skysight-inc/HackerNews huggingface dataset:
Why are many of Europe's leaders are childless? Isn't that strange? These people are creating laws and policies which will affect generations of people and they don't even have any skin in the game. They are fundamentally out of touch.

Doing a google image search of "Angela Merkel Family" or "Stefan Löfven family" (PM of Sweden) and its night and day compared to "Barack Obama family" or "Donald Trump Family".

Whether you are conservative or liberal, we all agree that we need leaders who are thinking about the future generations of the nation. Too much short-sightedness going on. Anyone who has raised kids knows that it changes you.
Short of outsourcing, long of free: SpinRite.

https://www.grc.com/sr/spinrite.htm

This appears to be a transcript of Gibson chatting with Leo Laport and it describes using SpinRite on an SD Card:

https://www.grc.com/sn/sn-358.txt

It also mentions that reading an SD card is not quite like reading a hard disk.
Looks like they are going to downplay this. Interesting choice.
Pip, too.
Cutting out middlemen out of a transaction is a very useful feature of cryptocurrencies which potentially broadly benefits society.

For example (in certain parts of Europe, and probably elsewhere too) merchants have to pay a fairly high fixed cost to have credit card terminals in their place of business, and also pay a cut of each transactions to Visa or Mastercard. This is a considerable cost to small business, which have to pass this along to consumers. Now of course most consumers don't use bitcoin or other altcoins to pay for stuff today, however the fact that there's even the possibility of eliminating these types of middlemen is very exciting, and unthinkable even a few short years ago.

Not to mention the very exciting possiblities offered by blockchains and smart contracts, even if the original projects that spawned them fail completely (bitcoin and ethereum).
> Pro rata is just ROFR with a 1x multiple,

This is incorrect. See my comment above.
10 things to look for when buying a VPN
Let's not forget that long before Apple exited the "Pro" market, companies like SGI went out of business. So did all the companies that used to make graphics hardware targeted to pros. They were overwhelmed by ATI and NVIDIA's repurposed gaming GPUs.
Good point. While the chances are really high that SOMEONE will be affected in a really bad way the chances that any single person got hit is really low. But as CEO he should be erroring on the side of caution here I'd think, because of his position. Him saying that kind of implies that it's not a big deal and no one should be taking any steps to be sure they're not the person who is in trouble.

The number of people who lost passwords is low, but it certainly happened to someone and none of us know if we're that someone.
Thanks for the suggestions. Since the card was FAT32 I was able to install testdisk from brew and use that to recover all of the files. Phew.
You can run multiple calculators from the terminal:

/Applications/Calculator.app/Contents/MacOS/Calculator&
Moore's law is, but the cost of a given amount of computational ability is still going down quickly.
KeePass with the KeeFox and chromeIPass browser extensions. Synced in dropbox, using password+keyfiles that aren't in the cloud anywhere. A bit slow on mobile, but can adjust down the rounds of encryption if it gets too annoying.
It seems that they're intent on downplaying the severity. It's one thing to present this confidant attitude to the end user but I wonder what the companies who pay CloudFlare, make of this attitude? Perhaps it's a tactic so that if the end-users aren't worried then they won't pressure whichever services they use to move away from CloudFlare? Regardless, I think his entire statement is tripe.
There are few things I hate more than this asinine "don't reinvent the wheel" reply to people's project postings.

Also, Moz is a completely different, unrelated company.
Related story:

I used to use Cloudflare for DNS, but I left because I was becoming uncomfortable with their policy regarding DDoS attack sites. We run our own Anycast CDN now for the HTTP, but I didn't want to have to deal with the DNS servers so I outsourced it to DNSimple.

Turns out that DNSimple unknownst to me started using Cloudflare's DNS servers under the hood. They were getting attacked by the DDoS attack sites Cloudflare hosts and it was threatening the service. I figured this out by doing a lookup of their nameserver IPs.

So my attempt to get away from using Cloudflare has meant that I'm just right back on Cloudflare's servers, again.

