skysight-inc/HackerNews huggingface dataset:
I have no problem with that though. Banks should try to predict the likelihood of people repaying loans. Giving out loans likely to fail is bad. For the economy, for everyone else taking out loans, and for the people loaning money. It's certainly much more accurate and much less biased than the old system of having a human determine your worth. Same with the IRS using prediction to spend less resources and perform fewer audits.

Putting a number on someone isn't inherently evil. The old system had numbers too, they were just in people's heads instead of in a computer. And as I said, they were much less accurate and much more biased.

China is trying to punish people with different political opinions or behaviors. The american system doesn't care what your political opinions are, just that you don't commit tax fraud and pay back your loans on time.
Wasn't it the CNN that basically made up their whole operation desert eagle storm coverage? Or is that a YouTube urban legend?
Then drink; and be semi.
One source I know of are the 'cultural dimensions' by Geert Hofstede [1]. I find it useful as a mental model, though it's a simplification of course, and thus open to criticism. Doesn't tell you how to handle this situation either, but might help you understand the perspective of the client.

[1] https://geert-hofstede.com/organisational-culture.html
There is a lot of (mostly free) content that people are willing to distribute freely.

Take Wikipedia for example, even though it's changing very fast, I imagine a huge portion of it is static. If the latest version of each page was served via IPFS, somebody could setup a local mirror and people nearby would automatically use that.
The cardinal rule of security is: you never, ever, trust anything the client sends.

This bypass is a perfect example. Although author doesn't mention which interception proxy he used, I'm 99% sure it was Burp. Replaying modified content is trivial.
It's explained 2 paragraphs bellow
Agreed, NIST stopped recommending SMS 2FA a few months back (https://www.schneier.com/blog/archives/2016/08/nist_is_no_lo...)

I really wish they had Google authenticator or Yubikey support.
In germany, the Telekom (T-Online) used to block http or SMTP traffic when they recognized an infected connection which sent SPAM emails. Don't know if they still act like this.
> Keep an eye out for npm@5 in Q1 2017. We're planning a major overhaul of shrinkwrap as well as various speed and usability fixes for that release.

So the most interesting part of npm4 release are the announced improvements that are coming in npm5 :)
Cloud Track Trader Binary System Review
Dont Follow Your Passion, Follow Your Effort
Though not closely related the read was pretty good.
This should be a warning to everyone that was affected by this. Even the dependencies that you don't normally think about go down at some point. For DNS, make sure you are using multiple DNS providers.
Well, okay. But the result of one group of people being governed by another is also war.

We have different levels of government for a reason.

EDIT: To other points occur to me: 1) I've never found Hobbes very compelling. And 2) If "these other people affect me" is your (not you you, but the general you) idea of a casus belli, you will perpetually be at war no matter how large or small your government.
Every public employee in Texas must have its salary public, so you can see those nice 5 million dollars a year salary for football coach, president etc.[1][2], but you can also look at the Computer Science professors [3][4]. It ranges from a $154k to $250k, those salaries don't look too skewed compared to tech companies, especially considering the cost of life in those city (median housing price 3 to 6x cheaper than SF)

A $250k salary in Austin is supposedly equivalent to a $450k salary in San Francisco[5].

[1] https://salaries.texastribune.org/university-of-texas-at-aus...

[2] https://salaries.texastribune.org/texas-am-university/

[3] https://salaries.texastribune.org/university-of-texas-at-aus...

[4] https://salaries.texastribune.org/texas-am-university/depart...

[5] https://www.nerdwallet.com/cost-of-living-calculator/compare...
I don't disagree with the fact that IPFS has value. I just don't like the way it's presented as a generic transport protocol that's "superior" to HTTP.
You could do most of this with the X10 system.
Unfortunately there's no proper demo page :/ We're working on improving the docs (we know this is big issues atm).

There's an old version (from June) of Orbit at http://orbit.libp2p.io which you can try. Much has happened since and we're working on bringing the js-ipfs version Orbit back to a working state.

Re.Pubsub, I'm personally also very excited about it! :) The specs and general info are located here https://github.com/libp2p/pubsub. go-ipfs merged pubsub into master some time ago with this commit https://github.com/ipfs/go-ipfs/commit/e1c40dfa347e38bdc9812... and we're working to get it into js-ipfs here https://github.com/ipfs/js-ipfs/issues/530.
That is a recurrent issue with wsj articles...
Why might the Mirai botnet attack Dyn? What might their motives be?
If the key is leaked, it means someone can alter what the name points to, but all previous versions would still be available as far as I understand it.

