skysight-inc/HackerNews huggingface dataset:
Seriously, why the title change? Sometimes the title tells you nothing - wouldn't it be reasonable HN policy to allow the title if it's an accurate summary of the first paragraph?

"Yesterday morning, Reuters dropped a news story revealing that Yahoo installed a backdoor on their own infrastructure in 2015 in compliance with a secret order from either the FBI or the NSA"

Edit: Looks like it's changed back now - great. For a brief period the title was set to "Surveillance, whistleblowing, and security engineering".
Figure a 100 calories per mile; not exact for every person, but close enough for our purposes. Now let's take the common "imma have a smoothie, I ran today". I've seen people order smoothies that contain a thousand calories, that's what it said on the sign. But that's ridiculous, lets go with half that. 10K run, carry the 2, comes out to 6.2 miles. Your smoothie cancelled all but 120 calories. And you need to burn 3500 calories to lose a pound.

Put another way, if you ran fifty miles and took in no calories (obviously hypothetical), you'd lose ~1.5 pounds. You still have to make dietary changes if you want to lose weight.

Signed,
Skinny, lifelong runner who hasn't the first clue what it's like to try and lose weight
This is not a supercomputer, it is a power-dense workstation. A supercomputer is what you get when you network enough of these to fill at least one large room.

This article is, I hope, a native ad.
professions seldom use cameras other than main Japanese brands.
Or maybe a Windows CLSID.
I agree, I'm not sure that an ethics course will make people behave ethically.

As part of my former life, I had to take an Ethics course for my accounting license. It focused on topics like conflicts of interest. Even though many professional (licensed) accountants have taken the ethics course and passed an ethics exam, it doesn't mean that much. Ultimately, behaving ethically will come down the individual's morals.
Shouldn't all pollyfills check only override the functions if they're missing?
Sounds like a profitable model (introducing new devs to best practices).
Please don't do ideological trolling here. If you have a point to make, make it substantively and without name-calling.

HN comments need to get less inflammatory, not more, as topics get more divisive and partisan.

We detached this subthread from https://news.ycombinator.com/item?id=13173556 and marked it off-topic.
Xerox WorkCentre PE16 Driver Download
So you cannot review what you shot immediately on the camera.
It's not really much different from the US. There are a few elite universities that have very competitive admissions and then a bunch of second-rate local universities (although the elite universities in China are about the same level as second-rate universities in the US). The problem is that university admissions in China is decided entirely based on a single test. You basically get one shot. If you don't do well, that's it for you (unless you have rich parents that can send you to the US to study).
No, add a pawn.
I put in qualifiers to ensure Clover has an out here, I really am rooting for you and all the other startups looking to improve health outcomes. However, nothing I've read about the business model tells me that Clover is spending $2500+ per month on all the tests with a CGM, possibly a personal trainer for weight lifting, and possibly a personal coach daily to tackle really tough periods like carb flu and fasting, to aggressively counter metabolic syndrome the moment it is detected, for 12-18 months, then scaling back to about that much every other month for the next 12-18 months, then to about that much every third month for the next three years. Consistently get people through those five years with no backsliding on the current key diagnostic metrics for metabolic syndrome, and you'll be in what is currently a tiny sub-1%-fraction population that have reverted and kept reverted over that duration. While an acute cost, if you catch patients in their 20-40s and do this, it represents a steal over chronic costs and late-stage costs. Do it consistently, and it represents a disruptive change of the cost model status quo.

The business model of a US health insurer in this situation frankly sucks, however. If Clover successfully manages a reversion outcome with aggressive short-term techniques for a chronic condition, then nothing prevents the patient from switching away to a cheaper insurer afterwards. Clover puts in all the hard work, and another insurer reaps the actuarial benefits. That has to be fixed, because all the big killers of patients, insurer profits and medical budgets in the developed nations are the biological analogs of Advanced Persistent Threats, and not amenable to fixes developed for acute situations (which as a civilization we're really good at addressing).
> I'm also guessing the permit limits Uber from doing what they want completely.

