skysight-inc/HackerNews huggingface dataset:
> Are they allowed to escalate access, given the bounty rules?

No. From Facebook's responsible disclosure policy [1]:

> You do not exploit a security issue you discover for any reason. (This includes demonstrating additional risk, such as attempted compromise of sensitive company data or probing for additional issues.)

Both of the pen testers in this situation broke the rules. Once they found a security issue they exploited it and probed for additional issues (as well as one tester who attempted compromise of sensitive company data by collecting logins).

It's good that Facebook doesn't always apply these guidelines to the letter.

[1] https://www.facebook.com/whitehat
>More than 90% of their profits come online advertising, something that can be easily blocked for life with a simple browser extension/plugin.

If I were Tim Cook, I'd be at least a little tempted to update iOS and OSX to include adblocking on by default.
Resolve your conflicts directly from GitHub's UI
Colin Furze built a hoverbike
I find it interesting that this entire issue is the same as the nuclear issue was in the cold war.

Government Technocrats: We need bigger and more powerful warheads to protect us from the Soviets.

General Public: OK we'll learn Duck and Cover.

Sensible Few: Is risking the destruction of everything we're trying to protect worth it?

Government Technocrats: We can't look our children in the eye ... yadda yadda yadda.
The wheels generally have a hydraulic steering system so they can turn each wheel individually.

Edit: Like this http://www.truckinginfo.com/fc_images/blogs/l-img-1583.jpg
Well, sure, if you're going to throw in the qualifier "in some cases" you can make the case for anything. The normal state of affairs was for the workers to refuse to leave the factory, illegally, and for the local authorities to give them a lot of slack, because there were far more workers than owners. Look at the Homestead Mill strike, for example. The reason the battle itself and the eventual intervention of state militia was the local cops refused to do anything.
SurfEasy (the provider of the service) is a Canadian company, so it follows Canadian data privacy laws (which are pretty good; when I worked there, Michael Geist was an advisor).
For those who would rather try to use procrastination to their advantage than fight against it: http://www.structuredprocrastination.com/
I was going to skip this article until you put it this way.
Episode 10: A Tale of Two Searches
Google misses earnings, stock dives
There’s a few things that would (probably) stop this from working, but it is possible that the new Opera-based implementation is different than when we implemented it (the proxy version) as a custom Firefox browser back in 2011–2013.
So, Google makes fantastic products. Much of our online interaction involves Google in some way or the other. And the only way these guys have figured to make money is ads.

Why can't they sell products and be like an Apple, Oracle, Microsoft. I am guessing it's too much work to grow in such a massive pace without ads. Ads are a marketers/sales persons dream and these marketers are very likely to spend money.

This ad economy is so very sad and it's killed many nice things. Everyone is just giving out things for free and nobody wants to pay for anything thanks to this whole ad economy. News reporting has gone to the dogs because nobody wants to pay. Email will no see decent progress thanks to gmail.

Anyway, I feel Google will be a much better company if it can get rid of dependence on ads but I guess it's too late now since it has to answer to shareholders and show never ending growth.
I feel like armchair revolutionary nonsense like this should be considered equivalent to Godwin's Law. Once you begin concern trolling and intimating the need for "second amendment solutions" in a political thread[0], you've declared your own intellectual bankruptcy.

[0]outside forums where such things are on topic, I guess.
Usually there is a direct correlation, most of an applications power consumption will come from time on the CPU, even SSD's are using 2-4W.. memory is even less expensive for power, but CPU can be up to 85W for a fully loaded laptop CPU (well, mine)

Make sure your application doesn't idle rough, and executes quickly to spend less time on the CPU, power consumption will follow.
> Capitalism and Communism which briefly resembled victor and vanquished, increasingly look more like Thelma and Louise; a tragic couple sent over the edge by forces beyond their control. What comes next is anyone’s guess and the world hangs in the balance.

Honestly how is this entire article not an exercise in historical materialism as proposed by Marx?

From Wikipedia:

"Historical materialism is a methodological approach to the study of human societies and their development over time and was first articulated by Karl Marx (1818–1883) as the materialist conception of history. It is principally a theory of history according to which the material conditions of a society's mode of production (its way of producing and reproducing the means of human existence—in Marxist terms, the union of its productive capacity and social relations of production) fundamentally determine its organisation and development.

Historical materialism looks for the causes of developments and changes in human society in the means by which humans collectively produce the necessities of life. Social classes and the relationship between them, along with the political structures and ways of thinking in society, are founded on and reflect contemporary economic activity."