No content is changed, only the pointer to the "newest" data.
The U.S. Government Wants to Read Travelers’ Tweets Before Letting Them In
Various things can make migration easier. Backwards compatibility being a big one, particularly if it can be phased out gradually by either party.

I don't know enough about IPv6 migration to comment there.
"Yeah, well, people keep saying we'll have flying cars in 10 more years, too."

"BigCorp, Inc. has been actively developing flying cars. They've logged around two million miles so far."

"Yeah, well, those flying cars don't count, because they aren't perfect."

Sounds like an excellent reason to spend thirty billion dollars on trains.
I've tried being generous (and still donate, probably more than all my coworkers together), and I still get pissed upon by leftists. Talk about empathy.

I live in France, my parents weren't even that rich, but we strive to work hard. Being motivated by good marks at school makes you bullied because you're a krelboyne. At work, as soon as colleagues learn you've been to a private high school and top college (both of which cost <$100/month and have active policies for lower income families), people come up to you and explain all the reasons why students from good schools aren't so good at work ("They don't have the grit", they say, "They aren't street-smart" – Happened to me 4 days ago again). A lot of citizen in France think it's fine to be jealous to someone because he was good at school, comes from a good background or is Christian. It would be ok if there weren't actual discrimination from people who want to offset the supposedly "easy life" you've had: The boss who bullied me in plain sight of everyone also was the only boss who had a shorter degree than I had.

I've donated thousands to charities. I've volunteered for immigrants, kids of immigrants, I've volunteered in detention centers, I've volunteered in free events aimed at lower-income families, and with a team we went to help an orphanage abroad. I've given more than a thousand hours of volunteering in 5 years, in parallel to my studies and work. I never expected a "thank you". But a little consideration and respect from the leftists would do. But my life is still considered like a result of sheer luck, not a result of my hard work.

The problem isn't the poor: They do need help. The problem is the leftists who give lessons. There's a non-stop cliche that, since you're rich, you're an asshole. Even if you are generous and litteraly more generous than them, they won't stop the hate. This article is one of them, generalizing about "riches are assholes".

All in all, living in France, taxes are supposed to provide support for the poor. I'm tempted to leave it at that and stop donating, because I need to focus on my life now (no gf, no kids yet). But somehow I keep donating.
What exactly is wrong with offering SMS 2FA? I don't have a smartphone, but I have a great little prepaid phone. Why should I get no features just because they are not necessarily as good as it gets ? Also, as far as I'm aware, all of the major "attacks" on SMS 2FA are just the fact that a smartphone can be compromised in many ways. I have much less attack surface: an attacker would need to reprogram my undocumented exotic architecture phone with a bug in a parser which is probably too small to contain bugs of that nature.
The other way is SMS MITM, which on some networks is demonstrated feasible, but requires basically setting up an SDR near the victim, a lot more complicated.

With my prepaid provider, customer service is shoddy but would need considerably more to do a number port than just the number.

By removing SMS 2FA you gain nothing, and I lose my only viable second factor.
Usually referrals or remote job boards.

> This is very general, but please get in touch to discuss the details.

You don't have any contact info in your profile.
Your example is one where political and technical changes together helped solve a problem. You're literally citing a law as an example of a 'social issue solved by technology'.

My point is that replacing a complex technical system with a different technical system only reshuffles the set of problems that will need solving. The social and political problems that made the web what it is today won't disappear due to a redesign.
I'm not saying he was crushed for his individuality and truth-speaking then. As I said, I have no idea what he was like in the past, or the merits of his tenure case. I'm saying people, in this thread, are taking him to task for criticizing his (soon to be ex-)employer publicly now. That "Don't criticize your employer!" norm, to me, is a bizarre one for strangers to get upset over deviations from.
> For DNS, make sure you are using multiple DNS providers.

In this case, that would have made it worse.

If your domain CNAMEs off another provider (as nearly all SaaS solutions do, as do mapping to AWS servers, etc) then you would have been affected by the attack on Dyn regardless of whether you could change your nameserver in time and have multiple providers at that level.

If you don't have any CNAMEs, then I think the better choice is to go same-origin same-provider for everything.

Which may sound bizarre... my personal sites (a lot of forums) would either be up or down. I would argue that availability having a binary nature is a lot better for end users than a constantly broken half-state that is frustrating or impossible to use at any time even though a graph might show partial availability. A hard sudden failure shows up better in monitoring, triggers end user feedback faster, and is in many ways easier to debug and solve.

With so much CNAME'd, and SaaS still growing, replicating and failing over DNS that sits above those wouldn't buy you anything.

