skysight-inc/HackerNews huggingface dataset:
> I expect it certainly can be automated

Why would you expect that? Many processes are resistant to automaton.

I would be surprised if it could be automated. The amount of nerves and muscles in the hands is enormous, and many of the materials have no artificial equivalents. Cameras don't even get you close because you need to see inside the dough to make measurements. And quite a lot of the process isn't observed at all, it's modeled in the chef's head and hands. Things like the ratio of muscles around her fingers encode reactions to data coming in from nerves. Very difficult to study let alone replicate. A process like hand pulled pasta seems like the absolute worst case for automation.
What the hell are these people doing over there? The NSA really needs a "security section" that actively monitors the usage of resources of its employees. That someone could be siphoning terabytes of classified information over the span of decades is just beyond comprehension.
Yes: http://www.kodak.com/KodakGCG/uploadedImages/Consumer/Produc...
Please read the Show HN guidelines: https://news.ycombinator.com/showhn.html. They say: "Be respectful. Anyone sharing work is making a contribution, however modest."

Your comment is a mixture of dismissiveness and helpful (though perhaps tangential) information. It would be much better if you took out the dismissiveness.
The oldest: copy & paste. The most recent: water resistant
Odd to describe this as "500m Pages"

"Fifty terabytes is equivalent to 50,000 gigabytes. One gigabyte can contain 10,000 pages of documents, the department estimated.
By extrapolation, 50 terabytes can hold 500 million pages."

I can't find the court filing at the moment, but I would be amazed if even a small majority of the 50TB were 'pages of documents'. Looks like he got away with databases to me.

edit: Found the filing http://online.wsj.com/public/resources/documents/nsa1019.pdf
Hopefully NSLs will be eventually ruled unconstitutional in the U.S. also.
Agreed, the "before" picture looks so much more natural.
The advance of technology makes it inevitable that it will apply to everyone, so it's pointless to worry about whether it should.
Singapore is doubling their train network these days. And they'll be finishing the whole thing in a few years only.
WMail 2.0: The missing desktop client for Gmail and Google Inbox
vscode: Preserve files on exit (aka hot exit)
And it already has a cute name and (overly) acerbic website.

https://dirtycow.ninja/

Fixes already out for the usual distros.
Yeah. File this under another thoughtcrime I've committed.

There was one set of values that my company's CEO wrote up on the fly b/c we were doing reviews for the first time. Those values are _awesome_. They're explicit about the goal of making money, they're explicit about priority, just awesome.

The new COO felt like he needed to make an impact so he wrote some new ones. The company I work for also has a very playful marketing tone, and he applied our marketing tone to our company values. The values also aren't explicit-- they are each a complete sentence, but it's fairly vague how they should be applied. Idk. I know it's all bullshit, but I felt like we really had something for a moment. I think that the new generation (I'm 29) is just so tired of being marketed or manipulated that honest "we're here to make money" is a better value than "We should all do what we can to hit our numbers."

Maybe this is just a problem that engineers and lawyers have, since we neurotically try to find the inconsistencies and misapplications of statements.

[edit] money, not monkeys. Thanks kd :)
The more people get involved, the more chance they have. There are a ton of people here in that area. That group is a chance to do something about changing SF beyond griping on HN.
> We do send an email when you log in from a new device.

AFTER login? or before? I need to know when someone is trying to attack me, not when they've already succeeded. Otherwise what's the point? At least if I know beforehand that someone knows my password but failed OTP check then I can change my password, right? Why does Google not tell me when this happens? It's like common sense...
> If I actually printed them out and kept them in my wallet, my wallet would be overflowing by now.

It seems unnecessary (and easy to lose) to carry them around in your wallet. I print them out, and leave them in an envelope at my parents' house.
The worst part of buying stuff on the Wii U shop is that you can't store it on a tiny SD card. You have to plug in a full external hard drive. This seems like a pretty obvious thing for them to fix in this iteration.
But thats not special to angular... right? You can write that in vanilla javascript just the same - the issue is that the script running in the extension is given the ability to do that. They dont seem to be blocking a feature in javascript, they seem to be blocking a lib that uses it. Angular can't do ANYTHING that any other bit of javascript can't do in the same context.

