skysight-inc/HackerNews huggingface dataset:
This is not correct in my understanding: The sites with certain options enabled produced the erroneous behavior, but the data that would get leaked through this behavior could be from any site that uses Cloudflare SSL (as this requires Cloudflare to tunnel SSL traffic through their servers, decrypt it and re-encrypt it with their wildcard certificate). So if I understand correctly anyone using the (free) Cloudflare SSL service in combination with their DNS is affected.
Always, really? Perhaps I'm lucky but this happens quite frequently with my system (dev workstation, so browser with lots of tabs, IDE, my own app/server stuff, other "power/mem-hungry" dev tools...), and I always manage to keep it sane/healthy:

- notice system starts swapping (if you do not monitor that, to me it sounds as careless as driving on the highway on 2nd gear and ignoring engine noise -- ideally the OS could proactively help here but unfortunately I don't know a good "automated" tool)

- find out which process/app uses the most memory (Linux can even tell you which ones use the most swap space [1])

- decide which one you want to (gently|forcefully)-(quit|restart|whatever). Exercise judgment.

[1] http://stackoverflow.com/questions/479953/how-to-find-out-wh...
I was under the impression from friends who work in Hollywood and television that not much video editing was done on Macs, anyway. That Avid software running on proprietary/custom hardware was standard. But this was five or six years ago. Maybe people had been switching to Macs in more recent times? (I remember a similar discussion came up when Apple consumerized Final Cut, and was told that pros don't use it anyway.)
Surely we'll get there in 2020 or 2021, is that ES10, ES11 or ES20, ES21?

Edit: and yes I know you were joking :)
That's just a prorata right so that investors can maintain their holding in future rounds
There's been activity to standardize checks:

https://en.wikipedia.org/wiki/REAL_ID_Act

I definitely had to show the 4 types of documents the last couple of times I've moved (photo/birth/status/address). Stupidly, the first id that was obtained by showing that stuff didn't serve as proof of the first 3 when I moved again.
Bank records would presumably not be considered expressive speech, and so it would be hard to argue that it would be protected under the 1st. And as you point out, the courts have already pretty much nixed privacy protections of third party records under the 4th.

I have no idea if Amazon has a snowballs chance in hell of making this work, but it's an interesting angle, and also seemingly their only potentially viable angle because of what you mention.

The point is that they're not arguing for privacy. If their argument is accepted, then privacy of the data is an incidental necessity in order to avoid the chilling effect on speech of removing the privacy.

It may very well prove entirely futile, but at least they're trying (though I have no illusion that their reasons are selfless - they have a strong vested interest in making sure people will trust having these devices in their homes)
If/when I leave macOS, it'll be for linux or bsd, not Windows. I have to use Windows 10 3-5 days a week and rare are the ones I don't curse at it.
>EEE

end this FUD
Clive Thompson Explains Why Videogames Are the Grim Future of Work
I stopped reading after the first section says:
"all he faced as punishment were some minor sanctions"
as well as:
"A few diplomats expelled from the United States is a small
price to pay for a potential end to US sanctions"

I mean, what is it, are they minor sanctions? Or was it a small price to pay to get rid of them, implying they were not so minor after all? Maybe I'm hangry, but this style of writing smells like the author trying to bend reality to some sort of predetermined moral stance, and it annoys me greatly.

Time for lunch.
Malware jumps air-gap by blinking an LED as drone watches
>“What is the probability of an integer from 1 to 60,000 not having the digit 6?”

Am I missing something?

9 possibilities (0-9 excluding 6) for each of the last 4 digits and 6 (0-5) for the first one.

6 * 9^4 = 39366

The probability is 100/39366 = 0.0025%

Edit: More perls; "What is the angle at 3:15?" humm 0?
It could be that it was 1password, but the only clear text was URL parameter names or JSON keys, with the values as encrypted strings in base64 or similar.
However, I haven't seen people enable ButtFlare's proxy only when under DDoS. Most of their users enable the proxying just for the CDN performance or just in case or… you get the idea.
People predicted the death of Moores law in 2005, we all know what happened. Intels CEO seems to think it still holds true, and will continue to do so for the forseeable future. (http://fortune.com/2017/01/05/intel-ces-2017-moore-law/) This is probably partly marketing, but I'm sure there is some truth to it as well.
> Tomorrow, when preimage SHA-1 attacks are cheap, it will no longer save me.

