skysight-inc/HackerNews huggingface dataset:
This is a really good reason to be careful about what you log to log analytics platforms. I just recently implemented an ETL system that has the credentials (along with other stuff about the job) for data access passed into it from a PaaS framework. While I want to log the information, I don't want to log my DB connection strings! It's very easy to overlook such things and produce them as part of application logging/exhaust without realizing it, especially now that we have mass adoption of things like Splunk, Logg.ly, CloudFront, Cortana Analytics, Elmah.IO, LogEntries, Seq, and a dozen others.
Exactly this. Shouldn't be too hard to connect the dots if people really wanted to but I won't specify the names in public.
Coming up with appropriate password for ordinary user's is hard enough right now.lets imagine you are not being sarcastic-for the sake of argument-, then I think it is almost impossible to create good enough password, yet rememberable.
Mandatory minimums are terrible.
That makes sense emotionally, but in reality in FPTP you just enabled the even worse other party. If you want your voice fairly represented, you'll need other voting mechanisms and non-partisan districting mechanisms. Your wish is legitimate, but unfortunately the current system limits your useful actions.
>> I would call any easily corrected behavior of your site that could lead a normal innocent user to being compromised is a serious vulnerability.

So your stance is the first option, that basically any security vulnerability is serious. The grand majority of vulnerabilities are much simpler to fix than they are to find; once you find them, fixing them is generally straightforward. Given that we are using fundamentally different and incompatible definitions of the word "serious", we are obviously going to continue to disagree on this point. Perhaps it would help if I reframe this for you - there are vulnerabilities which warrant an on-call engineer being woken up at 4 am, and there are those which do not. Further, there are vulnerabilities which need to be fixed this week and those which can wait until the next feature release. If you don't like my use of the word "serious", hopefully you'll find that more agreeable. I don't think we are arguing over the same point anymore.

You continue on to attack Google for having this vulnerability, but I don't think you have spent much time doing vulnerability research if you react that way about a company of Google's size. The sheer codebase alone basically guarantees every type of vulnerability will be found. Furthermore, being antagonistic about it in the way that you are is not conducive to recognition or remediation. Attempting to shame companies or engineering teams is counterproductive to developer awareness and education. At the end of the day, this is just a specialization and your job is not to be mean to them for making mistakes, it's to try to improve their understanding and help them resolve the issue while avoiding it in the future.
No..? I'm not sure how training on several shards at once and averaging the results asynchronously is hyper parameter tuning o_0 We have a whole dedicated library for that called arbiter.

You are thinking of grid search and the like. We implement grid search and bayesian on spark (the latter being closed source)

I didnt say it was the exactly the same as tf either. We have been doing this for close to 2 years now. Actually..Im not sure why it has to be? Its closer to hogwild and co.

You also never answered my question ;). Not sure what to assume here.
Thank you since 5 years now I kept myself out of Google SSO as much is I could and carefully use a bug tracker outside my favorites sites because I don't trust Google for privacy matter.

Sometimes I wonder if I'm too much paranoid, but your carelessness just prove me right and I will keep NOT trusting your company.
http://www.prnewswire.com/news-releases/authy-accelerates-en...
I knew you could do it.
Yes it's that second part they quoted to me in email from their customer service

" The Platform may also display the Accommodation’s approximate geographic location on a map, such that a user can see the general area of the Accommodation”

First off its ridiculous to claim that part of the privacy policy is something clear and obvious to guests and that they will therefore understand that listing are not representative of the actual locations.

Second, while I can except they might choose to have such a policy to protect hosts it is a arguably deceptive practice. If it's their policy that locations on the map may not by accurate that should be on the map page itself in a hard to miss representation. Not buried in section 5.B of their privacy policy in a section that starts with "Your public listing page..." making it clearly directed at hosts not guests.
Examining the Internals of the Rails Request/Response Cycle
I generate them using Apple keychain
Dropbox admitted in 2012 that the emails were stolen. The new information coming to light now is that encrypted passwords were also leaked.