Angular is just JS, its not special JS, its just JS. If angular can do something, it can be done without angular so blocking angular does nothing to prevent the vulnerability.
Was that so difficult Kodak? https://codecanyon.net/item/multipurpose-before-after-slider...
I didn't learn anything of note from the article after the three summary bullet point paragraphs (Users are mostly price insensitive, User acquisition costs are high, Good tech support costs a lot of money).

I would tend to think that the first reason - the demand side factor of ("users don't care much about price") is the best reason for keeping a higher price - the market will bear a higher price.

Supply side factors ("costs are high, therefore lets raise prices") do not seem sustainable in the long term. They're a good reason to try raising prices, since without them the business would be unsustainable. But if the market won't bear a price above your costs, then it's an indication that you must lower costs (e.g., reducing support) or close down, not that you've gotten the pricing wrong.
Ohhhhhh! Next time I'm at the bar I'm going to ask my freelance friends what their company's values are. This'll be good.
While it may seem an irrelevant detail, the camera-like leatherette case that flips or snaps open like the old camera cases did, not only made me smile but gave me hope that they were clued in enough to their market as to make it a success.
It's not the first time that Verizon transfers an account like this...

Have a look at this other story from last month, "On Phone Numbers and Identity":

- https://medium.com/the-coinbase-blog/on-phone-numbers-and-id...

- https://news.ycombinator.com/item?id=12597609

"It turns out the attacker was able to impersonate the employee on a call with Verizon"
I don't understand... how is this different from any other large-screen Android 6+ device being built right now with a similarly high-res spec camera?
>Not that I'd want my ID digitized though.

Not that it isn't already. Every state's DMV has it, and there must be some kind of database/API that allows law enforcement to access it.
IMO the key point to remember is that power-user modes aren't simply bonus pieces, but different workflows for different needs.
What they're doing now is a minor retrofit to their existing crashes-into-big-solid-objects "autopilot".
The Model 3 is at least two years away. By then, the technology should be better.

Volvo already has a concealed LIDAR in their self driving car.[1] Volvo will put 100 self-driving cars in the hands of ordinary drivers in Sweden in 2017. This is self-driving by the pros. Makes Tesla look amateurish.[2]

And Volvo is way ahead on marketing self-driving.[3]

[1] https://www.youtube.com/watch?v=2q00jIBhkq4
[2] http://www.volvocars.com/intl/about/our-innovation-brands/in...
[3] https://www.youtube.com/watch?v=uDB6fFflTVA
Well, I would say that there are the set of company values that get printed on posters and placed in breakrooms. 27% of employees believe in those.

But, most importantly, there is an unwritten set of values that rules over those companies. Those who understand those values tend to do well. However, many don't realize this, and the dissonance often leads to a crappy work experience.
that's just your opinion and I feel bad that I'm voting for the same candidate as someone like you who doesn't tolerate other people's political choices.
Unless you're actually building a database or something like Kafka it's way more useful to have someone that knows how to use a debugger and a profiler
They need an NSASA.
I am currently using the Hetzner SX131 in RAID 1 and http://minio.io. For about 200€ you get (2x) 30 TB and 50 TB traffic included. Thats about 0.007€ per GB with "free" traffic.
Odd choice for the name, since Kodak also has a color negative film called "Ektar" [0] which is just a single transposition away from this new phone's name.

[0]: https://en.wikipedia.org/wiki/Ektar
They do, however, mention DSLR multiple times in their presentation. Probably just to get the product associated with the image quality that people expect from DSLRs, but it is a bit confusing.
I do this too, but it's circular. So there is a pretty significant risk of getting locked out entirely if your authentication tokens for your Google account expire on all devices at the same time.

Yes, that's unlikely. But if it happens, we're screwed.

