skysight-inc/HackerNews huggingface dataset:
I always said that politics should be left to politicians. Nobody is fooled that by thinly-veiled "philantropic efforts" what is really meant is "using Facebook's huge platform to further some political agenda"

If we are happy having engineers deal in politics, we should never be surprised when politicians deal in engineering.
They could always release the same device in a smaller form factor at some point.
I think that breaking compatibility is good. I play with my 9 yo and I've grown tired of the gimmicks.
I wonder if the hacker really interested in decoding credential or they just want to collect the email addresses which is really valuable for email marketing.
Pointed at the interior?

And if there are, and if Tesla can monitor them, that's a whole nother set of problems...
When I was 22 free food at work sounded amazing. Now? I eat once a day and I want that meal to be with my family. My priorities have done a total 180.
The article mentions how the same account was used in 2014 to attack journalists outside the U.S. covering the Malaysia Airlines Flight 17 shootdown over Ukraine. This lends credibility to the idea that it was Russian-sponsored actor(s) using this tool/M.O. over time.
It's worth pointing out that X% of people betting an event will happen is not the same thing as an event having X% chance of happening. The former is an estimate of occurrence and the latter is a measure of the occurrence. This is a common conflation with statistics I hear when people talk about predictions.
I've had a WebRTC app tested working under multiple OS's (Windows, Linux, Android) and browsers (Chrome, Firefox, IE, Chrome for Android).

It did take more than a month to get to that point though.
http://thenewstack.io/thirteen-ways-containers-secure-virtua...
I'm seeing Roger Dean (of the Yes album covers) or maybe "Heavy Metal".

Whatever Piaget stage prog rock is, AI has reached it.
I know what everything else is, but what is CFI? An attempt at googling came up with results that didn't make any sense right away.
Why do people think async code is complicated and keep trying to replace it?

I think there are just people who will never understand or fully grok the beauty, power and simplicity of functional programming and will always seek to replace it. I feel sorry for them.
dude, tesla isn't even on the list.... https://en.wikipedia.org/wiki/Autonomous_car#History
As someone who lived in Zurich, which serves >200M streetcar rides yearly: It is, just not for the reasons you think. Streetcar lines are largely built to have their osn reserved space along the roads in a space saving fashion. That means way less sensitivity to traffic situation. That means that, while slow, ETAs are quite reliable. That means you have something you can plan tight schedules with - and at the same time relax while driving. Couple that with efficient and abundant local trains and you have something way more comfortable and efficient than cars.
Even if they break out of qemu, then the best case is they've reached the level of the container or user running it.
The exit ramp I have for Hillary supporters is the death of Vince Foster. Hillary fought an FBI investigation of this but made sure there was on one of Billy Dale who stood in the way of her travel office plans. All I have read on this indicates a cover up that protected Hillary and Bill and the deep state implicated Republicans.
Tesettürlü Anal Escort Jale İstanbul Otellerinde Hizmetinizde
That's a ridiculous claim. Do you have any evidence of that?
I do, but I also don't blame people who don't board planes because of those odds.
I'm guessing they won't be playing the "make it as thin as possible" game that tablet makers are. And it's a two handed device, so weight isn't as much an issue.
Meh. The advantage you will want in the vehicle space is who is the "most mover." Production pipelines will be a huge asset for big players.
Those who aren't cynical, aren't paying attention.
You can't duplicate your SIM, but your phone carrier can. In some countries, this involves them checking your government-issued ID in person, which is handy for Google as a way to outsource the ID-checking requirements.

The issue is that they don't discriminate between carriers that perform good identity checking and those that don't.

(Reliability is actually well-addressed by Google - they offer this as a supplement to the other forms of verification they provide.)
IMO React is popular because it forces people to understand MVC. I've actually never seen a Backbone app where views render based on the model. It's too easy to just ram in jQuery in the render function. A lot of new frameworks just try to reduce Backbone's boilerplate of manual model-view event binding in different ways, dirty watching, virtual DOM, etc...