Well, Moore's law is petering out isn't it? :)
Why is the speed of light the speed of light?
> While Apple is focusing on trying to create the thinnest notebook on every generation, other companies are actually making useful computers, laptops or otherwise.

I've purchased the second generation (new) Macbook this year, and must say, I'm delighted. I honestly don't get what all the fuss is about. It just works.

Why would I change something that works really well with something that might work well?
thats all? see this list.
https://www.rt.com/news/329243-sweden-migrant-stabbed-teenag...
http://speisa.com/modules/articles/index.php/item.3584/sex-s...
http://www.independentsentinel.com/muslim-rapes-child-in-swe...
http://www.express.co.uk/news/world/768980/Sweden-cover-up-m...
https://en.wikipedia.org/wiki/List_of_grenade_attacks_in_Swe...
http://www.svt.se/nyheter/inrikes/162-000-kom-till-sverige-5...
https://www.youtube.com/watch?v=p4293T0AKPA
https://www.gatestoneinstitute.org/5195/sweden-rape
https://en.wikipedia.org/wiki/2016_social_unrest_in_Sweden
https://www.rt.com/news/369415-sweden-refugees-rape-afgan-bo...
https://www.rt.com/news/330180-police-violent-refugees-swede...
http://vesselnews.io/swedish-judge-upholds-marriage-pregnant...
http://newobserveronline.com/stockholm-attack-invented-by-co...
http://www.thelocal.se/20151106/teens-sentenced-for-gang-rap...
http://10news.dk/?p=519
http://www.snopes.com/swedish-police-bracelets/
http://www.spectator.co.uk/2016/01/its-not-only-germany-that...
http://www.baka.com.au/world/15yearold-migrant-allegedly-sta...
http://www.zerohedge.com/news/2016-03-07/sexual-assaults-soa...
http://www.breitbart.com/london/2016/01/15/15-year-old-boy-w...
https://youtu.be/arjJmqDrUUI
http://www.thelocal.se/20160531/fewer-than-500-of-163000-asy...
https://www.hks.harvard.edu/news-events/publications/insight...
http://dailycaller.com/2015/07/03/immigrant-to-sweden-rapes-...
https://en.wikipedia.org/wiki/2015_IKEA_stabbing_attack
https://en.wikipedia.org/wiki/Killing_of_Alexandra_Mezher
http://www.thelocal.se/20161007/police-send-backup-to-gotlan...
http://speisa.com/modules/articles/index.php/item.2516/asylu...
http://100percentfedup.com/update-swedish-school-girls-moles...
https://www.rt.com/news/329243-sweden-migrant-stabbed-teenag...
http://speisa.com/modules/articles/index.php/item.3584/sex-s...
http://www.independentsentinel.com/muslim-rapes-child-in-swe...
http://www.express.co.uk/news/world/768980/Sweden-cover-up-m...
https://www.youtube.com/watch?v=p4293T0AKPA
https://www.gatestoneinstitute.org/5195/sweden-rape
https://www.rt.com/news/369415-sweden-refugees-rape-afgan-bo...
http://www.breitbart.com/london/2016/05/12/refugee-child-sex...
https://www.gatestoneinstitute.org/9901/sweden-migrants-cost...
http://www.breitbart.com/london/2016/04/11/children-school-r...
http://speisa.com/modules/articles/index.php/item.2705/swede...
http://www.ibtimes.co.uk/germany-overwhelmed-by-1000-refugee...
http://www.frontpagemag.com/point/251905/swedens-multicultur...
https://www.youtube.com/watch?v=E40_KrMgWDg
https://www.youtube.com/watch?v=LD467tvucOQ
http://speisa.com/modules/articles/index.php/item.844/swedis...
Learn Python 3 the Hard Way
This doesn't detect Cloudflare CNAME clients.

