skysight-inc/HackerNews huggingface dataset:
You should use !==.

isset is do not handle all corner cases, it would return true for empty strings or false for NULL. You should use framework like Laravel: Input::has('key')

By design type of security challenge should not be an option. API endpoint should not check for $selectedOption == SECURITY_QUESTION. In this case you still vulnerable for the same attack.

You always should return something. having just return; is bad.

Finally you should use something safer than PHP since mistake can cost you money.
> If you can't - just generate a random password as the answer. "I_ty/:QWuCllV?'6ILs`O12kl;d0-`1" is an excellent name for your first dog / high school. Just don't forget to use a password manager to store these.

Be wary of social engineering attacks though.

- <support on the phone> I'd also need you to provide me an answer to your security question. What was your first dog's name?

- <me> Oh, you know, it's a long string of random characters I generated, I'd have to give them to you one by one...

- <support> (looks at the answer) uh, right. I see. Let's continue then.
A Little-Known Company That Enables Mass Surveillance
Run Your Own DNS-Based Adblocker with Pi-Hole on Raspberry Pi
Care to elaborate how/why exactly CDN would be different here?
Indeed - I've long since given up on security answers/questions as being secure. Kind of defeats the purpose of unique passwords if all the answers are common knowledge...
Had to laugh at one instance where I actually had to read out the 30 character secret answer on one support phone call :P
Pardon my naiveté, but, why didn't anyone do this before? Isn't it easier to fly if you take less time because you have tailwinds?
Google Assistant Runs Circles Around Siri
Copy the headline then paste it into Google in a different browser.
Incognito works.
I am running a Raspberry Pi hosted web server for almost 4 years now. I only changed hardware to newer Raspberry Pi and bigger SD card after first 2 years. Never had any issues, never had to buy new SD card, its still up and running 24/7.
at least with one of my banks customer support centres this wouldn't happen, if you stumble for a split second they shut down the call and tell you to go into a branch to verify your identity, this is pretty annoying...
Ask HN: Is there any hope for localized web services?
I'm thinking about creating a few web services for developers. For instance, an API to resize images (like https://imageresizer.io/), do take screenshots of websites, and do text recognition, all via an API.

Of course, there are many services like those in English, but I would like to instead create them in other languages (specifically, in Italian).

I think that to get a bigger slice of the pie most italian companies do everything in English, since it's a bigger market, but as a result all the web apps are in English, and there's nothing in Italian. It's like they'd rather be 0.1% of a 1500m market than 50% of a 50m market.

The idea is that in localizing the software in Italian, you would get a much bigger percentage of a smaller market.

Now, in my case the problem is that these would be products made for programmers, and I know most programmers know English. Still, I'm hoping that by offering the same product in a language they're more comfortable with, I can grab some customers.

Does this make any sense? It's not that revolutionary an idea, so I'm thinking that if no one does it already it's not something that would work...

Any thoughts?
I just want to remind you that it is you who are worried about my credibility, not me. So thank you for the advice, but I decline. It is also you who seem preoccupied with levitation.

Regarding the events, it's not comics. It's happening, and it's gotten worse the last 10 years. Voodoo comes from the deltas stretching from eastern Ghana over Togo and Benin to western Nigeria. Whatever it is they do they wield considerable control over people, to the point where big investments are dropped, houses never finished, parents leaving babies to fend for themselves.

But it's like @qb45 says, just google it. I want to advise though that there are many rumours as well, not the least because witch doctors have an interest in building the fear and the criminals want to instil respect and keep away nosy people.

Lastly, you come across as pretty rude to me. Just want to remind you that their is another person writing this, and I don't particularly like being talked about in third person and discredited for sharing an experience. So a piece of advice in return, think for a moment about they way you write about my writing having "issues" or what is or is not "needed", and it'll be fine.
Cool hack, though I really doubt it's needed.

