skysight-inc/HackerNews huggingface dataset:
Caroline Criado Perez noticed that UK banknotes were changing. Bank notes have an image of a notable person on one side, and the monarch on the other. Criado Perez noticed that the new designs didn't include any women (apart from the queen, and she's only there through luck of birth).

Criado Perez started a petition to ask Bank of England to consider including a woman on the notes, and to remember to include women in future re-designs.

That's not much.

For that she was subjected to months long campaigns across all her social media accounts, extending to her AFK addresses, with severe threats of sexual violence.

One man was sending 50 messages an hour over 12 hours across multiple accounts.

It's disappointing that some people are defending those who make death threats. It's common over a keyboard, but AFK a death threat is serious business.

https://www.judiciary.gov.uk/wp-content/uploads/JCO/Document...

> Here there were a series of communications (not just a single one as referred to in the guideline) where extreme language was used and substantial fear was caused.

> Indeed it is hard to imagine more extreme threats (death, rape, and worse [Sorley]) and rape [Nimmo]. The harm is, and (despite what is said on your behalf) must have been intended to be, very high.

> The fact that they were anonymous heightened the fear. The victims had no way of knowing how dangerous the people making the threats were, whether they had just come out of prison, or how to recognise and avoid them if they came across them in public.

And about blocking:

> The messages were posted on a number of different sites, and continued after being blocked and or warned
Thanks, that's really great feedback. We should invest in making use of llvm-cov. It should dovetail nicely with the MIR work (which is now to the point where it can build the Rust compiler), since the language-specific IR it exposes is especially suited for quick development of instrumentation passes.
I'm a fat bald white guy who is nearly 40. I haven't really noticed this to be a problem.
>> It's upsetting to see a company worth $10+ billion offering $5k - $15k when it comes to the protection of their user's information. Just earlier this month Facebook rewarded a paltry $15k for a bug that could unlock any user's account. That sort of information in the wrong hands or resulting in a massive PII leak will cause a few orders of magnitude higher in damage to their market cap and goodwill.

Regardless of what you think about bug bounty valuation, it's not unfair. This has been rehashed so, so many times and rebuked by people like tptacek, thegrugq and myself that I'm just going to start pasting this comment whenever this sentiment comes up on HN:

https://news.ycombinator.com/item?id=11249173

...

This has been discussed many, many times on HN before. This bug would not cause Facebook much damage; in fact, Facebook and Google tend to overpay rewards for bugs for the purposes of goodwill and recruiting.

Let's examine the facts:

1. A Facebook vulnerability is dangerous to Facebook. A WordPress vulnerability is dangerous to a quarter of the internet. Facebook is not a high value target, relatively speaking.

2. A Facebook vulnerability will be patched once it is widely used. Facebook's security team is one of the strongest and most sophisticated of any company, and their processes would quickly catch this once it was used. The total impact of the bug would be negligible. You'd lose the ability to compromise accounts as soon as you tried to do it in any meaningful or lucrative way.

3. A vulnerability in Facebook might last a week before being patched, but a vulnerability in PHP will persist on the internet for years. No matter how many individual sites patch their servers, you'll still be able to pop a lonely server with social security numbers chugging along in a closet somewhere.

There really isn't much more to say about this. People claim bounties awarded by Facebook/Google/et al are undervalued every single time a bug bounty hits the front page of HN. Every single time, someone who is in the security industry patiently explains why it's not that valuable.

If someone tried to go to a blackhat group or go to the "black-market" (a shadowy, lucrative place that never seems to be very well-defined in these conversations), he would not even be able to find a seller, let alone one who would pay a lot.

What do you imagine someone would pay for this on the black-market? They'd need to profit from it. How much profit is worth their time?

Say they buy it for $20,000. Do you really think someone will derive $20,000 of profit from this before it's caught and patched by Facebook?

The only vulnerability worth $15,000 or more is one directly impacting a language, a widely used development library/framework or a widely used piece of software.