For ex. It says uber.com is not vulnerable - because the homepage isn't, while the app is consitantly one of the most impacted in the caches I've seen

I don't think anyone has really nailed the methodology here - and I think that is important (as is erring towards false positives rather than false negatives) for security mitigation advice
Pretty sickening news, but I'm glad the writer used the term 'terrorist', something the MSM tend to shy away from when the perp is white.

edit:

Definiton of terrorism from

Google:

the unlawful use of violence and intimidation, especially against civilians, in the pursuit of political aims

Wikipedia:

Terrorism is, in its broadest sense, the use of intentionally indiscriminate violence as a means to create terror or fear, in order to achieve a political, religious, or ideological aim

FBI:

The Federal Bureau of Investigation (FBI) defines terrorism as “the unlawful use of force or violence against persons or property to intimidate or coerce a government, the civilian population, or any segment thereof, in furtherance of political or social objectives.”

Just in case there's some confusion about this very obvious terrorist act.
Maybe it's just me, but I didn't find it all that difficult to get started with webpack after a few tutorials and samples. This seems like it hides away something that people should probably understand, which isn't all that difficult to get started with. Also when you start combining different packages in webpack (or encounter an error (or want to make some decisions in the config script)), the standard copy/paste boiler plate becomes less and less useful.

This looks neat, I just don't think it's likely to do away with configuration completely unless you've got a very standard setup.

That aside, it sort of sounds like the goal here is "a sort of package manager which also handles boilerplate"? Definitely sounds useful when you want to quickly try something new.
"Srinivas Kuchibhotla, died of his injuries in a Kansas City hospital. He is said to have left behind a wife who is five months pregnant.
...
His bereaved wife and his family are trying to raise money to send his body back to India for his funeral.
"

I'm terribly ashamed of the state of our shining city upon on a hill.
Did Uber lose a lot of app score on ios?
Not so crazy, Apple licensed their OS before, and then ended up paying-out the clone manufacturers contracts years later then they first released OSX. The model worked for Microsoft in the 80's (I bet the Big Blue is still kicking themselves for that one), but I don't feel confident it'd guarantee their survival now. For one, the operating system isn't nearly as separate of a concept anymore -- it's all the ecosystem.
Going unnoticed is not the same as inherently not valuable. Imagine aliens finding us extinct, wringing their little tentacles in dispair at the lost probing opportunities. :)
Good to know the security of their users is worth a t-shirt
Outgoing mail can be placed in the mail recepticle where you receive incoming mail. Often the letters get wet. The carrier takes the outgoing letters.

If it's raining the wet letters get tossed into a bucket, then into a larger hamper than into a machine for sorting.

Wet letters make other dry letters wet. So even if you take them to the post office they may encounter wet letters in their way.

Ink runs.
Just for you, not as a job. One cow lasts a man a year if he eats nothing else and isn't picky with the cuts. That's ignoring cow reproduction though ;)
How to make a todo app with AdonisJs
Alphabet’s Waymo Sues Uber Over Self-Driving Car Secrets
Regarding tags, https://github.com/cgwalters/git-evtag seems like a really interesting idea.
I know it's kinda late,but there is one more way to find if a site is using Cloudflare

append /cdn-cgi/trace to the URL and you will some debug info

Ex:

https://cloud.digitalocean.com/cdn-cgi/trace

https://news.ycombinator.com/cdn-cgi/trace
The mistake isn't the trash can Mac Pro (which is a perfectly fine machine that 100% fits my use case), it's not keeping it up to spec down the road (I'd buy one today if it was, even knowing I won't upgrade it for then next 3-5 years)
Assuming the facts of the case are as reported, this looks like simple second-degree murder to me.

Why do you think it's 'terrorism'?

Why does the race of the parties involved matter to you?
How Many Days? Because everyday matters.
Breitbart invalidates list. Period.
I wonder if you keep this link mess in some kind of copy-paste ready textfile. If you do - please work on your formatting, this is very intimidating.
Lots of hosted git solutions offer "protected branches", so it wouldn't be unheard of to allow less trustworthy contributors to push into a repository (to only some specific branches).
"There is no cannibalism in the British navy, absolutely none, and when I say none, I mean there _is_ a certain amount."
That's a big list of credible, impartial news sources, like breitbart, youtube user in high standing "fryt", and the express.

Why don't you tell us how you really feel?
Multitoken synonyms and graph queries in Elasticsearch
The voter rolls are provided to the candidates.

Big campaigns also already build statistical models of likely voter behavior (they use it to try to contact people who they think they can influence).