Even flux is basically organized pub/sub. Instead of shouting out what you're doing, you're logging your actions in a logbook. Also, instead of arbitrary actions, you can only combine certain pre-approved actions. It's a natural extension from using globals (too messy) to shouting out your intent while basically using globals (too noisy, still kinda messy) to what I've described above. (still kinda messy, but can be traced and unit tested easily)

Flux/Redux and whatever still doesn't help you solve problems that truly reduce complexity like how to organize scope or what abstractions to use.

There are tons of good frameworks out there, and it's rather disappointing to me that people don't realize that the basics are the same and insist on everyone jumping on the same bandwagon (that just happens to be supported by a rich large company).
A couple of points:

1. It was 4 in the afternoon here when I posted that - a touch too late for breakfast even if it was a bit early for a drink

2. I quite like words when they are strung together well ;-)

I still would like to hear someone defend that as a piece of marketing copy. I've re-read it and stand by my earlier diatribe.
>While Bob didn’t have multi-factor authentication enabled, he had also heeded Google’s suggestions to add a backup phone number to bolster security.

Ah, there it is. No two factor turned on.
> Even the core under-the-hood Rust std library is a human-vetted set of unsafe code that the compiler simply cannot prove as much about as Safe Rust. Human-vetted things are prone to error, no matter how good the humans doing the vetting are.

At some point, it has to be human vetted. I don't see another way. The key advantage is the ability to build safe abstractions from unsafe components.

Will people abuse unsafe? Absolutely. Is it a lot better than the alternatives? IMO, absolutely. :-)

In my own experience, unsafe is rarely needed. I've only ever used it for ffi and lightly in very performance critical areas of code. The regex library, for example, has almost no unsafe. Its only use is to get rid of bound checks inside the DFA's inner loop.

The most (non-ffi) unsafe I've ever used is in a snappy compression library, where most of it was a means to more efficiently shuffle bytes around without paying for memcpy (using unaligned 8 byte or 16 byte loads/stores).

There is a pretty strong tendency in the Rust community to avoid unsafe. Some libraries advertise themselves as having "no unsafe code" as a selling point precisely for the dangers you've hinted at: humans make mistakes.
Can you say that with a straight face after reading that list? Let's just look at the populations, no names:

11,176
66,455
49,708
50,005
4,724
8,175,133
23,594
2,406
27,395
69,781
6,707
7,137
23,805
20,832
58,114
75,754
34,399
53,926
362
146,199
805,235

Now guess which ones are central cities in their respective MSAs. Excluding those, guess which ones aren't part of the NYC or LA areas. Let's do ourselves a favor and exclude Poplar Hills, Kentucky (362). There's one city left, it's part of the Boston area (which is the next densest large city after SF), and you guessed it, Somerville has a subway with a separate light rail extension under construction. The only outlier is Sunny Isles Beach, FL (20,832), in the Miami area. And Miami? It's just after Philly, all known dense cities.

So yea, it's NYC, then SF, minus a couple pockets of LA. And these are all dense places that need subways. It takes a special sort of something to claim, as the top comment did, that SF is not dense enough to warrant a subway, let alone massive large-scale investment in all modes of mass transit as NYC has.
Mine still gets regular use after more than a decade, at parties anyway.
accounts doesn't mean the same thing as current or active users. a company very likely doesn't delete accounts right away or at all, even if the service has been cancelled. for example, a few years ago microsoft's live ID system had well over a billion accounts. but MAU was only around 450M. and that is with culling / deleting accounts after a year if they were unused.
Uh, it looks like it's supposed to when it's finished.
Disclaimer: I work at Backblaze.

For our Personal Backup product (fixed $5/month for as much data as you can keep on your laptop) your data is encrypted on your laptop BEFORE UPLOADING to Backblaze, and we have no idea what is inside your files and I assure you we don't want to know. (Look into setting your own private encryption key if you are worried at all about this.) In our 10 year history we have never once removed a customer's file because we objected to the file contents in that customer's Personal Backup because we simply don't know what is in the files.

