skysight-inc/HackerNews huggingface dataset:
The problem is, it doesn't seem like prevention or detection was working here at all. Even though they clearly collected enough data to reconstruct what happened, they both failed to prevent this, by not having even common sense security protections, nor did they detect it when it occurred, only finding out because a supplier ratted out another client.

These are not high cost processes, these are basic, common sense practices we're talking about, that nobody really has any excuse to not have in place.

You are continuing to let your experience with a single, hostile work environment cloud your openness to something that... isn't even controversial. If you aren't locking down your files to only those who need them, you aren't equipped to be in business. If this is somehow uncommon among Silicon Valley, it explains why so many "they stole our trade secrets" lawsuits are going on right now.
I'm not the OP but it does have an air of condescension/reductiveness about it, like calling carpenters "hammerers."
Got any numbers on how many Muslims are "radical" compared to Christians? Christians also perform exorcisms on gay children and in some cases lynch gay people.

Keep in mind that deporting radical christian swedes would also be a good move if retaining a cultural tolerance for gay people is a goal.
So basically you believe in the Luddite fallacy that automation hurts workers.

http://www.economicshelp.org/blog/6717/economics/the-luddite...

Welfare hurts incentives and misallocates capital from those who invest it most effectively to those who reproduce most quickly.
I guess the bottom line is to change all passwords to be sure...
Are you sure about that? Kansas City has a problem with this sort of stuff:

http://www.kansascity.com/news/local/crime/article134041159....

http://www.latimes.com/nation/nationnow/la-na-nn-kansas-city...

https://en.wikipedia.org/wiki/Overland_Park_Jewish_Community...
I like that you took time to consider ACLs out of the box, that's something that most general-purpose tools leave too much to the developer, despite them being crucial for every app
Of course you're right that I am misusing the word "free." But, I understood OP to be criticizing the deflationary nature of Bitcoin rather than lamenting a personal decision to spend his/her own bitcoin holdings. My point was just that it isn't a bad thing for your money to triple in value.
> Even a sight of people toting guns gives me chills.

That sounds like a psychological condition known as hoplophobia. I think it's best treated by familiarising oneself with weapons of all sorts.

In general weapons aren't, in and of themselves, scary. It's the intent of the people carrying them which can be scary or not. Drunken half-wit shouting slurs? Scary. Single mother buying groceries with her kids? Not scary.

A sidearm on a belt is as inherently scary as a knife clipped to a pocket: not very, IMHO. It's all about the person carrying it.

As for why folks need weapons, IMHO arms-bearing is the fundamental difference between a slave and a freeman. I'd love to live in a modern Western society in which every adult carried a weapon of some sort as part of daily life, although I'm not wishful enough to think that our current society could do so safely.
Forgive my ignorance. I thought 18F and Digital Services were interlinked.
Well people who write novels are novelists and people who write plays are playwrights so I submit either 'codist' or 'codewright'.
You're suggesting that Kansas is at fault for not taking measures to prevent terrorist attacks. When asked to elaborate, you said that their gun laws are to blame. I asked you to correlate increased gun ownership to increased terrorist attacks. You can't, and your argument is bollocks.
Webmasters and App-devs running on CloudFlare. You (at least) have to "force-logout" your users that have "remember me" cookie set.

At least change the cookie name so the token stops working. For example, in ASP.NET - change the "forms-auth" name in the web.config file. etc etc.
Looks pretty awesome!

What if I want to use CDN to host images? Maybe I've missed something but I could only find an option to Upload images.
It's been done:

https://github.com/mirleft/ocaml-tls

https://usenix15.nqsb.io/
Thanks, I had a little feeling that I was forgetting something about Garden City. Frankly I don't see how anyone could live there, although I suppose it's a good potential source for Mars colonists. They won't miss trees or geographical features...
There probably was stealth, given that in Kansas anyone can carry concealed, it's likely the terrorist did that.
> The reason why is that terrorism is a form of politics.

If you think the uptick in anti-immigrant, and more largely anti-minority, discrimination and violence has nothing to do with our politics I'm afraid I've got some bad news for you...
I have great respect for you but this seems a bit mean spirited. Why shouldn't devs want to be as many things as possible?

Is css-in-js is more ridiculous than regular CSS? I've left regular CSS behind and gained a lot of sanity.
I disagree. Yes, there are freak deaths in India by its own standards. People die without being able to afford a nominal medical fee etc. I'm not at all denying that.

But, this is whole different thing, where individual's frustration and wrong perceptions results in death of people, which is not at all a case in India (or not as frequent as US gun killings).

Your point of poor people dying has nothing to do with any individual in India. It is a result of our whole political system which is designed in such a way that it is not easy to get solutions for seemingly straight forward things.

