skysight-inc/HackerNews huggingface dataset:
> PCI compliance is an absolute nightmare, and is not something to be reasoned with, trust me. Logical thought and analysis has no place in PCI compliance. Follow the rules or else.

It's amazing how much of a pain it can be to deal with PCI, at least if you try to strictly follow the rules as written.

For example, users will send email to support@yourcompany that says something like "I have a new credit card. Please update my subscription to bill using my VISA card 4111111111111434 with security code 123, expires 2020-03 instead of my current card, MasterCard 5111111111111506, security code 876, expires 2016-11. My account number is 123456. Thanks!".

Of course that automatically generates a ticket in your ticket tracking system, and so now you've got a couple plain text credit card numbers (with CSCs!) in the ticket tracking database...which you never intended to store credit cards and have outside the PCI network's firewall.

Is this a problem? It's a credit card number and it is stored on one of your servers, so one could certainly make a strong case that you need to get rid of it at the very least, and maybe you even need to have the ticket tracker inside the PCI network firewall and subject to all of the annoying PCI access restrictions. Ugh!

And what if you are using a ticket tracker product that you don't host yourself? It's hosted on the vendor's servers. If a user sends in a credit card number in a support request, who is responsible for dealing with it? You, or the ticket tracker server provider?

And it gets even worse. Suppose you've got anti-spam software running on your mail system. When that user mailed a credit card number to support@yourcompany, the anti-spam software saw the credit card number. It might now be stored in a token database for the anti-spam software's bayesian filters.

How the heck are you supposed to deal with that?

If you have any forums, they can also have this problem. Or if you have a company blog that allows users to comment. And what if you are outsourcing the comments to some place like Disqus?

Then there is the problem of telephones. Customer calls your support line after hours, and leaves a message letting you know of their new credit card number, and giving the details. Oops...now you've got a stored credit card number in the saved recording of that customer's message. Does this mean your whole damned phone system has to be on the secure network and is in scope for PCI? (And what if you've outsourced your phone system?)
the main reason you don't give users sudo is so they don't do anything stupid, not so much to prevent them from acting maliciously.
Agreed, minus the lack of salting and hashing of upadtresses in the db.

Sace meta like country and city about the ip and then store the adress unrecoverable. Generally no big eeasons to have the actual ip stiored.
It wasn't a size thing as much as for "protecting" students from classes they couldn't really handle. I can't speak to whether that was necessary or not; it's always worked out very well for me to try things that I didn't think I could achieve, but maybe that doesn't generalize to everyone.
What does liberal even mean in the US then? If it's neither pushing personal liberties nor corporate liberties nor progressiveness ... it's just another form of conservative thinking. So you got a two party system with two conservative parties. No wonder, really.
You're forgetting another way to process the noodles. Knife cut (刀削). That gives a completely different mouth feel and form factor.

That's my favorite kind of noodle, and it's hard to find in the states in general, as it takes a long time to get good at it and you generally don't batch make the noodles.
Airbus offers a peek at its flying taxi
Architecture has rules of composition like any other craft. McMansions shit all over them. There's nothing post-hoc about calling them shit. A McMansion only look sensible and aesthetically pleasing if you try to imagine one as a well designed house covered in tumors.

The fact that they are an example of American decadence stems from the fact that they are cargo culting opulence.
nd of course the email adress should be encrypted (2 way)
Many of those articles address that very thing, both specifically:

http://www.mcmansionhell.com/post/151106172346/bergen-county...

http://www.mcmansionhell.com/post/150776910526/encino-ca

And in general:

http://www.mcmansionhell.com/post/150597521816/mcmansions-10...
Some operating systems like FreeBSD and (I think) Debian have this functionality built in without the need for external service. So it depends on what you are using. RedHat had a similar functionality as well AFAIR.
It might just be me, but the refresh rate/persistence of vision on these displays that kinda screws with my eyes in low-light situations.
Half million debit cards security breached
Since they appear to plan on running an uber/lyft style service with self-driving tech, and they believe that their tech is especially likely to give them an advantage in that business, that would be one big reason.
Show HN: Quickly sanitize malicious URLs and domains
> Because regardless of the source, the contents of these emails is something the american public should be a lot more alarmed about.