> In the first place, we should expect that because there is as yet no known alternative to market capitalism...

I can't even.
Or concisely:

Too big to fail; too big to jail
Sigh? Sigh. You do realize that while law is a social construct, representatives are under no obligation to enact the will of the people, right? And Congress has notoriously low approval ratings? And that only when shamed into taking action they do so? Right.

> Are you implying that all law must be ratified by every citizen before being enacted?

No. I'm implying that government representatives outside the US are voting in favor of laws that are in direct opposition of their citizens' interests (you've heard of the TPP? Of course you have), and that in most cases there is no short-term recourse (short of protests and bloodshed).

Enter stage right "civil disobedience" and the ignoring of copyright law worldwide through online distribution of media. Its already starting to happen with 3D scanning/printing, and will eventually happen with genetic information (including patented seeds).
To what end?

It's all but impossible to take evasive action, you'd have a second or two warning, and quite likely many false alarms.

Rain, bags, random ground echos. Too many targets.
To their servers.. Allowing any non end-to-end encrypted information to be harvested at Opera's VPN point.
I think the point is that some idiot is (clearly) going to be dumb/ballsy enough to try, which brings up one of my biggest pain points about surveillance / gov't power:

What can be done with those logins by someone NOT employed by the government to harm ME?

This is the kind of thing that needs to be brought up in arguments when politicians pine for safety and surveillance. The history shows us over and over that the information cannot be controlled.
The Alpha's extremely weak memory order gurantees would have doomed it in the multicore market. Its hard enough to get multi threaded code correct on X86.
This is a nitpick, but Coke has many different flavor compounds that are part of the formula, while most medicines contain a single active molecule.

A widespread arms race of decoys and analytical countermeasures is still bad, of course.
If push comes to shove Google can do any number of things to fight against ads. For example, it started, silently, without explaining,for some who remove ads in youtube, to stop the video in the middle.

Heck even creating a credible enough rumor that blocking google search ads seriously degrades results could have a material impact.
Security assessment is all about risk + impact. The ability to compromise one thing and get access to lots of stuff is more severe than the near certainty of a single Windows XP compromise with no data.
Well, in Argentina there are not patents for plants at all (genetically modified or not) if they can reproduce themselves. And for what its worth, Software Patents do not exist in Argentina either.

Intelectual Property is protected by copyright. I leave here a translation of an extract for that law. It only allows "inventions" as something that can have a patent. And in its 6th article, it explicitly excludes the following:

Article 6 - They are not considered inventions for the purposes of this law:

a) Discoveries, scientific theories and mathematical methods;

b) Literary or artistic works or any other aesthetic creation and scientific works;

c) Plans, rules and methods for performing intelectual activities,
playing games or for economic and business activities as well as computer programs;

d) Ways of presenting information,

e) Surgical, diagnostics or therapeutic treatment methods, applicable to the human body and animals;

f) The juxtaposition of known inventions or mixtures of known products, variations in their form, dimensions or materials, except in the case of combination or merger so that they can not function separately or that the qualities or functions thereof are modified to obtain an industrial result not obvious to a person skilled in the art;

g) All kinds of living matter and substances preexisting in nature.

Art. 7 - Are not patentable:

a) Inventions whose exploitation in the territory of Argentina must be prevented to protect public order or morality, health or life of people or animals or to preserve plants or avoid serious damage to the environment

b) All existing biological and genetic material in nature or a replica thereof, in the biological processes implicit in animal, plant and human reproduction, including genetic processes involving material capable of conducting its own duplication in normal and free conditions as it happens in the nature.
How so? I'm genuinely curious what information Google collects? Is Chromium better to use in this case?
Social engineering could plausibly work against Apple employees.
Well, it's not _things_, plural, that consumer credit is required to obtain. Just one thing singular, since really the only thing you _need_ consumer credit for is home ownership.

(Pretty much anything else, you can save up for and/or get a cheaper yet comparable used/etc option simply by being shrewd. It just doesn't make a lot of financial sense to use credit for a car, furniture, etc, when you can get them affordably by just not being dumb enough to want brand new crap)

But that one thing, home ownership, is totally a biggie. I rent, and it sucks to have to worry every June about whether this is going to be the year we have to move because the landlord doesn't feel like renewing our lease this time
You don't see an end there?

Ad clicks have been outpacing traffic for quite some time now. It wasn't always that way..it used to track the same.

At some point, there's no real estate left to push ads into, or you are as optimized as you can get.