Exact phrasing from 2012 blog post:

>A stolen password was also used to access an employee Dropbox account containing a project document with user email addresses. We believe this improper access is what led to the spam. We’re sorry about this, and have put additional controls in place to help make sure it doesn’t happen again.
Python 2.7 is the present and future of scientific computing with Python. If there is one field in which a print statement is a critical feature it is quick interactive analysis prototyping. That won't change no matter how much Guido and co want it to change.
https://www.blablacar.com is present in more than 20 countries, mostly in Europe (where it started), bu also including countries like India, Brazil and Mexico...
That is just 2fac, isn't it?
Non-violently resisting arrest is a real thing and should most certainly be a crime. E.g. you put your hands firmly across your chest and force the police to overpower you and force you into handcuffs. You're not attacking anyone, but you're resisting arrest in a way that threatens the safety of the arresting officers and obstructs the lawful execution of an arrest warrant.

Also, when the charges are all for the same crime, the sentences are almost always concurrent, which means they run at the same time. It doesn't actually increase the length of the prison sentence.
As a recent convert, I highly recommend using a password manager (Lastpass, Dashlane, 1Password, etc.).

For sites where I don't really care about security (present company included :), I use a passphrase, usually in the form of a mnemonic. As an example, the password I may choose for this site would be "Hack_G1bson_RedPill_KungFooey" Much easier to remember and it only makes sense to me. Also, for apps like Dropbox, you better be using multi-factor authentication.

I can't do this for every site because of their tyrannical password requirements. I wish they used overall password complexity as an entropy threshold instead of 1 lower, 1 upper, etc.
but then voiding the argument that was stated initially i.e. no one needs to maintain it and be on call for it
Okdork: home automation setup
"...receiving calls from distressed Chinese students locked in contracts to buy homes but unable to drum up the extra cash to pay the tax."

1) Abusing the terms of a student visa
2) ...to help someone else flout home ownership laws
3) ...to park money where it won't get taxed.

I really feel for them.
Its [Current Year] and [Semi-Respectable Tech Blog] still doesn't know the difference between encryption and hashing.
Researchers Map Locations of Servers in Netflix’s Content Delivery Network
Considering how many serious deployments still use non-clustered NASs, a single node object store seems equally reasonable.
You missed the part where it needs to print out the number itself otherwise.
Just downloaded the update. It managed to crash the first time round (also really first time Pebble watch crashing on me). I'm guessing the watchface wasn't updated to work properly with the new timeline preview ("Glances") - I'll debug it if it crashes again.

So far I'm very happy they've updated the Pebble Health watchapp - it's finally usable now (and quite nice), as it display daily stats for last week in nice bar graphs. Also I have an impression that Timeline is a bit more responsive/faster now.

I'm pretty happy with what Pebble is doing (though Health interface on the mobile app could use some further rework to provide more/better information). Can't wait for the Time 2 watches to start shipping!
For server-side, that'd be OpenID.
Sorry, I haven't looked at this in a while and searching online seems to confirm my doubt. Isn't a page different from a user profile in the UI, UX and how one can connect with others and how others can connect? In other words, wouldn't having different personas for different circles of people actually require multiple accounts (not multiple pages) and switching between them to look for updates and communicate with the different circles (although it looks like switching is probably made easier and enabled as a feature on Google products)?
Enforcing arbitrary password rules. "Must contain at least two '$' characters", "Cannot contain more than one '?'", etc.

However, I think being able to use the same stupid password on all sites I do not care about is a feature rather than a bug.
That sounds pretty nice. If it works does it need new features? :)
Just started running my own server:

http://penguindreams.org/blog/how-google-and-microsoft-made-...
There's libpebble2 which pretty comprehensively covers the basic features if you want to talk to the watch yourself (https://github.com/pebble/libpebble2/) - or is that not what you meant?
Extensive discussion a few days ago: https://news.ycombinator.com/item?id=12360736
He thought that Tesla would most likely fail, and yet he invested 50% of his Paypal money on Tesla, and the other 50% on SpaceX.