Not sure why you feel a risotto recipe is supposed to be critically important to the American public.

I mean, don't we already know to add the broth in a little at a time? Are there really people that dump the entire broth in at once?
Agreed, I'm uncomfortable with the Russia allegations barring irrefutable evidence, and I haven't seen that yet. Even assuming they did do it, I'm unsure what the correct response would be. And I can definitely see incentives to just say, "Russia did it."

I feel like given the amount of info necessary for security clearance & the fact most politicians live and die with their phones means the intelligence agencies have them all pretty much dead to rights.
Nicely done color palettes for inspiration
Dig-and-cover type projects aren't as expensive as pure tunneling. Judah is ideal for it: wide and straight.
This reminds me of my elem school days (which was like 2003) when I bought Anno 1503 whilst looking for any game that looked like Age of Empires on its cover.

Initially, I regretted my purchase as a kid. By the time I got the hang of the game I was in high school, and now I look back and say "Wow, I got into this series before it got any sort of following"
> clearly successful prediction is going on.

Throwing out all possible wild ideas, some of which happen to come true, isn't what "prediction" means.
Alfred Hitchcock: ‘A superb fantasist of fear’
Methinks you had a double-negative too many. Your sentence says it's impossible to prove the existence of something. Unless that's what you had intended, in which case I don't see how that's useful philosophy for this discussion.
Training, trying out new cockpit designs, replaying accidents to see what went wrong and how it might be prevented, etc.
Those "threats" were prominent politicians saying negative things about the businesses. So the blacklists were exactly as "government-imposed" as boycotts of Trump, given the many prominent politicians saying negative things about Trump and his voters today.

That is to say, not at all.

>If Trump called for a boycott of a company, would you condemn him for it?

Depends on the reason for the boycott, of course. If he was calling for the boycott of a company because its founder donated to Hillary Clinton, or Jill Stein, or American Socialist Party nominee Mimi Soltysik, or even the Devil himself, then of course I would condemn him for it. I'm sorry to hear you wouldn't have the same resolve.

(I'll save you a few minutes of Googling, by the way, and pre-emptively condemn him just in case he has done something like that and I haven't heard about it. Trump is a jackass.)
Uh oh, IBM suit down voting me. Must have touched a sore spot... Hey buddy, it's not my fault your executives in charge of curating the Power ecosystem are so freaking clueless. I suppose it's a miracle they spelled OpenBSD without making 3 mistakes....

Speaking of which, when are we
going to have hardware approachable to system developers? I mean something that isn't 2U, doesn't need to go into a rack, doesn't sound like a 737 taking off on boot and doesn't cost $3k with only 4GB of RAM? A tower
within $2k sure should be reasonable to make.
Should Uber make all information about surge pricing public?
Uber sometimes charge as high as 4x surge pricing, even though there are enough cabs available in the area. How do we know that the surge pricing actually reflects demand/supply mismatch?
Do you know any good sites where I could download some more? ;)
I'm not a architect (and I'm not in/from the US) but it seems pretty spot-on to me...

Maybe I'a just a snob, but I have always found it sort of comical that people in the US build houses that are (in my opinion) so terribly ugly imitations/mishmashes of what would otherwise be nice styles..