The closest thing which is similar to this incident is attacks based on caste which is common in India, but that too are not random, as victims are not taken by surprise when they are attacked/killed. Mostly they are overpowered by small group of narrow minded individuals, resulting in freak deaths.

I'm not sure if you are from India, and if yes from which part, as I really don't get the "nativists in Mumbai/Bengaluru/Hyderabad" part. I'm also not sure what you mean by nativists in India, as it may signify one of 100 things, depending on which part of India you are from.

Again, I'm not saying there are no freak deaths in India. It is common in every corner of the world where there is more than one man. But, death by an individual in a public setting is not common and that too by a gun is almost impossible in India. That was my whole point.
you're unclear about how voter fraud is investigated, and your solution to that is to create more legislation about voting? That is deeply unsettling.
Without lawyers, Google would need to actually secure their data, rather than counting on lawyers to clean up the mess they made here.
assuming normal distibution, murder is at one extreme of the bell curve of hate. it's not just about getting shot.
I'm not sure I would recommend learning Python to anyone these days. Go is just so much nicer and almost as easy, and also avoids the inevitable GIL & speed problems.
Personally, and I'd like to stress that this is my opinion, I feel that the term is very reductive. It has its etymology in "code", when programming encompasses much more than just writing code. (we also write documentation, tests, use complex tools, version control, invoke the command line, etc...) It evokes the term "code monkey" which just sees programmers as tools to barf out code. Lastly this is just my own conceit, but I believe that the term just doesn't describe the approach used well which spans so many different methodologies and concepts. (to throw some keywords out there: TDD, Agile, idioms, patterns) To say that developers merely write code is like calling engineers builders or doctors healers. (again, those terms wouldn't be wrong, but quite reductive)

Writing code isn't hard at all. I could teach someone how to write working hello world programs in a day. The hard part is architecting these projects to be readable, modular, extensible, efficient, and to follow standards.
I think the point is that 'robot' isn't really a well-defined term. When does a machine become a robot?
Chances are it is. The difference being that the leaked data in your case could not have been sensitive.
Is there a simple example of how to add something like react-router, redux and bootstrap as to presets to neutrino. My problem with CRA is that while very helpful(!) I am often faced with having to add those kinds of components.
The room behind the clock made me think of the movie Hugo. See, for example http://i419.photobucket.com/albums/pp273/monochorme/monochro.... I wonder if that was deliberate on Scorsese's part, or if it's just convergent evolution. (Large train terminals will tend to have large clocks, and clocks that size will inevitably have some room behind them. And hidden rooms are always cool.)

And there's tennis courts in Grand Central?! I'm more surprised by the fact that there are operating tennis courts than I am by them being used for skiing in the past.

Grand Central is magnificent. I try not to take it for granted when I go into the city.
While they are not being precise in their response, you cannot consider nginx more secure. Nginx is still part of the problem, it had many CVEs too, even very similar memory disclosure vulnerabilities.
See other comments here, the event log, and the comments of the main story. They're downplaying it. https://bugs.chromium.org/p/project-zero/issues/detail?id=11...
I feel like it's approaching a tipping point. We have good decentralized networking, storage, currency, etc.

A missing piece is decentralized compute at scale. That's hard, especially for security reasons.

It's too bad Amazon branded "serverless" because lambda is not serverless. It's one big mainframe server. This stuff is serverless.
And oddly enough, while we see people in this thread arguing for the end of the fundamental human right to bear arms, we don't see them arguing for the end of the fundamental human right to intoxication.
I'm not so sure charging him is the right choice though. Yes deleting backups is interesting, but "it turned out there were local copies of the deleted backups" -- so, he did or he didn't delete the backups? It sounds like he left them with backups.

If I'm the only one left on a sinking ship, you better believe that before I quit, I'm taking myself out of the "on-call" rotation on the pager system. You're going to prosecute me for "causing chaos by leaving?" It took them all day Monday to sort it out! Surprise, after a power outage and a denial of service attack that the sysadmin spent all weekend fixing, it's quite lucky that's all it took!

Taking myself off the pager system when nobody else is on-call, is that the same as turning off the pager system altogether? I'm sure not obligated to hire and train my own replacement before I can leave (not without a contract anyway, and most certainly not when you just terminated MY boss and only backup without notice.)

If your backup systems' daily transfer has a tendency to overload the fileserver that's running your company's internal shared drives and primary DNS? (for example only, wink -- but this is definitely a real thing that I personally dealt with) If this fault causes everything else to go down all at once some whole-number percent of the days that it runs... and the only way to fix it is for someone to walk into the server room and reset the right machine... is it better to leave that time-bomb ticking with nobody on-call, or should you leave a note for the next guy "ask for a bigger budget and a new backup server" and disarm the bomb? Personally, I'd disable the nightly backups in that case too.