I broke the screen on my Dell Mini 9, bought one on eBay for $20 and it arrived in Guatemala 4 days later. It was easy enough to swap out myself [1]

I'm in West Africa now, and just hard some parts shipped to me - arrived in 4 days from the USA.

Shipping is global, fast, and easy.

[1] http://theroadchoseme.com/laptop-repaired
This is from before the recent Mirai DDoS attack.
Note that this is a record for passenger service. Boeing flew a 777 without passengers for 22:42 and a distance of 21,601 km.

http://boeing.mediaroom.com/2005-11-10-Boeing-777-200LR-Sets...
It's done routinely, but Air India just started to do this on a long-haul route and are publicizing it.
Disagree. Any definition that tries to define an abstract concept in terms of other abstract concepts is only for amusement and not useful at all.
The Anthropocene Effect
It has been said that the LLVM bitcode is too low-level and architecture-specific to allow switching between x86 and arm for the final compilation pass that Apple performs in the app store. It's more likely this feature is here to enable hotfixing compiler bugs and micro-optimizations and perhaps taking advantage of new features in new chips within a given architecture.
All sorts of faster distance opportunities exist.

one of the safety regulations relies on close landing strips within 300mi of any plane or something like that. God, wish I could find the article on that....
Automated browser testing for the modern web development stack – TestCafe
It makes sense that you feel frustrated by criticism, but you should recognise the fact that if you were poor you'd feel frustrated also. The point of there being an imbalance of opportunity ("privilege" and lack thereof) is that some people benefit from it and others are taken advantage of.

It's only reasonable to expect that the ones who are taken advantage of will feel frustrated, regardless of any acts of redress offered as a compensation from those who benefit form the imbalance.

>> The problem isn't the poor: They do need help.

I don't think that's the problem. I think the real problem is that in a society that values material wealth above all else, everybody wants to have more of it in order to be valued as a human being.

So the poor want to become rich and the rich want to become richer. You can't fix that with donations, unless you and everyone else who is some level of rich share your entire fortunes with everyone else... or unless the entire financial system changes radically and fundamentally (which will happen around the same time as pigs grow wings and fly away).

>> The boss who bullied me in plain sight of everyone

I mean, I don't think you sound that rich even (not 30+ meter sailing yacht rich, say). It is definitely unacceptable for people to treat you badly, for whatever reason, not to mention your income. On the other hand, if you were that rich you wouldn't have to put up with them in the first place, so that's doubly wrong.
Video: This Morning's Brazen $1.2M Robbery
Good, they should be commended for the practice! I wish I could trust that all companies would do that, though.

(Anyway, I like the idea of using answers to security questions as hard passwords.)
Germany: after 24 hours there is normally a short disconnect and a new ip address to prevent people from running servers at home
ServiceStack is a framework which is exactly what their tagline says "Thoughtfully architected, obscenely fast, thoroughly enjoyable web services for all" . Microsoft should acquire them and make it free.This is one project which can act as a driver for getting more developer interest in .net core
Great point. "correct horse battery staple" wouldn't be vulnerable to such an attack.
Having spoken to an LLVM developer about this, unfortunately it isn't quite true (as he understood it).

Essentially, developers submit the LLVM intermediate representation to the App Store. This means that chip-specific optimisations can be made by Apple (such as expanding the number of registers used, or swapping a few small operations for one slightly bigger instruction), however the LLVM IR is already architecture specific, so a change from x86 to ARM would require re-compilation from source.
Writing Functional in Bash
I would also,recommend playing around with ASETNIOP ... It's a chorded keyboard with auto-completion.
People buy product, create a product around your algorithm and you are good to go.
As a student who has participated in some decisions regarding changing courses at my institution, I think classes here are usually bad because no one really cares. It requires tact to say "this course is garbage and you don't care about it anyway; let me handle it" without bruising egos.

