skysight-inc/HackerNews huggingface dataset:
Something to consider: perhaps these people became addicted when they discovered that opiates provided relief from underlying depression... I have a feeling this may be one reason why some get addicted and others don't. (Believe it or not, some people even dislike taking opiates!)

disclaimer: I am kind of obsessed with the self-medication theory of addiction
I originally put this on GitHub when I started. Then I ended up doing a bunch of work & hosting it on BitBucket to a private repo while I was learning Docker & Ghost. I was trying to prevent any accidental leaks of secret keys or passwords. This linked repo has my Ghost changes in it.

I added ghost-storage-adapter-s3 to package.json so that the files would be stored on s3 instead.

I think the only other change to Ghost I made is purely optional & was done out of my taste. That was to remove the date directory appended to file uploads. https://github.com/mattferderer/ghost-blog/commit/7d373913a5... I understand why they did that, I just didn't like it. It may have also caused issues with my AWS S3 but I can't remember.
I think I'd need to see some sort of evidence of this assertion. Bug bounties are commonly offered across a huge variety of online services, and they get results...not always, not necessarily consistently high quality, but even the giants (facebook comes to mind) have had reasonably serious bugs found by people seeking bounties.
That's one take. I've also heard that marijuana decriminalization is taking the margin out of many drug operations.

Supposedly, Weed is like the ground beef of drug sales.
The "well-known chat service" mentioned by Tavis appears to be Discord, for the record.

edit: Uber also seems to be affected.
more results from duckduckgo: https://duckduckgo.com/?q=+%7B%22scheme%22%3A%22http%22%7D+C...
I found:

FitBit

Hacker News

Stack Overflow

Zendesk

Discord

FastMail (not really see below)
That may not necessarily work. Example:

$ host -t NS okcupid.com
okcupid.com name server nameserver2.okcupid.com.
okcupid.com name server nameserver1.okcupid.com.

But if you check the response headers you'll see 'CF-RAY:...' and 'Server: cloudflare-nginx'
Linus has toned down a lot from a decade ago.

> You are _literally_ arguing for the equivalent of "what if a meteorite hit
my plane while it was in flight - maybe I should add three inches of
high-tension armored steel around the plane, so that my passengers would
be protected".

> That's not engineering. That's five-year-olds discussing building their
imaginary forts ("I want gun-turrets and a mechanical horse one mile high,
and my command center is 5 miles under-ground and totally encased in 5
meters of lead").

> If we want to have any kind of confidence that the hash is reall
yunbreakable, we should make it not just longer than 160 bits, we should
make sure that it's two or more hashes, and that they are based on totally
different principles.

>
And we should all digitally sign every single object too, and we should
use 4096-bit PGP keys and unguessable passphrases that are at least 20
words in length. And we should then build a bunker 5 miles underground,
encased in lead, so that somebody cannot flip a few bits with a ray-gun,
and make us believe that the sha1's match when they don't. Oh, and we need
to all wear aluminum propeller beanies to make sure that they don't use
that ray-gun to make us do the modification _outselves_.

> So please stop with the theoretical sha1 attacks. It is simply NOT TRUE
that you can generate an object that looks halfway sane and still gets you
the sha1 you want. Even the "breakage" doesn't actually do that. And if
it ever _does_ become true, it will quite possibly be thanks to some
technology that breaks other hashes too.

> I worry about accidental hashes, and in 160
bits of good hashing, that just isn't an issue.

http://www.gelato.unsw.edu.au/archives/git/0504/0885.html
A supplier of Google received the file from Uber and that supplier forwarded it to Google. This means the file was sent out by Uber to a supplier to try to get parts made. I think that's proof enough.

Btw that's 1 very sharp eyed engineer, whoever that is...
The unfortunate thing is this system also denies drugs to people who really need them, while abusers can still get them legally and illegally. Recently I had to go to the ER for a painful cyst. Online sources indicate patients often receive opiates for the related pain, which was significant. They not only gave me nothing for pain while there or after, but also seemed more interested in screening me out as a drug seeker than helping me.
Clarence Thomas would agree with you. Hopefully Neil Gorsuch will be in his mold:

"Justice Thomas also wrote a separate dissent, stating in part:

Respondents Diane Monson and Angel Raich use marijuana that has never been bought or sold, that has never crossed state lines, and that has had no demonstrable effect on the national market for marijuana. If Congress can regulate this under the Commerce Clause, then it can regulate virtually anything—and the Federal Government is no longer one of limited and enumerated powers.

Respondent's local cultivation and consumption of marijuana is not "Commerce... among the several States."

[...]

Certainly no evidence from the founding suggests that "commerce" included the mere possession of a good or some personal activity that did not involve trade or exchange for value. In the early days of the Republic, it would have been unthinkable that Congress could prohibit the local cultivation, possession, and consumption of marijuana.

