skysight-inc/HackerNews huggingface dataset:
fully secure? aeh.

it's a tradeoff. you spend time, money and productivity loss (i.e. procedures) on IT security to decrease the risk of a successful attack. every additional dollar spent decreases the probability a bit further (if done right) but your returns are diminishing. at some point it's not worth anymore.

> "The TV5 attack fits into this pattern of highly-targeted attacks, rather than the kind of general criminal activity typically seen on the web."

in my opinion: no matter what kind of business you do, if you fall victim to the "kind of general criminal activity typically seen on the web" you're acting negligent.

then, after a certain point of increased protection attacks drastically decrease for most businesses because you're not worth the time and money it costs to attack you.

but fully secure? i mean, the stuxnet attack is the best counter example.

i compare it to healthy living: by investing time and money and refraining from doing certain pleasurable things you're improving your health and increase the chance to reach an old age. but it's no guarantee - you can still get hit by a car or succumb to cancer at age 20 just due to bad luck.
> I think Google is finally recognizing this, and attempting to replicate it with the Pixel.

They are still not there with Pixel. As long as they don't have their own SoC, there won't be proper long time support for their phones.
Yes. Running a setup with many production grade (ie people making their living off of those) WordPress installations on latest php7 and latest mariadb on it.

Using Poudriere so everything uses the latest packages there.

Poudriere is a charm to use so you really wanna do that.
I've a really weird issue where I want to delete my old yahoo account but the recovery email address has type in it, i.e. it is _____@gmail.clm l instead of o. So, I cannot reset my yahoo password. Is there any way to contact yahoo to fix that typo?
BuzzFeed does investigative journalism now.

https://www.buzzfeed.com/heidiblake/the-tennis-racket
That is not true of any other food products. If General Mills has a bad batch of cereal they notify the public by, at the very least, issuing recall notices to all the stores that sold the tainted products. Those notices are on display every time you walk in to a store. For retailers like Costco, where the store knows exactly who bought what and has their contact information, you do get contacted directly when there is a recall or other issue with contaminated food.
My wife finished medical school a bit over 4 years ago. While she thought medical school was brutal, it was comparatively easy compared to the challenges she faced in residency (she did her prelim at UCLA-Harbor and is now at Boston Children's hospital doing pediatric neurology). 80+ hour work weeks are the norm, and sometimes she works 14 days straight and has a pager that beeps throughout the night that she must respond to before going in again in the morning.

After one does complete residency, it does seem to get a lot easier based on observing some of her friends that didn't do fellowships, especially if the person takes a more clinical job. But after all of that effort, a lot of people become attending physicians where they are putting in just as many hours, if not more, because it is more prestigious. Those are the people that run the teaching hospitals, so it feels like there is a lot of "I survived and it made me a better physician, you can too" mentality.
I've been using Mail-In-A-Box for self-hosted email for about a year and a half, and it's been very low maintenance and fairly easy to setup.

It did take some time at the beginning to get all of the DNS stuff right, but that's a one-time cost. And, so far, I haven't noticed any spam binning once I finally got the DKIM & SPF stuff correct.

I guess part of it could be that since I'm using a lesser known ISP my IP hasn't been blacklisted as part of a large block.

If you still have an interest in self-hosting email, I highly recommend Mail-In-A-Box (https://mailinabox.email/).
Major Investor Sues Theranos
The banner only shows for a week after you set it up.
The root problem in this controversy, in my opinion, is that iOS offers no other way to install third party applications outside the appstore for the general public. If a blackmailing attacker hits your app with fraudulent reviews on purpose you have nowhere to go with your app. If you could at least host the .ipa for installation on your own web page, such tactics wouldn't necessarily turn into a death sentence, just a loss of access to an effective sales channel (the app store)
Glad that you liked it! Also, found and fixed the bug causing problems with repeat searches.
this is a new attack vector that will definitely start getting used against competitors.
Can you please explain how exactly this going to work without Google Apps? Am I missing something?
The difference is General Mills is an established brand that sells conventional products that we know and trust. If you get a bad batch of Cocoa Puffs, you won't think twice about eating Cheerios or Lucky Charms. You'll stop eating it for a while, hear about a recall on the news, and then one day you'll put it in your cart because you remember how good it tastes. There's more comfort in knowing it's produced in mass quantity.

