skysight-inc/HackerNews huggingface dataset:
No, that's not true. Think of every time you click on a "sign in with Google" link. If you're not signed in, it will take you to this login page. The redirect will only send back a token, and only for that site.
It's hard to save aggressively in SV without sacrificing comfort.
Call me cynical, but I don't think it is dumb. I think it is intentional.
Oof!

> you must take appropriate steps to ensure that your application cannot be invoked to launch content for which you are not responsible

I read that as prohibiting an app that lets a user cast their own content or third-party content.

And that's interesting, because, looking at my phone, the only things that violate that are Google's own apps (Photos, the OS itself with its Cast Screen functionality), which obviously aren't bound by the SDK agreement.
I think there are a lot of stories about companies that go "why do we need all this fake marketing crap anyway" and then proceed to lose a bunch of money :)
There are no 'Federal Taxes' in Europe. Corporations don't pay a corporate tax at the European level - just to the states. So there is tax competition.
And the best part is you don't know it happened because after you've filled in the fake page, they redirect you again to a Google page you did need to be signed in for, and you're now logged in (from the first page).

If people ever send you Google Docs links, you're likely vulnerable unless you are as vigilant on the "Wrong Password" page as you were on the initial one.
Not always... pretty sure even for the brief time I was in a public primary school here in Australia my parents had to contribute for textbooks. I suspect they had some kind of aid available for families who really couldn't afford it, but I'm not sure.
That was surprising. Where would you say the $ comes from in Leawood? It's not clear from Wikipedia. Is it retired Sprint founders/execs?
It makes no difference. If you got a plugin injected, you lost already - it can create a local sudo alias which either captures your password, or hijacks the next sudo command you run.
Not sure what taneq was referring to - but I was very unpleasantly surprised the first time I got the "Pebble Health This Week" email showing me my sleep and step tracking for the last week from their cloud service.

That's 100% not something I'd ever intentionally sign up to "share" - which means they either opted me in without consent, or used a dark pattern to trick me into consenting to something I wouldn't have if it'd been clear it meant my watch/app was going to send all my activity/movement data to "someone" with no way for me to know what they were gonna use it for or who they were gonna share it with.

I didn't cancel my Kickstarter pledge (my third, I've got the original and the Time) - but I _very_ seriously considered it (and still might just flip it on eBay when it arrives)...
We[0] just recently moved from Hbase to Postgres w/ Citus. Still not fully settled in, but got incredible support from the Citus team (seriously amazing guys) and things are looking much brighter than before.

On a 8 worker nodes (16 cores, 80GB ram, 3TB SSD), we're at around 20k inserts/second, while most of the selects are running at around 100ms (besides some counts and complex queries).

If you have a lot of data and know Postgres, give it a chance.

[0] https://pexe.so
Woah, thanks for the video. That makes the issue more apparent.

Still, couldn't you do the same thing with the standard OAuth flow for Google/Facebook/Twitter?

Also, cool profile photo. :-P
> solving Adwords fraud

Automatically identifying + submitting refund requests for invalid clicks? Or are there other problems that you face as an advertiser that need to be solved?
Woah. Yea I moved off Gmail in 2013. Their broken IMAP implementation is terrible.

Even though a lot of my outgoing e-mail goes straight to spam, I'm glad I did. I hate this crap.
Also the EU budget is tiny relative to states, around 1% of GDP.
Errrk. That's not good.

I wonder if there's a reliable way to ensure the iPhone app cannot "phone home" ever?

(Anybody want to make me an offer on a set of three Kickstarter Special Edition Pebbles? The original, the Time, and the new one I don't have yet?)
I find it shocking to realise, reading these comments, that the university is requiring you to buy these books in order to pass.

I didn't buy a single textbook for my entire Maths/Comp Sci degree (only about 5 years ago, at University of Sydney). The maths dept generally didn't use them (they had optional notes books that were just dense maths, generally written by the professor, and cost about $20), and the IT dept...I think had them but I didn't need them and we were never assigned homework from them.

