skysight-inc/HackerNews huggingface dataset:
Their clients, sure, especially they are HIPAA regulated (let's pour one out for the poor sods) but CF only if everyone abandons them and many won't. Gross negligence does not even exist online AFAIK and so criminally you can't even start because there's nothing to work with, perhaps negligence but that's a slap on the wrist. A civil suit ... sure you can sue anyone in civil court for whatever but you need to prove damages here and that'll be bloody hard.
What video editing software are you using on Windows?

Adobe Premiere Pro? Avid? something else?
As far as I know that saga ended when wix open sourced their mobile client.
Another good video is Sagan's "Pale Blue Dot" https://www.youtube.com/watch?v=4PN5JJDh78I&feature=youtu.be
I agree the hardware design is amazing. Product design is more than the hardware - it's where does this fit in in the market? Who's the customer? What's the roadmap?
Thanks for posting here, I was explicitly looking to see if anyone mentioned Fastmail after I saw it on that Github list. You might want to post something on your site if you haven't already, kinda like 1password did.
Electronic commerce iOS APP framework
Happened on two accounts today.

ps: why the german text ?
An introduction to the Linux boot and startup processes
Your same argument has been made by others in a less histrionic and rude way, and upvoted.
John Romero talks about creating TEd, the tile editor that shipped over 30 games
> Apple consistently chooses form over function

Like the latest MacBook Air with only one port, which means you need to carry it with a hub dangling from it like a freshly used condom?

How is that good form?
For everyone who wants Apple to bring back an expandable machine like the old Mac Pro with dual CPUs, PCIe slots and SATA bays, I think this is the best plausible scenario.

I still don't think it'll happen though, and even if it did, you'll be paying Mac Pro prices for a Dell/HP.
So.. when are we going to stop using unsafe languages which allows these kinds of memory corruption or leaks? If this is not reason enough, what else needs to happen before people realise that whatever language the cloudflare proxy is written in is a really bad one?
Sure. I met him when he was still a student at UC Berkeley. He was the one who built the self-driving, self-balancing motorcycle for the 2005 DARPA Grand Challenge. It didn't navigate that well or get all that far, but it was really cool.
Border patrol agents now inspecting domestic travelers already inside the U.S
The BBC article (http://www.bbc.com/news/world-asia-39073389) mentions that one of the two women who interacted with Kim also became ill, and also that the woman who "accosted" him immediately went to wash her hands. It is not clear to me if this is the same woman or the other one.
You and OP should contact them, as customers.
What is the optimal balance between centralization and decentralization? Most people in this thread are complaining about how using a big centralized service (cloudfare) causes so much damage when security issues come up, and yet I have seen many people advocate using a single password manager (like 1password) to which this exact type of huge security problem can happen (your password manager is the single point of security failure which can comprimise all of your accounts!!!).

What is the optimal solution???
> So apparently the problem is not fully solved.

You are completely right.

The problem of poor, dirty, violent, urban-youth infested communities is not fully solved.
Well, that would help explain how Otto went from nothing to $680 million acquisition in ~7 months.
Automatron 2017.02 Released – DevOps Tool for Self-Healing
This happened to me too. And having 2FA enabled makes it a pain when you are logged out of _all_ your devices.
I checked my usage history but could not find anything.
And this article really does not explain why.
That 9% is a sham. Here's the critiera for an substance addiction which only needs 2 to be checked. Note the 1st 4 points and the Tolerance point. It's easy to see how 9% checked 2 of those points (I would).