This is an insidious cycle that will not end well for the internet, or for our freedom on it. The internet will not be decentralized anymore if the entire thing sits on Cloudflare and depends on Cloudflare to function. Cloudbleed is a canary in the coalmine.
I think thats more related to Linux and its prioritization of IO than anything else. Note that the latest kernel release 4.10) contains an IO throttle that should improve this experience.

https://kernelnewbies.org/Linux_4.10#head-f6ecae920c0660b7f4...
>You first have to accept them to check if they actually qualify for refugee status, those that don't qualify don't get the status and thus have to leave the country.

Then what? THEN they go back to the border and they create their own communities? How can you __actually__ make that many people leave?

>Do you seriously think creating these kinds of "slums" would be beneficial to anybody?

No, but the fact is these refugees are not able to contribute to the societies they come to in a meaningful way. For instance, in Germany only 1 in 10,000 refugees that arrived last year are employed. Is accepting a large quantity of people, most of whom do not have the kind of formal education required to be successful in a highly developed economy, beneficial to anybody? What's the end-game for this?
> is there a link to an actual government site instead of pictures of a book in Swedish that was published decades ago?

That book was published by the goverment of Sweden. Does the host matter?

In 2005 BRA (Swedish Criminal statistics) published an update saying: "Immigrants’ risk of being registered for crime has not changed in any pronounced way since the previous study conducted by the National Council, which related to the situation at the end of the 1980s"
Link: https://www.bra.se/download/18.cba82f7130f475a2f1800010674/1...

> it is really difficult to have a serious conversation with someone unable to differentiate between the process of analyzing reasons for crimes and 'justifying' crimes.

Justification: "give grounds for, give reasons for, give a justification for". Pointing at socioeconomic factors is justifying the crimes by allusion to the circumstances of the crime.

Maybe you're confused it with 'condoning' which means something else.

So my point is, do we think we can analyze and find reason for aggravated rape within socioeconomic circumstances?

> Are you saying rich, well educated muslims or african immigrants are still more likely to rape someone than a white person?

Am I? I don't think that I am.
Change Your Passwords. Now
why is it so common for it to happen in Sweden of all countries I honestly don't know

One theory is that due to a quirk in the way the law is worded, grenades where not considered weapons, but rather a controlled explosive[0]. What this means in practice is that the punishment for smuggling hand grenades into the country is much much lower than the punishment for smuggling in guns. As the law is written, if you are first time offender caught with a hand grenade you're likely to get away with a fine.

[0] https://www.svd.se/fritt-fram-ta-in-handgranater-i-sverige
The story also highlights this "Unfortunately, it was the ancient piece of software that contained a latent security problem and that problem only showed up as we were in the process of migrating away from it"

Out of context that omits the fact that it was a new feature. Ragel might be old, but they did leverage it, on purpose, for net new functionality. The fix didn't remove Ragel either.
> Cloudflare, a service that helps optimize the security and performance of more than 5.5 million websites, warned customers today that a recently fixed software bug exposed a range of sensitive information that could have included passwords and cookies and tokens used to authenticate users.

It's funny that proving a central point to MITM and expose all network traffic to
your customers in marketing speak translates to "helps optimize the security".

> Graham-Cummings, the Cloudflare CTO, has ruled out the possibility that secret keys for customers' transport layer security certificates were exposed in the leaks. Still, he said end-user passwords, authentication cookies, OAuth tokens used to log into multiple website accounts, and encryption keys Cloudflare uses to protect server-to-server traffic were all at risk of being exposed.

I read that sentence like he's saying the first part in a loud voice and the second part in a hushed whisper. In what world is exposing passwords, session cookies, or OAuth tokens less of an issue than exposing SSL certs?!

To make use of a stolen SSL cert you need an actor that can manipulate the end user's DNS. Assuming you revoke the certs soon enough, the window for that to happen en masse is relatively small.

The rest of that data is wayyy more interesting and, in the case of passwords, could expose users on a myriad of other sites as well (from password reuse).