For further reading:

https://news.ycombinator.com/item?id=7106953

https://news.ycombinator.com/item?id=9302188

https://news.ycombinator.com/item?id=9040855

https://news.ycombinator.com/item?id=9041017

https://news.ycombinator.com/item?id=8563884
Author here. This image arose out of a desire to possibly do some performance testing in kubernetes and ECS. It's configurable to run in client or server mode, and example files are included to create repl. controller./services in kubernetes and tasks in ecs, though these are untested atm. The image can also be configured to log to a remote rsyslog server. If anyone has the opportunity to test it would love any feedback!
I was on the other side of the table: as an interviewer (plus a resume screener). I've seen this before with my own eyes but then my experience is just an anecdote: back in the 1998-2005 era, people keep piling on multiple technologies: C, C++, Java, Perl, XML, XPath, XQuery, XForms, SOAP, etc but whenever I looked into their resume, it becomes quite clear that they "learn" these technologies while working on something that:

1) I've never heard of,

2) or the needs to incorporate enterprise solution from back in the days (e.g.: form builder, complex enterprise frameworks, etc) doing some enterprise system

In most cases, again this is my anecdote, none of these developers pass the interview.

NodeJS was hot in the last 2 years (thought it has cool down a bit lately) but to me, NodeJS seems to have the risk of becoming one of those X[technology] revolution in which could lead to a negative signal if one has it in one's resume (plus it's a chance for me to grill candidate how good he/she is when it comes to JavaScript idioms, patterns, best-practices, automation-testing because at the moment, I know the majority of developers who put JavaScript on their resume don't actually practice "good hygiene" when it comes to JavaScript while I know for sure the number of Java developers whom I've interviewed before at least could demonstrate a better/solid software engineering skill).
Actually it's not an exaggeration to say that a single man did build Silicon Valley. His name was Fred Terman, though, not Andy Grove.
I would pay for a TweetDeck subscription. They have consistently acquired products and have ignored them. It is a shame they don't invest more resources on TweetDeck. I am just an end user and I find TweetDeck to be one of the only sane ways to use Twitter. I simply cannot imagine how beneficial TweetDeck would be as a tool for someone who does marketing/handles brands.

A recommended tweets/articles tab a la Pocket's recommendations feed would also bring in a lot of customers for their promoted tweets. The problem isn't ads/sponsored tweets, its how poorly Twitter chooses to present them.
> Andy Grove died yesterday. He is widely considered the greatest CEO in tech history.

I thought the consensus was that Steve Jobs was "greatest CEO in tech history". Make up your mind Silicon Valley!
Thanks for looking that up, I was immediately suspicious of that number. Way for somebody to conflate the complex geopolitical question of exactly which slaves to free when while in the middle of a civil war with the question of whether the slaves should be freed at all.
It was added before the Brussels attacks and shortly after this: https://news.ycombinator.com/item?id=11333402

Also discussed here: https://news.ycombinator.com/item?id=11335903
Ah, cell towers seem to benefit from some govt protection. We live in the country. The cell companies have to find land to place their towers on. They make an argument that, for emergency services, they're required to build the towers. So its inevitable, and we've just got to decide where they go up. Not whether they go up.

And actually, here in the country, there are many cell networks that do very poorly. Houses still have land lines mostly because connectivity can be very spotty. A govt-mandated tower utility would help that.

Lastly, its not about subsidizing. E.g. REC was not subsidized, just a protected class of business that was mandated to provide service to everyone in their area. Subscribers pay the whole freight. Its like insurance; those near the generation plant are kind of subsidizing those far away, but everybody gets service.
The real-life equivalent of that scenario is a random Joe showing up at some political rally shouting "you're WRONG!". Of course shit will fly; the best realistic scenario is being corteously manhandled out of the venue. Why would you expect it to be different on teh intertubes?
Most businesses are privately owned (or at least not owned by the government), but government still worries about the economy, about jobs, etc.
Technically the Pentium III is just a cleaned up and polished Pentium Pro, it's true. That basic design had a very long run, and is still going if you're going to include products like the Xeon Phi as a direct derivative.

http://www.intel.com/content/www/us/en/processors/xeon/xeon-...