The one case where I had an assignment (read: something that was worth marks) assigned from a book, I complained and the professor provided me with a copy of the relevant question.

I can understand recommended texts. But I can't understand requiring you to make an additional purchase just to complete assigned work...at that point you're effectively just paying for marks.
well then lobby to get your electoral system fixed instead of copping out. not voting for Hillary Clinton increases the chances of Trump winning, and who even knows what his actual policy on drugs are?
My co-founder and I were most certainly advised by YC partners when we were close to hitting the wall: "just do whatever you have to do to keep your company alive – and do it fast!".

The cereal box story serves as a reminder that sometimes it takes the most unlikely, left-field, crazy-seeming idea to get yourself out of the hole.

The one my company pulled was very different to this, but it worked, and the company is now thriving, albeit on a much smaller scale to Airbnb.

Had we not been in the same YC batch as Airbnb and seen up close just what it takes to survive hardship and get to sustainability, it's unlikely we'd have made it.
> Where's the source code for that?

Closed. It's backing Hekaton in MS SQL and some features of Azure DocumentDB.

While there are many systems in the literature that demonstrate some variation of lock free log and indirection map, they're all either research demonstration codebases or closed source to the best of my knowledge.

The reason I have an axe to grind here is I think the generalizations around LMDB made by you and others are making this situation worse, by convincing people that haven't read the last few years of literature that LMDB's design is all there is. LMDB is great but narrow. It has no answer for many workloads. It's inevitable that better things will be devised. I want those things to be FOSS. Do the over-reaching and over-simplifying comments about LMDB make that more or less likely?
I wouldn't worry about it much - there are a lot of us out there who aren't exactly "single-issue voters", but for whom a single issue can make a candidate completely unpalatable.

For me, that's guns. For you, that's drugs. For many others, it's abortion.
Does he have a statement regarding password managers?
> our choices would lack any consequence

consequences doesn't have to cause suffering. You can live in one country or another - meeting different people, eperiencing different thigs, learning different cultures. How is it less of a consequence than developing a cancer?

The rest of your argument is taking a mataphor literally, and asserting it's less true thanks to the existence of evil. Why? How would the life be worse if there were no diseases and wars?

> How do you derive this from your beliefs?

I'm not special. Other people have their lives too, and by being a dick I decrease their enjoyment of their short lives. I don't have any reasons to value my enjoyement over theirs (or vice versa).

I have counter-question BTW - would you go around murdering people and stealing from them if there was no hell and no police? That's what your argument boils down to - "without a stick and a carrot why bother with morality"?
Agreed, and not trying to be pedantic, but it might be more accurate to say: "If AB is a vulnerability only if B is present, then A is not a vulnerability".
That's why we upgrade machines (either through pharmaceuticals, and soon, I suspect, gene therapy. Introduce the caloric restriction gene and suddenly the urge to eat uncontrollably goes away.)

Hell, most legal stimulants are appetite suppressants anyway. There are always options. Comparing humans to machines is probably one of the most bizarre expressions of materialism/physicalism I have ever seen on here. The analogy is also quite poor, the human body is far more complex than even our greatest machines.
4 months is very short time.
Not contradicting anything you've said seeing as the first few launches of the falcon 9 followed your rough outline, but SES was SpaceX's first GTO launch so they've clearly got an appetite for a bit of risk.
It feels like you should phish one of the Google Security Team to really get the point home.
I usually give his answer (but in Python), and every now and then the interviewer will make your same mistake (if if, not if else if) Delightfully awkward, the worst was the guy who didn't believe me and popped up a shell to test it. What's the appropriate social response when someone trips over their own weed-out question?
I would bet that a jam band or ten would be more than happy to put on a concert/festival on his behalf.
This Game Is Super Scary
Lytro Demo Offers Promising Look at the Future of Lightfield Video for VR
What did you replace Gmail with?
In this context I think it means "unlikely to be a free public wifi access point"
To be clear I was not a Bernie supporter either(since you mention lobbying the electoral system), I just used the MJ example because it was easy and at hand.
I do not support Trump either.