Or, you play that game too far and consumers react in a different way (ad blockers, etc).
National Security Letters are now constitutional, judge rules
It's fun (mostly).
I think there isn't anything most people feel about this kind of overtime. Some people prioritize work/life balance, spending time with friends and family, and focusing on a wide variety of hobbies, others prioritize their careers, achieving big things as an engineer beyond what they would be capable of only working 40 hours a week.

Neither lifestyle is better than the other when speaking objectively, it just depends on the person.

People who choose to work for Pinterest know what they are getting into, they have one of the most intense and accomplished engineering organizations out there period. While this kind of a culture might be toxic to some, others dream of a life where they are surrounded by engineers who want to work just as hard as them to accomplish a ton in their careers.

People on both sides judge each other on online forums way to much, and there is no need. One group isn't better than the other, and no one should feel pressure to be on either side of this fight. Its this pressure that makes college students feel inadequate.
Agreed, I actually moved to Fastmail recently and it costs me annually but the lack of being the product and actually a customer feels nice.
Assume he finds the modified copy of Windows on the ground. (Ie someone anonymously took out the check.)
That argument hinges more on copyright than patents, though. A patent on something like Roundup-resistant seeds lasts twenty years. A copyright can last well over a hundred years.
>Or I wait long enough for an intelligent majority of Congress to invalidate the ability to patent or copyright seeds.

Good luck with that, considering the constitution grants Congress the power to promote scientific progress through granting limited exclusive rights to authors. I doubt they will find invalidating seed patents aligned with promoting scientific progress.

Edit: nice redaction
Montana raised the speed limits from 75 to 80mph last summer. I've noticed an odd effect... the traffic is now predominantly moving between 75 to 80mph, not 75 to 85mph.
Labels are dangerous, and labelling yourself as a procrastinator will just make you even less likely to do the work you need to do. I think I get a lot of work done (solo game dev on my own), but I also re-organise my task list about every week too, does that make me a procrastinator? If I get stuck on a hard problem, I'll often browse the internet mindlessly, then come back and solve it. Does that make me a procrastinator? If I take a week off, am I a procrastinator!?

Just because we made up a word for 'not doing work' doesn't make it real, or a problem. 'chronic procrastination'? Give me a break.

I think the real problem is people don't like doing things that are hard, which work generally is (nothing worth doing is easy after all!), and it's easy to just not do something and not have to suffer through the stress of it, anxiety of it and so on.

If you're still reading, my solution for all this is exercise, specifically Yoga. I have a mat laid out in my house, and when I'm stressed I just do poses, stretching and breathing, and all the 'bad feelings' go away. then I can work in a relaxed state and end up being very productive. A biologist would probably tell you that you release chemicals that combat the stress chemicals and so on, but I just know it works.
There's usually a bunch of off topic stuff on the front page at any given moment.
https://generalassemb.ly/education/web-development-immersive teaches novices in three months so you should be fine in that timeframe.

Here's a nice guide on modern Javascript. https://medium.com/javascript-and-opinions/state-of-the-art-...
So what? If running a sports book dressed like a fantasy sports league is good, why not gamble on virtual junk?
Good luck sequencing plants from visual inspection.
Daniel Steinberg: Blending Cultures
#butThatMostPeopleDoAnyway
What did you use to implement the copy to clipboard feature?
Having participated in that conversation I can say that the timelines and statements from facebook were suspect. I'm sure the researcher didn't make the best choices but how facebook handled it was horrible and should make anyone participating in that bug bounty carefully consider every action they take against facebook's infrastructure.
> People mine because people need anonymous value transfers.

No, people mine because a global contest was the only way to create a self synchronized global database. Why a global database? To avoid the problem of double spending that all other electronic money initiatives had. But this is a distributed instead of a centralized database.

The process of mining is a way to make all miners maintain the blockchain in working order. Every miner has a copy of the full blockchain DB and all these copies are in sync. In fact, a mined block is a list of transactions between accounts, with their corresponding digital signatures.

The incentive of giving a token size of bitcoins to the first miner that finds the correct hash signature was to make mining something that people would like to do, instead of a burden for everyone.

If you can find another way to make a group of very diverse people, with possibly diverse interests in the game, to maintain a distributed networked database in sync, welcome to the community.