I wouldn't call it dead yet. It's still paying dividends.
Easy: introduce laws that require all communication to be consensual. We don't allow people to force food down your mouth, and we shouldn't allow people to force words into your brain either.

What would this be like? Before seeing something, you'd be asked if you want to see "An advertisement for a home care product." Or "An angry personal attack" (Maybe with some indication of who it's against.)

This solution allows everyone to say whatever they want, and adds the ability for everyone to not be exposed to what they don't want to be exposed to.
I'll bite..you say you spend 950 calories on the round trip on a bike, but how many calories do you spend on the round trip in your car? You need to count that as well.

The link at the bottom seems to think that you spend 17 calories to drive 15 minutes. If a round trip is 36 miles, and you drive 1 mile per minute, you spend (17/15)*36 = 41 calories to drive 36 miles.

So the cost of driving is really the cost of gasoline ($4.08) plus the cost of food (which is 41/205 = $0.20), $4.28.

http://calorielab.com/burned/?mo=se&gr=16&ti=Transportation&...
Yes. EDIT: It's condensed, and I don't add milk or anything. I believe this recipe was on the side of the box of Mac and Cheese at some point, probably long, long, ago.
Which is fine, except for the large number of outcomes that lead to fishery collapse and massive starvation.

Nature can do incredibly "smart" things, but it also has the benefit of operating on orders of 1,000 / 10,000 / 100,000 / 1,000,000s of years. I'd rather large portions of human population not be dead for most of that time until a new equilibrium is established.
I don't think this kind of reductive thinking, if taken into more political and behavioral extreme areas works.

Lets try this mental exercise, what is the physical damage to me if I get raped? In extreme cases one could get infected with a potentially deadly STD, or if a woman, onr may become pregnant, but in many cases at the physical level, it's not all that different from regular sex between people. The main difference is granting permission to sex, or not granting permission to sex.

That makes all the difference, or most.

So, you see, it's easy to break things down into oblivion, the thing is, this is what, in part, makes is human, why we don't follow the same kind of courtship other animals accept as part of nature. Or why otherwise rationalized behavior is not normally accepted.

Restorative justice won't cut it here.

I of course understand my example is extreme, but I simply want to point out that there is a point where these ideas break down as a solution to unjust sentencing.
Just curious, what are some of the problems that you use?
This could potentially have some positive secondary effects on the more populated areas as well. SF rent/home prices are insane, and part of the reason is due to the supply of good jobs. With less pressure to relocate to job centers, we could see an easing of demand in those areas. And this is a good counter-argument to those that claim a BI would just results in higher prices for everything.
I think you leave out some extremely relevant points in your comment and have mischaracterized the situation. Lindy West is one of the poster children for the "fat acceptance movement", a self described activist, cofounded a social media campaign called "Shout Your Abortion", and just released a book titled "Shrill" whose subtitle includes "Feminists don't have to be nice".

She has extremely controversial views that she expresses in the most public way possible. Even if she is not deliberately trying to incite discord against her, I am not sure how she could possibly do it any more effectively.

From what I can tell from my brief searching about her, she shoves extremely offensive (to many people) opinions in the faces of the public at large. She is just as complicit in creating an offensive environment on the internet as all the people who send her mean messages on Twitter. Just because she is on "the right side of history" in many of her viewpoints doesn't make it any more justified. Which is essentially my entire point - everyone offends everyone. You cannot stop it and it will never end. All you can do is insulate yourself from it.

I think it's a pretty far stretch to call it victim blaming if I were to tell Lindy West to maybe not make a public, professional career out of advocating the most controversial opinions possible in the most public way possible if she didn't want to get called mean things on Twitter by people she's deeply offended.
My question is why do we still punish people with computer or financial or corruption crimes in prison for long terms? Yes, I understand some price should be paid, but extremely long prison terms for non-violent crimes such as hacking computer systems seem strange.