It is very subjective, but most of the points match up well with what I find ugly.
This is great. As a kid learning programming (hell, as an adult programmer) I wish I would have had access to open source games! Kudos to the team.
She very often talks about how attached garages make houses much uglier, and ruin the aesthetics in a lot of cases. Check out the rest of her articles!
Are Programmer Brains Different?
In related news: my culture was just shaped by Senn Delaney, a Heidrick & Struggles company. to help me live by my new values, I refer to my provided commitment card daily.

http://www.senndelaney.com/
Bet you there is a clause that it's only usable during perfect conditions. I don't doubt there is a ton of information being sent back to Tesla for machine learning. They have the capability to send software updates to the cars. When you have hundreds of thousands of these cars driving around, they should be able to gather so much information and tweak the design to perfect the whole issue.

If I had one of these cars, I would not put 100% faith into this technology yet. But, after 5 years, who knows? I may finally be able to drink more than 1 beer at a bar with friends and have my car drive me safely home.

Which brings an interesting point, traffic violations. What will local police do now that self-driving cars drive safely?
If you work on real objects made of metal and wood with dangerous tools like chain saws. There are a variety of protective measures you can take like guards, clothing and so on. These things don't provide guarantees safety under all conditions, they don't guarantee good design, objects that have no mistakes or that will never behave badly when used.

And yet, despite all of that not using these protective measures is considered by every reasonable person as incredibly stupid and worthy of a darwin award. This goes so far that there are laws that regulate this.

Nevertheless somehow when it comes to software all of that goes out the window. There is risk to other peoples money, privacy and potentially their lives? Who gives a shit? It doesn't make everything a 100% safe so let's use decades old tools that are difficult to learn are horrible to work with, allow for a huge number of completely preventable mistakes to happen, that we know happen often.

In any other context people would never come up with such a criticism. It would be considered ridiculously stupid to the point that some might think you're being sarcastic and making a joke and once they discover they not, they'd ask if there are some mental problems that might require attention.

Rust and languages that go into that direction don't solve all our problems and that's completely irrelevant.
Is it possible to sue Verizon, TMo, ATT for their failure to to adhere to their own security practices for damages subsequent to a hack?

I think someone should try.
Rust is a replacement for C++. It is meant to be a modern, general-purpose systems language, where "systems" generally means anywhere you need to be close to the metal. This includes areas like embedded systems and high performance computing. Modern means it has features and tooling you expect from languages in 2016. For example, on a language level, Rust has type inference, sum types, pattern matching, proper generics, and a decent macro system. A modern language should also be memory safe, and Rust opts to ensure memory safety at compile time with the borrow checker (as opposed to runtime with a garbage collector like in most languages). As for tooling, it also has a proper package manager, which believe me, is incredible compared to handling dependencies in C++.

So why would you choose Rust? If you need to use C++, because you need performance, or low-level access to memory, or any other reason, then you should choose Rust instead, because it's better for all the reasons listed above. The biggest strike against Rust compared to C++ is library support--people have been writing C++ and C libraries for decades, and Rust is a new language, so it won't have the same level of support.
It's unfortunate that you have such a strong desire to use clearly sexist language, to the extent that you'll write at such length defending it. This is your right, of course, but please keep it off HN, which is an inclusive site.
I disagree, because the machine is still using human generated input for creating these images. Not to take away from what's been created here because it's interesting to look at, but an image filter could be considered an attack on our uniqueness because it takes an existing human art work and can potentially create something more interesting, but most people wouldn't consider it an assault.

I get this is a "neural net", which makes people think these paintings are created by the terminator, but these images still have very real human inputs which is why we can relate to them.
There should be a modular sensor/lens assembly that lets you swap between a standard low profile phone cam and a larger sensor with true optical zoom, shutter, and aperture control. Throw in a simulated focus ring and you'd have a saleable product.
The accumulated evidence isn't significant, then?

There's certainly a risk of some running off with very little evidence, but the trail in this case seems very clear without any election hysteria involved.
Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety.

