernel what license regulates its use, using the MODULE_LICENSE() macro. The Linux kernel keeps track of which modules are under GPLv2 (and a few other compatible licenses). When a module under a presumably "proprietary" license is loaded the kernel will mark itself as "tainted". (It could just as well refuse to load the module, but it doesn't.)

2. There are two macros used to export Linux kernel symbols: EXPORT_SYMBOL and EXPORT_SYMBOL_GPL. The former will make the symbol available to all kernel modules, while the latter makes it available only to GPL-licensed kernel modules. The clear purpose and motivation is that a kernel module that needs access to a symbol exported with EXPORT_SYMBOL_GPL must be a derivative work, while a kernel module that only depends on symbols exported with EXPORT_SYMBOL is not necessarily a derivate work.

Also, IANAL, but from a purely legal perspective I think it would be difficult to get a court to agree that a user space program that talks to the Linux kernel through system calls is never a derivative work, while a kernel module (even one that accesses only symbols exported with EXPORT_SYMBOL) is always a derivative work. The system call versus dynamic loaded module distinction is simply not very relevant from a purely legal perspective.
Use quotes and search for rsync "--ignore-existing" or "rsync --ignore-existing". They are two different searches but both work fine and return useful results.

You can also remove the double dash and search for rsync ignore-existing

I appreciate the point of the posted article, but for the most part I don't actually have any trouble using Google as a programmer. You just need to format your searches correctly.
I'm not disagreeing with the US Military research, but the effectiveness of teams in command-and-control environments probably doesn't translate well to more voluntary, at-will engagements like your typical work-place. Besides, companies aren't (yet?) able to break-down and rebuild tween males as armies have been doing for millenia.
See the problem is getting at the actual perpetrators. You are surely correct, the further down the line they can be stopped the better. But due to they way these scammers operate it becomes difficult to impossible to reach them.

One action that increases the cost of criminal organizations is then to deny them usage of resources of legitimate companies. All these usually have an AUP which prohibits certain activities.

And I am with you, a DNS resolver should tell the truth. What I am asking CloudFlare to do, is to not accept certain customers in the first place, so that they don't get to use the CloudFlare authorative DNS servers.

Obviously this works best if hosting providers do the same thing.
so... don't resolve dns if it resolves somewhere they don't like?
Unless a project published under CDDL includes a conspicuous notice saying that no future versions published by Sun shall apply to the software, then the project is totally at the whim of Sun, who is allowed to relicense it under whichever terms it wants, at any time.

See my other comment: https://news.ycombinator.com/edit?id=11177827
For the curious, [1] (via [2]) shows various engine designs.

[1] https://imgur.com/gallery/bxzeN
[2] https://www.reddit.com/r/educationalgifs/comments/468290/a_c...
FYI, a large part of the controversy over both the EU in general and TTIP in particular is that only Members of the European Parliament are directly elected by the public. The other powerful elements of the EU administration are effectively appointed in various ways, being only indirectly (often through several levels) accountable to the average citizen.

MEPs do have some real power, particularly since the Lisbon Treaty, but in practice that power is often like a veto: they can decline to approve some pretty big deals, but unless there is a credible risk of throwing something out in its entirety, MEPs don't necessarily get much input into the details.

At the moment, it looks like TTIP may be one of those cases. MEPs, and very recently some of the national equivalents, have only been given access to the current proposed text at all if they agreed to very restrictive conditions. Everything else is being done by people who aren't directly accountable to the public, and in most cases aren't even readily identifiable.

This is one of the reasons critics of TTIP will advocate striking the whole thing down. Some really do think it should be thrown out on principle as an affront to democracy, but others are playing a more strategic game, knowing that if the European Parliament starts to look like it actually might flex its muscles in that way, those promoting TTIP will be forced to open it up to full MEP scrutiny and get them back on side before there is any chance of the deal being successful.
Indeed. s/Terrorist/Nutjob/g
I think that if the government was asking gun manufacturers to install an electronic lock on guns that would allow the FBI to disable any gun if the suspected the person might be about to commit a terrorist act, there would be a completely different reaction.
>I don't understand what is wrong with their methodology as described in this article that makes it junk science.

There is nothing wrong with this article and their methodology because it's not about real science at all. Science produces models, with predictability (among other things) where you or I could go out and get the same results. That is far from what Google has actually demonstrated - and I don't know whether they intended to do that in the first place.

