skysight-inc/HackerNews huggingface dataset:
>Also, I'm not sure how it use to work, but how can a seller reasonably refuse a buyer when a transaction has already gone through, without their intervention?

A couple of ways. For one, you were able to set up filters to filter out anyone below a certain amount of feedbacks or anyone with X number of negative feedbacks from bidding on your item. Obviously by eliminating the ability to leave negative feedback to buyers eliminates this.

You could also cancel the bids of buyers and offer the item to a different bidder if they violated the terms of the sale (or didn't pay). As absurd as it sounds, someone can bid on your item, not pay, and still leave you a negative feedback. For example, they place the "winning bid". After the auction ends (and before they pay) they contact you and tell you they want the item shipped to Nigeria. Even if Nigeria isn't listed as a place you sell too, and you explicitly point out in the item description that you don't ship out of country, they can still leave you a negative feedback - all without paying! In the past buyers were hesitant to due that, because they'd certainly receive a negative feedback in return. Now they can be as scummy as they want without consequence.
I find them to be very complimentary. I switch between VSCode (for writing, code editing) and PHPStorm (refactoring, debugging). Beyond webdev, VSCode offers excellent Markdown support. With auto-previews, custom styles, and many great extensions, it's worth installing just for the Markdown support alone. https://code.visualstudio.com/docs/languages/markdown
Guys before you take this too seriously, PNAS is a publication repeatedly criticized by stats experts like Andrew Gelman. NHST techniques are bad, and there are many papers showing almost zero effects of education.

Plus your prior on this should be pretty low given Turkheimer's 3 laws of behavioural genetics. Especially since education is more like a shared environment variable rather than a unique environment variable.
no, b/c they were pretty senior scientists and I was just getting my career started. I think that would have been career suicide.
How the World Closed Its Eyes to Syria’s Horror
A major selling point for Seattle over SF is the complete lack of state income tax. Losing an extra 10% of your money before you receive it is pretty painful, and it's especially painful if you get stock options and cash them out while an SF resident.
From my experience if Paranoids did know they would have locked it down at the expense of engineers or others. I know since I have made breaking changes to infrastructure which did lock out some engineers and cause plenty of headaches.

Every Yahoo I have ever known has cursed the Paranoids for getting and the way. Every Yahoo that has actually been in a situation has also blessed the Paranoids for the same reasons.

Simple fact is that Yahoo has a mega butt ton of code from several decades. There are going to be holes and when they are found they are fixed pretty damn quick. Last one I dealt with was solved in hours with all hand on deck. Sometimes it just sucks to be as old a Yahoo is.
No, a collision attack would not give you the plaintext from a hash. A first preimage attack would do that, but no computable first (or second) preimage attacks against md5 have been found.

https://stackoverflow.com/questions/822638/does-any-publishe...
Google does allow other apps (I think it is still same as GAuth) SASS pass and other authenticators with good. But yes they don't allow other token provides like Yubikey or RSA fobs
A Quantum Computing Cartoon by Scott Aaronson et al
Jet engine silver bullet rather than holistic, comprehensive smog abatement. Yeah, right.
So stop doing them.
Good point. Thanks for pointing out my mistake.
Deep Linking Is Not Enough
There's also the proof of existence[1]. But none of these really matter because the issue is not proving you were first, it's becoming aware of the plagiarism in the first place. The plagiarists are relying purely on security through obscurity--their cases would fall apart immediately upon discovery anyways.

[1]: https://proofofexistence.com/about
That website does not find collisions. It uses rainbow tables (or some other type of table) to crack passwords that it already knows.

Collisions are irrelevant for password cracking.
> I like the idea of Semantic Versioning, but it does cause problems where if I'm going to do several breaking releases one after another I have to keep bumping the major version, and I hate that.

From your point of view, the problem is something inherent to semantic versioning. From my point of view, the problem is inherent to your behaviour – if you really want to do “several breaking releases one after another”, why hide it from users?
It's so unfortunate that so many people don't understand when young people are, effectively, disabled.

