skysight-inc/HackerNews huggingface dataset:
It adds a suid binary to /Library/DropboxHelperTools. This binary executes as root's effective user ID no matter who executes it and adds Dropbox to the accessibility list.

Dropbox doesn't save your password.

...But I am wondering why one of these suid binaries is world-writable.
> Latin America, for example, "race" isn't as pointed (see the notion of a Mexican race)

The notion of the Mexican race (more accurately, the Mexican-originated concept of a distinct Ibero-American race which had ancestry in all of but was distinct from the other races) was a 20th Century deliberate propaganda construct of the Mexican Revolution, specifically intended to (and not entirely successful at doing so, though it certainly had some effect) address the fact that race was historically an enormous dividing force in the country -- which had the same kind (with different details) of official complex categories of pure and mixed races and social hierarchies between them as many other heavily-race-divided societies.

So, it kind of illustrates the opposite of your point.

And, in practice, while the detailed hierarchy and rules of mixture no longer exists, and efforts to create a unifying identity have nibbled away at the edges, the high level social hierarchy between European, indigenous, and African races is still very much a thing (and not just a matter of "skin color", though, as most places, that's obviously one of the most visible and powerful indicators of race.)
A bit misleading of a title since they are estimating how many will violate the rules. 50 characters seems like a really long name but good to know "Very best app you could possibly download ever" wouldn't break that rule.
Freudian slip there.
My question is, is there an actual conflict of interest between the two? (In this specific case)

I would think that getting denounced by the public would also be bad for said bottom line.

Wouldn't it be in Facebooks best interest to cater to the public as much as possible?
We updated the title from “Majority of calls for income redistribution are motivated by self-interest”, which was editorialized.
I don't think you can gauge that kind of thing very accurately by how people "look". Having occasionally meet a few people that would fall into the "1%" category myself, I can safely say that none of them "looked" like they were in their income bracket. Things people flaunt are more often a reflection of their spending habits rather than their earnings.
Why wouldn't they use USB-C on all their new Macs? They were the first major PC vendor to ship the original USB port, by about 5 years. Now they can consolidate Thunderbolt and USB.

http://www.cnet.com/news/thunderbolt-3-and-usb-type-c-join-f...

You want them to switch mobile again? You couldn't convince people that the massive 30 pin adapter was worth replacing.

http://www.macworld.com/article/2012137/hands-on-with-apples...

I believe Apple will stick with lightning until they go completely wireless. Within 5 years?
It's impossible to draw the line between "mere" and inappropriate nudity, a line that will satisfy all people. This is simply an instance of Facebook making a choice that is just a bit out of balance compared to what the majority thinks, but make no mistake, it's just as much of an arbitrary choice as all others.
In some places in Costa Rica the electricity can be sporadic, when it goes out people use petrol powered generators.
Can you think of any other single medium that’s so universal?
Re HAProxy, take a look at Traefik. It's a thin, full-featured load balancer that supports Kubernetes out of the box.

https://traefik.io/

Another option is running Nginx via the Nginx Ingress Controller, which is also great.
I have second-order Facebook contacts who are overt environmentalists. Some of them are self-consistent enough to actually admit that they think human population level is the root of all these problems. That is in itself probably true, but I can't quite be hypocritical enough to attack a phenomenon that supports my very existence.

To that:

"There are too many people."
"You first."

But they don't have good operating knowledge of population dynamics and current birth rates. It's rather that they bought prior exponential analyses of exponential human population growth and never fully discarded it. They also appear to know that fossil fuels are a part of this phenomenon.

So there are Druids who walk amongst us.
Glad to see someone point this out. "There are three kinds of lies: lies, damned lies, and statistics."
Glad to see this resolution. There was no need to include it in Django by default, but having it under the official Django umbrella is excellent.
Explaining the ‘Chapo Trap House’ Podcast to the Uninitiated
What exactly is wrong with it? They use the same numbers as the BLS, they just don't remove BLS's own figures for discouraged workers etc.