A lot of sites lost Zendesk (their support.), Statuspage (their status.), Pagerduty (hey, they were quiet because no-one could let them know). They couldn't even help the end users having a bad time.
I could not locate source code. I just don't see a closed source DNS system gaining global traction.
I have a pet theory that restaurants are implicitly subsidised by everyone. Here's the prospective chain:

* Restaurant pays servers minimum wage

* Servers make more than that via tips

* Servers do not report tips (maybe past some threshold, let's say min wage) on taxes since they receive them in cash

* Restaurant pays payroll taxes on minimum wage, servers pay income tax on minimum wage

* The remainder that the server keeps and the lowered payroll tax comprise the subsidy.

If the restaurant had to keep server pay constant, it has to compensate for the tips and the income tax on the tips, and it has to pay increased payroll tax on the rest. Not doing this is highly advantageous to every party here except the taxpayer. And the taxpayer doesn't care about the few microcents on the dollar.

I still tip because that's just how things work here, of course.
Ask HN: Why don't open source projects show ads on their readme pages?
I see a lot of projects closing down due to lack of time/funds. Why don't more projects take sponsors and display a banner on their readme page.

For example Vue.js generates 10k/mo with sponsors: https://github.com/vuejs/vue
That is true but most external or IPFS-external sites will probably want to point at the IPNS link, bookmarks are gonna point at the IPNS link, etc.

In the same way you could still use the old IP + header manipulation if someone took over a Domain in DNS, it's possible and you can use the old site but in reality you're gonna have lots of people on the malicious attacker's site.
For anyone interested in contributing to open-source game engines, there is a nicely curated list (by language and game genre) at http://osgameclones.com/.
My first impression and suspicion is that it has been Americanised. British humour tends to be more grating and grotesque than what's considered acceptable in the US, and the outlook is bleaker.
So far I've watched the first three episodes. The first even has some sort of happy ending. The second episode looks just like a bleak prequel to Inception, rather predictable. The third is maybe the most faithful to the original spirit. There seems to to be a slow transition from American to British in the three episodes, so curious to watch the others.
In many table games against the house (e.g. blackjack), they won't even let you touch the cards (at least in the big casinos on the strip).
Because demand outstrips supply. Though tech companies have conspired to pay us below what we're worth in market terms[1], it's still very comfortable.

Increasingly, I think some kind of professional association would be useful, largely to represent programmers' views regarding how technology affects society.

There's a pretty clear disconnect (visible on HN), between the interests of the programming-classes, and the exec/VC strata.

However, it's the latter group that always get to provide a sound-byte as the voice of technology in the news, to legislators, etc. etc.

Having a well-respected professional organization for the programming-classes could help shift the representation of "the tech industry" towards it's people and away from it's money, with regards to public debates about data autonomy, open standards, net neutrality, and privacy legislation.

[1] Most notably: https://pando.com/2014/01/23/the-techtopus-how-silicon-valle...
The right mix if isobutane and propane gives the perfect glide and gives more cooling effect for less power input than any of the the ridiculously expensive products out there at about 3cents AU a fill for a car. The only mod you need is to keep the fan in the condenser running full time.
I'm not trying to pee all over IPFS. But it's also the case that it's easier to throw out mature, crufty old systems and start afresh. Every programmer knows this temptation.

We've had the web for twenty years now, and are just beginning to understand what it is and how it changes the world. If you're suggesting using IPFS (or any other system) as a way to expand and grow the web, I'm with you. But replacing the web means throwing out a lot of hard-won experience and intuition, in favor of a system that's bound to have its own issues down the line.
the artifacts are explained in detail here

http://distill.pub/2016/deconv-checkerboard/

more compute will enable higher resolutions and less artifacts, but it means training a bigger GAN
There's the million-dollar question. I've been bashing my head against it for a few years now.

I think an important thing is to give everyone a say in how these large computer networks affect their lives. How to do that in the context of a broken political system isn't clear to me at all.
Sometimes it feels we are being herded. If Brian Krebs a single person can identify so many dubious operators and script kiddies in the US then how come significantly larger and massively better equipped government teams known to be using sophisticated surveillance do not have any clue or response while leading US companies go offline.

Just the other day Cisco announced a partnership with a company in the UK to detect and disable copy protected streams in real time all over the internet.

Surely if they can pull something like this off there would be some serious solutions and proposals by the networking industry on how networks themselves can mitigate massive ddos attacks.