> Cloudflare customers should at a minimum strongly consider changing passwords. Security researcher Ryan Lackey has other security advice here.

Not just their customers ... it's the customers of their customers that need to change their passwords!
"What it shows, bigly, is that we may have just dodged a bullet."

"bigly" is a word now? Thanks Trump!
He told the BBC there was no evidence yet that the data had been used maliciously.

Huh?

https://webcache.googleusercontent.com/search?q=cache:VlVylT...

That request is scrubbed now, but it contained an Uber driver's lat-long coordinates. I used it to look up where they were driving.

CloudFlare really aren't helping themselves with these statements. The people who decide whether to use CloudFlare are programmers, are programmers generally can't be duped with statistics like "1 in 3.3M requests were leaking data" (translation: 100k requests per day were leaking data[1]) or "There's no evidence anyone used this data maliciously" (translation: we have no idea what is being exploited).

[1] https://news.ycombinator.com/item?id=13719518 and https://news.ycombinator.com/item?id=13722606
Developing on Windows is only ok if you're a .Net, Java, or node.js developer; which arguably encompasses a lot of developers. However it's a pain if you're using anything else
Not sure where you're located, but the Walmart brand Reli-on testers are as accurate as any other brand you'll find on a pharmacy shelf, and have very reasonably priced test strips (glucose meters are like razor blades or printers, most of your cost will come from test strips, not the meter itself). I'm a T2 diabetic, and have a Reli-on Confirm. The device is only around $10 and the strips are ~$20 for a 50 pack or ~$35 for 100. It's a pretty good deal. Test strips the only thing I ever go to Walmart for anymore.
> This would all be a huge net gain for the world even if every $150k/year engineer at Uber was horribly mistreated/marginalized/had their butt patted before shifting to another $150k/year engineering job.

Are you saying that it's okay to be harassed if the pay is high?

If so, please examine your own mind for its blind spots and learn a bit of humility, before sounding high strung and judgemental about others'.
The Occasional Chaos of AWS Lambda Runtime Performance
Show HN: Hasura – A Postgres BaaS and Kubernetes PaaS on Your Own Infrastructure
The downside of mobile first or mobile only for that matter. Normal web flows are downplayed. Not that this is excusable for a company of this size.
Sounds like a bad advice in general.
For the cloudflare CTO it would sound a lot better to hear something like:
"Whille I don't think anyone needs to change their password, but I changed mine, I actually do it regularly, to keep my accounts safe."
Unfortunatly it would not give such a good sound bite.
Another Cloudflare customer also said basically this is much ado about nothing, but prefaced their comment by saying "We take security seriously".

Whats offensive here is if you take security seriously, then if there is a .01% chance of a disclosure - you tell people to change thier passwords,tokens,etc. That is taking security seriously.
Is it though? Is anywhere else really any better? Won't CloudFlare be reviewing everything now? Will they be more secure after this and more trustworthy? I'm asking myself these questions now.

Really, I don't know the answers, but I'm not leaving because this seems like something that could happen anywhere at anytime. I honestly don't know though.
Without paying for Oracle licenses how much more hardware or optimization man power could you afford?
5G specs announced: 20Gbps download, 1ms latency, 1M devices per square km
Trump is not Hitler, as much as leftists and the media love the comparison. Did the killer even mention Trump? People with racist views were doing terrible things before Trump was even born, and they will be doing them long after he dies. If Trump has ever endorsed the murder of anyone, let alone murder based upon the intended victim's race, I would love to see the footage. Then I will stand behind your comment all the way. Until then, I don't even see a passive link.
Derefr's answer in this thread suggests that you can insulate against this regardless of how the vPro activation works; not all motherboards support the parallel packet stream, so you can get a vPro incompatible motherboard and trust that even if there is a "wake and activate" command it won't be received.
You'll be fine. The murder rate in the US is comparable to India's. Pretty much by definition, anything that makes the (inter)national news is a rare event.