It's ridiculous to say that because someone has been so unsuccessful in finding a job and gave up searching over a certain period that they shouldn't be counted in the most commonly accepted unemployment figures.

To say that "unemployment has become less of a problem" is an outright lie and yet that's the phrase we constantly hear due to "convenient" sampling for U3/U6.

According to U3 and U6, we could have 99% of Americans out of work and totally given up trying to find work, but still only have 5% unemployment.
I have a decent income (s.t. it would be measurably reduced in an income redistribution situation) and I want it for self-interest reasons as well. I would be taxed more, sure, but I wouldn't have to worry about someone robbing me because they are starving. If we could improve the stability of society by giving the less fortunate a little off the top, that is really in line with my interests.
Perhaps, but I've also bought olive oil with a whole black truffle in it.
HN's favorite soap opera continues.
Most programs don't consider that you might try to explicitly revoke permissions. It's a very understandable bug/behavior. I think it's worth giving them a chance to amend that code.
> The post mentioned that they are using the cloud version (that is, hosted by Atlassian themselves)

The post also mentions that they had it installed. I'm not sure which line to believe more...

> So, have Atlassian configured their own software badly?

It.. sounds like they do?

We have thousands of issues across over a dozen projects, and 50+ users (probably 20 or so concurrent at peak usage.)

The only lag I've ever seen is a few seconds to do a complex JQL search. Otherwise it's milliseconds between pages.
Even if it's executed in the brain of a human content screener, it's still an algorithm- if you want it to be consistent, it has to be documented and clearly communicated to the screeners.
And risk going overdrawn each week, with all the added costs and fees that brings, if you happen to get your estimated spending slightly wrong.
I think I understand your point. Not to be argumentative, but the slave trade was a global enterprise. Beyond that, US support of European colonial rule, US support for apartheid South Africa, the war in Vietnam, there are many examples. These all had their racist overtones, if not outright racist justifications. I don't believe such a hegemonic culture/country has managed to keep its racist elements contained within its borders.
Regarding emissions, it's a tradeoff: increased engine temperature increases NOx emissions, but also increases fuel economy, decreasing carbon emissions. I was unable to quickly find a consensus on which type of emission is worse or how to weigh one versus another.

Regarding regulatory compliance, defeat devices are clearly unacceptable; if the regulated requirements are considered inappropriate for whatever reason, they should be challenged through political or legal process, not by detecting test conditions and altering behavior.
Were soldiers on trial in Nuremberg? Seems to me everyone was at least a "middle manager". The comparison is hyperbolic and I don't see the similarity here. VW is German? Is that what we're working on?
> although LLC formation might cost $800 in California

That sounded really high, so I looked it up here:

http://www.sos.ca.gov/business-programs/business-entities/fo...

It looks like CA is $70, unless I'm missing something. I've never started an LLC in CA though. (EDIT: keep reading down the thread for more clarification.)

(But: there's another thread here that says IL is $500, which does appear to be correct.)
I think "species-ism" is both honorable and necessary. I think the opposite is misanthropy and that it's hard to be moderately misanthropic, so one extreme or the other will win out.
At this point, the banks are kind of the usgov. Their interests are cojoined while not aligned with yours.
"In theory, theory and practice are the same. In practice..."
> You don't agree, then don't post on Facebook and go run your own website / printed paper.