Yes, it is in fact a key feature of laws and statutes that they (sometimes) keep people from just doing whatever they want.
Unfortunately it's not that simple. More often than not, someone high up will find someone low whose continued stay in the country is highly dependent on them keeping this job.

While I've never had to make such a choice, I can tell you that my personal attitude towards what I would and wouldn't do changed the day this restriction was removed.
> Voluntary fire brigades.

It's entirely rational to join a VFD out of self interest.
...lol?
At my school (Northern Arizona University), CS students are required to do exactly this.
>it's far more likely that a user would encounter either a malicious script on the web

If it's a script on a different website (and no privilege-escalating-zeroday is involved), it doesn't matter.

If their computer does get a virus, then it may just keylog everything. If it does hook into a browser, it'll probably be made to log interesting plaintext bits straight out of the DOM before targeting the crypto API. If a virus is targeting users of a specific website and is able to inject code into a browser and fully control the environment that the website's code runs in, then it doesn't need to rely on the website using the crypto API to extract data from it. If the site keeps the key in localStorage, then any code running in that context could read from there too. If the site prompts the users for the password encrypting the key, then any code running in that context could read the password from DOM as it's entered, or prompt the user again. If the site's code is known to stick the key into a 256-byte array, then depending on the browser and type of attack then it could wrap the array constructor and log whenever it sees a 256-byte array get made.

The crypto API actually provides a good defense from some types of attacks. It allows you to create a crypto key that is handled by the browser and never has its key material exposed to page javascript.
Undergraduate ethics courses usually just go over the big historically-important ethical analysis systems (utilitarianism, Kantian deontology, veil of ignorance, social contract, etc.) Unlikely to touch on trickier issues such as why you ought to act ethically at all, or even what it means to act ethically - why, for instance, are you so certain writing backdoors for the NSA is unethical? This is certainly something which can be argued.
It's meant to be left for interpretation. But I was thinking not changing the board size. Add pinned pieces, compose tactics, make the game tree as wide as possible.
Retrieve/Edit ActiveX Control from Shape Obj. And Insert Text Shape in Visio Page
You aren't aware of the common refrain in academia, "snitches get stitches"?
There was a big jump in the stock when the acquisition was announced, so it would follow that the acquistion premium is priced in.
Where to check latest details of CONNECT broadband services in chandigarh?
If you are looking for latest information of CONNECT broadband tariffs in chandigarh, surely www.connectcare.in can tell you most about CONNECT broadband services.
even though those cars are steering wheel and pedal free, a google employee is riding inside, with a laptop attached, and a big red stop button. Here's an image:

http://www.mycoolbin.com/wp-content/uploads/2015/07/Googles-...
> When there are few professional consequences for unethical behavior at the behest of your employer, taking an ethical stand is ineffective and quixotic. You will be fired and another engineer will likely complete the job.

Well quitting a job as a concentration camp gas chamber constructor may merely slow down the operation a bit, but that could mean more lives saved until VE day arrives.

And yes I did just make that metaphor.
Yeah had same kind of issue. Dispute management people told me "If I was running a business, I'd accept every customer I can." My response "even if they're using you as a free rental service?" Author is 100% right, they totally side with the buyer and they're essentially churning through sellers to make money. Even if they ever clean up, fuck em
Did you actually see the video? The car drove through the red light long (in relative terms) after the signal turned red. That an accident didn't happen is sheer luck.
Uber already charges a cleaning fee of $40-150 at the driver's discretion. There's margin there for the cleaning cost, opportunity cost of the vehicle time, and a credit to the reporter for the trouble of seeing vomit and waiting for the next car.
An Uber driver deliberately pushed me (a cyclist) out of the way with the hood of his car when I tried to take a picture of him parking on an expressway. I filed a police report and a complaint with Uber, but nothing came of it.
> we can conclude it's not the US government because Yahoo is willing and legally able to publicly disclose it.