Suppose you've tried training a resource to answer that page and nobody will pick up the task? I understand there's such a thing as malicious action, and deleting Wiki pages with important documentation on them might fall into that category. There's also such a thing as negligent inaction I suppose, but the more I read into this article, the more it sounds like a very familiar situation, and maybe the truth is closer to this employer would just like to hold their "key man" junior IT guy hostage, on-call 24/7 until the sale of the company goes through, when the new owners can cut his benefits.
We are still fighting over oil and dirt and for the majority of this time, men have been in control of that, so.... if we all had listened to our mothers... the world may have been a little different ;)
The irony is rich but the good feels are poor.
So, what's the point. Should I judge you based on your specific actions or based on what all idiots(myself included) on the internet post?
I am halfway through changing the 60 passwords for services and accounts I have used since last September.

Cloudflare's COO publicly dismissing the danger with a wan smile and a wave of his hand was motivation enough for me.

That, and this ridiculous statement: "Unfortunately, it was the ancient piece of software that contained a latent security problem and that problem only showed up as we were in the process of migrating away from it," he wrote.

My understanding is that they were not "in the process of migrating away from" an "ancient piece of software," but rather that this was something they implemented five months ago and that they had no idea anything was wrong until Google told them what they found.

That sort of behavior does not inspire trust and confidence.
If you take a dollar for every four dollars of corporate profits, corporations (meaning the compacts created between shareholders) will have less money to invest with. The shareholders will also have less incentive to reinvest their dividends. Capital stock (e.g. factories, restaurants, vending machines) is the basis of all productivity, and capital stock only increases through investment.

So taxing profits reduces the growth in productivity. Productivity growth is the main source of wage growth and indeed that slowdown in productivity growth is the source of most of the slowdown in wage growth that has been seen in the US over the last 40 years.
Well then I guess there exists a difference in ethics. Theft involves deprivation of the specific thing taken. So deleting the original data after copying it might consist of theft.
ThinkPad T460p
There is https://boinc.berkeley.edu/
Is there some kind of letter to your congress person type thing that can be done for this? I would gladly sign a petition or write an email as part of a campaign to demonstrate public support for making access to crispr as open as possible.
Why Learning Is a New Procrastination
Quantitative economic modelling using Python
A Cool Android Component of Navigation Bar
Yes, but I mean something more general purpose and developer friendly.

If I'm writing a mobile app that needs heavy compute (too heavy for small mobile devices) can I distribute that compute across larger peers like desktops, NAS boxes, etc.? Not easily and not if it involves anything that anyone might ever want to attack or spy on.
We Open sourced our startup's Angular 2 code
Ethereum doesn't answer this need?
The evolution of the IT architecture. From mainframes to Cloud Computing
Sure, our current statistics show your statement to be true. But, I think many people are alarmed at the trajectory of hate and intolerance in the US.

Also, being murdered is the worst thing that could happen, and maybe that event is still rare, but a set of stairs isn't going to harass you or discriminate against you. There's a whole spectrum of bad things that could happen to people because of the climate in the US.
It's called Technology Transfer to private sector. Happens all the time. The CompCert certifying compiler for C was a landmark achievement of INRIA that lots of CompSci is building on. A company called AbsInt controls the I.P. now.
Why did they make the PowerMac G3/G4 series so easy to open you could do it with one finger if upgrading components "wasn't a Macintosh thing"? To dust the machine out?
What percentage of terrorist acts in the US are committed by whites? I'd like to see some numbers on that "vast majority" claim.

Racially motivated crimes against whites certainly qualify as hate crimes. In 2012, for example, 22% of hate crime victims were classified as "victims of an anti-white bias": https://ucr.fbi.gov/hate-crime/2012/topic-pages/victims/vict...
If you are doing AI, machine learning, it's all Python. Other language support yes, but python is it. Alexa does not support Go.

> https://www.tensorflow.org/
That is not the argument I made and you continuing to attribute that to me is bad faith. Please review: https://news.ycombinator.com/item?id=13723962

vvv E: holy shit, your willingness to be absurd about this is mind-boggling, especially when you ask for source for a thing i already linked. further engagement with you is a waste of everyone else's time. and yes, at this point i mean to be unkind to you, since you're just trolling, not expressing fear in response to a murder vvv
At least the original LPtHW was quite a fundamentally different book from his learning C book. The C book was aimed at people who knew at least the basics of programming in some other language and wanted to learn C, while the Python book was more aimed people who had never programmed at all.
I don't think that's a fair characterisation of The Economist's output or this particular article.
>If you take a dollar from every four dollars of corporate profits, corporations (meaning the compact created between shareholders) will have less money to invest with.

But since they're currently sitting on record high stacks of cash (Apple alone has ~1/4 of a trillion dollars), I wouldn't be too worried about that.