A better option would probably be to set up two Google accounts with two Google Voice numbers and use them to cross-validate each other. I think I'll go do that now.
You're not understanding my point: fraud requires intent.
The ExoMars Lander Malfunctioned Within 50 Seconds of Touchdown on Mars
Good. They'll have to wear them everywhere. I feel like when that happens, we'll have won at least a moral victory.
What's the rationale for disclosing vulnerabilities to for example Google before going public (unless the bug is in Google's software)?
I always thought Google was trying to tie your gmail account back to a cell phone number so they could help end anonymity on the Internet. Or else give the information to the NSA or something. I'm trusting Google less and less these days.

At the very least, Google should not have come out in favor of a particular Presidential candidate. Corporations have become incredibly powerful entities, able to affect the lives of all their employees and many others. If they can't wield this power ethically, they need to be shut down or we risk suffering under fascism.
It's not bad tone mapping, which is what most people think of when they think of shitty HDR. It's sharpening and increasing local contrast. This particular effect can also be created in Lightroom by pushing the "clarity" slider too far to the right.
Heads-up about Amazon Cloud Drive. From their TOS:

"We may use, access, and retain Your Files in order to provide the Services to you, enforce the terms of the Agreement, and improve our services, and you give us all permissions we need to do so. These permissions include, for example, the rights to copy Your Files, modify Your Files to enable access in different formats, use information about Your Files to organize them on your behalf."
Of course. But I find it more of a pain. And it's harder to hack than a PSP, and less capable, AFAIK.

Also, I actually don't have a 2/3DS, because I have no money. A GBA costs ~$20.
Why? Still gets you from A to B.
Yeah, I could believe that it would create too many false positives and in retrospect things do often seem easy.

Google and other service providers do have data to evaluate the benefit and cost of making decisions based on patterns, and they probably do.
Even though its not presented as such, this is really an indictment of the spec housing builders right?

They are the ones not applying design aesthetic and thats because its expensive and custom per lot and they do not have the inclination (or potentially profit motive) to make their "stock" designs more aesthetically correct.

Once you get into actual custom builder prices it is pretty trivial to get a house that doesn't fall into these categories, and only taste prevents it.
I guess I've yet to see company values be something more than a generic "be a decent human being" list. Then, you watch all the politics and backstabbing from middle management and the complete cluelessness of upper management and that number seems pretty high to me. I haven't worked at a lot of startups can't speak to those.
I'd be curious to know if and how he was able to store 50TB @ home while avoiding being a disorganized pack-rat?
How's it odd? It looks like they've already repurposed Ektar once before. Ektra sounds better (to me, anyway) and there's no chance that film purchasers will be confused.
Chinese astronauts enter their new space station [video]
I remember working for a government contractor in Washington D.C. We had 1/10th of an hour building. You were literally supposed to build down to 6 minute increments. Fun times.
> All high-value-added can afford to live farther away along the lines, in better appartments than the constricted downtown space.

Just build up. There's plenty of room in downtowns. The elevator can be the most important form of `public transport'.
When everyone screams about security and why we shouldn't be snooped on one of the biggest factors to consider is that inevitably someone who has access to this information will abuse their power.

It's just human nature.

The argument that there can be some process, some security apparatus, or anything in this world to prevent that is just a pipe dream. Someone will abuse their power and ruin someones life that is why no one should have access and that way we are all better off.
I am sorry but ive grown up with these kind of musings constantly sold to me as deep wisdom. I wasted too much time in my life to finally realize how utterly useless these people's bored melancholical afterthoughts are. Its the product of a man who's had a great life and now he wants it all to have a deeper, almost spiritual component while there are people with real problems in the real world who dont get an essay published about them. Its offensive to see rich people use the space online to paint their lives in a supernatural light while other people, real problems get no treatise.
not trusting themselves creates a legal action whereby those being spied on could argue the congressional actions did not use trusted actors and are thus invalid.

you're all idiots.
Yes, I think we're in an advertising bubble. All these companies that would never have existed under normal conditions managed to raise tons of funding and acquire millions of users through advertising.