- The substance is often taken in larger amounts or over a longer period than was intended.
- There is a persistent desire or unsuccessful effort to cut down or control use of the substance.
- A great deal of time is spent in activities necessary to obtain the substance, use the substance, or recover from its effects.
- Craving, or a strong desire or urge to use the substance.
- Recurrent use of the substance resulting in a failure to fulfill major role obligations at work, school, or home.
- Continued use of the substance despite having persistent or recurrent social or interpersonal problems caused or exacerbated by the effects of its use.
- Important social, occupational, or recreational activities are given up or reduced because of use of the substance.
- Recurrent use of the substance in situations in which it is physically hazardous.
- Use of the substance is continued despite knowledge of having a persistent or recurrent physical or psychological problem that is likely to have been caused or exacerbated by the substance.
- Tolerance, as defined by either of the following:
- A need for markedly increased amounts of the substance to achieve intoxication or desired effect.
- A markedly diminished effect with continued use of the same amount of the substance.
- Withdrawal, as manifested by either of the following:
- The characteristic withdrawal syndrome for that substance (as specified in the DSM- 5 for each substance).
- The substance (or a closely related substance) is taken to relieve or avoid withdrawal symptoms.
What’s in a Name? Venoms vs. Poisons – Toxinology 101
What you call normalism is regression to the mean. Lotta guys in tech? Hire a woman. Lotta white folks in the movies? Hire an 'ethnic' looking actor. The pendulum swings to and fro, and all the while we snip the ends off of the bell curve to make everyone feel like they fit in.

Fitting in is not a way to create progress. Adaptability and inclusiveness is. That was the point of diversity training in the first place, not normalization. Cultures function much more efficiently when diversity is introduced into the medium.

The real reason for the stagnation in social order is the fear of being pushed outside the herd if you are too near to the edge. We must become more inclusive, and fight the laziness that manifests itself in regressing to the mean.
Yeah, I think it's actually trivial to purposefully create two sets of data that hash into the same hash value. If this weren't the case then it would be the equivalent of data compression. If you are TRYING to cause a hash collision and successfully do that's trivial. Not even worthy of emailing your mom about. This entire post is not worthy of any attention.
If a sha matches, git won't fetch the object because it already has it.
I don't disagree.

But, Taviso is probably contractually prohibited from accepting money from CF as a Google employee. Many large companies have 'outside activity' clauses and Google seems to be paying him already for that.

However, it will affect others whom are fully freelance.
Your Phone Can Recognise Your Friends as Well as You Can
It's intriguing, particularly in cases where the code written could be verified against a specification or at least comprehensively fuzz-tested against a 'known good' version of the program. A mildly terrifying thought for a performance programmer - the idea that, perhaps, someone could just write some sloppy Python code to solve a program "at some speed" and have a automated system iterate it into some tuned, SIMD-laden, C/C++ horror-show.

While of course we have optimizing compilers to do this sort of thing now, you could imagine automated systems that attempt to preserve clarity and simplicity as they do it - and such a system could work semi-supervised, iterating with a human in the loop to steer the system towards more comprehensible solutions.
They have somewhere to go to and by the time they drop you off at SFO, they wont be able to make their appointment. Or they don't want to be stuck in inefficient traffic.

Also incentives are based on trip count, not trip length as far as I understand.

It's a problem that needs to be fixed in big cities with these apps.

But the reason why they reject in these cases has nothing really to do with the person, but the action/destination. Definitely an improvement.
Couldn't someone DDoS'ing a site use this to get around Cloudflare "protection?"

Uh, asking for a friend.
With doors you can push to exit, sure. More troublesome are those you have to pull. I basically have to wait impatiently by the door for the next guy to come in so I can get out without touching the door with my hand.
Around 1M people visit this temple on this day – Lord Shiva – 360deg images
Bannon vows a daily fight for ‘deconstruction of the administrative state’
That was my first thought. Maybe accounts with google credentials exposed in some way had a forced logout to invalidate exposed auth token?
Same for me as well. I just assumed my account was being under potential compromise, changed password, etc.
>> top-tier reward of a t-shirt.

A t-shirt still seems entirely too small; closer to insulting than motivating.
> I could be paranoid. They could have simply moved things on the desk. But anyway, people who are paranoid like me are advised not to take their laptops into Uber interviews. They are capable of just about anything, or so thinks my now paranoid self.

