skysight-inc/HackerNews huggingface dataset:
Ragel shares part of the blame. Why did it use a strict equality check when it could have trivially done a >=?
Of course, legalizing drugs is the easiest way to end the illegal drug trade[1].

[1] http://www.economist.com/node/13237193
With valuations in the billions and funding rounds in the hundreds of millions... profit indeed.
uber is a DUMPSTER FIRE right now. feel bad for the engineers there who didn't steal anything.
> And being federal land, the state would have no jurisdiction.

Can that be right? It still occurred within Idaho, even if it was on land owned by the federal government. I want to see a case on point before I go killing people.
Some important parts:

The examples we're finding are so bad, I cancelled some
weekend plans to go into the office on Sunday to help
build some tools to cleanup. I've informed cloudflare
what I'm working on. I'm finding private messages from
major dating sites, full messages from a well-known
chat service, online password manager data, frames from
adult video sites, hotel bookings. We're talking full
https requests, client IP addresses, full responses,
cookies, passwords, keys, data, everything.

Cloudflare pointed out their bug bounty program, but I
noticed it has a top-tier reward of a t-shirt.

Cloudflare did finally send me a draft. It contains an
excellent postmortem, but severely downplays the risk
to customers.
FBI refused White House request to knock down recent Trump-Russia stories
This is actually something I've been quite curious about. For example, I know that stormfront regularly organizes brigades and disseminates talking points to disrupt conversation on Reddit - same with FSB/corporation/ etc.

I was wondering if I could mine all users on stormfront and then perform a stylometric analysis on Reddit posts to ferret out those same users.

Same with other astroturfing groups, instead maybe running some type of classification technique to find aockpuppet accounts.

I'll probably make this an ask hn at some point to get some input.
To my sibling: the issue is that people can and do consider Flexible SSL "good enough", when it really isn't. It gets you the green lock and the warm fuzzies, but the page just isn't secure. A false sense of security is worse than no security, because no security at least is glaringly obvious.
I recommend removing your opening statement. Even with the smiley, it unnecessarily adds negativity to your comment. The rest stands just fine without it.
What do you find unstable or untrustworthy about GDAX or Gemini? They're both American companies with a great deal riding on their reputations as mature platforms, Gemini in particular in light of the ETF.
Never been so relieved my company uses a different CDN...
Josh Steimle on 10X-ing in a year by finding the right partners
Cloudflare's announcement, as it is currently worded, deserves the understatement-of-the-centry award.
But First, a Word from 100 Podcasts’ Sponsors (2015)
Pot is completely choking Denver. I'm all about rounding up all these people and getting rid of them somehow. If more states legalize I've even considered expatriating.

Keep this crap at home, or else!

I'm well aware deviant dopers will downvote my dastardly drawlings, but I'm still right. It's a bad influence and should be eradicated.
I use Hachoir for a lot of tasks - digital forensics (examining file tables on a filesystem, discovering slack space taken up by hidden data, etc.); for metadata extraction (for which the hachoir-metadata subproject is designed); for file carving (either with hachoir-subfile or manually); and just to geek out about file formats (did you know .doc/.ppt is secretly a FAT filesystem?).
A life form rarely kills itself. See kodak.
It seems criminal. I remember an engineer from goldman sachs went to prison for doing something similar.
Coinbase also blocks accounts from buying and refuses explanation. They may be a little safer, but they're still far from reliable.
Why would it? Imagine being a Google/Alphabet shareholder.
So, pastebin?
The commerce clause has become the GOTO statement used whenever the national government wishes to interfere with the states.

Ah, somebody already mentioned Wickard.
The quoted part that specifically mentions logged urls containing query strings has nothing to do with logging?
No one ever asks about the other side, or about whether we are being misled.