Except that Facebook essentially has a monopoly on information. Is there any other platform that’s so omnipresent and frequently used?
I use owncloud (and then dropbox inside it so some files are double backed up). I find it to be just fine. Have you had any problems with it?
> Working on Atlas at Stripe has that potential for impact and you get to work with awesome founders

Same with countless other jobs, such as working at Facebook, Google, Amazon, Snapchat, etc
Best Data Entry Jobs Online
Do you really think VW salespeople should go to jail for this? Should salespeople do their own emissions testing? Should they all buy multiple versions of the same car and crash it to see if it's really safe? How does that system work? VW has a clear set of emissions rules to follow because they build the cars, why should the salespeople be on the hook? This isn't Tesla, VW salespeople don't even work for VW.
Ask HN: What makes a good startup CEO?
Mike Maples said, "when I see an extraordinary technologist paired up with a mediocre CEO. That situation just kills me," in response to, "What advice do VCs want to give founders during pitches but refrain from?"[0]

When a company is young, I often see the technologists hard at work and the 'business people' sitting around. Seemingly, there is little for a non-tech staff to do... In particular, the CEO, since he's not doing the tech, what metrics are used to evaluate? What makes a good one? What makes a mediocre one?

[0] https://www.quora.com/What-advice-do-VCs-want-to-give-founders-during-pitches-but-refrain-from-1/answer/Mike-Maples
In the UK, a majority of bars and corner shops will have a 50p charge for card use below a certain threshold or even refuse to take payment.
It's not really rocket science you know, to install elasticsearch/redis/cassandra/0MQ/puppet etc and scale it to hundreds of servers. You do not need to build your infrastructure from ground up, just go with dedicated servers or with colocation if you want your own hardware and you will save tons of money comparing to AWS.
Watch our video
All moral worldviews have defects. life isn't a ... geometry problem.
I stand corrected. Just checked the UK T&Cs:

Please note that the Right to Cancel applies to Home customers only.

You return goods by using the Right to Cancel so while not explicitly mentioned it seems to be the same as in the US.
>I just wish people would realize that corporations aren't our friends, they're here to make a profit.

I wish people would stop saying that corporations are some disparate entity, rather than a collection of people with a defined purpose, like our friends and family members. People just like you in other words.

Corporations don't have a mind of their own, nor do they pursue profit regardless of ethics.
I hear what you're saying and it represents an ideal. But there are circumstances where information really has to be removed. Perhaps because the user is no longer present and it was collected under circumstances that had more liberal validation. Or because you're handing information across a boundary of implementation ownership and can't trust the receiver to handle potentially dangerous information correctly. I agree that sanitization (in the sense of stripping bits out of a user data payload according to some security rules) shouldn't be the first tool in the toolbox, but I would really hesitate to say it's always the wrong thing to do.

Edit: here's a good example. I don't know if they still do this, but when I worked at Yahoo!, they used a modified version of PHP that applied a comprehensive sanitization process to all user inputs. As a frontend coder at Y!, all the information you pulled from request parameters, headers, etc, ran through this validation at the PHP level before your app code got to it. You can then literally splat this information into an html page raw, without any further treatment, and not expose the Y! property you work for to an XSS or other injection vectors. There were ways to obtain the raw input using explicit accessors when needed, and these workarounds were detectable by code monitoring tools and had to be reviewed and approved by security team(s). Overall this worked really quite well, in my opinion. Y! could hire junior frontend devs without deep knowledge of data encoding, security issues, etc etc and rest easy. I think the principle of safe-by-default, even if it means destruction of user input in some cases via aggressive sanitization, is a good principle to apply to a frontend framework.
Industrial consumes 1/3 of US electricity. This is about the same amount as residential use. This isn't about your fridge.
Many would call my answer ("not sure") to the original question monstrous. It's all very subjective. That was my initial point. We all draw the line differently. And no one can claim to be right.
Authy, painless 2FA.
Petsets can be used in 1.3, but there are some outstanding bugs that still need to be squashed. I believe it will reach beta status in 1.4. Beta features are usually pretty production-ready (deployments, for example, are flagged as beta in 1.3, and have been rock solid for me).
Relative to what, the start address? Does rust determine the start address from the return value of `mmap`?
I applied when it was first announced and got an invitation a few months later. I still haven't used it yet but I do intent do (hopefully they don't expire, eek).
I don't think he's innocent, but I think there were others much higher-up than he was that were aware of this and actively contributed in the fraud.