Risk is irrelevant to Elon.
China Overtakes US in Scientific Articles, Robots, Supercomputers
> It's very easy to overlook such things and produce them as part of application logging/exhaust without realizing it

Very true. It is a constant battle between debuggability and not leaking credentials.

In Erlang for example, when processes crash they dump their state, their neighbours, links to other processes, and other such useful stuff. That's very helpful, however it means it could dump credentials as well.

Luckily there a custom function to format the state of a process http://erlang.org/doc/man/gen_server.html#Module:format_stat... which helps with that. But have to implement that each process which holds credentials.

Also some of those log ingesting services provide a pre-indexer credentials filtering. I know Splunk has it:

http://docs.splunk.com/Documentation/Splunk/6.4.3/Data/Anony...

Of course it is better if it is filtered out before that. But it could be a safety net perhaps.
Another effective change:

npm un --save lodash
Troy Hunt's analysis: https://www.troyhunt.com/the-dropbox-hack-is-real/
Often I think we take these oaths without full knowledge of what is happening. Would Snowden have taken an oath of loyalty if he knew everything the NSA was doing? Highly unlikely, that's exactly why he broke it.

I think that people are often too slow to break ties with their 'team' when immoral behavior is at play.
Russians Hacked Arizona Voter Registration Database -Official
Always amazes me that LSD is illegal while alcohol is legal, the latter causing all host of metal and physical ailments, the former causing mostly hilarious navel-gazing
I was pissed enough about it to write my own Android app for it (I'd been meaning to play with Android dev for a while). It covers the basics (notifications, music player control, install/uninstall apps and watchfaces) but I never got around to more advanced stuff (Phone app integration, phone-side JS, interpreting the streaming data etc.) and they stopped documenting new features sometime around the release of 3.0 so no health integration.

I've been meaning to tidy it up and post it somewhere, maybe this will give me some motivation.
Is it just me or there's an actual increase in scams among startups lately?

e.g. yesterday's post: https://news.ycombinator.com/item?id=12384071
Hmmm, yeah, I thought kratom was part of the whole synthetic cannabinoid [0] crackdown, because homeless people and juggalos were smoking themselves out of their gords?

I figured it was all part of the "designer drug" problems that started with bath salts.

But honestly, what do I know? All these retarded products remind me of the days when kids would cut class in middle school and smoke Lipton's tea in rolled up pages from a looseleaf notebook. (get off my lawn!)

[0] https://en.wikipedia.org/wiki/Synthetic_cannabinoids
>What's the point of a service fee on top of the cost of your meal though?

For the same reason airlines don't include mandatory charges in their fares - humans are not particularly good at rational pricing evaluation.

It's known as partition pricing and generally results in higher revenues - from "The Effects on Perceived Restaurant Expensiveness
of Tipping and Its Alternatives": [1]

"Furthermore, participants ordered more expensive meals when automatic gratuities were added to the bill than when the costs of service were built into menu prices"

[1] http://scholarship.sha.cornell.edu/cgi/viewcontent.cgi?artic...

See also:

http://www.msi.org/reports/divide-and-prosper-effects-of-par...
It's dumb because even if they wanted to have that severe of a punishment for LSD specifically, they could do math and just make the sentence greater for smaller amounts of actual drug. Be as cynical as you like, but we'd see equivalent exaggerations for every other drug if your line of thinking made sense.
I suspect this is mostly a US problem, courses there seem to be structures differently than how I experienced it in Germany. With one single exception, all the textbooks I bought were not required, I selected them myself based on recommendations, but I could have chosen to buy different ones or none at all.