By voting for someone I support, I am not voting anyone else into office, that is up to their supporters.
Do you agree with every foreign policy decision your current country makes? Are there really allot EU member states that support terrorist? Is the UK - EU divide really as violent as the Israel Palestine divide?

I was hoping there was some coherent argument in favor of Brexit that I had not heard and that maronthewall might be hinting at. Clearly I was in error in that hope.

And as objectivistbrit so defensively denied:
'...emotionally driven and intellectually dishonest...'
is shown very clearly again to be very much at the core of the Brexit movement
In my case, at the University of Kansas, a lot of the time assignments will come from the required textbook (when not taken from some online system), so still kinda required. Homework is a teacher aid anyway (in a sense, though I do realize for many it is also a study aid), so why am I forced to pay outside of tuition? I don't pay for tests outside of tuition.

Either way, the intention is to make the person (ie the dept chair/professor) who selects the textbook/online homework/etc be the one to pay for it; otherwise there's no is pressure to use cheaper books (or rather the books with the best value/cost ratio).

Also, I presume that the universities would be able to bargain down to a lower price, due to gains had in mass production (as an analogy) or your usual volume ordering discounts reminiscent of Monoprice. This is especially true if the university buys access to N pdf every semester, which offer practically free distribution costs vs textbooks.
Ok, why do you want to buy a house? To settle down and start a family? Great. As dysfunctional as California schools are, take a look at the abject horror that Brownback has unleashed on the Kansas educational system. Or Walker on Wisconsin. Or Pence on Indiana.

In life, there's more than home ownership.
Hi jabzd We could help you. You can check out our offering at www.nirdhost.com. You can also see what we've done for behavioral tech http://www.nirdhost.com/blog/2016/how-nirdhost-took-behavior... .
Dumb and intentional aren't mutually exclusive here.

What would be truly cynical is to believe it's pragmatic, and not just dumb.
scribd is such a piece of shit
cool, done!
One of the requirements for getting hired by eBay was to disclose my eBay account(s), if any. Ordinarily that would be pretty intrusive, but I decided it was reasonable for them. ;)
Despicable Me: Minion Rush Hack 2016 No Survey
PKI coverage here is quite narrow. Here's Peter Gutmann's PKI tutorial that covers PKI history more widely: https://www.cs.auckland.ac.nz/~pgut001/pubs/pkitutorial.pdf
They evolve when it becomes politically convenient.
> big agribusiness

Are small agribusiness(es?) exempt? Why should they?
Step 1 and step 3 are "trick the user". That alone should make it clear the real vulnerability is social engineering, and not a software flaw.
Severity rating is a highly contextual process, for which CVSS fails magnificently. Not only is it devoid of context (is this CSRF on private messaging or password reset?), it is not consistent.

If you browse the vulnerabilities listed by CVSS for random Linux utilities, for example, you'll find the same vulnerability listed several times with different ratings despite them apparently having the same exploitation requirements and final impact ("authentication not required, remote attacker, potential user data compromise", etc).

Then it will generally go on to give a vague explanation that is absent any real exploitation details and simply link to five different websites that all copy-pasted the same SecLists disclosure verbatim.

Basically, it's crap, and it exists because the information security industry is bifurcated into two different industries - the risk folks and scanner Rockies who don't have any real technical competency but who love to have things like the CISSP and those who actually know what they're doing in the trenches of technical penetration testing and security audits.

The industry unfortunately attracts two distinct crowds - people who can and do develop actual software, but who specialize in security, and people who can talk the talk and have a vested interest in the pomp that comes along with crappy guidelines.

If you asked a real vulnerability researcher like Tavis Ormandy to CVSS score any of his findings, he'd probably laugh. His disclosures are usually verbose precisely because this is an industry that should be nuanced.

Just because we have nothing better does not mean we should heed an abysmal system.
"Low energy! Sad!"
HN is the only special interest community where topics around sex frequently pop up. Just wondering why?