This implies a potentially fatal assumption that IC agencies perform clandestine activities with prior notice to mission targets.
Please don't post unsubstantive comments here, and please don't call names in comments: https://news.ycombinator.com/newsguidelines.html.
If only we could convince the millions of yahoo groups users to move their groups elsewhere.
Dealing with the average buyer on Craigslist is exhausting. "What's your best price?" and "Will you accept <10% asking>" are by far the most common queries.
I had 2 herniated discs (L4-L5, L5-S1) in 2014 due to swinging an axe over my head for an extended period of time on a large structure fire.

I say that to say this; running is way better for my back than cycling. My left leg, mostly my foot, still haven't completely recovered from the nerve impingement, but I am running 30 to 40 miles a week with no problems (lots of trail running too, check my Strava :) )

I can't cycle like I used to on any "normal" bicycles. This position, bent at 90 degrees or more, that one is required to sit while cycling is actually pretty terrible for the lower back. Also, being male and being part of a large male dominated industry - firefighting, I see lots of male cancers. That is, testicular and prostate cancers. My department is participating in a massive testicular and prostate study; We are being asked to change our chonies often and wash hands before going to the bathroom as the scrotum is a sponge for anything it touches... smashing that region when cycling for extended periods of time seems like a bad idea (and it hurts).
No, they are not faster anymore. Really check the anandtech-benchmarks, http://www.anandtech.com/bench/product/1709?vs=1646. Also in areas that are not gaming performance, but resemble more pure computations – like video encoding – the i5 easily beats the fastest FX-8-processor. Same is true when comparing against the FX-9590. If I see that right in every single benchmark.
We detached this subthread from https://news.ycombinator.com/item?id=13156608 and marked it off-topic.
> The entire open source industy.

The open source industry is far from unbridled altruism.
what ? You mean have a non-legal starting position ?

Well yeah, I could also add a rubiks cube to the white pieces.
This sort of uncivil comment will get your account banned on HN, so please post civilly and substantively from now on.
provide nessary security in plain http site
This sort of personal attack will get your account banned on HN, so please don't do this.

You've posted a lot of unsubstantive comments already, and some uncivil ones too. That's not good. Please (re)-read the site rules and post civilly and substantively, or not all, from now on:

https://news.ycombinator.com/newsguidelines.html

https://news.ycombinator.com/newswelcome.html
Options:

- Refuse to take action. They want engineering done, they can bloody well do it themselves. Don't type a single keystroke in the direction of helping them.

- Announce what is going on anonymously. Plenty of avenues for this.

- Announce what is going on, publicly. See if they do indeed want to take you to court.

- Quit.

- Take down the service. Much easier if the service is only a part of your company. Helps a lot if you don't retain the information they're looking for.

- Lie.

- Destroy records (this is by far the riskiest action here, above a simple public announcement).

- Delay. And delay more.

- Keep information outside the jurisdiction, possibly controlled by a third party who will not comply with orders.

- Misunderstand ("Is that a one, or an ell?")

Most of these will get you into trouble, a few won't. Most of these are really difficult roads.

I've given this some thought before. If I found a backdoor in a product, I would remove it with a tracking bug and a checkin, and send internal email about a really bad bug that I'd just fixed; the more internal people that know, the better. And if a VP showed up and berated me, I'd just tell them to fuck off, and quit if it came to that.
The other point to be made is that you probably want your best developers implementing back doors (if you are compelled to do so), so at least the back door is as secure as possible (and not trivially bipassed)
It does for languages where you can find a mode that supports it. I never found one for Javascript. Honestly though, while I like the feature, I never notice that it's not there when I'm using Emacs. I can get around in a JS code base.