A friend's parents stopped talking to him and shamed him because he applied for a handicap parking permit (doctor recommended). He can't walk much more than 100 feet without agonizing pain. He's 28. The father's words were something like "how will you feel when you are taking away that parking spot from an elderly person who really needs it?"

I hope it gets better.
In Chrome, window.crypto is read-only:

> window.crypto

< Crypto {subtle: SubtleCrypto}

> window.crypto = "hi!"

< "hi!"

> window.crypto

< Crypto {subtle: SubtleCrypto}

But not anything underneath, including getRandomValues(), as you write. A recent issue about this [1] on the WebCrypto spec itself was closed with 'wontfix' because in their view, polyfilling web APIs is a common and accepted practice.

[1] https://github.com/w3c/webcrypto/issues/107
According to PayScale[1] and Glassdoor[2], average/median salary for software engineer in the Bay Area is around $110K, so it's tough to believe $100K is "the bare minimum".

1: http://www.payscale.com/research/US/Job=Software_Engineer/Sa...

2: https://www.glassdoor.com/Salaries/san-francisco-software-en...
We converted from filing as LLC to LLC filing as S a few years into the company, and it didn't really change much for us. Either way, when you get significant revenue, you need an accountant to do your taxes. I don't remember our costs going up significantly after we switched.
I think it's irrelevant in practice. (In theory, that's an interesting question) You're not making the decision to make this public. If you're on the security team, you're going to notify the boss, and at that scale of the system compromise this goes all the way to the top. At that point someone who knows about the gag order is in the chain.

The only scenario where I think the question matters is if you do something really stupid that would get you fired if this was an actual exploited external access.
It may lead to innovation, but it also leads to a landscape where large businesses destroy smaller startups before they even have a chance to succeed.
Something else came up. I'll get to it eventually.
Amazon’s deal to put an Echo in all Wynn Las Vegas hotel rooms []
> At the end of the day, window.crypto can be absolutely anything. ... If you must run the signal protocol in-browser, run it in Electron, or as a Chrome app ... At the end of the day, window.crypto can be absolutely anything. If we can bundle all primitives with the rest of the application code, we can verify the integrity of that one JS bundle

If the attacker is running code within the same javascript context, within the browser's process, or within the user's operating system kernel... then you're hosed. Anything can be anything. Other javascript within the same context could redefine global functions, intercept objects passed through them, and mutate function references in your JS bundle. Or it could just log the DOM! A browser plugin or a kernel rootkit can keylog the user. The only defense an application has against the user's own machine being compromised is obfuscation, and that's a losing battle.

There are real issues with doing cryptography with users' keys in web pages, but it's not "their machine might be compromised" (and Electron doesn't solve that anyway). Even if the page javascript correctly stores user keys in localStorage where the server can't see them, nothing stops the server from serving you some backdoored javascript tomorrow which silently uploads your localStorage to the server. This might be correctly solvable with ServiceWorkers, though you'd want users to have some way to verify that they have the correct and peer-reviewed ServiceWorker source running. The easiest way to do that would be some kind of local application or browser plugin, but then at that point that you've involved a local application you've missed some of the original goal at keeping it all in a browser, and it would probably be easier for everyone involved if the crypto just happened in the local application to begin with.

Interestingly, some `window.crypto` functions actually solve some of the problems with running cryptography in web pages. You can create and use a crypto key that is handled by the browser and never has its key material exposed to javascript. Even if an attacker injects javascript into the page or the server serves malicious javascript the next day, there's no way to steal the key material. `window.crypto` can effectively provide a virtual HSM from the web page's perspective.
> there was a lot of tough talk about fighting against Trump. Now it's all about working with him.

The tough talk was about fighting against his policy decisions, not against scheduling a meeting.
I'm sorry to hear that it's unfortunate. When prejudgment is based on race, gender etc it sucks but there are legal resources. In fact we make prejudgments all the time based on all kind of factors fair and unfair and we don't always have any recourse except to keep trying.
No. They've stolen the hash, so if they crack it, you've just let them waltz back in.