But I think it's bullshit to say that not bruising egos is an important skill, especially in science. The kinds of scientists whose egos are easily bruised are the kinds of scientists who Max Planck was talking about when he said "science progresses one funeral at a time." People who refuse to acknowledge constructive criticism unless it's sugar-coated will continue to pursue the same ideas even after others have proved them wrong.

This is a systematic issue. Science is full of people with big egos. When scientist A criticizes scientist B's idea, ideally scientist A would think really hard about scientist B's criticism and either say "yes, you're right" or "no, here's what you're missing" (ideally with experiments). Scientists with big egos don't do this. They reject other scientists' criticism out of hand, and they criticize people based on feelings rather than ideas. The problem is contagious: Scientists with big egos attract more scientists with big egos, since those are the people who continue to believe they are great despite the barrage of nonsensical criticism. And egos tend to grow larger, not smaller, as people rise in rank.

Appropriately weighing others' evaluations of your ideas is really hard. It requires the technical skill necessary to come up with those ideas in the first place; the social skill to distinguish between sycophantic praise and true positive evaluation; and the emotional control to ignore anger or disappointment that might result from negative evaluation and focus on the content instead. In my experience, people who can do these things make much better scientists, and are much better to work with. They are less guarded when brainstorming ideas and more willing to change their minds in the face of superior evidence. But in modern science, there are relatively few incentives that favor accurate self-evaluation, and many that favor persistence above all else. In a world where ~5% of incoming graduate students go on to become tenured professors, people who aren't great and know it (or are great but don't know it) drop out early, and the people looking for positions end up being a combination of great people and mediocre people who think they're great.
Meanwhile most Americans first home purchase, if they can even afford one, is not their forever home.

Due to all the handouts to banks through the mortgage industry that have in part caused house prices to go up like they have (ie. QE), many first time buyers have to leverage themselves to the hilt for their first underwhelming home in order to hopefully one day sell for enough to let them ladder up to a nice home.

People would much rather own their forever home and not have to worry about selling at some point like you, but that just isn't the reality for most. So speculation is almost forced in the sense that if you want to own your forever home at some point, you have to play the leverage game.
I tell my son, his friends, and anyone who will listen: don't join the military unless this is your calling, indicated by God's finger touching your heart.

Because the military will treat you like shit if it's merely inconvenient to do otherwise. VA. Guard units called up to combat for one day shy of the time that would qualify them for combat pay. The linked article. Institutional abuse. Forced reenlistment during questionable wars. Etc.

USN, E6, 1975-1981. Not that that gives me any particular place on the moral ground. And for the record, I had a relatively easy time in the Navy. But even if I'd never been in, I'd be as outraged as I am now.
I watched the first 3 episodes of S3 last night, and as soon as I saw the headline for this story, I thought of Nosedive.

Watching Nosedive, I thought how close to it we were already, it's just that we're measuring people in terms of Followers or Likes. This path started I think when we prioritised Google Analytics numbers over the positive effects you create within your audience: clicks, traffic, unique visitors all seem to count more in 2016 than loyalty and shared values that dominated publishing for the prior 100 years or more.

In the age of "personal brand" it makes sense to me that we're going to end up with "personal metrics" and we're just seeing the tip of the iceberg.

At the end of Nosedive I decided if that was the future of my society, I'd stay being me and suffer the consequences. I'd rather be happy in my own skin that be popular, and if I lived in a society that turned popularity into a measure of personal worth, I'd quite happy to be a dissident within it.
> Our digital world is built on tech developed largely for free by people rich enough to be able to afford this unpaid labour.

Citation needed. As far as I know most Internet infrastructure was developed by government funded or commercial entities.
> When Chinese people goes to Japan or other Asian countries, they blend into the local culture much more easily.

Err, no. Yes, appearancewise, some Chinese are not easily distinguishable from Japanese, although the locals can often tell each other apart based on clothing, haircut, makeup etc. But rest assured, the moment a Chinese person in Japan opens their mouth, they will be every bit as much a gaijin as a blond and blue-eyed Caucasian, if not more so since the associated stereotypes are more negative.
RFC4180 – Common Format and MIME Type for CSV Files (2005)
Just to get back on track.. Faculty positions are very hard to fill.