The only environment that I've been in where it was critical was large Java projects. I would have been lost without being able to goto def though maven dependencies. Having to read XML to figure out where stuff is would have driven me insane.
> It's the libertarian/anarchist viewpoint

That's about as coherent a statement as 'it's the progressive/communist viewpoint'

There is a huge gap between Zero Government anarchism and the belief that government authority should be limited so it does not grow to oppress.
yahoo groups is still very big. it was big before yahoo acquired it (egroups), remained almost unchanged throughout the years, and is now in maintenance mode, but there are still millions of users who continue to sign up.
Didn't know this, will try!
I think this list might be in for some real surprises over the next year or two.
>> take at least one full term length ethics course

I did take one for my Masters in Computer Science. I think it was required. Unfortunately, for some reason I didn't understand most of it. Don't know why. My suspicion is that they didn't know what they were talking about or it was just a class full of BS.
Unorthodox thinking is a cognitive ability. what kind is it if not intelligence?
I believe it's very common to find little variations on algorithms or coding style like this that could produce a nice gain in efficiency or elegance. They aren't really the same problem as whole-system engineering, though, since most of your bottlenecks come from the algorithm that is completely unsuitable, not the one that is a little bit suboptimal.
Well, where are the studies? While we are talking about dying; Personally, I would rather die young than die in a "home" shitting myself unable to remember who I am. I see this more than I care to and it is horrible.
Please don't.

We detached this comment from https://news.ycombinator.com/item?id=13174901 and marked it off-topic.
Purely subjective: I love the model S design, loathe the Model X design.
To paraphrase all the other recently disrupted industries.
What definition are you using of "urban"?

From Wiki:

> The U.S. Census Bureau defines an urban area as: "Core census block groups or blocks that have a population density of at least 1,000 people per square mile (386 per square kilometer) and surrounding census blocks that have an overall density of at least 500 people per square mile (193 per square kilometer)."

By that definition, which would seem to completely rule out farming, I doubt you're actually in an urban area.
It's not typical, but it's not particularly atypical either. Science is one of those fields where (especially now with the publish or perish mentality) YMMV greatly. Good labs are awesome, bad labs can break you, similar to most other human endeavors. Unfortunately, I tend to be more swayed towards believing that bad labs are more common nowadays than in the past.
> did you rtfa?

You've been posting quite a few comments that break the site guidelines. We ban accounts that do this, so please read the rules and follow them:

https://news.ycombinator.com/newsguidelines.html

https://news.ycombinator.com/newswelcome.html
Thank you. Fortunately I have a close family.
It's an interesting question. It is easy to check when a position is unreachable, sometimes.

For instance a white king on H8 and black Rooks on A7, A8 (unless I'm mistaken).

It almost seems as if it is easier to find a position that is guilty (when it is), than to check that a position has a perfect record (check that it is legal).
This is why we (as a community/industry) need to have the equivalent of a prison/death threat.

The government wins by making it personal, by threatening prison and death for your obedience. It's not an abstract threat. It is directed to a specific person not a company or security team.

The people who comply can quit those companies but they don't. I'm not referring to the ones down the chain (e.g the security team who was unaware) but the ones who obeyed and pushed something they believed was wrong.

Whether it is public shaming or having a permanent stain on their reputation next time they go job hunting, we need a way to retaliate.

Right now, they can fuck us and get away with it and what's their excuse? "the government told me to do it. Just doing my job. I had no choice."

There are no societal consequences to cooperating with the government even when we believe it's wrong.

Create a climate of "snitches get stitches" and maybe they will think twice before selling out the lives of a billion people.
The same way these government officials hide behind patriotism when they mean blind obedience to my authority.
Probably just because it doesn't add to the discussion. Though, from a certain standpoint it shows one of the problems with our education system pretty clearly. This is truly a fundamental technique. I don't know how one gets out of school without knowing it. It doesn't say anything about you, but it says a lot about what we are teaching people. Embarrassingly, for a long time I thought I had invented this technique ;-)
Look at Moltin (https://moltin.com), YC W15:

http://blog.ycombinator.com/moltin-yc-w15-wants-to-simplify-...
Are you willing to get best Broadband connection in mohali?
marketing is amoral, and we all want to be right. people within the company want to sell products because the products are good (but marketing is amoral, so they'll sell anything.) customers want to buy the right products (but marketing is amoral, so will sell them anything.)
That's a very good point actually. Though in this case they say the tip-off came from a law enforcement agency (I assume they mean an American one).