The intense competition between tech startups (who are all desperately racing to secure a monopoly in their respective industries) has increased the demand for advertising space and therefore driven up cost per click.
I'd call it apt rather than odd.
Even 10 years from now, I predict we'll still be wearing seat belts. I guess we'll see who's right :)
This would be a high quality comment if you removed the first and last sentences.
> JavaScript application

Note how it doesn't say "Elm application" or "ClojureScript application".
4K Rendering Breakthrough: The Filtered and Culled Visibility Buffer
The only thing i can remember about Kodak phones is that The Verge tried the first Kodak phone last year at CES 2015 and it was a disaster.
It had a horrible Android skin on that made it look like old Nokia phones
Hope they upped their game with this one.

1st Kodak phone at CES 2015
http://www.theverge.com/2015/1/5/7498999/ces-2015-kodak-phon...

https://www.youtube.com/watch?v=mPadMS75i48
> That someone could be siphoning terabytes of classified information over the span of decades is just beyond comprehension.

I don't know how ridiculous this is. Security is an ever-evolving field, and a lot of these stringent controls weren't necessarily in place decades ago - for example, what fraction of places were banning USB flash drives even 10 years ago?

The NSA isn't superhuman, and security is hard. I have no love for the agency, but it's not like only complete morons are susceptible to deep insiders exfiltrating data over the course of decades.
First demonstration of brain-inspired device to power artificial systems
Increase your Docker IQ – Docker aims to educate
In that case have some https://www.youtube.com/watch?v=sKN9MajEVOQ
At the very least, any change to the email address should send out an email to the old address stating "If you didn't make this change, click on this link to have your account frozen until you do a password reset."

It's silly to depend on an email for authentication, then allow the hacker to just delete the email address before they change the password. Giving the old address the right of first refusal defeats that kind of attack and should be dead simple to implement since the framework was already laid down for the "verify your email" step during setup.
I've always seem company values with things like "We respect each other", "we operate with integrity in every aspect of our interaction with other stockholders".

It's like kindergarten meets lawyeresse.
Dirty COW is a privilege escalation vulnerability in the Linux Kernel
I feel like I alluded to this, so my bad if I wasn't clear enough. Microservices are absolutely more (and perhaps only) appropriate for larger orgs dealing with serious traffic. I do also think there's an intermediary 'macroservice' concept that isn't quite several hundred services a la Netflix/Uber, but also isn't as primitive as a layer of (stateless, homogeneous) overburdened API servers with too much business logic.
It'd be one thing if WebRTC actually worked, then we could maybe talk about trade offs and whether or not the functionality is worth the negative impact. But WebRTC is a real shit-show right now. It's a 5 year old spec that doesn't have a single complete implementation, and no two implementations are even close to being reasonably compatible. I challenge any one person to write a WebRTC-utilizing app, from just the spec, that works in two OSes and two browsers.

Add on to that the fact that none of the popular examples are running on anything resembling the latest version of the spec. It's complete garbage. I've stooped to having to use a third party framework in my project, and that still fails 20% of the time when it's not 100% of the time on iOS.

I lost at least month to WebRTC. They lure you in with the promise of working over your LAN and then completely destroy your dreams. I've had connections report they were successful and still have no audio come through! "Get a TURN server" they say. Did that, didn't help, still have problems because the STUN connections are reporting success so the TURN server is never attempted. No errors, no indication something is wrong. How are you supposed to recover from something like that?
No, because you can still get to all destinations, but you can't use it for certain tasks. Tesla has understandable reasons why they don't want self-driving capability used on alternate revenue-generating networks. You may disagree with them, but it doesn't mean that these reasons would ever lead them to block off physical locations.
Yeah, it's completely backwards. I thought we were past Instagram filters, but now Kodak is trying to build it into their camera?
1 page of text with no graphics, is less than 2Kb. So 1MB can hold 500 pages of text; 1GB can hold 50,000 pages. 1TB can hold 50 million.