That's just not true. There are numerous comments on HN that reflect exactly this sentiment, as well as every other point in your comment.
@jgrahamc:

What are your thoughts about Tavis' remark that Cloudflare's communications (the "draft", post-mortem, etc.) "severely downplays" this issue?
If there's nothing else you can agree on in the Blocksize debate, the censorship in that subreddit is reprehensible.
feel free to prove me wrong by posting ethereum adoption by Fortune 500 instead of downvoting.
I think this is exactly it. Kindness was something built-in from day one, it was core to everyone who was responsible for steering a community. We talked about loving each other and loving the community very often and publicly and loudly. It also came from the top. Scott Jarkoff (co-founder) and especially Eric Kolb (dir of community) are really great people, they encouraged and in fact mandated a general idea of no assholes. Everyone on the community team had a lot of lee way to ban, and we banned liberally and often for anything that was even remotely off tone or out of culture. The cool thing about banning from the admin side is it was build in a "time out" manner, when you banned someone you would generally set a period of time the ban was for, and it was pretty difficult to ban someone for life. Rehabilitation was something we actively promoted. We worked pro-actively to resolve conflicts out in the open. We also made a pretty deliberate effort to instill a culture of positive critique and criticism. If someone posted something that was harsh or to the point, you could generally expect an experienced community member to reply with a suggestion to start with a compliment or something similar. Sometimes someone would even re-write a whole crit for a new member to show how it's done. We tried to humanize the site as much as possible too, profiles became very important, we encouraged people to be very personal in their journals. It was for sure lots of little things, such as around 2005 (I think but don't quote me) the community staff started talking among themselves about having a photo as their profile, not an avatar. The IRC community was also quite large and vibrant, and again the tone was always positive. Pedanticism was STRONGLY discouraged. Every time I was coached by Eric or Scott, it was always super: "you are awesome here is how you can improve btw we love you, be more awesome, you are awesome." - This is what Scott wrote on my linked randomly one day, you can get a sense of the type of dude he is: http://john.je/jIP5 -- As a note, this is the exact same way that the DigitalOcean community was built. :)

https://news.ycombinator.com/item?id=13714513
Yeah, they definitely have some really specific accusations about what went on:

>>> To gain access to Waymo’s design server, Mr. Levandowski searched for and installed specialized software onto his company-issued laptop. Once inside, he downloaded 9.7 GB of Waymo’s highly confidential files and trade secrets, including blueprints, design files and testing documentation. Then he connected an external drive to the laptop. Mr. Levandowski then wiped and reformatted the laptop in an attempt to erase forensic fingerprints.

The bit about connecting the external drive is interesting but I guess there's probably a ghost of that action somewhere on a drive (assuming you could more or less restore the drive before being wiped).
Uber, up to and including the CEO, have admitted publicly that they're working to resolve internal issues.
Travis is a phenomenal salesman and fundraiser. Travis convinced Kapor that, amongst other things, Uber was a platform for democratizing transportation, citing things like racism amongst taxi cabs to spin Uber as social good. So now you have a company that isn't actually what it pitched itself to be.

But that's not true. Uber is still a platform for democratizing transportation. It has more or less completely fixed the issue of racism in taxi cabs (or auto rickshaws), which was previously a daily experience for me. In Maharashtra they've literally made an enemy of Shiv Sena, racist/nationalist political party, because they are undercutting the Marathi autowales.

It's also improving women's safety worldwide, which is a major issue outside the west. Literally days after an Uber driver raped a passenger in Delhi, my girlfriend at the time still insisted on taking a radio taxi home (wasn't Uber, which was shut down for a little bit) because she felt safer than in an auto rickshaw or taxi.

Uber is working - fairly successfully - to partially fix the issue of cronyism in governments around the world. They've taken private battles public and shown the world exactly how much people like Bill DeBlasio hurt the public.

This would all be a huge net gain for the world even if every >$150k/year engineer at Uber was horribly mistreated/marginalized/had their butt patted before shifting to another $150k/year engineering job.