I would be cautious about discrediting intuition as paranoia.
It makes sense that they treat Tor like a probable adversary, but the cost analysis seems really flawed.

Sure, the proportion of requests passing through Tor are more likely to be malicious, but given the bandwidth constraints the adversary seems limited.

The costs aren't only the lost business from people like you, but people who should use Tor giving in. There's some wisdom to people even researching something as mundane as what their dog ingested using anonymized services, much less other medical questions.
Chrome marking Cloudflare HTTPS as "Secure" must be turned into something different, like "Not So Secure" or whatever. Secure = end to end.

Cloudflare is MitM by design. Chrome and others must not tolerate it. This vulnerability is just another reason to do it asap.
Today the White House also indicated that they may enforce federal laws against recreational marijuana more heavily soon as well [1]. They want to incarcerate more people, and this is preparing for it.

[1]: http://www.npr.org/sections/thetwo-way/2017/02/23/516945294/...
> Showing your ID isn't waging a war against voting rights

Showing your ID isn't, but voter ID laws are.

https://mobile.nytimes.com/2016/09/17/us/some-republicans-ac...
That's not a very interesting patent. It's basically some optical stuff to do LIDAR scanning with non-square pixels, presumably because you want more resolution in one axis than the other. That's nice, but not a big improvement over existing technology.
Minor correction, but it's the Macbook with one port, not the Air. The Air that is still available has two USB and one Thunderbolt port + an SD slot and the Magsafe connector and so on.

And quite honestly, the single port Macbook isn't a completely horrible idea, Apple is just trying to push a new standard like they always do. It's an entry level computer that does just the basics. How many peripherals are necessary on a computer with those specs? You certainly can't do any games on it, most printers nowadays have a wireless function to connect to, it has Apple's trackpad which is pretty darn good for navigation, else it has Bluetooth for external mice, which can be had for very cheap now with good performance.

I'm all for more options; I don't have a Macbook because my old 2012 Macbook Air feels about right to me in terms of minimalist form with enough function to still do what I want. But I can see how you'd work with a Macbook without running into issues with the port. The majority of the time I use my laptop is just having it plugged in, or I have it when I'm traveling and don't want a bunch of stuff plugged in anyways.

Apple's idea isn't far off from how most people use the laptop.
Big surprise. Video Pros now, developers next, common users last.

While Apple is focusing on trying to create the thinnest notebook on every generation, other companies are actually making useful computers, laptops or otherwise.

Right now, I've decided to take the money I'd spend on the cheapest Macbook to buy a desktop system, plus a chromebook. I can have mobility and a lot of performance, for a fraction of the price.

Even Windows is becoming more viable again, ubuntu core and all.
No, you do not understand, or choose to ignore things that are uncomfortable for you to integrate. It's not 'grandmas basement', it's effectively everyone in Australia.

https://www.telstra.com.au/support/category/broadband/fix/ho...

> Connection type : upload bandwidth

> ADSL : Up to 1Mbps

> ADSL2+ : Up to 1Mbps

> Cable (Base Plan) : Up to 1Mbps

> Cable (Speed Boost) : Up to 2Mbps

> nbn™ Fixed Network (Base Plan) : Up to 5Mbps (only available in a small proportion of locations)

> nbn™ Fixed Network (Very Fast Speed Boost) : Up to 20Mbps (only available in a small proportion of locations, and only to business customers)

> nbn™ Fixed Network (Super Fast Speed Boost) : Up to 40Mbps (only available in a small proportion of locations, and only to business customers)

> nbn™ Fixed Wireless : Up to 5Mbp (only available in a small proportion of locations)

Welcome to the world outside of your bubble. A node currently takes up about 35% of the upload bandwidth of an internet connection. At a minimum.

> I fail to see node centralization as a priority.