Soylent is not a conventional product. It's trying to tap into a new market and approaching these issues as if they've already a mainstay. When there's mold in both their powder and their bottles, now I'm checking my bars for mold too. When they sell a product they claim has 100% nutritional value, yet they don't test such a claim - I'm now wondering if the rest of my supply is also lacking.

I've enthusiastically enjoyed Soylent. Their Coffeist is my go-to breakfast and I will continue to finish my remaining supply of bars and bottles. But I won't spend another time until Rosa Labs can be trusted to back up their claims and correct these frequent manufacturing mishaps.
Platforms that dont support side loading need to be held to a higher standard than those that dont.
Chanel 2017 “Data Center” collection
Huh, when I interned at Facebook in the new, open floor building, not only was noise not a problem, I could always walk to one of the many mini-lounge/libraries for absolute silence when I needed to. Plus, headphones and ear plugs are always offered, if I recall.
I'd like to think we can keep personal attacks like this off of HN without some sort of substantiation.
While Apple understandably may be very reluctant to disclose review validation / fraud detection methods, they could certainly show some trusted media figure -- Marco, some other popular ios developer, maybe even Gruber -- some detailed bit of proof and put this controversy to rest. If, indeed, they have any proof.
PUTIN is behind environmental movement to stop fracking? Huh.

Now that it's a one party race, can't she just be friends? Putin's chest chair is warm and snug, and has enough residual blood for Clinton to suckle on for the next term, I'm sure.

Kumbaya, my Lord, Kumbaya blows brains out
Neat project. I'll stick with my Unicomp for now, though. As much fun as it would be to build this, and to say that I'm typing on a keyboard I built, even the MX switches don't feel quite as satisfying as the click of a Model M, and I'm not making buckling-spring switches myself: sure, it might not be too hard, but even if it isn't, you have to make a ton, and then you have to make the keycaps.

Queue keyboard hackers arguing over whether buckling-spring is really better than MX.
> Reaching with the opposite hand naturally turns your head far enough that you're looking at your blind spot - or at least 80% of the head turn required.

Only if you have so little shoulder mobility that you're unable to move your arm across your body while retaining your upper body position. I can reach across my body to open the door with no upper body movement. If I reach casually and let my body move loosely, I maybe move 10 or 15 degrees.

You might be thinking, "Oh, you're just saying that because it's a motion you're not used to and as a result you're overthinking it and holding yourself unnaturally still." But it's not an uncommon or unnatural motion for me. I already do this literally every time I open the car door. I always open the door with my right (far) hand because I don't have a left hand. And I don't automatically turn 90 degrees when I open the door, or 80 degrees, or even 45 degrees.

I'm not opposed to some "mnemonics" like this. I am opposed to treating them like they fix the core issues. It's really appealing to pick some tiny factor like this and say "here's the thing we're missing", but the thing we're missing is the careful culture that the Dutch have around driving. Opening the door with your right hand won't end dooring in the US any more than drinking red wine like the French will cure heart disease. We diminish the conversation when we push easy changes as silver bullets.

> Time and time again on Hacker News, intelligent people can't seem to understand that the average citizen is not a Hacker News visitor.

This is out of place and pointless.

> You can try to rationalize that every driver must be capable of being consciously aware of what they are doing every single time they open their car door. You can believe that this behaviour should be testable and that we should revoke licenses from the 20-70% of drivers who would fail such a test.