For our other product line (B2 Cloud Storage for half a penny per GByte per month) the problem is you can have a "Private" bucket at which point we absolutely DO NOT care what you store. But if you have a "Public" bucket that is a public website. If you have public bucket serving up illegal content such as a phishing website or sharing bootleg songs or movies that you do not have legal rights to share, then we may shut you down (turn the bucket "Private" so nobody but you can get the data).

TL;DR - use our Personal Backup product or a "Private" bucket and store WHATEVER YOU WANT. But if you break the law serving up a website from Backblaze we have an obligation to shut you down.
No matter how hard the people of San Francisco wish, the transit problems will continue to get worse into the foreseeable future. It's an interesting definition of the word "functioning" we have to assume.
If an extension wants to modify the DOM of a page, then it runs with the DOM of the page.
Intelligent vision systems and AI for the development of autonomous driving
What about benchmarks for the more complicated scenarios they call out as the reason the built it for?
It's relevant because people, perhaps especially devs, are lazy and they'll optimize for minimizing workload instead of security.
Code repo https://github.com/unknown-horizons/unknown-horizons/
I've always wondered why this doesn't come up more in the mac/pc cost debate. The HP I was issued at my last job needed to be replaced three times in the eight months I was there. Current company issued me a MacBook air that I've used 50 hours a week for three years.
Organizations that heavily rely on git?

It might seem trivial to you, but the last thing I want in a CI/CD pipeline is senior engineers that don't understand the underlying technology.

Believe me, I've interviewed lots of people for senior positions that just haven't had to properly learn revision control. It's not a given.
Being pretty antisocial, I tend to go to the self checkout if it's available. Though I've noticed that if there's a problem with something, and the store clerk comes over to help, that leads to far more human interaction than the old fashioned way (explaining the problem vs. "Hi")

> BTW, I'm not a technophobe by any measure. I'm probably more tech savvy than most people here.

At least in my circle of friends, it seems like it's less about being tech savvy/phobic and more introverted/extroverted
The XEdDSA and VXEdDSA Signature Schemes
Ditto here, but not a pilot. I almost always lunge outside when I hear an unusual (usually military) aircraft. A few years ago, a Ford TriMotor was making frequent passes overhead and I got some good photos of it, due to hearing it from afar. I almost always accurately distinguish the mid-range hum of the Sheriff's Bell from the more thumpy Coast Guard helicopters that often pass by. I have seen many neat aircraft as result of my aerial curiosities, including WWII bombers, various fighters, re-fuelers, cargo planes, mil helicopters that made trains seem mute, meteoroids/incoming space debris, and a few celestial anomalies. Yeah, I used to get some strange looks (and comments) when I had my Leica Ultravid, Zeiss Victory, and Orion 15x70 binoculars. Be glad you weren't into astronomy; folks come up with all sorts of big ideas when they see some "creepy" guy staring at the night sky, "undoubtedly" searching for any insignificant gap in the miniblinds of person x,y,z while completely indifferent to the rest of the Universe. If looking up was held in half the esteem of watching telly, it might be a much more interesting world. On another note, maybe Irvine Welsh will do something with the title of this article. Apparently, a sequel to Trainspotting is due next year.
The website url is still http://www.hackme.com though.

These different iterations of myaccount-google.com, support.goog1e.com, etc. are common for many companies - the best thing to do is use 2-step auth.
Where did the money go? Guardian buys its own ad inventory
>You say that like it's supposed to imply it's worse for some reason.

It does because of thermals.
This is amazing! I'm particularly pleased to see how it comes out because I remember wanting to do precisely this (generative model plus porn) back in 2000. I had recently seen Geoff Hinton give a talk, and back then I had half my focus on maths and computers and half on art and design. Of course I never got close to doing anything about it :) Maybe it wouldn't have been possible.
I particularly don't find the problem it solves appealing. The power of Node comes specifically from its everything async programming model, Javascript is just a detail.

So what's the point in taking away the good part, and keep the cumbersome one? If you just want to program a Synchronous server in the JVM,just stick to Java.
My understanding was that downvoting was for comments which do not contribute to the conversation.