[...]

If the Federal Government can regulate growing a half-dozen cannabis plants for personal consumption (not because it is interstate commerce, but because it is inextricably bound up with interstate commerce), then Congress' Article I powers – as expanded by the Necessary and Proper Clause – have no meaningful limits. Whether Congress aims at the possession of drugs, guns, or any number of other items, it may continue to "appropria[te] state police powers under the guise of regulating commerce."

[...]

If the majority is to be taken seriously, the Federal Government may now regulate quilting bees, clothes drives, and potluck suppers throughout the 50 States. This makes a mockery of Madison's assurance to the people of New York that the "powers delegated" to the Federal Government are "few and defined", while those of the States are "numerous and indefinite."[12]"

https://en.wikipedia.org/wiki/Gonzales_v._Raich
At this point, I would just start rolling everything. (And I have.)
The Byzantine Generals' Problem.
It's not a racket. Refusing to police their own customers, and having customers that do bad things that CloudFlare incidentally helps protect against, does not make it a racket.

In a protection racket (or more accurately an extortion racket), businesses that don't pay up will get attacked by the racketeers, and so for the most part paying up just means the racketeer won't attack them. That doesn't even remotely describe CloudFlare. Whether or not you pay for CloudFlare doesn't affect whether some other customer of CloudFlare attacks you. And the fact that those other customers are using CloudFlare themselves does not make CloudFlare responsible for their actions.
> * SSD-backed desktops and other servers and workstations: enable swap and set vm.swappiness to 1 (for NAND flash longevity).

Is this that big of a worry? I have a 5-year old SSD in my daily driver laptop, on OS X which loooves to swap out anything it can to gain memory for disk cache, and I'm still barely 15% into the SSD wearout.
Not only is it very well known internally, Google has even open sourced some of the tools that are used for that purpose: https://github.com/google/grr
The federal government has additional powers near a border to do certain things, like set up checkpoints.

But, here's the ridiculous part, they define "near a border" as anywhere in the US that is 100 miles from a border or the ocean.

So, virtually all of California is in the "constitution free zone" -- as are a full 2/3rds of the US population.

https://www.aclu.org/other/constitution-100-mile-border-zone
No. 3438 domains were configured to expose this, and were potentially queried and logged by a far greater number of people. And yet other data (anything in cloudflare for months) could be exposed.

Potentially huge amounts of stuff might be exposed, but I have some assurances that "the practical impact is low" from someone I trust, so I think it's just a lot of random data. I'd still rotate all credentials which passed through Cloudflare in the past N months (and if I were a big consumer site NOT on Cloudflare, I might change end user passwords anyway, due to re-use), but I don't think it will be the end of the world.
And that's what we don't and can't know the answer to since it's a black box. Hence, that circuitry can't ever be present on a machine if one is worried about potential compromises or subversions of it.
I regularly hear that voter fraud is non-existent. However, in California only a utility bill is required to register to vote. How does a study determine that those represent actual citizens?
Well yes, it could, but that's not really an argument for saying that Ragel using == is just as good as using >=.
Yes, yes. One must not comment on HN while coding (simple stuff) and eating snack, and telling kids to do their homework. I work from home today.

My apologies...
In reality how much people really care about the sexual harassment care?
Was curious too, can't find it anywhere.
When I was suffering from bad back pain, the amount opiates that was being written for me was ridiculous.

I refused to take it, the side affects, even in the short term were awful.
It's not an array. It's inside a large buffer allocated by nginx.
https://stackshare.io/cloudflare

RapGenius

Coinbase

Bitpay

Product Hunt

Udemy

Crunchyroll
Is there a way for this to grab your current location, so you don't have to type your address?
How a Mountain View High School Cashed in on Snap
Oh, I'm sorry. I didn't know this thread was a safe space for Facebook engineers were any uncomfortable discussion was disallowed. Seriously, while I deeply hate everything about Facebook, I don't doubt the intelligence of their engineers and I'm sure that my post makes no difference for those employees who want to answer OP's question. I'm wrecking nothing.
I don't know too much about hashing/encryption, but if you salt the sha-1 will this still be able to find a collision?
Covertly get into a company that terminates ssl for half the internet, and... spill your precious secrets everywhere, instead of siphoning them off silently?
The Best Online Sofa: Joybird Korver
Life in Tokyo: 20 People Living in 1 House (+1 Lizard)
They leak uninitialized memory contents into the HTML being served; that memory could (and did) contain data from any other traffic that passed through their hands.