I definitely didn't say anything remotely like that.
Are you sure WaPo is funding them at all, not just hosting? It says here (https://www.washingtonpost.com/news/volokh-conspiracy/about/...) they are mostly law professors who write for themselves and retain their own editorial control. It used to be an independently hosted blog for a very long time too. That's why I said I think they did it on their own (nothing wrong with that sort of thing).
There is about 94 kSLOC of C code in Fossil at the moment, not counting SQLite itself, according to SLOCCount. SQLite more than doubles that line count.

By that measure alone, about half of Fossil is "SQL", in the sense that more than half of the code merely manages the various DBs.

(A Fossil workspace consists of three SQLite DBs: the actual repo DB plus two machine-specific DBs, one local to the project and one global to the user login.)

There is a whole lot of embedded SQL among that C code. Simply counting the number of lines containing the 5 most common SQL statements:

SELECT: 2069
INSERT: 583
DELETE: 492
UPDATE: 410
REPLACE: 122

That doesn't mean the total number of embedded SQL statements is the total of those 5 numbers, as some of that will be compound statements using two or more of the above keywords. Fossil uses some of the most complex SQL I've ever seen outside of http://thedailywtf.com/

So, while Fossil does rely very heavily on SQL, I wouldn't say it is "written in SQL." It merely delegates as much as is sensible to SQL, in the same way that a fair bit of the Fossil web user interface uses Javascript rather than call back to the Fossil binary on the server via POST and such to fetch an updated page.
Now You Can Torrent (and Explore) the Galaxy… in Your Browser
Is this like an advertisement? If not you should definitely looking into a possible side career writing advertising copy for developers.
This is the important part, I think:

"But one part of medical school culture has been especially hard to overcome: the stigma of mental illness. When they need help most, medical students in anguish rarely reach out. Students attribute this reluctance to seek care to fear of stigmatization by peers and to concerns over professional ramifications, particularly during applications for residency and licensing."
Discussions on this kind of thing probably largely settle into opposing "yay Soylent!" and "boo Soylent!" sides. When I look at this as a tidbit of news, however, it doesn't seem to say very much to me.

"Small percentage of consumers report dissatisfaction with product - company investigating."
Well, I know that now, but it still sounds weird to my ears. I still associate Buzzfeed with annoying memes, cat pictures, and Ze Frank being less funny than he used to be.
I think it'd be cool to have sound proof all encompassing glass /plexiglass cubicles with the glass doubling as a screen for communications so you can let in communications with select people, or even use it as a large monitor, etc... but still ahve the peace/quiet needed to code..alternative to that would be noise cancelling headphones and no monitors --instead you where VR that lets you use/resize move monitors anywhere in visible space... But still ahve an open office when you take off the headset/headphones.
it's the chipotleization of soylent. they should send everyone a coupon for a free soylent burrito.
>If you spend 20 years setting yourself to make $10MM one year and you still can't make ends meet then you are clearly incompetent.

I don't see how you could make a statement like that. It costs money to live, and it costs money to keep a business venture going. After 20 years you may own $20m. It doesn't necessarily mean you're incompetent. It may just mean things didn't go the way you planned.

>I don't understand what your point is with this whole argument. Yes, there are always exceptions. They aren't very interesting but the very nature of being exceptions, especially since tax laws are written for the general case.

My point is you don't know enough about someone's situation to make a blanket "they can afford it" or "they can't afford it" statement, and that statement underpins the entire argument for forcing people with higher incomes to pay more taxes.

>The number of multi millionaires in your exceptional case is also much smaller than you probably think.

Or it's much larger than you probably think. Nobody knows. Why are you assuming you know?

> It's vanishingly difficult to earn no money when you have millions in assets.

Actually, with current interest rates it's pretty easy. I know people with millions in assets who put their money in safe investments, because there's no reason to take risks when you have millions and you're in your 70s. Right now the interest on safe investments is a rounding error.
Thanks for the analysis.
Certainty in London at any busy junction you can see fixies blasting trough red lights at +25/30 MPH with no regard for pedestrins
Dash: Apple Says 1,000 Fraudulent Reviews Were Detected
Would be interested to see if any of these lawyers have connections to Reputation Defender[1] or any of the similar companies in this space?