There's some bad shit going down in this country, but it's not to the point where people need to fear for their lives. (And I think/hope it will remain that way.)
Those are questions for juniors. Most likely they had no previous job at all. The only thing they can bring is potential, and this question tests it rather well.
Monzo is also UK-wide, but only UK-wide.

Anecdotally, it seems Scots are more likely to say Scot* vs UK than are Welsh/English to offer the equivalent. I certainly grew up (in England) with the feeling that one had to be careful to say 'UK' if one really meant UK, for fear of similar reprimand to that when using a gendered pronoun that may or may not be correct.
Estimating poverty using cell phone data: Evidence from Guatemala
"facts"... "government.se".. yeah sure.
And I do not like abusing the tiny bit of notoriety I have for personal reasons like this.

It helps others. "The company, that faced a notorious case in February" is an interesting way of starting a news piece.
For a beginner who wants to learn Python, which one is better — 2 or 3?
That is exactly the motivation. Provide a clear path and precedent for government developers to open source their projects. Right now we are inviting comments and criticism for the approach to gauge the community response.
Ahh, thanks. Storj doesn't appear to support file sharing though, looks more like personal storage, which would make this less of an issue.

Edit: Might want to put 2014 in the title.
>I think it would make sense to reduce the number of poor people.

This could be achieved in a number of ways. For example, poor swedes could be deported and rich immigrants could take their place - this would actually be more effective than halting immigration altogether.

Another form of issue dodging is when people suggest that immigrants are the issue without admitting that the situation is a complex combination of factors. One of the best predictors of criminality from a statistical viewpoint is gender. Of course, excluding all men from immigrating into our countries probably strikes most as inhumane :) To say the immigrant status of a person is to be specially focused on seems particularly convenient, but not humane.

edit: Its funny you're willing to accept taking gender into account statistically, but not the wealth of most immigrants.
While I agree this is a silly comment to make. I too won't be changing my passwords until my regular yearly password change in a few months. If I CIA level intelligence floating around I would but I find it rather unlikely that I'm exposed and if I am it isn't the end of the world as I selfhost my email and other critical services thus I know for certain they are unaffected by this.
I'm looking hard at the T570 (I've got a T450s docked at work, but 14" is too small for working on the go). It sucks that Lenovo's screens are such crap. Even /r/Thinkpad complains about Lenovo shipping cheap crappy screens.
"I am not changing any of my passwords. I think the probability that somebody saw something is so low it's not something I am concerned about"

So... just cross your fingers and hope nobody saw anything then? The way they're casually downplaying this incident is outrageous.
We built Hasura over the last few years to help us build products fast. We didn't know what it would look like when we started, but we've ended up with something like a Parse + Heroku but on your own infra so that you can mess around with the internals when required.

Key features:

1. Data APIs on a Postgres database

2. Deploy with git-push, or any docker image

3. Expose HTTP services on the API gateway over subdomains/paths

4. Automatic LetsEncrypt SSL cert generation for exposed http services

5. SSH service to get tunnelled access to TCP services on your cluster

6. Auth middleware built into the API gateway, so that upstream services don't have to resolve sessions

7. Out of the box auth APIs for password, email, recaptcha, social login. mobile-OTP stuff
This happened to my Android phone yesterday while I happened to be going around updating my passwords all over the Internet because the ones where I had used the same one were getting attacked left and right over the past few weeks. I never used that password for Google but I thought just maybe there was a forgotten access point to my account where I had. It sent me into quite a panic for 10 minutes or so. Needless to say, I'm now using a password manager for everything, even on sites where I wouldn't normally care if someone got in.
Poor judgement in leadership is reason enough for me. Will they be reviewing everything? Perhaps. The person overseeing that review may not be erring on the side of caution though. Concerns me. Draw your own conclusion I guess.
I feel like I'm missing a partial context but "You can change all of your passwords in 30 minutes tops" is not true. I have a minimal amount of accounts (I close accounts I don't use) and I can't imagine it taking me less than several hours of slogging through it to change all my passwords (e.g. updating password database, 2FA confirmations, making sure I don't lock the account I change the password on, etc.)