Also, didn't VW do this in Europe, too? Are we to believe this guy in the U.S. is responsible for the emissions cheating in Europe, too? At the very least top EU execs would've been aware of it, even if he was the creator and the evangelist for the device.

As far as the U.S. federal government goes, I doubt we'll see anyone else charged. They've already settled with VW, and this guy taking the fall was likely part of the settlement. We may still see some states continue their cases against VW, but I wouldn't be surprised if the DoJ pressures them to drop their cases.
It takes some doing to be comfortable with null things, whether it's pointers in 'C' or ideologies.
If you're up for a self-hosted option, Seafile is great. The server and the client are both pretty lightweight. You should create and store encrypted volumes yourself and not trust its encryption mechanism, but it handles delta sync very well, which means it's only sending the pieces that change (and e.g. a Veracrypt/Truecrypt volume doesn't change a lot when adding/removing data from a volume, so you won't sync a lot for example with OwnCloud, which also has the nasty habit of eating your files).
I had to take a class, Principles of Software Engineering, that was a sort of hands-on class. We went over different methodoligies like waterfall vs agile, scrum, the use of kanban boards, design documents, and the use of version control. The version control lession was basically an assignment saying "do the Udacity git course". Alongside this, we had a group project where we had to, well, develop something.
CO2 is regulated, and so is NOx.

Buses and trucks are also regulated and have to adhere to emissions standards, and get tested regularly; at least, in the US, they are regulated more heavily than autos (or, at least have more paperwork and legal obligations involved in driving them, and have a higher tax burden).

People riding a bus are, in aggregate, producing much less waste than if they were all driving automobiles...so, it's OK that a bus produces quite a bit more waste than a single automobile. And, I might even argue we aren't going far enough to incentivize people to take mass transit rather than driving themselves.

The cargo industry is responsible for a tremendous amount of emissions; freight ships account for millions of cars worth of emissions, in fact. That's definitely an area for improvement on a worldwide level. I'm in no way saying there aren't other sources of emissions, or that regulating auto emissions effectively will solve the problem. Merely that ignoring emissions from cars will exacerbate what is already the single biggest problem humanity faces going forward.
> I wish people would stop saying that corporations as some disparate entity, rather than a collection of people

The whole point of a corporation is to be a separate entity from the collection of people that have interests in it.
It has political connotations in those specific contexts (and "Murica" is ironic critique of those political connotations).

Now:

https://en.wikipedia.org/wiki/American_exceptionalism

You're essentially arguing that it's a bad thing that this outdated nationalistic concept is not widely attributed to non-US states in the Americas.
I think he's been around the block enough and has sufficient resources not to make a bad decision. Either way, who is anyone to judge?
Again, who said anyone is getting anything for free?

My company has 100+ engineers, all of whom do a on-call rotation, they are all aware of it when the sign up, so that on-call duty is included in their salary. The employee can evaluate for themselves whether or not they think the salary is sufficient to cover that, but as far as I know, we've never had a candidate turn down an offer due to the on-call requirement (though I don't know that they'd always tell us that's why)