The Kapors are not calling out Uber based on a utilitarian calculation. Uber is still exactly the force of good they promised to be, and their goals align just fine with the stated goals of the Kapors. It's just that their personality doesn't appeal to the zeitgeist, and it looks like that matters more to the Kapors than the actual good they do.
>Long term value

Bitcoin is inherently deflationary as coin creation slows to 0.

>Volatility

Volatility is due to uncertainty and speculation. If Bitcoin survives and is used significantly for transactions volatility will decrease (it already has but not enough).
No where is it written that the path forward must be compromise.

My argument is that a healthy society would choose to let people have a tictac rather than arguing about cake. The taking away the cake is just a rhetorical framing device to make the argument about taking something away rather than about what is reasonable for society as it exists today.

You say I hope you looked at the link I posted. but apparently didn't pay much attention to where I conceded that it is not politically plausible to move to a strict gun control regime in the US (and I readily concede that steps less than a strict gun control regime will not be especially effective in reducing gun violence). I think the first step towards a better situation with guns in the US is to convince people to stop owning them using means other than the law. Then I don't have to compromise with them anymore to get stronger laws.
Waymo’s post on lawsuit against Otto and Uber
Patent infringement, or patent theft?

How do you steal a patent? If you steal (to be clear, illegally take) information and then use that to get a patent, is that stealing a patent? Is there case law on on something like that?
I doubt there is any hot technology in some LIDAR interface board in the first place.
Reason for rolling back transgender bathroom access: STATES' RIGHTS.

Reason for rolling back state legalization / decriminalization laws: ...
Marijuana legality is one of the things the the Obama administration should have settled but never did. I only hope enforcement of the law encourages movement to finally remove marijuana from the schedule drug list.
So the way to "collect" those coins is to post the solution to the hash collision and, as a followup challenge, something encrypted with your public key so only you can decrypt it later on. Correct?
These release notes really let Rails down. Crowing on about the number of commits and rationalising decisions is a waste of my time, just explain how it's going to make or ruin my day. Links you'd expect to explain features just take you to source files, not documentation. And a HUGE amount of the changes are actually scattered around in sub-project changelogs.

They should look at Django for some inspiration. Here's their latest beta release notes [1]. It's concise, everything links to relevant documentation with examples, and the entire project's changes are handled on the one page. There's even a list of things to check if you're upgrading.

[1]: https://docs.djangoproject.com/en/dev/releases/1.11/
Unfortunately not surprising. Sheldon Adelson provides a lot of $$$ to the Republican party.

https://theintercept.com/2016/11/02/sheldon-adelson-fights-m...
Not only that, but the "reward" in the program is laughable and frankly insulting to any serious researcher considering the scope of CF. Bug bounty platforms are already becoming the fiverr of ITSEC (that's not a good thing), CF just made an extra effort do diminish the value for researchers.

Management: "Why do we offer $5k for a small bug again? Look at CF, they don't offer any money!"
You forgot all the disk encryption malware that asks for bitcoins to decode your files again.
If banks could have paid a few agent provocateurs to disrupt the occupy Wall Street movement and handicap it out the gate, do you think they would have? Muddying the waters is a cheap and easy tactic to use.
The other side is not Uber, it's the accused.
What can they even say? "Change everything" doesn't really work. Any potentially secret data to or from a server could have been exposed.
Why I Love Basic Auth
The opioid crisis is a product of, ironically, crackdowns on opioid abuse. For people with chronic pain, opioids may be the only option to live with it, and they need frequent doses. If it gets hard to acquire them because of “abuse-preventing” bureaucracy, they are forced to turn to the black market, not out of addiction, but dependency for pain relief.

There is a benefit to legal marijuana that it might be chosen instead of harder drugs, perhaps, but I don't think it should be mixed up with painkillers, which are their own issue.
I think you might be conflating pot stirrers with actual rkt devs. CoreOS (along with many other companies) are the Kubernetes developers.