1 - https://www.reputationdefender.com/
If I had, Nasdaq would crash. And Facebook will do a lot before it happens. But is a economic natural Law: what doesn't grow, shrink. Facebook reached its limits, and it was delayed a lot by Instagram and whatsapp.
Wow that's an unfortunate conclusion.

"Render therefore unto Caesar the things which are Caesar's" and whatnot though eh.
As far as the cost being $50 in time. You haven't answered the question as to why AI is the answer.
Remotely apropos, and slightly interesting: https://foreignpolicy.com/2016/09/30/philippine-president-im...
In the UK, the phrase "pot plant" means "plant in a pot"; no cannabis implied unless the context specifically demands it.
Tesla to Double Size of Fremont Factory
D'oh, you're right! I looked at a non message command to refresh my memory.
Yeah, American here, I can't fathom opening my door when parked along the street without watching my side mirror as I do so.

Sure, there's "enough room" on most streets to not have my door ripped off, but it seems a little silly to trust it so fully. That's sorta like saying you should just pin the throttle when the light turns green, as the other cars have a red light anyway, so it's unlikely that you will collide with anyone.
This is the first article on this news, so I couldn't find a non-paywalled source. For those who don't subscribe to WSJ, the tl;dr is as follows:

• SF-based hedge fund, Partner Fund Management LP, is suing "Theranos and its founder", alleging they lied to attract nearly $100M in funding.

• Sources are an internal "fund document" and "people familiar with the matter."

• The fund document was reviewed by WSJ and states:

"Through a series of lies, material misstatements, and omissions, the defendants engaged in securities fraud and other violations by fraudulently inducing PFM to invest and maintain its investment in the company"

• Suit was filed in Delaware Court of Chancery this afternoon.

• A Theranos spokesperson responded:

"The suit is without merit and Theranos will fight it vigorously. The company is very appreciative of its strong investor base that understands and continues to support the company¹s mission."

The rest of the article is catch-up background on Theranos' controversy.
In the US, medications are controlled through doctors.

In most of Latin America (the countries I've been to), the pharmacists were the first source of triage.

"Pooping too much? Here, take this pill. Oh wait, there's blood in there? You should probably go see somebody more informed."
Costco sends me an email and a phone call every time they sell me tainted frozen veggies.
Are you okay with working at a company using Google Apps for Work/GSuite?
How much longer until programming is the same way, now that we're pushing it to every kid and idolizing tech billionaires?
Or to put it a bit more shortly, extreme data collection is a trojan horse, for a brave new world where individual taste, free will, and unpredictability are nearly completely quantified.
Docker (and similar), because I think simplifying server admin will be the end of the cloud hype.
This may sound stupid, and I am not by any means saying this is what happened here, but would it be possible for someone to maliciously buy fake reviews for a competitor app? What would happen in this scenario?
Long term disability insurance specifically is very expensive on the individual level but very cheap on the group level.
> San Francisco is a sanctuary city for counterculture.

As long as your type of counterculture doesn't involve the perceived potential of underperforming. Then you're out. Because meritocracy and stuff.

Mental illness is almost always perceived as "Oh shit, this person isn't gonna be a top performer"
WebRTC has no built in peer discovery to bootstrap the startup. At minimum a signaling server is will be needed for exchanging descriptions. You may also need to exchange ICE candidate information. So while this isn't serverless, it could be really great for reducing bandwidth costs until you consider that this design does not play well with mobile devices which have usage caps.
...But can't you do that already with CIDR? (or SLIME/Geiser, for some of the other lisps).

IIRC, it does support connecting to a remote REPL like this.
Promoting Religion has clear upsides and most humans for most of human history have not had their thoughts recorded. Further, religious people kept a lot of our history's. So we have no idea how common actual belief was.

I suspect in 10,000 years looking though limited and relatively random records Santa could be considered a widely warshiped god even if effectively zero adults believe in him today. Private journals are solid evidence, writing on temple walls is not. A coworkers Rabbi growing up was an atheist.