And therein lies your problem. While you continue to hold to that belief, you will find that the direction of bitcoin will go contrary to your desires.
He notes right there that super price sensitive people are actually more demanding and more annoying than less price sensitive folks.
Indian shot dead by American spewing racial slurs in Kansas
The point is not the absence of bugs. In a memory safe language, usually a bug doesn't lead in leaking the content of freed memory.
I'm running a side-project on Cloudflare and it's accessible through Tor without problems. I suspect this comes down to the settings a site owner sets up in their Cloudflare interface. It would stand to reason if for example you applied the highest security setting across the board, Tor and VPN users would get presented with a captcha.
PINBOARD!!!!!!!!! (It's a web-crawling & caching service.)
It's trivially easy and unimportant to purposefully create two sets of data that hash into the same hash value. The value of any hashing function is only from the statistical efficiencies arising from the fact that RANDOM data will have astronomically low probability of collision. Purposefully creating collisions is merely a nonsensical time-wasting pursuit. But hey, it got you noticed on HackerNews. Mission accomplished.
SHA-1 isn't broken until someone makes a multi step quine that hashes to the same value at every stage!

BTW quine relay is impressive: https://github.com/mame/quine-relay
Then why are they talking about that 3000-ish number instead of the 7 million number?
Clearly we should bring a bot to coding interviews.
Good! lot of things happening here as well and hope you can make your life here as well.
Is there a government body that can enforce fines over this? Or is a class action lawsuit the only way to seek damages?
I would be surprised if Gmail sent any tokens or credentials via Cloudflare
So... what was wrong? :D
What I'm wondering: how many fuckups like this need to happen for website owners to realize that uber-centralization of vital online infrastructure is a bad idea?

But I guess there is really no incentive for anyone in particular to do anything about this, because it provides a kind of perverted safety in numbers. "It's not just our website that had this issue, it's, like, everyone's shared problem." The same principle applies to uber-hosting providers like AWS and Azure, as well as those creepy worldwide CDNs.

Interestingly, it seems this is one of the cases where using a smaller provider with the same issue would really make you better off (relatively speaking) because there would be fewer servers leaking your data.
I got logged out from multiple accounts on multiple devices. Today is being a pain :(
I liked the bit where he said he underestimated the number of people and code using python 2.7. I often hear python 3.X has 99% penetration based on probably the same bogus metrics, like downloads from python.com. Then they go on to talk about how many exciting changes are being made to python 3. Some of us actually have work to do.
Only three thousand something sites [were potentially serving private data from all 7 million customer domains we host]
Fascism is the general term.

Judging anyone by anything other than what is called for when doing the actual work is inherently superficial and therefore fascist (fascia, on the face). Fairly synergistic connection there regarding the popularity of a certain face-themed webpage.

We can make up labels all day to make it fresh or more precise, but the logos/pathos/ethos of the term 'fascist' is sound in every instance of excluding or including someone based on anything but propensity. It is interesting that we can't acknowledge it, like we are all so wrapped up in finding our niche that when we do, anything that would jeopardize that is immediately regarded as false.

Like, who would you be if you aren't actually as talented as you think you are?

But I digress.
The fact that a full-blown Windows gaming laptop with a GTX 1070 in it is about the same cost as the entry level Macbook Pro (with integrated graphics) is a good reason to.
Am I misunderstanding that this would be useful for parallel construction, but that the public failure actually subverts the usefulness of Cloudflare as a MTIM partnering with someone?
Started happening around noon pacific for me.
How is it good for domain driven design? Can you point to where I can learn more of this?
I mean that's how most circuit designers lost their jobs to CAD/EDA tools, why should software engineers be different?
This has been true for years though; I'm curious as to why I hear it more often now. You've always been able to get more bang for your buck with a Windows machine, but that didn't stop MacBooks from selling.
Nah, the bots will just use it as training data.
Cloudflare doesn't cache HTML pages by default.
सितारा – Star Iजानिए आपके हाथ में मौजूद सुभ चिह्नों के बारे में
He's referring to https://en.wikipedia.org/wiki/Deconstruction by Jacques Derrida
The concern isn't that they use Cloudflare. The concern is that they're spidering the Internet, and therefore might be storing cached data that Cloudflare leaked.
I hope something like intense mining would've caused a detectable spike in turn alerting CF sooner. Looks like it didn't...
Hospitals Are Terrible
Don't fuel my paranoia. I'm researching luddism right now.
What is the best customer support platform you have used?
Or Baidu know enough to not purge their caches.
Think of the amount of tangible gratitude that their host nation would show them for access to some potentially tasty information....
Firefox certificate cache leaks user information
Probably only for 30-50 more years, honestly.
I remember a long time ago ('97) there was a major defection from the North Korean camp to the South.