As a tenured professor in a department looking exactly for this type of "Hacking Professor" I can tell you it may take a year to find talent. Positions in Europe might be even harder to fill. Advantage of our "biking distance from Amsterdam" culture is that anti-establishment mentality and non-conformist hear style of professors is acceptable. Quality research and teaching counts. We have an official CS class called "the Hacking Lab".

<shameless promotion> Any Associated or Assistant Professors out there with experimental background, please click:
https://www.academictransfer.com/employer/TUD/vacancy/36681/...
Isn't it ironic that the means of updating firmware to prevent installation of malware is the vector for installing malware?

I don't think the current scheme is working very well. Even worse, there is no way to tell if your appliance has been compromised or not. There are a lot of companies that care whether their machines are infected or not.
Airbnb Sues New York City
A DIY-solution is nice (and as engineers something really fun to do) but they will have to maintain it in the future and this is not necessarily "future proof". They would have simply put some KNX[0] compatible components in the system, they would have had control of everything using an open standard. They could have connect light, security cams, door locks, the power plugs, etc... and because this is a standard, the day they move out of the office, they will be able to resell the system to the next users.

[0]: https://knx.org
The URL is encrypted too, so what's the difference in terms of security?
It seems standard practice for German banks to limit online passwords to five alpha-numeric characters. Fortunately, you need a TAN number (generated by a device or from an SMS message) to actually make a transaction. I have no idea why they limit the password length like this.
honestly, since this is in translation, a word like "petty" raises numerous issues for negative connotations that might not be in original.
submitter here.

I've submitted the link to the formal specification of the comma-separated value (CSV) file format as I've noticed that someone else had posted a link to a CSV parser.

https://news.ycombinator.com/item?id=12770373

A CSV parser is trivial to implement, and the complexity of the endeavour is so low that it doesn't even justify as a tutorial on how to implement a proper parser.
Yes, having something readable (and "believable") is more useful and secure than having to rely on saying a random string

Just put "Plymouth Creek High"

(Not to mention the possibility that some "security genius" will ban special characters on those answers)
Please add a security page on your site
My god I would not want to be stuck down in economy for that flight.
Why do websites publish AMP pages?
DJB suggests using rsync over ssh: https://cr.yp.to/djbdns/tcp.html#intro-axfr

But I guess this excludes many of the popular DNS services that are used today.
It's not necessarily for a full ARM laptop.

The new MacBook Pro are expected to ship with the Magic Toolbar and TouchID. For the Magic Toolbar it would make sense to allow it to display basic notifications whilst the laptop itself is asleep e.g. remaining battery or current time. For the TouchID it is going to need the secure enclave.

Hence it makes sense to have a dedicated ARM chipset.
There used to be a nonstop Thai Airways 17 hour flight from NYC to Bangkok that I flew several times. And I found a list from 2007 of longhauls with it listed in the middle! I remember the flight would go over the Arctic, since the distance was shorter, and I could see ice instead of clouds on a clear day. The flight itself would have been unbearable were it not for the amazing Thai airways service. A quick Google shows the distance just under 14000 km.

https://consumerist.com/2007/07/16/worlds-longest-non-stop-f...
So does this mean there's a huge cloud of IoT devices that will be usable as a DDOS monster, forever?

It sounds like they never get patched, and if you have some camera or small device, how likely are you to throw it away?
My understanding is that the US has a professional army. Why are they called "volunteers"? Over here, a volunteer is someone who voluntarily joins earlier than required to begin his mandatory army service. People who join a job are all volunteers of course, but that's not remarkable.
> those salaries don't look too skewed compared to tech companies

First, I think UT is a bit of an outlier: they are one of the top ranked departments in the country. Second: faculty members making $150k typically don't step into jobs in industry at $150k, they typically double or triple their salary.