It's possible however that agency doesn't realise it's a clandestine operation by another US agency. Or they do, but now the operation is complete (this was three years ago) and they want a way of informing yahoo about the breach without admitting who was behind it in the first place.
NB: This may not apply to you, but here's my experience.

I was about 225 lbs and had experienced (mild) arthritis in my knees, starting in my late-20s. Around age 32 I resolved to finally get in shape, the arthritis was, at this point, mild-to-moderate, still in the knees (now in the hands). Losing the weight and regular exercise (in my case running, which I'd been doing as part of soccer on the field, but not for distance until this point) greatly improved my arthritis symptoms. The evenings after a run, my knees felt fantastic. Weeks where I skipped, the symptoms returned (no worse than before, just back to "normal").

Once the weight was lost, however, the symptoms almost completely went away. This is very much a YMMV situation, but it's something to consider.

Exercising the full range-of-motion of the joint + weight loss can help a lot, even if it is just delaying the inevitable. I'll happily accept 5-20 years of improved mobility even if I end up immobilized by this like a good chunk of my ancestors.

The exercise needn't be running. Cycling, elliptical, and rowing machines are low-impact cardio and let you exercise your knees range-of-motion pretty effectively. Bodyweight exercises like squats and lunges and similar, done regularly, will also improve the muscles around the knee, which can help.

Again, for some forms of arthritis this won't help or won't help as much, but for others (like me) it can be a life changer. The path I was on, I'd be unable to run or play soccer at this point (80% confidence in that statement, would've sought medical treatment by this point if I'd stayed on that path).
This is not true. "A study done by researchers at Syracuse found that men burned about 105 kilocalories/mile on average running a mile in 9 minutes and 30 seconds, and about 52 calories when walking the same mile in 19 minutes." [1]

[1]http://running.competitor.com/2015/03/training/many-calories...
Sounds computationally intensive. It reminds me of an experiment I read about some time ago, tangentially: http://theinvisiblegorilla.com/blog/2012/02/15/how-experts-r...
Can't you both be wrong?
Scanadu to shut down support for its Scout device per FDA regulation
>A side issue is that being able to prove authenticity would be valuable...

The first time I heard about CameraV & InfomaCam apps I tought: Why regular cameras don't have this?

https://guardianproject.info/apps/camerav/

https://blog.witness.org/2013/01/how-informacam-improves-ver...
It wasn't me despite your DR Ycan't photos. :)

Tumblr was indeed what I was thinking about.
Given your assessment, at least take Lyft instead.

If I have a choice, I don't take Uber.
Who’s Liable for George Hotz’s Self-Driving Software?
And closing/financing fees! If you end up taking a job out of area and decide to sell(understandable as now isn't the right time to be purchasing a rental) you're out the fees.
JD.com (one of the large Amazons of china) has been doing this at a larger scale. http://fortune.com/2016/11/14/jd-china-drone-delivery-single...
Argon2 does the right thing. No silly upper bounds.
I was very impressed with your report of Chase's behavior (and while 25 seconds might be an inconvenience of course it's acceptable.) It sounds like a gold standard. Of course, it's not practical to do that 72 times (for example every time you want to order a dildo from Amazon), due to the wait to get the card (it's not instant), but practically today people could use Chase fine to make companies not follow them. Do you think you can choose a name such as Donttrackme McSpammer? I realize this is pretty much the opposite of the term "John Smith" as for example the Uber driver would see that you went out of your way to call yourseld Donttrackme (there is zero chance it's an actual first name) but the adcantage is that it would not appear fraudulent.

Since you don't have an annual fee, can you order a card in the name of Donttrackme McSpammer (or any other similar name that couldn't be mistaken for a real name) and see if you get it?

Thanks for having taken the time to check the other two sites as well. I appreciate it!