Couple days later, in Seoul, the North Koreans assassinated some other guy who'd defected 10 years earlier.

Not only is the message "We're coming for you," but also "you can never feel safe again."
It'd be interesting to see some of the risk analysis they did before branching into fiber, particularly for those early cases like Chattanooga. But off the cuff, I'd imagine that there was very little risk to the move outside the capital outlays. By contrast, because renewables are forcing what's effectively a paradigm shift in power markets, it makes sense that monopolies--which by their nature are very risk averse--had trouble embracing major investment into renewables. Perhaps it's better to say that, at least when it comes to the primary activities that constitute their monopoly, monopolies are risk averse and embrace change as little as possible. And renewables are the sort of long-term suicide that scares the hell out of any self-respecting monopoly.
Engineer killed by US navy veteran first Indian hate crime victim in Trump era
Happened to me too this morning, all my devices (mobile, laptop, desktop) all signed out :S I thought something fishy going on.
I currently invests in https://www.lendbox.in, even though lot of delays in repayment. No actual default has happened in my knowledge on the platform. What is your tackling solution for delays and potential defaults
That's also a bad thing, but you can roll creds and check if anyone has exfiltrated data from your various accounts. You can't roll patient identities. There doesn't appear to be any way to figure out which of your HTTPS pages served in last 6 months are presently publicly exposed.

I feel for folks who lost API keys -- really -- but everyone regulated should be in full-on disaster recovery mode right now.
Fairly incredible read. The guy behind the curtain just stepped into the spotlight and stopped pretending.

Who will stop these assholes before momentum takes over?
There is a system for congressional complaints that makes people act.

Do you have any idea how many calls a day a supervisor answering the phone receives? Not just "where's my parcel" but the patron has data that states intermediary carriers (ups to PO for last mile)

Thousands of calls a day. With 31,606 offices there has to be at least 2-3 calls per day.

Search harder is a congressional command. (Besides all their political mail is free to them)
> This is approximately as bad as it ever gets.

*as bad as it has ever gotten so far.
Seeeday is coming, great deal for makers
Its still better than nothing. AMD management is dysfunctional, they treat engineering as a cost and were cutting it badly during K9-K10 era.
Yes. One can identify the IP address of the origin server behind a reverse proxy if the server responds to direct requests in a way that identifies itself. See: https://cloudpiercer.org/

Two steps towards obscuring the origin server include requiring that the HTTP Host header is set and only responding to Cloudflare IP ranges: https://www.cloudflare.com/ips/
3 SEO Things to Look Out for in 2017 – “Mobile, Mobile and Mobile”
Well. Does your wife work in info sec?

Let's do our part to make this place less toxic to women please
So he yelled that and then shot them? Nothing else was said? How sure are you about that?
Mobiloitte – Phonegap Application Development Company
Yes but the arbitrary data in the PDF doesn't have to be rendered.

It is much more difficult to change source code in a way that:

1) generates a collision
2) is still valid source code
3) the changes cause a desired effect (like a backdoor)
4) has the same file size
150 years ? Seriously ? A strong democratic state maybe but since the peace of Westphalia in 15xx you had strong states with centralized authorities with the monopoly of power, infrastructure and world view.
Consolas is not the most legible option for reading non-code.
Got a pop up on my mobile. How to check the pop up was not impersonated by a different app?
locally: inside functions
Snapchat Founders’ Grip Tightened After a Spat with an Early Investor