In fact, some of these wrongdoers actually are very intelligent, and having them make amends with their intellect could be a just way to perform community service. Anyone able to chime in? I'm not well informed on the different views, so I'd like to gain some insight to this view.
> keywords or symbols that are not immediately clear to programmers that don't work in rust

That's an argument against introducing new notation for anything. That can't be right.
Boomerang mines user data
I've been interested in using Boomerang, but after seeing this article [1] stating that they "mine user data for information" I'm put off entirely. To what extent do they mine user information? How is this not a direct contradiction of their privacy policy? [2]

[1] https://www.washingtonpost.com/news/the-switch/wp/2016/02/16/want-to-get-more-responses-for-your-emails-write-like-a-third-grader

[2] http://www.boomeranggmail.com/privacy.html
non-live systems follow the entropy maximization gradient, ie. they maximize entropy only locally. Live systems increase entropy beyond that is possible by only following the gradient, ie. live systems maximize the total entropy integrated over whole space-time path of the given system.
> You need to really, really limit bias as much as possible, so that you're booting out people or bots because of their behaviour rather than their political/social stances.

This is a political non-starter right now, which is why Twitter doesn't do it. Seriously, when they accidentally ban someone for threatening violence against other Twitter users in the name of left-wing activism a huge swathe of the tech and security community launches a campaign to reinstate them and accuse Twitter of all matters of evils fro banning them in the first place.
Customer Support, twitter is customer support for a lot of companies and being public makes grievance redressal possible. They just need to get better tools and charge companies for being their support interface. The companies may not have choices.

Twitter support is common in CRM already. The company I work for has it in our products and AFAIK so do many others in the space.
the question seems non sequitur.
Possibly off-topic: in carpentry, typically one uses a pair of shims rather than one by itself. Since a package of shims are all cut at the same acute angle, a stacked, reverse-oriented pair forms a perfectly flat block, the thickness of which can be adjusted.

I'm not sure if that more detailed metaphor means anything about e.g. API versioning. My initial reaction to API versioning is "why do you hate HATEOAS?", but if one were committed to that particular methodology, perhaps it could be made easier by imagining a version shim on both the client and the server side.
You forgot: Doctors have a strong professional organization that works for them, handles things like certification, keeps the labor supply favorable and wages high. Developers, on the other hand, swallow the "unions are bad" mentality and compete with each other in the usual "labor race to the bottom".
To me UBI is tied to the commons, not e state. So would be perectly fine with an implementation that makes it clear the the state has no say in it.

But then again I don't advocate the B in UBI, I'm content with any amount that is fair and efficient. If the state want to add a complementary redistribution scheme on top of that, it's fine, but there should be a component they can't touch.

For example, one component might be in hands of the central banks as a way to control inflation and such.

Another component might be an institution representing the commons. An organization charged with deciding what should remain a commons, and what could be rented out as private property. F.ex. pollution rights could be their mandate to allocate.

Edit: Also, checkout https://en.m.wikipedia.org/wiki/Geolibertarianism it doesn't have to be either or
These are good points on dealing with trolling as an individual. Ignoring it is the best, and most often ignored, advice. It's too easy to get emotionally drawn into a trolling comment, which is why I've always liked the idea of sandboxing trolls in a way that allows them to think their comments are being accepted while eliminating them from the rest of the participants of the site.

At a higher level, though, sites and moderators of discussion have to participate in the reduction of trolling. Failure to do so dooms a community. I've left my share of communities, mailing lists, usenet message boards and the like due to it being tiring to participate in a discussion that devolves into name-calling and wasteful trolling. My favorite example was Digg about a decade ago. At some point the trolling problem got so bad that you couldn't leave a comment of any kind without encountering a land-mine. I remember the "straw that broke the camel's back" was when I spent a few minutes leaving a multi-sentence comment and had copy/pasted part of a sentence to a place where it made more sense. I had accidentally doubled an "and". I was met with "Learn fucking English, asshole!" and was like "huh?!". The guy read my entire comment and grammar trolled me over an obvious typo? I deleted my account shortly after that. I wasn't angry -- I just came to realize that the site stopped providing me any value.
i did something similar one night a few months back, using python as a sublime plugin, but scrapes the live site. it eventually gets blocked tho as doesn't use the official API.