Still not hordes of people out committing felonies on election day.
I tried to separate recent crime statistics from the rest of the paper. Turns out there weren't many:

the level [of lethal violence] in 2015 – when a total of 112 cases of lethal violence were reported – was higher than for many years.

lethal violence using firearms has increased within the context of criminal conflicts. The number of confirmed or suspected shootings was 20 per cent higher in 2014 than in 2006. The statistics also show that 17 people were killed with firearms in 2011, while the corresponding figure in 2015 was 33.

The number of reported rapes in Sweden has risen.

some 13 per cent of the population were the victim of an offence against them personally in 2015. This is an increase on preceding years, although it is roughly the same level as in 2005.

In a report published in February 2016, the Swedish Police Authority identified 53 residential areas around the country that have become increasingly marred by crime, social unrest and insecurity.
I somewhat agree. It's more often than not headlines, anecdotes and philosophy about ML. But where is the common denominator high enough to talk about it in a deeper way?

I've visited /r/machinelearning, /r/computervision /r/reinforcementlearning, and although they are often better than HN, they also either partly suffer from the same condition, or are almost dead with no real activity.

TLDR; what are some good places to hang out for good ML discussions and news?
The Pluto System Is Officially the Underworld Realm Now
Breitbart, RT etc. are obviously not valid sources.
The way this is worded is weird:

Claim: "In Sweden there are a number of 'no-go zones' where criminality and gangs have taken over and where the emergency services do not dare to go."

Facts: No. In a report published in February 2016, the Swedish Police Authority identified 53 residential areas around the country that have become increasingly marred by crime, social unrest and insecurity. These places have been incorrectly labelled 'no-go zones'. What is true, however, is that in several of these areas the police have experienced difficulties fulfilling their duties; but it is not the case that the police do not go to them or that Swedish law does not apply there
> Edit: More perls; "What is the angle at 3:15?" humm 0?

No, not 0, because the hour hand will have moved 1/4 the way to 4, making the angle 7.5 degrees.
> Why do you think it's 'terrorism'?

Because it was a politically motivated attack on civilians, the standard the FBI uses to determine terrorism.
> Edit: More perls; "What is the angle at 3:15?" humm 0?

This question is about how angles are measured on a clock face, there are 2 methods where you either use hours (360/12) per hour, or minutes (360/60) per minute.

So at 3:15 the angle will be 30x3+30/4 or 97.5 degrees from 0 or just 30/4 which is 7.5 if the hour is your starting point.
Why isn't the cloudflare encrypted with HTTPS??
An equivalent server to the first one mentioned, if rented monthly from e.g. wholesaleinternet.com, is ... $209/month and includes 33TB transfer.

No wonder that AWS is so profitable.
> You don't understand what dedicated means in the American context

It means the exact same fucking thing in every context. Dedicated means infrastructure which exists solely for high-speed train, not that high-speed trains can only exist on the dedicated infrastructure.

> It would mean complete incompatibility

That's completely nonsensical. European high-speed lines are dedicated, non-high-speed trains do not run on them, it's the high-speed rolling stock which is compatible with older electrified rail lines because they use a standard gauge and compatible/switchable electrical feed (some of the more complex rolling stock having to cross multiple borders can handle 4 different power inputs).

> This is not what EU high speed rail was built on, they use a lot of legacy lines

And they use dedicated infrastructure and have done so from the start.

> As an aside, calling an idea complete bullshit based on an nitpick is pretty weak

It's not a nitpick to point out that your statement is factually entirely incorrect.

> especially since you're wrong: when tgv started in September 1981, they only had part of the line constructed.

That was still a dedicated right-of-way which it started with, putting the lie to your statement.

> Without compatibility

That has nothing to do with your original statement. Your statement was not that high-speed rolling stock should be compatible with legacy rail and able to use it. Your statement was that european high-speed rail "definitely didn't start" with "dedicated rights of way", and further that high-speed rail only have some dedicated rights of way.
This is terrible. At best, it was a drunken asshole murdering someone. It sounds like it might have been a racially motivated hate crime, though. (I'm not sure if I'd call it terrorism unless the goal were to terrorize other people, but quite possibly.)
gnutls is also available.
They killed him to send a message to immigrants. Leave or die. They sent this message using murder, so yes they 'terrorised' a migrant to stop them coming over.
Uber female engineers say “there's a systemic problem with sexism”
High time citizens from rest of the world actively boycott travelling & working in the USA. It is just not worth getting shot by a random idiot while walking on the street.
The clock question always pissed me off in school. It assumes the clock's arms move in a continuous way. The clocks I grew up with made discrete movements.
I agree. I keep seeing comments about C being the culprit, but in my mind, this is more of a policy issue regarding how any given language initializes and allocates memory.