So a request sent to Cloudflare customer A's site could return data from Cloudflare customer B, including data that B thought was only being served via https to authenticated users of B.
Side note: HackerNews uses CloudFlare.
Indeed, this is the point in the comment thread where you get the feeling the internet is broken.
Would you support voter ID if it came bundled with a low friction, easy to obtain voter ID card?
Ah, you must be part of the Facebook 'Humanize' group managing my controversial post. Think about it, it's actually scary as hell a internal group like that exist. It's like something in Scientology. Thanks to the former employee telling about this in another post.

Yes, I created this account to post as I never had one before. One post has to be the first. How long should I wait before I'm allowed to ask critial questions related to Facebook? You attacking the HN community for upvoting my post and using this as a reason to close the whole conversation down is simply amazing.
I can see the argument but 99+% of this audience isn't cloudflare. My comment was more directed at those who aren't. Special use-cases are all over the place. It's just making sure you're choosing because your use-case really is special and that when you re-implement something that you're doing it because it's different and better, not because you'd rather write something than integrate.
this is quite bad. i hope google can put some effort in clearing it's cache too
It's been several days since I've requested a wire and the company debited that balance from my account. There is no sign of the wire anywhere. I assume, I will eventually get it. It will cost me $30 if there are no intermediates (international wire), but more like $45 I imagine.
I did it last week when I accidentally shipped my wallet containing my drivers license and passport home before flying home. It's nothing more serious than waiting a little more before getting through the line.
Interesting indeed! In the west maths is widely not taught/practiced in such "fun" ways sadly, and by and large mostly formulaically and by rote. Unsurprisingly, it instils mostly a yawn reflex in a majority of people for the rest of their lives. Not a good outcome.

Asia is a big continent, what kinda countries or areas are you talking of?
Eh? No comprendo! Nothing is unavoidable. If you really are from Lithuania you should go and ask some older people what they think about personal data collection. Having lived under USSR I'm very sure that they don't like that, as they have seen it can suddenly be used against them.
I seriously doubt you could do that. Those SSD's are ~1.5k each right alone and the power/infrastructure to keep it running reliably with a fat connection to the internet isn't cheap.
>NRA has fought against the CDC conducting policy advocacy. The CDC was advocating gun-control, so people got upset and cut their funding.

isn't it is normal duty of CDC to advocate for policies preventing epidemic deaths, like virus/bacterial control in hospitals? Guns kill people like a widespread virus (it doesn't really matter who carries the virus or a gun, be it human, bird, etc..) and such advocating does seems fitting for CDC.
I meant "this" as in people creating simple tools and services for everyone. I meant your pure plain text service would've been a nice addition to the web. Everyone who creates things online brings their own ideas to the table, and that's what the web is about. (And of course it's good for other things.)

And certain services (like Write.as) keep track of all the posts you've written, and they can optionally can be tied to a pseudonym. I don't think that an assurance on who wrote what is always necessary. If the writing is good, the author doesn't necessarily matter. And anecdotally I think people who abuse anonymity online are in the minority -- most people use anonymity to share more candidly where they otherwise feel repressed.

And I think "worth" is best decided by the reader, and a human touch continues to be superior to any technical solutions we've come up with. Platforms who try to uniformly enforce some standard of "worth," in my opinion, risk alienating a large amount of people, and usually miss the entire standard they were going for in the first place.

But what other problems do you think exist with text publishing services? Or what do you think needs to change? How do we solve those things?
Medicare Part D played a huge role in the opiod epidemic.

Patients were given $3 bottles of Oxy with a street value of $10k in areas targeted by the drug companies because of high unemployment.

http://www.econtalk.org/archives/2017/01/sam_quinones_on.htm...

Capitalism cuts both ways.
You can find evidence of Trump being pro and anti on just about every issue you can think of, with the exception of immigration.
Good. They're trying to clean up all the private data leaked everywhere. I tempted to say "why couldn't they figure out this google dork themselves" but they've probably been slammed for the past 7 days cleaning up a bunch of stuff anyway.
Startups Can Have Too Many Users
Sounds like a bad idea. Maybe search for a small part of the password?
Well done.

As I said. It is a government agency and upper forces will create action.

We always like to say "if it had an address it will get there. - eventually. "

Despite the awful reputation, every carrier I know takes great pride in delivering. Most people take it for granted and remember the bad experience.

Like seeing the cop hiding in the hill once and always driving slow everytime you pass it -even though the cop is not there 95% of the time.
Possibly not, Baidu and CloudFlare have a well-documented long-term partnership.
It's not a game, it's policing your own network and keeping your business activities legal. My network has run an abuse desk for 15 years and there are no feasting piranhas (what does that even mean?).