Generally, salaries in academia are much lower than what the academic could be making in industry. However, to make that in industry they'd have to compromise in a lot of ways: having a job in academia means you're trading your opportunity cost to not have a boss, work on what you want, mentor students, set your own hours, etc...

Anecdotally (from my experience in academia) salaries for profs at average departments ranges from low 100s to high 100s, unless you move into more management-style roles (e.g., department chair). Naturally, this is higher for top places.
It seems quite similar, and *apparently it does more*

Have you tried the go-plus (https://atom.io/packages/go-plus) tooling?

Really, please try it out. That's the kind of experience that's really missing from rust; autocomplete, fmt, test watcher, linter, code coverage, debugger, doc summary; you hit install and it works.

Racer isn't there yet.
Sometimes I struggle to understand Buzzfeed. They apparently produce a steady trickle of actual journalism and longform authorship along with the tsunami of their usual... well the 'other stuff' they normally trafik in.
Aaron Swartz on stackoverflow
> deployment to Iraq was not 'defending their country'

They served. They were certainly misused and misdeployed, but they served their country, they lost limbs, lives, time and the innocence that most of us enjoy our entire lives, and they deserve respect and support. Not worship; merely respect and support.
Actually, it dates from a couple of years before systemd existed, and started with the idea of minimizing monitor flicker during the system bootstrap in Fedora. The idea was to make the display not switch between text and graphics modes, as it did when successively switching from graphical splash screen to textual virtual terminal to graphical X display. Starting the X server on the default virtual terminal eliminated the middle part.

By the time that systemd came along, this was already established Fedora behaviour with upstart. The systemd people had to work to replicate existing semantics.

* http://fedoraproject.org/wiki/Features/BetterStartup

* http://fedoraproject.org/wiki/FWN/Issue150#Moving_X_from_VT7...

* https://bugzilla.redhat.com/show_bug.cgi?id=614454#c6

* https://bugzilla.redhat.com/show_bug.cgi?id=619889#c12
> Is Congress so dysfunctional it can't fix this monstrosity?

Well, first they'd have to get past the inevitable argument to defund Planned Parenthood.

So, yes. Yes they are that dysfunctional.
There's some really valuable truths in what you said. It takes years to discover, learn and master that and many people never come close to achieving those skills.

This is the kind of thing you learn by hard knocks or by a really caring mentor.
No, they experience more severe alienation because they don't have significantly worse comparators to measure it against. Generation after generation of grinding (comparative) poverty vs a sense of self respect from making it to the 'land of opportunity' and working for a better life for you/your kids.

Also contra Trump, this implies that the average immigrant is probably a pretty productive member of society, and thus a net economic and social benefit.
> it's extremely hard to get people to coordinate

That's exactly what government regulation addresses. A truly global approach would be nigh-on impossible, but it should be possible to get all ISPs in the states to come on board, for example.
> I worry that this is another example of throwing technology at a social and political problem. [...] I would rather we do the hard work of fixing the web we've got

There are multiple flaws in your reasoning: for one, the web was also a technical solution to a social problem; also, IPFS is someone's hard work aimed at fixing the web we've got.
You mean like a Polish guy coming to Germany, a Brit in France, a Spaniard in Switzerland or even a guy from Texas in New Hampshire. Of course there are differences and they may be much bigger in asia than in europe but still it is not comparable going from country to another and going from on continent to another.
IPNS is bug Proof of Concept that mutable content is possible in IPFS, there is long running goal of InterPlanetary Record System that would include much more complex validity schemes including revokeation.
Blanket corporate media corruption
How it's compared to Flare? (http://flarerpg.org/)
HN comments are underrated
The Z shell's and Bourne Again shell's Control-L key binding would have helped with operating using only the top of the screen, too.
You don't need a whole OS for those, especially not a XNU kernel