So I have to aim for the clearly impacted ones from this (if named/discoverable) and then have to decide how vulnerable I feel and whether I should go through the extra effort (or not) for every password I conceivably have.
It would allow you to add a second GPU. The cost of the upgrade would mostly depend on the cost of the GPU.
Youve linked an example of a woman who registered some non-citizens to vote which did not sway the election in her favor. I agree that non-citizens should not vote, but i do not agree with increased regulation from the government in order to fight against voter fraud which did not influence an election.

Can you link to a single instance of voter fraud effecting the outcome of an election?
The NSA open sourced what became Apache Accumulo years ago, so that government org has made peace with the copyright issue.

The DoD, though, is still trying to feel its way around. There seem to be some lawyers there who are very hard to convince. For years, they've been asking to have various licenses and CLAs modified and we've been telling them no.

Here's their latest request for the Apache License 2.1:

http://markmail.org/message/eueu4rzlbpe2ugcj
This happened to me yesterday on my Android phone.
Engineering is thought of as a cost center in virtually every company.
I think filecoin's even older than that though this site appears to be from 2014.
Is that for quants? Seems to be good. Thanks for the link.
There's still leaked data all over google cache: https://webcache.googleusercontent.com/search?q=cache:oN9z-b...
When reading this, my immediate instinct was to say: "Easy!"

import { flattenDeep } from 'lodash';

const flat = flattenDeep([1,2[3], [4, [5,6]]);

Not sure why employers care about developers being able to write utility functions from scratch, when that is not (typically) the job developers are hired for.

Having said that, I lament the issues that the OP brought up: poor naming, unfamiliarity with their language's data structures, etc. Those are issues that will come up. Especially naming.
It kind of does now: https://chocolatey.org/
Very cool article, but the images are extremely low-resolution and blurry if one has JavaScript disabled. Folks, please don't do this: HTML has an image tag for a reason.
Am I missing something here or is there nothing associated with this initiative other than 'please check our LICENSE agreement?'
I had a conversation with some researchers at a major biology/genomics research lab in Maine last week and they pushed back hard when I asked if they were mainly looking to hire PhD candidates. Apparently it's a real problem that grad students and postdocs come onto their projects for just a couple of years and then move on, leading to frankenstein code and unfinished projects that no one can easily pick up and continue. They claim that they would very much like to hire developers who wanted to work long-term on bioinformatics software not just as a means to a PhD.
It might make it easier, but that isn't evidence to suggest it makes people more likely to do it. A sufficiently motivated person could kill someone with any number of means. You still haven't tied more guns to more terrorist attacks.
Why Node? I'd assume the 2nd class unix support would still make it a pain.
I attempted to challenge the rationality of her fear, but she both disagreed with my assessment of the irrationality as well as suggesting that even if her assessment was irrational, it represented how she felt and that she was most comfortable to act on how she felt. At this point we both felt quite boxed into our disagreement.
> Go is not flawed

For most technologies (with some notorious exceptions) that boils down to a matter of opinion an intended use cases.
How to mount / in RAM. Not sure if gusta
Cache deduplication and the SHA1 collision attack
Recent related discussion from hn: https://news.ycombinator.com/item?id=13686671
I did kinda the same thing except I still keep my good ol' macbook air instead of a chromebook. Ubuntu on desktop and I can run stuff on it remotely and I got a lot more performance if I were to spend the money on a new macbook.
Other than the US, which countries do you feel provide similar opportunities to immigrants? I'm currently 17 years old and it has been my childhood dream to somehow make it to the US, but such news deeply saddens me and insights fear into my mind. It is with deep regret that I have to read such news everyday and realise that it just takes 1 messed up person to destroy your life.
Aren't there any other countries where hardwork would pay and dreams could come true, without having a general fear of getting shot?
A good advice in password security is that you should never store passwords in plain text on your private machines and on servers. With CloudFlare bug your passwords can be stored unencrypted in local browser caches of random people who may have malicious intentions or whose machines may be compromised (already or in the future).