The whole focus on IOT and client side devices seems to be a deflection of the real problem because any attempt to solve this client side is likely to introduce serious controls and constraints on machines joining the network apart from the fact you end up in a never ending cycle to 'wack a billion moles'
There is a reason RFID chips are the size they are. The smaller they are the closer the scanner has to be to energize their antenna. Either that or you increase the power but the power needed goes up exponentially with distance. I don't see this working. At least not with today's tech.
Some of the examples made me wonder if only the most empathetic poor would agree to participate in a study.
You might find the techniques of Action Science helpful in adopting that framing: http://www.meetup.com/London-Action-Science-Meetup/pages/193...
Long and detailed, interesting article.

I wish it had an abstract and/or a conclusion. This is really too long for regular reading.
I think this is stated in a factually misleading / inaccurate way.

The vast majority of Trump voters are “traditional Republican” voters, at least in general elections. Many were folks who usually only turned out to vote in the general election, but not in the primary. In other words, they were expanding the pool of Republican primary voters, but not significantly expanding the pool of general election Republicans from “outise the party”.
Brexit: Leading banks 'planning to leave UK early next year'
I think that the lenders were aware and thought that the borrowers were unsuitable but thought that they had discovered a way that would allow high risk loans to be made safely. A lot of really clever Ph.D's had said that securitisation of these loans would work to manage and distribute the risk. I remember going to a dinner party and being lectured by one of these guys and thinking that it made no sense to me, I felt like I always do when I get a new maths problem and I can't figure it out at all and every one else seems to understand it! I was embarrassed by my lack of ability. The said "lecturer" was patently earning several multiples of my salary (I guess that he earned, gross, 10*). He wasn't ostentatious about his wealth, but his watch was nice, not showy, they had come in a new Range Rover, and they lived in the Surrey communter belt. All of this communicated success and authority, his Ph.D came from a big, important university, mine comes from a little and not prestegious one, I struggled to get through my Ph.D - I found it really really hard. I suspect this guy had cruised.

And yet, he was spouting complete rubbish; all the assertions that he made were contrary to straightforward treatments of the data and common sense. I can't even remember the technical justifications he made, I think that I probably didn't make appropriate challenges to get these.

So, I went back to my job as the telco doing pedestrian things with telematary data (n things not working = problem). The lesson of the conversation is that the smart people who were figuring out risk and investment strategies in these places are not smart. Also I was not of the caliber required to smoke that out.

An actionable lesson that I have run with since (ok, I thought this out in a slow way about 18mths after the crisis while chewing over past humiliations and social disasters in which I have participated), is that critical thinking is the most important skill in my portfolio, and I'm not good at it - and almost everyone I meet is worse than me. So I have focused on trying to recruit people who seem capable of thinking round problems, and then have invested time and energy in getting them to be able to understand problems and become domain experts. This is different from the normal strategy of recruiting experts, doesn't deliver results reliably (which is challenging in a business environment - I have missed my scorecard a few times since this experiment began and I am rendered nervous about my career as a result) but has produced a business capability which to me seems qualitatively different from the previous capability that I took over when I got my current role.

Anyway - it makes for more fun at work.
Talk about stereotyping! This headline is no better than "how can you tell if someone is a criminal? Look at their skin colour".

Correlations in large populations do not mean that every individual shares the identified characteristics. I find it absolutely shocking that a paper at the level of the Washington Post would publish such drivel.
What kind of professor is he?
In The Netherlands the civil registry is considered privacy sensitive information and not publicly accessible. You can get an extract of your personal information but you can't access the information of others, not even family or people who are already dead for use in genealogical research. Your records are opened to the public 100 years after death.
Fun to see someone do this with the pi.

I wonder how they handle security. Especially since it also controls access to the facility.

Also, would be pretty funny if the RPis went all Hall one day.
AT&T Agrees to Buy Time Warner for $85.4B
Technology may help by making it easy for people to host/share their data. But technology is driven by politics. So we kind of need both.

The solution that I see, is transitioning from social media, where people use some centralized service to "socialize", to social infrastructure, where people run their own servers and connect to the servers of their friends making a real social network. IPFS may be a step in this direction.
It's the personal identifier (Kinda like social security number I guess? You write it on every contract you sign basically) and a 4-digit pin here in Spain. Stupidly insecure.
From my limited reading on the issue. SMS in US is unsafe. Not sure if the same can be said in other places like EU or Japan.
Tenure also allows the researcher to keep digging that rabbit hole that he/she is specializing in without fear of one day having to work in "the real world", where that very specialized knowledge is essentially useless.

(That came out like it's a bad thing, but it's not.)
McAfee on malware and IoT, 1 year ago
Ask HN: Any thoughts on the following definition of Intelligence?
Intelligence is that which when combined with a self replicating engine gives rise to Culture.
Disagree? Agree? Thoughts?