If we are going by popularity either Atheism or Agnostic beliefs are probably the single most common specific beliefs. Religions come and go, shifting through time so a modern Mormon has little in common with a 5th century Christian sects.
While I don't know how their rating system or detection works, I imagine it would be harder than just posting spammy positive reviews. They would have to have solid evidence that you're doing it to your own app, or paying someone to do it on your behalf.
Yeah. Well, I was thinking CIDER/SLIME/Geiser (they all provide similar services for their environments), but same idea.
I agree immensely as a remote contractor, my wife gets good benefits but if she lost her job it'd be a struggle. I think it'd make more sense, if we can't get a single-payer all paid insurance plan going, why can't the government have a democratized benefit pool where you'd pay employee prices for the same benefits as a freelancer? It would just make more sense to me.. Or at least some sort of freelance union that negotiates fair rates for things like medical/dental/vision/401k and has group purchase power.
When GM does a product recall (which is pretty damn rare considering how many products they ship) everyone knows about it and it's all over the news for days. They even take out ads in newspapers to let people know which batches are contaminated.

The only reason they DON'T send you a letter is because 99% of the time people purchased the goods in a store and no contact details of consumers are available.
The CTO Show Episode 6: Patrick McKenzie
I came here to ask the same question. What's the point of a higher resolution? 326ppi is already good enough that I don't see individual pixels, so it's hard to imagine why I would want something denser. And speaking as a developer, I'm really glad Apple has stuck with their 2x and 3x scales. I really don't want to have to add 4x versions of all my images too.
Where does Apple respond? Or is this blog maintained by Apple?
Good article, but part of the problem is that software developers, due to their social class and mental make-up, tend to not have the sort of immediate experience and understanding needed to take on real-world problems like homelessness and the health care system. They would have to work hard to get out of their epistemological bubbles. Of course, some of them do that, but it seems to be rather unusual.
medical school is humbling and difficult. Being a physician is difficult. I finished medical school in 1996 - didn't find it ridiculously hard, but then again, studying a lot was what I did in my youth. Now, I'm 47 years old, and work about 90 hours a week as a surgeon - I laugh when people say that we make too much. All I know is that 25 years ago, you had to be in the top 10% of your class to become a surgeon. When I applied, it was top 20%. Now, it's basically if you graduate from medical school and want to be a surgeon, you can become one. General surgeons put in long hours for not that much glory - today I waited 2 hrs to drain an abscess that took me 10 minutes, so I got home at 6:30 pm.

The upside is that when I do a great job, it really is rewarding. The downside is telling families and patients I do not have much to offer, and their disease is too far gone. Anyway, don't go into medical school / surgery if you don't want to work hard. No one has a gun to your head. Physicians that pick the right profession for their personality / skill set are very happy.

PS my undergraduate degree was computer science
RethinkDB must relicense NOW
I would recommend responding to Apple when they attempt to contact you. It appears that this developer did not do that.
Lol. The moment you add a picture, it's tied together.
Yes, but apparently you'll have to wait two years for Apple to do anything
I get the feeling the bigger problem for Apple is the number of developers who really don't believe them.
No. There is no evidence for this.

You're assuming that Apple has no process to distinguish between intentional fraudulent reviews coming from the developer in question, and random fraudulent reviews from others. But that assumption is not supported by any facts.
Translation: he likes Apple products and is open about it, whereas I don't.
This is still geli+zfs, and not native zfs encryption that was recently presented in OpenZFS Developer Summit [0].

[0] https://www.youtube.com/watch?v=frnLiXclAMo
I'm not familiar with this site, so this might be ignorant, but it seems strange. Bad copy on a wordpress site. At first is looks pretty official, but none of the "according to Apple" or "Apparently" quotes are cited or linked. Did Apple release a statement or press release about this? At the end it just says "it seems to me...". Who is this guy? Do we have a better source for this news?