The correct response is force a password reset, and _delete_ weak hashes so that they cannot be stolen in a subsequent breach. At worst, store a bcrypted md5 password as you suggest, but only as a check for a password the user must not be allowed to use again; it _cannot_ be used to sign them in.

One of the attacks you're preventing is on _other_ sites, where the user has reused the passwords. Keeping around weak hashes even to let that user perform a reset is risking that hash being taken, cracked and used in a breach elsewhere.
Exactly. Uber is likely already following all of the permit requirements ($5 million insurance and experienced drivers) so they just need to apply for one. That assumes they don't challenge it in court based on the ambiguous language of the bill about what determines an autonomous vehicle, which sounds like their plan. They've demonstrated themselves to not be afraid of some bad press or the court room.

Hardly a major roadblock at the pre-market testing stage for such a big company already operating in Pittsburgh. They could easily shift testing to other people more welcoming states and countries in the meantime.
That's salary alone, not total comp.
Whelp. Yahoo is officially over today. It was quite a fall.
It would be just as wrong to attach your name to papers you did not participate in writing.
Side note: if your Apple account security questions are gibberish, your account now gets stuck in an infinite reset loop. I need to answer the security questions to reset my security questions or to reset my password. This occurs even if you have the current valid password, the questions are mandatory for all changes. The questions are also mandatory for phone support, so I’m locked out of my account even though I have the password. Great job everybody.
I can't believe how many people are missing this point.
-9) Keep everyone productive and focused... scarcity = prioritization

-8) Eliminate boat anchors wasting time of previous with non-value-add bullshit.
we are working on frontend as a service solution (for mobile), please ping me at sergey@archy.ai, would be interesting to have you as early beta user.
Thanks for sharing numbers. Wow, that's an amazing bonus, and you should feel fortunate! This is coming from someone who does work for a big tech company. I've never seen anything remotely close to that.
Disney IT workers allege discrimination in lawsuit over replacements from India
POM is not exactly intuitive, but the configuration directives are at least discoverable. If you're using a decent IDE, all the config options and values work with autocomplete. It's also pretty trivial to generate an archetype for most common needs.

Webpack is practically a blank slate.
Easy Ways to Backup and Restore Viber Messages on Android
Those are all expenses your landlord has to pay if you are renting. If those costs plus mortgage is double rent than either landlords are hemmoraging money or something is seriously fucked up with the housing market.
For passwords, there is no known problem with MD5, unless you know about a preimage attack.

Collisions are a problem for digital signatures, not for passwords.

But some people do want and use more than 2^128 bit passwords, for whatever reason, and an MD5 intermediate stage limits that.
Hash the password locally (you are serving JavaScript over SSL right?) and only send the SHA256.
I'm not a big user of AWS but I don't know that there's anything stopping you from running your own recursive resolver (in your VPC) that your other machines use (instead of using an external resolver or whatever Amazon provides).

You could, for instance, stand up an instance or two running Unbound, forward to Amazon's own resolvers for internal stuff, and forward to external resolvers for external resolution (or just handle it yourself instead of using forwarders).
Implementing Pub Sub Using RxJs and Angular 2
Why all editord lately become black themed?
The person you responded to never said that exercise is bad, or that being fit isn't important. They simply were responding to the statement that they had never heard an argument that running could be bad. You really jumped to conclusions by assuming they were saying exercise is not valuable.
Do you think?

Seems to me people are getting used to accounts being hacked, it's not such a big deal any more, in fact it may be even an expectation.