Featuring

* zero-cost abstractions
* move semantics
* guaranteed memory safety
* threads without data races
* trait-based generics
* pattern matching
* type inference
* minimal runtime
* efficient C bindings

That is from the Rust front page. HTH.
The problem is that the burden of responsibility Google carries for those accounts is huge. The amount of money, private information, treasured photos go over their systems... with no support?
IF YOU CARED ABOUT DIVERSITY...YOU WOULDN'T "PUNISH" FB'ERS BY IMPEDING THEIR FIGHT TO LIKE OR DISLIKE A POST..OR CLAIM LANGUAGE IS OFFENSIVE AND YET PRINTING "MADONNA PROMISES BLOW JOBS!"..OR OBUMMER ROCKS A WOODY ON FB...ETC ETC....YOU'RE A HYPOCRITE!!!
"Not surprisingly, the results of the optimization are clearly pornographic."

Just about spit out my food.
The explanation about MC is too wrong to be useful. What on earth do the "nodes" (states) in a Markov chain have to do with the "nodes" (neurons) of a neural network?
>The word has two meanings, and the one you invoke in your latter example is gendered.

Oh, tptacek, maybe you need to go outside and get some air. You really think that people are leafing through unabridged Latin dictionaries looking for ways to be subtly sexist?
Salisbury cathedral clock
Remind me of FreeCol [1]

[1] http://www.freecol.org/
Do you think if any european ally of the US was caught out spying on Barack O.'s phone that the head of that agency would keep their job?

What about if they were caught out because they can't control contractors?

Who has been fired at the NSA after a series of total WTFs? Regardless if you think they do god's work or are in league with the devil, incompetence giving america a black eye ought to be something that has consequences. Apparently it doesn't.
> Given that high-density living is more environmentally friendly
> than low-density sprawl […]

Depends. Solar is close to the point where a typical suburban home can be energy-neutral; that can't happen when you have many more homes per roof.

Silly Valley's housing and commuting nightmare is a consequence of tech companies' management decisions to cram everyone into the same physical space. It doesn't have to be that way; moving bits is far cheaper (in money and energy) than moving bodies.
Sad that so many people spend working lives in institutions whose values are unintelligible or not theirs. I worked at a company whose values were clearly articulated and formed a shared vocabulary amongst employees. It can be done. The values were stated at a high level of generality, as they have to be. So applying them in novel cases required interpretation, discussion. In that sense, the principles were not easy to apply. But that's not necessarily a bad thing. The discussions themselves encourage engagement, reflection.
One other possible solution to the Fermi paradox is that the aliens exist, but they leave us alone, just like the Indian government leaves the Sentinel people alone.
The reason why they use phone in the first place is that you will always have it with you. The reason why you have your phone with you is because you use it to make phone call. Unless you are suggesting to buy phone that supports dual SIM cards, I think this idea is not very practical. Why not have physical TFA device instead (they are usually much cheaper and lighter than a phone)?
> What if the malicious web site does something like <script src

That will run with the website's privileges. Just like site A loading a script from site B will run it with site A's privileges.

> the loading fails with an exception saying "chrome-extension://" is not an allowed source.

Chrome extensions (and webextensions) have a way to flag particular files as "web-exposed". Ones that are not can't be loaded via the web.

Firefox has something similar for chrome:// URIs in non-webextensions, but resource:// allows loads from the web in certain contexts, which include <script> elements.

> Can we consider it is safe to use angular 1.x only from local add-on panels to run the user interface ?

I don't know the details of what the security issues reported on angular 1.x are, so I can't claim that it's safe or not safe. But at first blush, as long as angular is only interacting with the addon's own DOM, and the addon DOM never injects any text from a page DOM into itself, it _seems_ like it should be safe.
> But this house was sold to average humans, in contrast to Savile Row suits.

I don't think so. From some not-too-reliable numbers I found in Google (if you have better ones, feel free), the median house price in 1925 was $6,000. This Sears house cost almost 60% of that just for materials. No land, labor, mechanical...

If we apply your 4x adjustment, the Sears house cost about $14,000 as built. That's more than twice the median house price of the day.