Is it that the HN reader have much less intercourse than the average? If yes then this story shouldn't get any interest of HN users. Why bother if you don't get laid anyway?

Or is a large part of the HN community homosexual? Then yes, they have way more sex than the average. Then, they are prone to the new mutated super-power gonorrhea and should upvote this article with all their accounts.

This were my initial thoughts when reading this article. Why on HN, why do all the Rust, Go and Python lovers care so much? I expect to get heavily downvoted or that this post won't be approved. This is sad and quite typical for HN: Never touch sensible topics, yes let's talk about sex, meaning of life and let's do this the HN way, high karma folks with off-topic conspiracy theories at the top and don't dare to criticize or to stereotype ourselves.
Shkreli was almost admirably honest. Let the wealthy accumulate enough and they'll buy the government. Capitalism without a very tight leash, democracy: choose one.
Good point. The goal of a good propaganda systems is to make individuals believe that disloyalty to the team is disloyalty to the oath "you betray us, you betray your own country / Constitution / Foundng Fathers etc."

At some point people tell that story to themselves, because it makes it easier to function and reduces cognitive dissonance.
Something like: do I really want to work with you? :)
Everyone pirates textbooks. The fuckers at the textbook companies can go dig their own graves. Artificial scarcity is their only hope, and they can't resell calculus and Newton's laws forever... it's not like they've changed in the past few years.

I can imagine a parody commercial... I saved hundreds of dollars this semester by switching to BitTorrent!
"Hey", they don't understand. </sarcasm>
After the second "Hey", it started to annoy me, and I was just reading that post. Sounds quite condescending...
Dogs understand both vocabulary and intonation of human speech
Are there any decent technical measures to discourage password reuse across sites? Server generates the password?
Wrkriot.com taken offline
Shoka Bell: bicycle bell with display and theft alert
Content may cause trauma: U of Chicago triggers debate about free speech
Indeed (Trump...). And usually when it catches up (meaning getting fired, outed and pay some fines) I do not think they lose much sleep while laying on the deck of their yacht.
Not on Android.
I would actually agree, to some degree.

Sidenote:
If you research more, Shkreli does have reasons for the price hike (research). He says that 60-70% of Daraprim is given for free and no one is dying from lack of access. I don't know how true it is, but he doesn't seem like a villain.
He's been finding bugs galore in them recently.

https://mobile.twitter.com/taviso/status/769391927892598784

Edit: this one is better

https://mobile.twitter.com/taviso/status/769378052254015488
Perhaps someone could come up with a service saying "sorry, this password has already been used somewhere on Internet, are you sure you want to proceed?". Sites would have to adopt it, a-la re-captcha
Thyssenkrupp MULTI: Cableless elevators
> ES6 support is another reason why.

Most will be transpiling that ES6 into ES5 so support isn't that necessary.

> And also, once we start doing advanced optimizations you might want to marinate that hat in some nice sauce.

Better optimizations than Google Closure and / or Uglifier? Color me skeptical and good luck :)
MyLG 0.2.3 Released, Free Network Diagnostic Tool
If you haven't already seen it, Dan from Heap Analytics has a great talk about how they use Postgres and Citus.

https://www.youtube.com/watch?v=NVl9_6J1G60
I ask, can we do away with passwords entirely? Trying to defeat computers with human memory seems like the wrong approach.
>is an evolution of the company’s stance on the 2012 incident

what a nice way to say that they lied before and that they are now finally coming clean - three years too late.
Let's Infill a Neighbourhood (And Make a Profit)
Exactly - so any tip just reduces how much the owner has to pay to cover minimum wage, making it a subsidy to them, not to the server, who gets minimum wage either way.
NASA Makes Dozens of Patents Available in Public Domain
Many of our drug laws are way too harsh, so it's a good thing that Obama is injecting a modicum of sanity into things.

In contrast, on Bill Clinton's last day in office, he shamelessly engaged in "cash for pardons". E.g.:

Critics complained that Denise Eisenberg Rich, [Marc Rich's] former wife, had made substantial donations to both the Clinton library and to Mrs. Clinton's senate campaign.