And as for government NSA hacking, well that's just old news and a given isn't it?
"I'm from the government, and I'm Here to Help"
these guys do an internship you might be interested in https://empireflippers.com/ (caveat: I don't know anything about them)
Lazy Loaded TreeView in Angular 2.0
Are Google's / Waymo's vehicles not steering-wheel and pedal free? E.g., go to Waymo's own site here[1], scroll to "2015 World’s first fully self-driving ride on public roads", and watch the video: they give, if I'm not mistaken, a blind man a ride in a steering-wheel-free, pedals-free autonomous vehicle on public roads, in Texas. Now, granted, the original article is about the CA DMV, but I've seen vehicles that are indistinguishable from the prototype car in the video driving in Mountain View. Unless there's a model with steering wheels and pedals (it is hard to say from the outside), that would seem to imply that Google is testing fully autonomous cars in California. (Note that I'm not trying to imply that this is illegal: I'm not well-versed enough in the DMV's rules around autonomous vehicles to know if it requires "being ready to take the helm at any time" or not. I also did not realize, until Waymo's announcement recently, that they were so far along.)

[1]: https://waymo.com/journey/
Yahoo stock hasn't moved very much recently over these issues. I guess the market still thinks that the Verizon acquisition will still go through. For context, the price was ~$43 after the acquisition and closed at ~$41 today.
Right? There are no conclusions they can draw about running in particular, since they are basically comparing fit people to unfit people.
Meet the Fashion Data Analyst Working to Predict the Next Big Trend
There is no moral dilemma here. If you blow the whistle on the NSA you are a traitor to your own country. How can this not be clear to people.
They are all complicate. I've tried the older Webpack 2.x and got a number of errors. Didn't have time to resolve all of them. Went with the simpler rollup, and be done with it.

For my workflow, I just need ES6 transpile, module bundling, minifying, and auto build with watch for multiple pages. Code split sounds good on paper but I do my grouping of files explicitly anyway. HMR sounds nice but I haven't got hot reload working yet. Manual refresh the page isn't too bad.

I've spent way too much time on configuration and getting the tool chain to work, and less time on developing real feature. Getting really sick of it.
I'm curious whether there will be a sea change in the auto industry. This seams similar to the situation 100 or so years ago with the carriage manufacturers vs the start up auto companies.
I read somewhere a while back that said that the reason for rising autism rates in the 90's/00's was because we broadened the definition of autism.
If I ever create a startup, I would definitely move to SoCal. It's cheaper. There's more diversity. The restaurant scene, in my opinion, is better, too.
I'd really just like a battery that doesn't die after the 4th iOS update
Fb
I want to join u
Not necessarily, but you are for sure bound by the confidentiality agreement you signed on employment
Estonians use a 'black box principle'.

They have some voting system - a black box - and they believe it works and no one has hacked it.
Your post only mentioned salary.

EDIT: And to add more to the conversation than that curt response:

When I compare take-home pay among various jobs I tend to ignore bonuses (because they're subject to your employer's whim--you don't necessarily get them) and I tend to ignore equity (because it's typically temporary--once you vest it no longer adds to your yearly take-home). To compare apples with apples you can only really compare base salary.
I guess the market doesn't care about the security and confidentiality of users who aren't paying customers.

Kinda makes you think of "marks" in the carny sense (http://grammar.yourdictionary.com/slang/carny-slang.html)
"I don’t accept payment by check or Western Union and I don’t accept returns."

If you sell me a broken phone, it gets broken in the mail because you didn't package it correctly, or any other thing that can happen between the time you send it out and when I receive it, you should refund my money or accept my return.

I buy hundreds of thousands of products per month for my business on Ebay and Amazon and many people outright lie about the products they are trying to sell me. A good return policy is a must.