This was a house for wealthy people.
You can see here how difficult it is to make.

https://www.youtube.com/watch?v=GaeyFyQemDw

Basically, Ramsay (not really a slouch at cooking) is trying to make lamain and he's getting a huge bitching out by the existing chef who tell him it's going to take him ten years to get good at it.

I think this video is a good counterpoint to when Ramsay is outclassed, knows it, and is respectful.
I don't quite get the justification of something like this over simply having more screen real estate. It's undoubtedly more expensive; is it just supposed to be a marketing gimmick to woo people? Or is there are reason why I'd want something like it?
I'd almost expect the opposite. According to the article, most of the difficult comes from managing the consistency of the dough. Salt water and water need to be added throughout the pulling process to prevent tearing. The laying process could probably be achieved by a loom-like machine: thread the string around knobs at the edge of the disc, and then cut around the outside.
"McMansions shit all over them."

How is it any of your business?

The people who buy them like them. Their tastes are not yours, and they're the ones paying the bills.
AMD’s Project Discovery sneak peak (2013)
You're missing something by bringing up "human desire". Within the post-human fantasy there's no reason to not fix the bug that your happiness is only measured relative to other's misery. Or to present an altered set of peers to each individual so that they feel relatively successful, or any other number of solutions that become trivial once you accept the premise.
There is no reason for them to not source the evidence they're using to attribute it to the Russians

What if the source is an actual human asset within the malicious organization?

What if the source is a compromised server of the Russian organization?

What if the source is a legal wiretap on a bad actor?
Yeah, fashions change. So?

Edit: yes, 70s and 80s fashions have now been decreed "bad" by those who claim to have superior taste.

20 years from now they'll be "good" again. Wait and see.
Didn't see your post there, sorry.

I agree, but I try to lead with my strongest case that can't be denied objectively. The concern about implementing 'actual useful shit' e.g. not flinging birds at pigs, is very much at the forefront of my mind but it's a harder case to argue even if it would be more meaningful, esp. to the uninitiated.
maybe by having a smaller rendering target (lower res) on mobile they can run just fine.
Why we chose Vue.js
Who'd've thought that an OS that is rarely used to serve remote content is more resilient against software focused on breaking into remote systems?
Whenever I've seen job ads mention a salary range, it's almost always been ridiculously low (huge red flag for an dysfunctional company trying to get something for nothing) or way too high (red flag that it's probably a recruiter trying to do a bait-and-switch).
What human input? I mean the pictures were taken by humans. But they weren't drawn by humans, they weren't meant to be art, and no one intended the output of the network to look the way it does. There is very little human input here.
Good find. I doubt an ARM64 based Tegra can compete just yet with an x86_64 chip, even if made by AMD.
So basically this movement is saying that it is OK to have a massive identity theft problem, insecure banking and inefficient government services if that means no national id card? Even though most big public and private organisations have 95+% accurate full profiles of all the citizens? Data theft and privacy violation are rampant because data is duplicated. Data is duplicated because it can't be shared. Data can't be shared because movements like this opposing it because privacy issues are rampant. Bump.
Sorry, in hindsight my comment is rather opaque. Those links are incomplete links of the phishing links contained in the emails. I wanted to highlight the difference in the screenshots in the vice.com article between seeing a clear www.google.com (due to the AMP cache) and a google.com-user-security.tk or whatever spoofed domain that got used. Point being Google is making it easy for phishers to spoof links with the AMP cache.

I'm guessing Google is relying on their existing malware detection and site reporting process to weed out pages that take advantage of this. This approach mostly works for mass spammed links and sites trying to pass on malware but won't work for targetted phishing attacks against all but the savviest of security conscious users.
Or we could give everybody an id card as a basic public service?
List of unsolved deaths – Wikipedia
Where did you find those?
This title is incorrect. Credentials not stolen, usernames and hashed passwords stolen. That is not the same as having everyone's password. The title implies someone can easily log in to your account.