The textbooks are still expensive, though the non-US editions are around half the price of the US versions. But it's a level of expense that seems justified based on the value I got, at least for the better books.
No, just an assumption. There are enough individuals with access, and everyone knows the network should not be trusted and anyone who cares about security is encrypting.
The takeaway lesson being perhaps that ethical violations are often good for business?
You would think Dropbox doesn't behave like a startup anymore...Proves again that simply passing the responsibilities to a "cloud" provider doesn't fix the security issues.
The first rocket launch cost a total of $63 million or so, IIRC. This one, I've read, is being done for about $15-20 million less. Still tens of millions of dollars, but quite a bit of savings, especially for the first time SpaceX has done this (considering the risk involved).
Interesting product - good luck :)
Indeed, or any major password manager. I use lastpass, which will automatically generate (and even fill in the appropriate fields) long, random passwords. I'm sure the others have a similar option.
this implies the government is a monolithic entity that decides everything.

This is why we have elections and a separation of legislative and executive branches. This is why Congress holds hearings on intelligence. The Church Committee happened, after all. And the courts can tell the NSA to not do things, and it (mostly) happens.

The incentives are mostly aligned, but the people being voted in seem to disagree with the idea that government whistleblowers need as much protection.
There is some base level of knowledge I expect of a candidate without having to search Google.
Another self driving startup out of Stanford
Very annoying site that requires you to register / blocks content otherwise.

Try these links instead:
https://multi.thyssenkrupp-elevator.com/en/
https://www.youtube.com/watch?v=KUa8M0H9J5o
I do see how "circles" could be confusing, but isn't it also true that the circles we define may not be reciprocal or symmetrical in others' eyes? For example, I may consider someone an acquaintance but they may consider me a friend. Or I may consider someone as belonging to a book club circle but they may consider me as an acquaintance. To go to an extreme, a relative may consider me related but I may have had issues with that person and don't consider that person a relative (and just as a stranger, or an acquaintance).

I always understood the point of "circles" as how we privately define our personal world and our relationships with others, which may not necessarily be how those people view us. In comparison, I see Facebook's "lists" model less intuitive for people to understand and use.
So is there ongoing work to replace borg with K8s (afaik the adoption of omega pretty much stalled and/or died)?

I myself would feel more confidence in K8s if there was usage of K8s outside of GKE and the dogfood being created was eaten by the rest of google as well (or at least there was a publicized plan to make that happen), because otherwise it feels more like K8s is a experiment that google folks are waiting to see what happens before the rest of google adopts it.

Thoughts?
The title of this article should have been "Used Rocket".
There were other NSA whistleblowers before Snowden, but they tried to go the legal route and were punished for it. It was only Snowden's illegal sharing of information that made sure the real story got out.
It's for accounting improprieties, not a drug hustle. The fine is proportional to the crime. Even if we charged $800 million for this, would we charge $800 million for them not having a handicapped parking space at one of their offices?

Comparing to overall profits is counterproductive and dishonest. The punishment should fit the crime.
'Record Breaking' Internet Speed of 1.9 Gbps Over 4G Mobile Network by Elisa
SETI Team Investigating Mysterious Signal from Star 94 Light-Years Away
Did they make sure to reject medicines and medical advice? Come on...
I don't know, but you could think about the evolution not of your brain but of the melodic meme. You know about the song because it has the catchiness property, and it spreads because you keep whistling it.
Geosync slots are scarce. There's a market in them.[1] Low-orbit slots are more available.

[1] http://www.nyulawglobal.org/globalex/Paper_satellites_free_u...
I really wish HIBH would actually send me the data related to my email. I currently have no way of know the current password except by going on to some shady website and downloading a dump. Why not provide the option to send it to the user's email address?
Plus there's always the risk that the government can take your income away from you for any reason.