My theory is that it's one of the only reasons Amazon and Ebay became the kings of the online marketplace. I've tried to purchase from the other sites and because there are barely any protections in place for buyers, I always go back.
Olm, the ratcheting algorithm used by matrix.org https://matrix.org/git/olm/about/ is also worth mentioning.
What's the differentiating factor between them and Tesla? Why would I buy an Air, when it seems to be similarly specced to (and less attractive than) a model S, from a far better know company?
Not underestimating, worked there and believe in the company. But speaking from experience, the stock can take dives from time to time based on market whims as it happened when I left and t my RSU vested below their estimated price. Which sucked as I needed cash at the time to move. The thing is you can be lucky or unlucky with RSUs during short or long term periods.
First time I'm hearing about it. October is very recent so not old at all.
Australian ISPs Ordered to Block the Pirate Bay
For anyone looking to learn more about the financial crisis, my two recommendations are:

[1] Stress Test https://www.amazon.com/Stress-Test-Reflections-Financial-Cri...
[2] Too Big To Fail http://amzn.to/2hvIZ1w

Too Big To Fail spends much of its time in the lead up to the crisis, and documentation of the handling of the crisis by the major participants.

Stress Test reviews the handling of the crisis, but speaks much to the aftermath and handling over the following four years.

Both are also great on audible, as Geitner reads his own book (which I always prefer, no matter the quality of the orator).
I'm not sure that people are getting 'used' to it. I was talking to a non-techie over the weekend, and although they were aware about Snowden's NSA revelations, they were quite perturbed to think someone could be reading their email.

I don't think people have stopped caring, they just feel helpless. This means that normal people may be willing to adopt new protocols (end-to-end encryption), something they wouldn't do if they were accepting of NSA spying.
And the classic monty python reference "those responsible have been sacked"
The Yaron Minksy talk Effective ML (https://vimeo.com/14313378) has examples of using pattern matching and algebraic data types.
Well, if you feel so strongly about it, why not build your own tool to support the "preferred" query language?
I was there during and after Whitman. When Ebay was power diving into the ground. The story above about Ebay engineering is right on the money. So much politics, and jockeying to get to Sr Director or VP to get more stock grants. Ebay brought in a lot of ex Anderson consulting and outsourcing like there was no tomorrow. Trained Cognizant on the ecommerce business on their own dime, by paying outrageous fees for people with zero background in ecommerce or internet scale or data center ops. When times got tough they fired most contractors and insourced as described above. Very Game of thrones there. Toxic.
The problem is the OP said "against running regularly" and the responder said "excessive". Neither "regularly" nor "excessive" were well-defined. Regular could be anywhere from 2-3 times a week to daily. Excessive could be anywhere from daily to many times daily, and probably is more about time/distance run than frequency of runs (daily 1 mile runs would be hard to consider excessive, but daily marathons?).

Defining our terms is critical in conversation (and something I probably need to work on as well).
Why would an employee/contractor be suspended for a minor traffic violation? Nobody was hurt. I'd rather they talk about taking steps to train the people and algorithms better
I feel like an ass now- I'm nowhere near as bad as your friend yet- it certainly hasn't hit my hips or back yet, my autonomy isn't affected, I don't need painkillers.

For what it's worth, pass on my support to him- if only for selfish reasons; I see myself becoming like him in the near future.
I am taking a WAG here but if they got code then they might be able to take educated guesses at the UDB values without actual access to UDB. Those guesses are more likely to be true with bot registered accounts where there is duplication of information.

This goes back to my theory that a good portion where junk accounts.

Not saying this is acceptable, just saying garbage in garbage out.
> it's then probably not possible to review the images you've taken to ensure that you got the shot you wanted

Well, photographers in the film era managed to get by.
A beer is, say, 150 calories. A mile of running burns about 100 calories. When I ran, cruising speed was 7 minutes per mile. So a light 6 mile (10k) run would be about 45 minutes, 600 calories, or 6 miles.
This is the equivalent of television inception, one level deep. I actually love the idea
We need better interviews for developers
> We converted from filing as LLC to LLC filing as S a few years into the company, and it didn't really change much for us.

yeah, so why switch if you don't have to
I agree but only in the same sense that Jefferson and Washington were traitors to their king.
So that's a reason to just ignore it?
Most of the value from yhoo is from its holdings in alibaba. So this actually is fairly irrelevant for the stock.
Sorry, didn't notice your response. Email's in profile if you want to hear some of our use cases!
I think running reduces my appetite.
If nothing else, the editor itself is a lot snappier