I'm both surprised and sad to hear that the downvote button's intended purpose is disagreement. This seems like it would discourage people from posting alternative points of view if their view is the minority.

As much as I tried looking for it on my own, I couldn't find one, so would you mind posting a source as to where the founders stated the purpose of voting?
TLDR: Telcos really are the weakest link, and you should not rely on your mobile phone number for 2FA.

Background: I have worked in IT Security at an Australian bank, and had close ties to the Internet Fraud department to help them understand fraudster's tactics.

Many banks use SMS for 2FA. Australia has a law regarding how long it should take customers to switching telco providers (called 'Porting' because your retain your phone number), and the timeframe in which this must be completed (90% within 3 hours, 99% within 2 business days). If the Telco doesn't complete in this time period, you can raise a complaint to the Telecommunications Industry Ombudsman.

Example: If you are currently with Telco A, to port your number to another company, you call Telco B and provide your details. They take care of the porting process, and you can have your service running on a new phone and SIM within 3 hours.

"All you need to have with you is your mobile number, the name of your old mobile provider, your account type (pre- or post-paid) and your account number. We'll handle the porting process from there. It can take from three hours to three days, but we try to do it as fast as we can."
Source: https://www.cnet.com/au/news/switching-telcos-easier-than-yo..., 2012

To make matters worse, the fraudsters would then change the details at the new Telco B (i.e. my address is now 123 Rainbow Road, and my mother's maiden name is Smith, not Jones). When the victim called Telco B, when Telco A told them a porting request had been completed, they'd say "Sorry, we have no idea who you are and the details you're providing don't match our records". It can take days to sort the whole thing out, by which time, your Internet Banking has been compromised and funds transferred out.

This was a major problem for Australian banks, because they cover the losses for customers if you lose funds as a result of Internet Banking, as long as you weren't negligent (e.g. you left your Internet Banking logged in on a public computer in a library, or something).

If you are relying on your telephone number as a security mechanism, I would change to something else. Something you have, ideally (Google Authenticator, a physical hard token, etc.).

Sources:
ACMA Porting Rules for Telcos: http://www.acma.gov.au/Industry/Telco/Numbering/Portability/...
Example A: http://lifestrategies.net.au/wp-content/uploads/2015/03/Marc...
Example B: http://www.itnews.com.au/news/45k-stolen-in-phone-porting-sc...
Example C: http://www.news.com.au/finance/business/banking/customer-sca...
For balance, here are other comments from the first two pages of that thread:

"Come on everyone, y'all are saying it sucks before you have even held it in your hand. I mean 5GB in a little tiny thing like that, it's amazing. I don't see anyone else making something like that. Do you?"

"No matter what Apple does there are always people who are NEVER happy. Give it a rest. It's a great idea and the first of many."

"The truth is that is really is revolutionary. 5 gigs? Where do you see 5 gigs in an Mp3 player?"

"This is not like any other MP3 player on the market, imagine being able to store several days worth of music at once! The iPod will be great for travelers, students, heck anyone who is really into music"

"This thing's too cool. It makes my Rio 500 (recently upgraded to hold 128 MB of songs) look pathetic. It's beautiful. It looks too easy to use. It has all sorts of cool features that I will never live without again. This is a home run, and y'all who keep complaining its not a $200 Newton device, buy a Visor. They can play MP3s, by the way, but they're still stuck in the 21st century compared to the iPod."

"THIS THING IS AMAZING!!!

It's not jus ANOTHER mp3 player. It's a BREAKTROUGH mp3 player!"

"with all the hype surrounding it, the iPod still came out looking quite good."

"I think it looks like a great toy. The price is steep for 5 GB, but everything else about it is great."

"iPod is a great idea. It has huge capacity for MP3s (5GB is much more than any other similarly sized mp3 toy), syncs with iTunes, and a nicely sized backlit LCD screen with good battery life (10hours). Recharges by FireWIre is also a neat thing."
This is formal documentation for the elliptic curve signing system used by Signal, which is based on Bernstein, Schwabe, and Lange's Ed25519.