In fact, some groups are starting to test one alternative to mining, called Proof of Stake. If it is better for everyone, then another currency instead of Bitcoin will take the crown.
Yes, but don't ignore the root cause. Politicians make decisions based on what will get them re-elected, or whatever will get them the best post-career lobbying position. Their self interest doesn't always overlap with what's best for the country. Most of the advice they got from their 'advisors' probably fell on deaf ears anyway.
That's a good point. Found an interesting article about this:

> Orbits tend to decay over time, at a rate determined by the initial altitude. Anything above 2,000 km will take millennia to return to Earth, while satellites further down might take centuries or decades.

http://www.slate.com/articles/news_and_politics/explainer/20...
Shellshock is a flaw in bash parsing and has nothing to do with that fact that bash happens to be written in C. Also, it's only a problem for untrusted input sent to bash. Typically, from the internet.
Juneau, Alaska entrepreneur looks to sell ocean water to California
Yes, so the point is at best, there's no reason to privilege any particular one of these guesses, whether 4 or 5 or 1 or whatever. We just don't know, ergo the AD/BC date system does _not_ center about a date that has much meaning for anyone, which was the O/P's point
Another customer of Fastmail. It has served my well and overall has been a much better experience than Google Apps.
I wonder if other search engines are also starting to catch up?

I've been using DuckDuckGo for a while now and there was a time when it felt like I was missing out; However the product has improved dramatically of late and forget I'm no longer using Google.
The problem is not that nobody wants to pay, but that in the digital economy, content and many software products are relatively easy to copy. And once you got that, you know that the cheapest guy will win and take most of your customers, so why not be the cheapest guy, especially if it pays very well ?

The other option is to make your product hard to copy by network effects or data collection, but again, here it's natural for the cheapest guy to win.
Ad blockers block those by default.
Google would have no problem forcing ads into the main SERP hose if it came to Microsoft or Apple blocking by default.
Being: Human
We are talking about enforcement here. Putting bankers in jail instead of imposing a large fine on the corporation saves the banks money.

> Yes, they make money from banks when banks get in trouble.

Sure, but in an environment of weak enforcement where banks never get into trouble, there isn't any money to make.
Tell us more?
That's a lot of double-speak. They know that removing the timeout so they can try thousands of passwords per second opens up a huge security hole. What he's saying is "we want it both ways". We don't want to take away security for users, we just want to make it easier for someone who's not the owner of the phone to get into it.
That is misleading, as the goal of that cross-breeding is not to produce unreliable seeds, but in order to produce better results. Look up "hybrid vigor" for details on this. Nothing about the cross-breeding is done in order to hinder re-use of the seeds, it's just that naturally non-hybrid seeds are less effective.
Its hard to believe, because tracking and especially tracking over search history both over the immediate term and the somewhat longer term is exactly what enables Google to surface such good results.
Argentina tried that with creditors. That didn't work out so well. (They settled eventually.)
This would be a good thing in the long run. It would open the door to paid services that could be competitive. Currently YouTube is free and there are no consequences for blocking ads. It's funny, I didn't even realize that YouTube had ads until I turned off my ad blocker one day. I was amazed at how awful the experience was...
This article is based on a set of false assumptions, and is obviously written by someone ignorant of the history of economics.

>"Economic theory, like the physics on which it is based, is in essence an extended exercise in perturbation theory. Solvable and simplified frictionless markets are populated by rational agents which are then all subjected to perturbations in an effort to recover economic realism. Thus while it is false that economists believe idealized models to be exactly accurate as outsiders contend, it is fair to say that they implicitly assume deviations from the ideal are manageably small."

When Smith wrote "The Wealth of Nations", he had no such theory of frictionless markets populated by rational actors."The Wealth of Nations" was written based on what Smith observed in the world around him, not some thought experiment, and most of the examples in the book were based on real markets and policies, such as the corn laws. Smith had in fact written another book which made it clear that he believed humans were complex moral and emotional beings.

Throughout the history of economics, many (if not most) of the notable contributions were made by people addressing the situations they found themselves in, such as Bastiat responding to protectionism he saw in the French national assembly.

>"Even die-hard proponents of market capitalism will cede that this public sector represents “market failure” where price and value become disconnected. Why should one elect to pay for an army when he will equally benefit from free riding on the payments of others? Thus in a traditional market economy, payment must be secured by threat of force in the form of compulsory taxes."

This is another example of the author's complete misapprehension of economics. I have never heard any economist argue that all externalities should be compensated or penalized, because everything has externalities. Many have come to different conclusions based on the abundance of externalities; there are Marxists who believe the government must control everything to properly allocate resources, and there are anarcho-capitalists who believe that externalities should either be paid for voluntarily (perhaps after social pressures) or not at all.

I could go on to list many of the rest of the egregious errors in this post, but wouldn't want to further tax your patience.