10TB can thus hold 500 million.

Of course, graphics, audio, video files etc. can severely increase the size.
If you think that's bad, try working in a place where almost all of them do.
'Essentially witchcraft': A former naturopath takes on her colleagues
I like DRF, but I think its allow-by-default mentality is a security risk. If you use it, keep in mind that:

* ModelViewSet is read/write, you should use the more verbose ReadOnlyModelViewSet until you know you want to allow writing.

* Fields specified in the "fields" member are read/write by default. You have to explicitly declare the field on the ViewSet and pass "readonly=true" to make it read-only. This is especially dangerous for ForeignKey fields, which can be used to change object ownership if you aren't careful.

When I was responsible for a DRF-based API I wrote some custom Fields and ViewSets to use safer defaults, and I recommend others do the same.
To me it's a huge drawback and makes it a no buy. No way I'm going to vote with my money and award them for using inefficient, unrecycled, inferior material instead of abundant recyclable non-animal sourced material.

Edit: Thanks for the flags and downvotes, hate is so fresh here.
Basecamp also just raised their prices from $29 [1] to $99 [2] in the past week.

Fun factoid, they are now annoucing how many paying customers they have. Apparently they have 100,000 paying companies using basecamp and 2.2m accounts. [3]

Makes it fun to guess their annual revenue now given these data points.

[1] https://web.archive.org/web/20160617192441/https://basecamp....

[2] https://basecamp.com/signup

[3] https://basecamp.com/
The .net framework is pretty much always 100% backward compatible. Again not a problem if you will have an active team maintaining the code. But can you even count how many dead applications and websites you have encountered in your career? At least if the OS gets updated, the application benefits from security patches.
A problem I've been thinking about recently is how you ensure that you have a DAG. Given a set of microservices that don't have a strict set of "tiering" rules, you don't necessarily know what services your dependency calls, and hence whether there is somewhere a dependency on you.

There are ways to minimize this, and certainly ways to instrument such that DAGs are detected, but I'm genuinely interested to know about how people are avoiding cyclic dependencies in their services. I think it's important, because if you're using containers, there's a good chance you're using (eg) readiness probes to determine if your containerized service can reach it's dependencies. If you have a cyclic dependency and something breaks, all of a sudden you can't bring up any containers in the cycle: A can't come up until B comes up, but B can't come up until A does.
Firefox Addons Marketplace reviews and bans malicious and insecure extensions. There are legitimate uses of eval. Angular's use of eval (on DOM content) is insecure within the context of browser extensions.
Yes. I am caught up in the Chinese hack that stole all the .gov background check information last year. Not only did my pertinent information get stolen, but also everyone who I used as character references. Trust is dead.
I think it's pretty hard to get into a "playing to win" mindset at any age. At least it is/was for me, it's hard to let go of the joy of winning through clever or flashy moves and focus on the joy of winning a high level competition, where everyone is playing to win.

Sirlin's (fighting game player / game designer) has a good book/series of articles about this that's made the front page a few times: http://www.sirlin.net/ptw-book/introducingthe-scrub

"I once played a scrub who was actually quite good. That is, he knew the rules of the game well, he knew the character matchups well, and he knew what to do in most situations. But his web of mental rules kept him from truly playing to win. He cried cheap as I beat him with “no skill moves” while he performed many difficult dragon punches. He cried cheap when I threw him five times in a row asking, “Is that all you know how to do? Throw?” I gave him the best advice he could ever hear. I told him, “Play to win, not to do ‘difficult moves.’”"
Scratch your own itch.
Yeah, I'm also scared of LastPass being a SPOF. While LastPass does do a good job, no one is perfect, and the cost of having my account compromised is really high

I'm now leaning towards encrypting backup codes with a passphrase and putting the encrypted blobs in LastPass. I haven't actually done this but as long as I don't forget the second passphrase, that might work…