>The shareholders will also have less incentive to reinvest their dividends

They're currently sitting on record high stacks of cash because they have little incentive to reinvest. It's not about tax though, it's about a lack of demand (see original points one and two for how to fix that).
From a sample size of 2, let's conclude that many of Europe's leaders are childless!
Talk is Cheap. Show me the code
You're thinking about "high earners" in the traditional "people providing a very valuable service in exchange for money" sense.

High income individuals in this sense are taxed quite highly in basically every first world country.

The people who aren't taxed highly, and who arguably should be, aren't the "high earners" but the "high revenue owners" whose income derives not from their own work but from the performance of the assets that they own.
For those of you now breaking out the Internet Archive to prove the note existed

> "Yes, that is kind of funny way of saying that there's no reason why Python 2 and Python 3 can't coexist other than the Python project's incompetence and arrogance. Obviously it's theoretically possible to run Python 2 in Python 3, but until they do it then they have decided to say that Python 3 cannot run one other Turing complete language so logically Python 3 is not Turing complete."

Even though he says it's a "funny" way to say something, his explanation of said "joke" is not a correct description of what Turing completeness is. There is no "gag" here; Zed didn't understand it, and when people on the internet corrected him, he decided to play it off as a gag.

Edit: Just to make it explicit for those of you reading who don't get it, "Turing completeness" doesn't mean "I can run a program written in X in Y's runtime." It means that a language is capable of expressing all operations a Turing machine can do, which means that you can re-write a program in X to a program in Y if both X and Y are Turing complete. You can obviously re-write a Python 2 program to be a Python 3 program, so both of those languages are Turing complete.

The property he describes later, of the JVM and the CLR supporting multiple languages has absolutely nothing to do with Turing completeness. Lisp and Javascript are both Turing complete languages, but the fact that you can't run Lisp on Node.js doesn't mean you can't re-write a Lisp program in Javascript. The fact that he's equating being able to run many languages on a single runtime and Turing compleness means he doesn't understand what he's talking about.
They only care about states rights' when they don't control Congress or the presidency
Would you say the same at .001%? How about .0001%?

It is possible for someone to take security seriously but not blindly value the tiniest bit of security over every other possible factor. Perhaps because they also take usability seriously.
Cinema ’67 Revisited: A Fistful of Dollars
Tell ME to fuck my myself hard? The Internet does make it easy to be tough but NOT so much in real life for you. Am I right? LOL SJW personal issues? Huh?

You were the one saying you were worried about your wife installing something like this on your phone which would make anyone conclude you have some issues going on with her.

Yes, it is easy for one to install a program on a device they have access to so not sure why you seemed surprised by that but whatever.
I really wish something easier is on the market. Time Capsule doesn't do iOS devices, and with no Off Site Backup.

It would have been perfect if I could backup my iPhone / iPad to Time Capsule and have it back up to iCloud as well.
The original comment said, "It is just not worth getting shot by a random idiot while walking on the street."

If you want to talk about other negative aspects, then fine, but that's a gigantic move of the goalposts.
People who golf are golfers and people who act are actors.

shrug
I'm sure that defense is just as valid as "we were hacked and someone wrote all of those dumb things we said in exactly our writing style."
So how do we enforce the right sort of capitalism, where all people are seen as economic agents?

One of the things that's usually attractive about capitalism is that it is, in a sense, the default. Absent a government saying otherwise, two individuals or businesses or even countries will tend towards capitalism in their relations. But absent a government saying otherwise, slavery also arises, in many places and times in history.

What changed to make people say "Hey, we're failing to treat slaves as economic agents"? It may be the case that on paper, slavery was not economically viable ever - but it was absolutely profitable and desirable in practice. (That may be the disconnect; I'm using "economically viable" in a practical sense.)
Inside Facebook’s AI Machine
"The Luddite Fallacy" is a terrible name for this observation, because the Luddites weren't wrong. They were concerned that automation was going to destroy their economic prospects and way of life, and it did. For multiple generations, typically (we really should have a corollary, something like "The re-employment fallacy")

On the whole, it was still a net positive for the broader society, but you can't really blame the Luddites for not being concerned about that.

[edit] It's also worth noting that the Luddites themselves were not really pushing an anti-technology stance, or arguing against "technological unemployment" - it was more the threat of skilled work being replaced by less skilled work, quality goods replace by inferior but cheaper ones, and societal impact of the change in work and working conditions. They weren't arguing that newer methods wouldn't be more productive, but that this increase productivity wasn't worth it's price.

This could be referred to as "The Luddite Fallacy Fallacy", because the position attributed to the Luddites was never one they really held - their complaint was more nuanced than that, and one that nobody then or since has really come up with a good answer to.
Life expectancy to hit 90 in South Korea by 2030, USA much lower (83)
and many (like me) who have painfully moved to Python 3 will find that they have gained nothing important there either other than avoiding the "end of life" blackmail.