Longtime Clinton supporters and Democratic leaders such as former President Jimmy Carter, James Carville and Terry McAuliffe, were all critical of the Clinton pardon. Carter said the pardons were "disgraceful."

https://en.wikipedia.org/wiki/Bill_Clinton_pardon_controvers...
The report doesn't contain much details, but 2-factor auth might have helped.

What is also not apparent is whether the stolen credentials were utilized to pull off data from the accounts? Users might have had sensitive documents stored!
Exactly. It strikes me as the same sort of entitlement dynamic that so many open source project maintainers face. "You gave me a free thing? Well it's wrong and you should give me a much better free thing. For free!"

I don't mind people wanting things. We all want things. But I think it's a problem when that crosses the line into expectation or demand.
> three years too late

From 2012 to 2016 -- it'd be four.
Also no - we use data paralellism. I'd maybe check out our new spark page we put up that explains how parameter averaging works: http://deeplearning4j.org/spark

To quote your page:

Data parallelism shards large datasets and hands those pieces to separate neural networks, say, each on its own core. Deeplearning4j relies on Spark for this, training models in parallel

This isn't the same thing as the TensorFlow distributed training model at all.
Take a look at some of the links on this page:

https://security-tracker.debian.org/tracker/CVE-2016-4448
Amazon pilots 30-hour work week
Nah. Something like: It's ok, don't let it get to you. Technical interviews are hard.
That site looks to be a treasure trove of wonderfully odd and unexpected old books to enjoy
Question for Elon:

What do think humanity's purpose is? You believe that colonizing space will protect us from extinction-- what purpose do we have to as a species to go on?
I'm speaking about the problems they'll run into.

What are these mythical problems you speak of? I'd hear to hear some specifics, because I haven't hit them yet.
myLG, Command line Network Diagnostic Tool

my looking glass is an open source software utility which combines the functions of the different network probes in one network diagnostic tool.

Features

Popular looking glasses (ping/trace/bgp) like Telia, Level3

More than 200 countries DNS Lookup information

Local fast ping and trace

Packet analyzer - TCP/IP and other packets

Local HTTP/HTTPS ping (GET, POST, HEAD)

RIPE information (ASN, IP/CIDR)

PeeringDB information

Port scanning fast

Network LAN Discovery

Web dashboard

Configureable options

Direct access to commands from shell

Support vi and emacs mode, almost all basic features

CLI auto complete and history features

http://www.mylg.io
> Telescope time is too valuable to "waste" but I wonder what it might show us.

It would be great if we could build more of them. I'm hoping that the cheaper access to space coupled with some clever hacks will let us throw a few more up there.
Really? You've never seen people permanently harmed by bad things written about them online? We recently didn't move forward with a particular candidate for this very reason. I guess people can change their name but, baring that, the Internet lasts forever. And anyways, if you do the most basic of diligence on someone you hire or do business with, name changes and the like are easy to discover.
A Simple JavaScript change to reduce your build size
Amazon now offers an unlimited storage plan
What he is doing in not "just" eroding civil liberties, but he is deliberately trying to introduce a weakness that would negatively affect our national security (oh, the irony).

Since FBI director is not an electable position, is there a way to force Comey out of office or force him to resign?
Dark patterns:

1) They accept your order without even a mention of the T&C, EULA or privacy policy (at least as far as the checkout, I'm not putting my card number in to check for a popup during the payment process).

2) When you receive the product and go to install the app, in tiny print below the signup form they declare that by signing up, you accept the T&C. (This text is visible here: https://youtu.be/GAYL034-j0I?t=1m19s)

3) By accepting the T&C, you agree to the privacy policy linked from within the T&C.

In my book, this is not acceptable behaviour.
I've been waiting for light to be shed on this incident for a long time, as I have known for years and with zero doubt that invented email addresses used only for Dropbox must have been stolen from Dropbox. I have said so, publicly, too, but I never heard Dropbox admit to a serious incident like this.