FWIW, there was drama with the initial rkt announcement, but we've actually seen docker adopt most of the original criticisms and that should be applauded for both CoreOS and Docker.
I think autocorrect provably does not provide any value. When you make a typo, then the autocorrect mechanism is making an inference on your input that the receiver of that message would be able to make better, since they have way more context, and humans are still much better at this kind of problem than computers.
Do they have a t-shirt awards in their bug bounty programs?
There is no global mempool, it's a per-node thing. I think the default for Bitcoin Core is to hold 300MB of transactions, which means for most nodes the number of transactions in the mempool is constant. A better metric is transaction fees. Here's an example site: https://bitcoinfees.info/
Having gone through this myself, the best way is to always go directly to a local post office and talk to the specialist there, or call the local post office directly and ask to speak to the right department.

If you're kind, and exceedingly polite to them, and are as understanding as possible, they'll be incredibly helpful in return.

The people that deal with lost packages and lost mail are used to being yelled at, berated, and treated poorly, so they often react surprised and helpfully when you go out of your way to be as nice as possible.

Most importantly, the best advice I can provide is to have all of the information you can possibly provide written down first (preferably typed so they can read it easier), along with a detailed timeline, and copies of any supporting documentation.
> It's already been tried and failed with medical marijuana. And, for that matter, commercial wheat farming, in Wickard v. Filburn (1942).

> It's unlikely recreational marijuana would result in a different result.

I dunno, with originalists like Thomas & (hopefully) Gorsuch it's certainly possible. Bad precedent needn't necessarily stand, after all.
Are you saying cloudflare is not profitable?
My first thought was relief, thank god I'm not using Cloudflare.

Where would you even start to address this? Everything you've been serving is potentially compromised, API keys, sessions, personal information, user passwords, the works.

You've got no idea what has been leaked. Should you reset all your user passwords, cycle all or your keys, notify all your customers that there data may have been stolen?

My second thought after relief was the realization that even as a consumer I'm affected by this, my password manager has > 100 entries what percentage of them are using CloudFlare? Should I change all my passwords?

What an epic mess. This is the problem with centralization, the system is broken.
Yes, but morse is being decoded in realtime by a piece of meat (a trained NN admittedly, but different senders have different "fists" so there's a lot of variation). The problem is that some character errors are ambiguous.
It could well be that they have comprehensive debugging enabled for all their employees on work supplied machines. I know they beta test through employees, so that would make sense, to some degree. If the debug log is remotely synced, as an added benefit they get to review actions after the fact, which might be what happened here.
The open letter wasn't about just this one thing.
Yep! You are right. I don't think it is a huge disparity but I would like to implement the pivotal/empirical bootstrap instead. The change is just a few lines of code.
Is there a list of sites potentially affected?

I'm assuming I need to change my passwords on a significant number of sites. So far none of them have alerted me to a potential breach. Would love to have a head start.
I imagine that throughout human history this has been the case far often than not.
No, this was a story about Uber, try to keep up.
I use zram rather than a regular swap partition on all my laptops (because I'd rather not swap on SSDs) and desktops (same reason and/or there is an absurd amount of RAM to begin with). I also hear that most chromebooks use zram too (you really don't want to be swapping on that eMMC memory).

I set it up with one zram device per CPU core for a total space of ~20% available RAM.

No performance issues w/ zram so far so I haven't felt the need to change the compression algorithm.
Anyone know which password manager uses Cloudflare? Just trying to figure out if I'm affected.
Yes, but in general keys provide ongoing access; sensitive data itself is more limited in scope. Keys, auth tokens, etc. would be what I'd focus on.
Not that it wouldn't have been nice for Obama to give everyone a little vacation from pot being on the schedule 1 list, but why do you think it couldn't have been re-added after Obama left office? Anything one executive can order the next can un-order.
It's not illegal, it's just really not beneficial (to the litigant). So generally your lawyers will tell you to shut up, because you might say something that'll torpedo you in court, but it's not illegal.
Infringement, yes, but how can you 'steal' a patent?
I totally support this, even as someone who voted to legalize it in MA this past election.