Sure, in this case, we may see a C-specific bug in play, but I think this sort of bug is more effectively mitigated by forcing buffers to be zero-filled upon allocation and/or deallocation, and perhaps system-wide at the OS level, rather than relying upon language features to cover it.

So - I'm not explicitly defending C here - I just don't think a similar bug could never occur in a "memory safe" language as well.
I haven't seen it come up much in search results of late, but some of the stuff you used to see on Yahoo Answers was incredible. It was like StackOverflow for the Jerry Springer crowd.
> Assuming the facts of the case are as reported, simple second-degree murder to me

Second degree murder is:
1) an intentional killing that is not premeditated or planned, nor committed in a reasonable "heat of passion"; or 2) a killing caused by dangerous conduct and the offender's obvious lack of concern for human life.

Most articles state the equivalent of the following, I'm using the one from The Verge:
"
Purinton has been charged with one count of premeditated first degree murder, and two counts of attempted premeditated first degree murder.
"

> Why does the race of the parties involved matter to you?

"
A witness said he yelled “get out of my country” to two of the victims, reportedly saying the men, believed to originally be from India, were “Middle Eastern.”
"

That's the description of a hate-crime as he had no prior interaction with the victims. He picked on them precisely because of his perception of their skin color and mistakenly assuming they were his intended target out-group.
On the face of it, it seems that if existing investor VC1 has a ROFR, it only means that VC2 can't under-bid on the next round, and that minimizes dilution for founders on that round. That is, if VC2 says "We'll give you $2M at a $10M valuation" and VC1 says "We choose to exercise our ROFR at that price", clearly VC2 has set a valuation too low; if they want in, they'll have to make an offer that VC1 won't match. That all sounds good for the founders (and other early shareholders). What am I missing here?
TL;DR? You should be ok...

Long Version.

That (most likely) would of used oauth. So instead of sending your FB password to the site to log you into FB with. You give your FB password (if your not signed in) to FB and then facebook give the site using "sign in with Facebook" a token they can use with facebook to get account info / do actions on your FB account.

Now depending on which "sign in with" system you used then often the code handed back to the site (via a callback URL handled by the client) is a single use code. So once the site using "sign in with" has used the code with FB they get another set of tokens they will use with Facebook directly.

After the initial "sign in with" process the Facebook tokens are most likely never handed to clients (because they often need to be mixed with a site secret during requests to the likes of Facebook).

So you _should_ be ok if you used a decent "sign in with" system like facebooks as the only thing that would of been handed back to the client and then sent from the client to the site is that single use code. The communication with the site and facebook would of used an API endpoint.

Now... If you used another sites (not facebook) "sign in with" system and their API is also behind Cloudflare it could well be that some API keys could be in a cache somewhere. If those requests were signed with secrets you should be fine because without the sites secrets to lets say create a hmac signature for the request then while there might be some personally identifiable information in caches somewhere the signatures should of already expired meaning that they can't be used in say a replay attack and the data cached can't be used to create fresh requests.

BUT this all depends on everyone doing things right, which may not be the case. But either way, oauth tokens are often not revoked when you change your password. I.e. you might change your FB password and then still be able to auto login on somesmallsite.org because the tokens shared between FB and somesmallsite.whatever haven't changed.
The capital of Canada is an unbelievably tough interview question? Is Ottawa that obscure or have we lowered our standards of geographical knowledge to kindergarten level?
fatigue sets in when you are very familiar with the problems related in your discipline, in such cases you often get fatigue even moving between languages/frameworks because even though you are learning something new you are very familiar with the problems you are solving.
Vc2 doesn't bother putting the effort in to negotiate the deal because he knows vc1 can steal the deal as soon as he has validated it.
> Edit: More perls; "What is the angle at 3:15?" humm 0?

It's not 0. At 3:00 sharp the angle is 90 degrees. 15 Minutes later the minute hand covered those 90 degrees, however the hour hand moved by a small amount too.