https://github.com/byteface/chode

I considered hooking into a variety of other resources but haven't really bothered with it as have other things going on.
Hey guys, Griffin from TRAC here. Happy to answer any questions I can--pretty busy with demo day going on right now.
Have you ever chosen not to do something because you want to avoid prison?

Or is there other stuff that's stopping you from breaking laws?
Uber Bug Bounty: Turning Self-XSS into Good-XSS
> but this commit was not backported anywhere

Which commit are you talking about, exactly? Bug 1242904 was backported to Firefox 45, and everything else I see at http://hg.mozilla.org/mozilla-central/filelog/tip/modules/br... as of today (which is the same as <http://hg.mozilla.org/mozilla-central/filelog/ea6298e1b4f7/m...) was checked in way before 45....
Integrating a VT220 into my life
sorry, but is the "random corporaions" the tumor: they just use the code, maybe improve it, but keep that private, and the improvement is lost for the rest of the people.
More accurately: Apple doesn't bother with early adopter and enthusiast technologies. They wait until the tech is mass market ready and polish it.

There's no real reason for Apple to get into VR yet. They can make a deal with Oculus / Valve / Sony and have a decent VR product supported on Mac in under 6 months.
It only takes one, for public order to dissolve.
I don't think so. For the reason why I disagree: Lots of cultural values take a lot of time to internalize, but are easy to check/hard to fake. For example if one property of "cultural fit" is "loves the UNIX way of thinking and writing programs" it is easy to check with few questions if he/she has internalized it or is faking it. Or if "cultural fit" implies "loves doing hackathons" the prospective employee will have taken lots of time at hackathons in the past. If there is nothing to be found in the internet of the hackathons that he/she was on (say, either from the Hackathon's website, pictures in social network, source code on Github/Bitbucket etc.), he/she is probably faking. etc.
Yeah, I tried to give Twitter the benefit of the doubt. It's kind of depressing to me that they are willing to make their product shittier to earn a fraction of a penny.

I think comparisons with Facebook are a big part of Twitter's problem. They aren't Facebook, never will be, and shouldn't try to be. If they use Facebook numbers as a benchmark, then they are totally screwed.
Why I switched to Android after 7 years of iOS
One annoying fact on Android is that it doesn't allow you to set a long password for device boot unlock, and a short one for the lock screen. It forces you to use the same password for both.

I would like to be able to shut down the phone when the risk of attacks/theft/loss is high, knowing that a high-entropy password protects it, but without having to enter it all the day.
Please post civilly and substantively, or not at all.

https://news.ycombinator.com/newsguidelines.html

https://news.ycombinator.com/newswelcome.html
This article reads a bit (if only a little bit) like an attempt to rephrase ancient XP advice (which is itself a selection of truly ancient pre-1997 wisdom) in a refined but folksy way which won't raise hackles.

Mix in master carpenters = Coaching (kind of - this is an interesting blind spot in the classical XP literature)

Measure twice, cut once = Simple Design and Pair Programming

Collect and codify your standards = Coding Standards

Scrap the shortcuts that don’t save time = no specific practice, but a foundational idea of XP is that we go faster by maintaining high quality

Build modularly = (one of the goals of) Refactoring

I think it's quite a good attempt! Metaphors can be very powerful when they fit. Or should i say, when you're able to work with their grain, rather than against it.

I'm reminded of an older such effort, ARM/CL, which (jokily) rephrased it in military terms, to make it more palatable to serious grown-up companies who would never contemplate the zany Mountain-Dew-flavoured antics of those 'extreme' weirdos:

http://c2.com/xp/ArmCl.html
if you prefer "is free software dying"?