If you've tried to read EdDSA and Elligator papers before, you will probably find that this demystifies a bunch of it, since it's written specifically for implementors.
I think it's more about willingness to participate in black market activities makes you untrustworthy in the government's eyes.
I couldn't reply in time before you made your edit, but truthfully I was going to post the same thing: I was struggling with how to phrase my original comment, but I was looking for a shorthand way of saying "people with light pink and white skin" without coming off as either callous or overly euphemistic.

Really, my curiosity stems from being new to how neural networks work -- naively, I've grown accustomed to processes where the outputs reflect the input, and at first blush to me, supposing a varied dataset, this didn't appear to be the case. Those who replied to me provided persuasive arguments as to why the hues of the synthesized images may not necessarily imply that the training dataset wasn't that varied after all.
Shoulda called it "Deep Dicks" or something.
> other BT controllers (such as the PS4, Wii U Pro and Xbone)

The Xbone controllers use some proprietary Wi-Fi-based protocol, don't they? Not Bluetooth.
Obviously, this is a very disappointing situation for us -- we've always taken security very seriously since day 1, it's something that's been core to who we are from the beginning.

That said, how you respond in this situation can be just as important, and so we are making sure to be incredibly proactive in addressing the situation & transparent in how we communicate the details with our customers. Our top and immediate concern has been our users and the safety of their accounts.

A few days ago we became aware that an unauthorized party obtained email addresses/usernames, last login IP addresses and bcrypt hashed passwords for a large number of customers (anyone who signed up prior to March 1 of this year).

At this point we do not have evidence of any customer website/account being improperly accessed. It's also worth noting that we do not store any full credit card numbers on Weebly servers, so any credit card information was not part of this incident.

We immediately starting working on taking steps to notify our customers, and were able to get this out in a matter of a few days. We're initiating password resets as of this morning, and we've also made several improvements to the application including new password complexity requirements and a new dashboard that gives customers an overview of recent log-in history of their Weebly account to track account activity. We also increased our bcrypt work factor from 8 to 10, and all passwords will be automatically upgraded as of the next time a user logs in.

We've hired an incident response firm who is working with our internal team to complete a full investigation. In the meantime, we're examining our stack top to bottom and taking many steps to enhance our network and application security. This is an area we take very seriously and we'll be putting in tremendous effort to ensure this doesn't happen again.
I hate the self checkout but I use them because they tend not to have lines.

They really are slow.
>In a three-block stretch of Midtown, from East 56th Street to East 59th Street, between Fifth Avenue and Park Avenue, 57 percent, or 285 of 496 apartments, including co-ops and condos, are vacant at least 10 months a year. From East 59th Street to East 63rd Street, 628 of 1,261 homes, or almost 50 percent, are vacant the majority of the time, according to data from the Census Bureau’s 2012 American Community Survey. [0]

I'm going with "used to park value."

It's been mentioned elsewhere that real estate is the last place you can easily park a literal suitcase full of cash without being subject to any KYC rules.

[0] http://www.nytimes.com/2014/10/26/realestate/pieds-terre-own...
It is purely marketing.
I suppose if you feel like your downvotes are for sophisticated reasons, it saves you from having to confront the possibility that your post isn't very interesting.
The presentation is fantastic. It proves beyond a doubt that Angular is vulnerable in the context that it claims to offer a security feature that is manifestly insecure. And I mean, they're evaling JS code in the template engine, this shouldn't be a surprise. To be clear, Angular from its inception claimed to offer "safe" templating. So this is a big deal.
I hate these damn machines. Every one I've ever tried has been incredibly shitty. They're configured to prevent stealing, but that means they constantly stop normal shoppers just trying to check out and force everything to a halt until an assistant coms over. But whoops, the assistant always just stepped away for a moment, or is helping someone else, or, or...

Not to mention the basic fact that, screw you guys, it's YOUR job to do the checkout, not customers'.