The current situation where it's legal at the state level and illegal but "hands off" at the federal is totally ridiculous. Even worse than having marijuana be illegal is having laws applied randomly and with a sizeable portion of the population able to be arrested at someone's whim.

I think legalizing at the state level was probably a good strategy to get the momentum going, but at some point we have to stop it being illegal at the federal level (individual states can outlaw, that's fine). Hopefully this will be the impetus to get that done.
That's Google logging stuff
dang: just like we have warnings for [video] and [pdf] could we have warnings for autoplay video? I accidentally had the sound enabled on my computer.
It shouldn't be hard. On Box, you can have it notify you every time someone downloads any file in a given directory or even specific files. I assume they have at least comparable infosec, if not explicit tripwires/honeypots in files that should never be downloaded.
Thanks for the feedback - happy hacking =)
Altcoins are a concern, but as a store of value, Bitcoin is already 'good enough' that network effects are likely to make it a standard for a long time to come.

It's also good to remember that the tech world is built on all sorts of 'objectively obsolete' technologies.
I'm pretty sure active trading with BTC is mostly regarding drug dealing through dark net market places. And the conversion mostly dealers selling BTC for USD to consumers, which buy drugs with BTC and those BTC will be sold back to the consumers for USD.

As far as I can tell there is simply nothing else to do with BTC as of now ... sure you can use it in some shops and you can buy plane tickets from Air Baltic with BTC - but those purchases are always actually more expensive to cover for the volatility of the BTC value and of interest only for users who think its fun to actually use BTC in the real world.

Probably it will either establish as an illegal clandestine super-national currency or it will be hijacked by banks for whatever weird theoretical purpose.
Legalization could have deeper economic benefits domestically than just access to weed [1]. California regulators are looking at legalization from all angles [2].

[1] http://www.latimes.com/local/abcarian/la-me-abcarian-la-cann...

[2] http://www.cpuc.ca.gov/CPUCNewsDetail.aspx?id=6442452320
In Kalanick's place, I would do the exact same thing regardless of whether the claims were valid.

2 years after a jury found that Ellen Pao was full of it, TechCrunch and other media still portrays her as a victim. Most likely they will do the same for Susan Fowler, even if (purely hypothetically) a court finds her to be full of it.

https://techcrunch.com/2017/02/20/uber-is-not-the-only-tech-...

In such a media climate, you need to genuflect in the direction of all that the masses find holy regardless of the facts. At least if you are good at politics, which Uber is.
Don't forget, IDs are not free in the US. Seems pretty crazy to force somebody to essentially pay a fee to exercise their Constitutional right to vote.
Not sure this was submitted by the original author. I forwarded a note to the repo owner pointing back here.
New AWS I3 Instances for Demanding, I/O Intensive Applications
Yep, even Tavis said it "severely downplays the risk".
So is YC. It's not exactly a secret. Cuck central x 2.
Why Is Python So Popular, If It’s So Darn Slow?
I'm no modern JS guru, but think of it as you get to advance the JS language, and use all the latest libraries independently of what version of JS is running on the client.

This is because you write in the latest JS syntax, which then gets converted into an older JS version (allowing greater client compatibility).

JQuery is still great if you only want some basic functionality - e.g. a datepicker, but if you're building Photoshop in the browser, then it quickly becomes complicated, and you'll find that you start attempting to build your own framework to support your development.
Yeah, I first read this a number of years ago. It's analogous to when programmers find some exploitable corner case and go "Gotcha!" But, meanwhile, in the real world, a judge says "Nope" and finds some reason to do the sensible thing. Law isn't (and really shouldn't be in spite of sometimes bad results) a matter of applying precise algorithms.
Everyone is like this; we'll endorse any semi-reasonable means to achieve our desired ends. Should just be honest about that.

I think in a way, Republican rhetoric ("states' rights", "activist judges", "small government") is simply lagging behind their actual positions and values, rather than it being a totally cynical and hypocritical mask. These are slogans which still sound good and make sense situationally. It's easy to agree with them without really thinking it through.