Psychology has never been accepted as a science because they don't produce accurate, reproducible models. I don't want to sound rude, but all this stuff isn't exactly new and can be searched for online. A random set of links from 10 seconds of googling:

https://www.theguardian.com/science/2015/aug/27/study-delive...

https://www.newscientist.com/article/dn20447-journal-rejects...

http://psychsciencenotes.blogspot.com/2011/05/failing-to-rep...
Amazon would be smart to create an official "Amazon Best Selling Author" certification and protecting it by going after anybody claiming a fake Amazon title. Unfortunately and strangely, Amazon doesn't seem to care about this kind of reputation management, for example their product reviews have become a spam quagmire, and Amazon actually encourages it with their Vine reviewer program.
That's nonsense. Small-time donors are what makes up more than 75% of the total budget. Major gifts are only 13%.

See: https://wikimediafoundation.org/wiki/2014-2015_Fundraising_R...
I still don't really understand if this is targeted at US businesses/citizens or non-US?
As for downvotes: best not to talk about them.

I'd had a comment downvoted and flagged recently, perhaps understanably, though the follow-on discussion made pretty clear that I'd identified a pretty salient point.

Upshot: HN is no less immune to voting what it wants to see over what's true or not. I may even be subject to that myself, though I prefer to see my votes as aiming for at the very least a deeper truth and validity.

I wasn't among your critics.
Entrepreneur inspired by video game competition is launching Global Poker League
It's not there anymore!?!? -- I was going to purchase it!
Wow that timeline was FANTASTIC and amazing.

I just cant believe how tumultuous this was.

I really found the Jobs/Apple/Google salary debacle part fascinating.
Whenever you build a service in someone else's garden, there's always the (fairly high) chance that you'll be booted out at some stage.

In a sense, platform APIs allow the platform owner to understand what customers want without needing to deploy product talent to deploy it. Twitter has perfected this strategy. As soon as a third party comes up with a neat idea with your API, you can build your own "official" version of their app, throttle their usage and hopefully their business model.
I also started something similar at https://jacobsims.github.io/til/ -- to search them you can just use GitHub search, which is available in that top bar. I also spent a bit more effort creating category pages that look like fancy little tags (due to limits of Jekyll, I can't paginate them, but it will work for a while anyway).
If both licenses only had no-further-restrictions clauses, they would be perfectly fine. The issue is the imposing of further restrictions, which only the GPL has in this case.

And if no-further-restrictions clauses are evil and have to go, well, then the GPL's no-further-restriction clause has to go as well.
Reading IRCTC captchas with 95% accuracy using deep learning
hate to nitpick, but you might appreciate that its called "flour". good analogy !.
I was tempted to flag it, since it is just taking Gizmodo's article and adding a bit of Techcrunch idiocy to it, like the statement that Facebook is "notoriously white". Facebook is slightly less white than the US population.

The topic of the article is fine for HN, in my opinion, despite being political, but that doesn't mean we should settle for a crappy article. Hence, the temptation to flag this one and let a better submission get the focus.
Zuckerberg Sends Memo on Black Lives Matter
Carnot efficiency. 30% is pretty typical in land-based motive systems. Shipboard combustion engines and coal-fired power plants (of all things) are rated as high as 45% efficiency.

This is based on input and output temperatures, more than anything.
Ooh, please don't badmouth perl. Modern perl (e.g. https://pragprog.com/book/swperl/modern-perl-fourth-edition ) is a much more sanely designed environment than modern php is.
Before the Citizens United v. FEC decision, did the news media not have free speech?
>If [...] but neither does anyone else, then it's just a part of the hardware

That has never been the case, for practical manufacturing reasons.

>As soon as the microcode is writable, then we have questions:

It has been writable for more than a decade I think.
I recently went through a Boy Scouts Adult Training called Wood Badge.

The most important thing I learned there was a Team Dynamics study, reportedly used by the DoD, which was distilled into four words:
Forming
Storming
Norming
Performing

What blew me away was that I could literally see this happening right in front of my eyes with a small team of kids who I was coaching for an FIRST Tech Challenge (FTC) Robotics competition.

I finally understood the team dynamics and realized that I am not the only one experiencing it and it was not an anomaly.

https://en.wikipedia.org/wiki/Tuckman%27s_stages_of_group_de...

http://www.dau.mil/pubscats/pubscats/pm/articles03/pat-ma03....
> it's another matter for map services. And it's going to get more expensive no question

For companies that offer a "free" tier (e.g. Bing/Google maps), for sure, sooner or later, a switch to paid is very likely.