It's almost like taking away a child's allowance...
I'm actually fixing an issue with this right now. My logging framework is capturing user passwords, so I've delayed the release one day while I blacklist certain known-sensitive information from the capture.
I have a somewhat confused feeling that your definition from above of 'fully production-ready cluster' is different than mine and others ;)
Can you tell a wild cat from a pet moggy?
I grant you that it might not be possible in all the cases. But it'd be hard to argue that the double-Dutch sandwich was something any politician ever intended.
> "Roundup ready" weedkiller

I thought that "Roundup ready" described the GMO crops and that the weedkiller was just "Roundup."
They let me choose cdn in Singapore.
USB Disk Security 2016 Full Crack Patch Free Download
Maybe it should have been in quotation marks, I'm repeating what was said on the reddit thread from memory. I don't really care about the guy or his trip. The only thing I really care about is why he put a MB diesel in a Jeep (twice).
Both new and old G+ have this style of layout for the main stream (or at least, multi-column layout). The OP of this thread is specifically in the "one-up" view when you link to a single individual post.
I can mtb on dry dirt trail and snowshoe/ski, kayak in a lake, all in the same day here in the Front Range, and all of those activities are accessible from population areas within 15min-1hr drive
Ah. OK. Transformed the world, no less.

I don't even know what it is.
It depends on the audience for those drugs and their relationship to the people making laws. Take, for example, crack versus cocaine. Crack and cocaine are nearly identical drugs. Crack has the same sentence for one gram as cocaine does for eighteen. (The disparity used to be five times greater before 2010.) But crack users are more likely to be black, low-income, and less educated. I can't imagine why they'd be a preferred target for "tough on crime" legislation. Aside from, y'know, systemic, institutionalized racism (and good old-fashioned poor-stomping, but it is well-known that the War on Drugs was intended to target black people).

Similarly, LSD was widely associated with undesirables in the sixties and seventies--counter-culture movements. Do you have a better way to provide yourself with cover for attacking them?

If you're surprised or skeptical of either claim, I recommend you read Dan Baum's recent report regarding his discussions with John Erlichman and H.R. Haldeman's diaries[1] (themselves available in the Nixon Presidential Library). Both men were deep in the Nixon White House during the formation of the War on Drugs; it's illuminating stuff.

[0] - http://harpers.org/archive/2016/04/legalize-it-all/?single=1

[1] - http://www.nytimes.com/1994/05/18/us/haldeman-diary-shows-ni...
Even more incredible is the perspective of Brandon Green, the man who Skinner is in jail for kidnapping and torturing. Brandon posted his version of events online at the end of last and beginning of this year: https://www.shroomery.org/forums/dosearch.php?uid=367971

I am totally in awe of his attempts to come to terms with what happened to him. I also credit him with the likely the greatest understatement I've ever read on the internet: "To all you guys who constantly say how badly they want to have sex with 'Neurosoup,' take it from me - I've been there and I can testify that its definitely not worth it!"
Define 'world', then.
Is this for university level or secondary school level? It seems rather expensive if this is for secondary schooling.
I'd be interested in seeing that if you do - the email in my profile works if you have a list of people to notify...
Well Java didn't add lambdas to write make-counter, it was map and fold that got them envious. In fact, IIUC mathematically make-counter is first-order, counting the nesting of funtion types. In other words, I don't understand why many describe it as a HOF at all. Map and fold are second order. Callcc, ignoring its Scheme implementation as a macro, would be third order. One could argue that the second order argument to callcc is strategy, with the continuation being the strategy.
It's exactly @ridewithvia
I can't blame you for thinking this way at all. However the reality is that it's not so much a clean subtraction where you lose X amount of time at the end of the tally,but rather a gradual decline where bad habits end up harming the quality of your prime "temporal real estate" even if the actual last gasp comes much later.

That's why to me a Coke is also a poor investment in the present, all things considered. Not to mention that the craving for one is quite situational.
Title should say that Dropbox's security procedure provided inadequate security when confronted with well known user behavior.
Well, if you are a "Internet celebrity hound", Andrew Ng (of Stanford, machine learning online course, and general HN fame ) is Chief Scientist at Baidu now.

Otherwise, I agree that it has an uphill battle with some other entrenched frameworks.
PEP-526: Syntax for Variable and Attribute Annotations