But really, does any engineer join a small company (in the USA) without assuming that they'll be on-call after hours? Even in early stage companies that haven't launched a product yet, there's still after-hours support to be done to keep dev systems running, fixing broken builds, etc.
Seafile does, too. OwnCloud definitely does not. Actually OwnCloud's Github issue for delta sync is a great read, if you're up for some humor.
From skimming on Wikipediea, there are exceptions: you can be tried for the same crime as a federal crime and a state crime if it is criminal in both jurisdictions (although not as a federal crime and a Puerto Rico crime). You can also be tried for a crime multiple times if earlier trials were declared a mistrial (some exceptions apply).
We only guess that were conscious. Since we don't know what consciousness is... well, we know it when we see it.
Sorry missed your question about the stack. It's Django/jquery/postgres
Making Mistakes with Tacos: Product Pricing Fail
If that's the case, How is it that the accessibility preferences are changed without root authorization?
Oh wow, that surprises me. Does that mean pinboard isn't a Delaware C-Corp like everything seems to be? I suppose it makes sense since everything about it screams "the anti-startup", but I'd be curious to know what the real ramifications of going about it that way are.
I think for businesses like "running a website" this threat is overrated, to the point of absurdity, but again: willing to accept that I'm the weirdo.
Detroit will rise again in the next decade. They have pretty enticing offers for software engineers to move in. Right now you can get a stellar house for around ~150k which I am sure will triple in value in 20 years. Trying to convince my wife to move there from warmer climate, however... If anyone wants to help me there I am all ears, haha.
Back in the bubble days, all but a relatively few would-be founders found themselves crawling out of a hole and into the dark, as it were, in trying to figure out how to get from ground zero to a point of success: it was all super-bewildering and there were virtually no resources to help understand how it all worked: no helpful web-based forums to explain process or to share experiences, no solid resources for helping understand how best to launch, no easy access to funding, etc., etc.

Today, it is all different. We are all hyper-connected and the old barriers are much diminished. This means a founder in Silicon Valley, where the infrastructure is solid, can continue to do incredible things but, now, so too can founders everywhere. Yes, it can help to be geographically at the heart of it all but it is no longer an indispensable part of startup success.

I think Stripe's Atlas takes a huge additional step in helping to remove the accident of a founder's location from the list of barriers to entry in the world's startup club. I have explained my views in more detail here: https://news.ycombinator.com/item?id=11166417#11168750

And what a felicitous teaming between Patrick and Stripe to help further that goal. Great people all round, working to achieve great goals! I cannot imagine a better combination. Very exciting and congrats to all.
Good job, too - the insects, bacteria and fungi own the planet and we just live here.

It's still them or us, now and again, really.
Is Stripe different than PayPal besides maybe having a better API? Is Stripe a subset of PayPal?
>I think the better solution to the problem as it stands is to force people to start hosting their own content

Does this mean people need to start moderating their own content, also? I don't want to have to decide on rules of what to keep/delete, and I don't want to just let anything go, either. If I wanted to manage my own site, I'd build one -- I almost always just want to use a service that someone else maintains for me, including determining what content to show/hide. If I wanted to manage all that stuff myself, I'd just build my own Facebook.
"15 Essential Packages", but you shouldn't use more than 9 of these at a time.

"Essential" was probably not the best word to use.
It might be, but I try to read comments like this one a little more charitably.

People tend to see things through the lens of their own thoughts and experiences. The author of the post in question is probably just trying to provide advice based on how they'd feel in a similar situation. The wording probably made it seem more abrasive than it was intended to be.
What do you mean by "implementing Direct3D"? Vulkan and OpenGL expose very similar programming models at roughly the same abstraction level.

If your question is "why use D3D [or insert other proprietary API] over platform-agnostic APIs", the reasons are many and varied. Better tooling, more mature drivers, more familiarity among team members, better support from the OS vendor, etc. That's not to say it's always the right decision, but I would never expect the quality of Vulkan or GL on Windows to be as high as D3D.
I listen to brain.fm [0] I got a promo $25 for lifetime membership. It really works for me... or at least great placebo effect for me.

[0] https://www.brain.fm/app
> just not add bloat to HTML pages

This isn't really a solution when many authors use a CMS, like WordPress and others, where the bloat is built-in. Sure you can write a custom theme etc, but not everyone (1) has the ability to do that, and (2) wants to dedicate the time to do that.
The $800 usually mentioned is actually the yearly minimum tax for an LLC in CA.

From the LLC-1 form:

"Filing Form LLC-1 will obligate most LLCs to pay an annual minimum $800 tax to the
California Franchise Tax Board. For more information about taxes, go to https://www.ftb.ca.gov."
LOL. lame no brainer bulleted list. Nothing is "foolproof".
Any idea when forming a LLC in Delaware becomes available?
As I noted: real-world conditions demand 100x as much space.