But there are organisations that have a completely different justification for existing: OpenStreetMap springs to mind, as does the UK's Ordnance Survey (which is essentially a Government body, albeit cloaked as a private company, 100% in public ownership). Although they'll always need some source of funding to keep operating, their goal isn't to maximise possible revenue, so as long as it's viable to offer free mapping, they're likely to carry on doing so.
This looks very interesting thanks!
The implications for HN are minimal, but this is a login CSRF, not a logout CSRF. Like session fixation, login fixation is a serious flaw.

Believe it or not, there have been apps with serious flaws stemming from logout fixation --- but those flaws were notable because they weaponized logout CSRF. :)
While I appreciate the effort to make things easier, as someone who is trying to move from C++98 to C++11, I'm not sure the new features make the language easier to use so long as you still have to learn the old ways of doing things. Speaking for myself, at least, this just causes interference between competing habits. What would be better for me and maybe others, would be if some of the unsafe or deprecated features in C++ were disallowed or if there were a compiler option to disallow them. I know this would break C89 compatibility but so what if you know you only care about the newer and more efficient features of C++?
Smartphones, Tablets vs. Laptops – Which Is Better?
There's actually some ambiguity over what it would take to relicense Linux. This came up at the time of GPLv3. Torvalds didn't want to relicense it so the question was moot but there was some discussion.

Here's a piece from the time quoting Eben Moglen on the topic: http://www.cnet.com/news/linux-to-gplv3-a-practical-matter-n...

(Unfortunately the original linked to article was on a site that no longer exists.) It's just one opinion of course. (And IANAL.)
The Brits are just so much better at ship names than the US. We always name ours after places and politicians--boring! The Brits meanwhile have ships like Onslaught, Firedrake, Acheron, Invincible...
Actually they are LGPL, according to other posts in this thread. Which would make it perfectly OK.

I'm not well enough traversed in the kernel source to find a direct reference but you see commits like this every now and then:

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux....

Having parts of the kernel LGPLed doesn't seem like an unusual or odd thing, from what I can tell:

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux....
Special Ops::Conventional forces :::: Skunk Works :: corporate workplace.

They are specially selected and are non-representative. Whatever lessons that can be drawn there are inapplicable to conventional forces, let alone regular teams in the corporate environment. They might apply to special project teams ('skunk-works' type projects), but that has limited value as it is not scalable.
Maybe it's time to look into JRuby backed by Truffle+Graal? These guys seem to make something really promising. See: https://www.youtube.com/watch?v=lRMWwjqbXUo
I'm the author. I actually think it may be awhile before we actually start to see jobs posted, unfortunately. I think the pattern is largely:

1) Let's try it out internally
2) Hey, this is cool. Let's go to the meetup.
3) Wow, this meetup is full of fired up devs.
4) Let's hire someone we met there
.... time passes ....
5) Ok, now we seem to have become at least partly an Elixir shop. Let's post an ad.

Ironically, because it's so easy to find great devs who want to work with new technologies like this, you don't actually have to go to the trouble to post an ad, leading to the (incorrect) impression, that there are no jobs at all.
You will typically find things like that in the product portfolio of a GDS.
When it comes to security vulnerabilities, please remember when reasoning about their impact there's a good chance you'll miss something critical. Arrogance and vulnerabilities are a bad mix.

Even innocent looking "low impact" issues can be used as stepping stones to something much worse.

Creative exploitation can make two or more low impact vulnerabilities into a very serious compromise. Some of those vulnerabilities might be in a completely different system.
Creator of Just Landed here. Actually, I have been approached by a number of companies over the years about selling Just Landed, including some household names. The trouble is, almost none of them wanted the app – they just wanted me as an employee. These weren't companies I could get super excited about working for - especially since I love being an entrepreneur and working for myself. Of the few who did want the app or the tech, their quality bar/taste wasn't a good fit, and I worried about how they would treat my users. It was never about the money. Time is my most valuable scarce resource.
I have a project with similar aims: https://github.com/commerceguys/addressing

It uses the Google dataset, which is under the public domain.
Might make sense to compare formats?

Btw, I love how your worldwide.yaml, both the deduplication and the redirection for subterritories (such as Vatican City).
I agree that depending on the context session fixation and login CSRFs can have actual security impact, but those cases are far and few between, so calling them a "serious flaw" feels a bit hyperbolic to me.
The mobile OS as basically android with a UI rendered in gecko.

I find it more troubling seeing them continually locking down the ability to customize the browser to my liking, and instead chase Chrome's design language.

Never mind that Mozilla, like much of FOSS as of late, have been conducting all kind of "social consciousness"(or should i say "social justice"?) projects that has crap all to do with writing good code.

Projects that end up being a time and money sink for already small (compared to the various corporate entities they are competing with) orgs.

If i was the conspiratorial kind i would wonder if they had been infiltrated. But more likely they are being "infected" by a "victim" culture that has been brewing in on college campuses for some time.
Please file a bug with your system specs and specifically what you were trying then. We'll try to get it triaged ASAP.
Metadata is basically giving your data...

Stallman was asking to not put any kind of his pictures on Facebook, which means your face is recognized now by Facebook, and there's plenty of things to do with that...
>What about reinstalls? What about developers/tinkerers who are probably flattening their devices on a regular basis?

IIRC Google gives you access to all that information in the Google Play dashboard, and for my apps, "reinstalls"/device upgrades were very rare.
Not accurately enough (given I haven't read much of the documentation).

I actually verified it was kinda picking them up, but it did this weird thing where I managed to insert a period if i remember correctly, but then it took it out after I kept talking?
Because that was how much more data they were using than the early users.
It is true in some sense, we don't just implement things Servo wants. If Rust was beholden to Servo, we would have put inheritance in the language over a year ago, for example. That said, the eventual work for "something inheritance like" is absolutely predicated on Servo's needs. But we put it on the roadmap and weight it like anything else.

That said, we do take their needs into account rather highly, just like any project with a large upstream user.

Just like we wouldn't want Rust to be useful for only compilers, "only compilers and web rendering engines" isn't much better.
I feel like you're trying to make a point but I'm not sure what it is.

My post made no mention of expectations to rights or liberties. My point was the document intended to place limits on the government isn't very objective. And from one perspective - seemingly useless.
The United States of Amazon
What about Flow? Media Viewer? Visual Editor? The "extensive user input" came after the code was already written and the community didn't like the result.
The Underhanded C Contest – Can you trick nuclear inspectors?
Strictly, it is not the cryptography being broken in this case. The FBI want to guess a (possibly) six-digit pin. The iPhone might have been configured to erase its data on 10 failed PIN attempts, so the current odds are not good. To this end, the FBI want Apple to produce a version of iOS that bypasses this restriction, and install it on the phone.

Assuming I agree that a security system that can be turned off remotely by its vendor is reasonably secure, it is only a specific court order now. If Apple are successfully compelled to produce a version of iOS that bypasses PIN security, it will be much easier for the FBI to request that it be deployed on phones in the future - after all, that version of iOS will already exist then.

If Apple do make it, I am certain there will quickly be a slew of court orders regarding other iDevices that the authorities have in their possession, all of which are likely to be harder to defeat than the court order they would just have failed to defeat.

However, I don't agree that a security system that can be turned off remotely by its vendor is reasonably secure, anyway. There is nothing technically requiring Apple to wait for a court order: the phone will accept their new software whether or not it comes with a court order. Apple could decide to make PIN cracking available to anyone who can prove they own a given iPhone. Given their attitude, they probably won't, but the actual security mechanism is reliant on their goodwill for it to remain unbroken. I don't consider that reasonable.
Note that it's Brion Vibber, not Brian Vibber.

Apart from that, excellent summary of events.
If by "different" you mean "identical, but reflected along the partisan axis," then I agree wholeheartedly.
Yes, much better than just dropping a few dollars on her paypal.

I like how he takes the same energy of her observation and focuses it onto a value proposal
So what was the fix? I don't see a CSRF token in the login page, so I'm curious what their patch was.
Guns are related to privacy?
Scary New Ways the Internet Profiles You
Another good reason for login CSRF tokens is to prevent a malicious page from submitting lots of invalid logins and getting an account / IP locked or rate limited.
I consider "Top 500 Reviewer" to be sign of someone who has made a hobby (if not a career) of receiving free stuff in exchange for writing reviews of said stuff. Makes it much easier to identify which reviews to ignore due to the reviewer having a definite conflict of interest.
HipChat Bots – A Guide for the Humans