Cloudflare definitely already runs an abuse desk, and ban accounts, they just choose not to ban network abuse tools. They are making the internet a more dangerous place for hosting, then asking you to buy a solution. They could search Google for "booter" and "ddos tool" and whatever else, and flag sites for banning, it's a project an intern could do. But they don't, and they suck for that.
Pluses include mulithreaded concurrency and access to .NET libraries (including interop to/from your employer's proprietary C# code).
Memory allocation is a non-market operation on (most? all?) operating systems. There's effectively no cost to processes allocating memory, and a fair cost to them not doing so.

I'm not sure that turning this into a market-analagous operation (bidding some ... other scarce resource -- say, killability?) might make the situation better or worse. And the problem ultimately resides with developers. But as a thought experiment this might be an interesting place to go.
I think the issue is that like any other outfit that holds bitcoin they may just "lose" them and vanish.
The breadth and depth of federal law and regulation itself supports the uneven application. Those who have money can find a lawyer. The remainder of us are chattel kept only for cleaning the toilets of the wealthy.
Exactly. And that communication can (and does) happen in an infinite number of changing forms, which is amazing.
I lived a half mile away from a gun dude that spent about 30 hours a week shooting shit with a rifle.

It gets really old, really fast.
I think it's reasonable to be suspicious but what they described sounds mostly feasible without extra steps of tracking.

What evidence did they present and how could it be tracked?

- downloaded 9.7 GB of waymo data -> server logs of what files where accessed and downloaded by what user

- searched for special software -> he used google while logged into a work account, so they just looked up that work accounts search history

- Connected external hard drive and wiped data -> Short of automatic backups or something this seems like there is software explicitly for tracking when data is copied, where, and how much

Most of this besides the external hard drive part can be done by any employer who owns your work your gmail account. What really should be alarming is how easy it is for your employer to get lots of data on you even if they aren't some tech giant.
It's worth noting that selecting SHA-1 ten years ago is probably akin to selecting SHA-512 today -- a collision on MD5 was first announced in 2004, and computers and GPUs were a lot slower ten years ago.
"someone committed a robbery in the area"

"someone fitting your description"

"someone reported a suspicious person"

all lies and garbage. they aren't searching for someone specific, and if they were they wouldn't need to ask you for your ID because they'd already know who they were looking for.

else they'd already be detaining you.
In addition to limiting certain browser features to HTTPS sites, browsers now also warn about submitting passwords over HTTP and mark pages that do so as insecure.

Browsers also prevent HTTPS sites from embedding active content from HTTP sites.
Wow you could have copy pasted that whole response. Every single sentence was fairly aggressive.
Swap isn't the problem. Swapping is.

Question is: is there a way to identify who the culprit is and take appropriate vengeful action in the instance of swapping? Generally it's "foo large application", though there's also a very strong tendency for "foo large application" to be a critical system element -- either OS or application level.
Classic availability bias and round trip bias

"I have no evidence of SHA-1 being broken which is evidence that SHA-1 can't be broken"
Silicon Valley for the past five years has been afflicted by Wall Street ethics. I've seen this first hand at a few SV companies. As a male, I've actually faced reverse harassment. Never worked at Uber, but I'm speaking of much larger SV companies. HR is useless.

Silicon Valley is no different than any other place in the World. Just because people think they are "changing" the world doesn't mean ethics need to be on the line.

http://www.telegraph.co.uk/technology/11765609/Start-up-cult...
Then why did they stop me when I was out walking?

For the thrill of calmly and politely asking who I was and what I was doing in the area?
My understanding is that Google has users on Linux, Mac, and Windows, and has resources for managing all of them. As the other commenter points out, Goobuntu is a custom distro of Ubuntu that Googlers use. I do recall hearing people tended to need a justification for needing Windows, but I'm pretty sure OS X users are common.
> Uber...has more or less completely fixed the issue of racism in taxi cabs

When I first moved to New York, I had a roommate. He was Brown educated, on prominent City boards and sharply dressed. Regularly, I'd have to climb out of bed and walk to our corner of 30th Street and 5th Avenue, a decent neighbourhood, to hail him a cab.

The reason? He's black.

I got used to quibbling with cab drivers over "broken" credit-card machines (magically resurrected when I threatened to call the TLC, their regulator). And dealing with my out-of-borough destinations being inconvenient. Or having drivers on their phones the whole way.

Yellow Taxis have gotten measurably better since Uber entered the scene. Credit owed where it's due.
Your hard work is appreciated.
Wikipedia lists a bunch that might be an option. None of them really have the same purpose or soul as dA though, as far as I can see.

https://en.wikipedia.org/wiki/List_of_image-sharing_websites
In this case I think the evidence is actually Uber's lack of rebuttal (admission by omission). For example, searching the slack logs on the first day of Susan's employment should literally take less than a minute. If there was no proposition there, Uber would have made a press release stating exactly that a day ago. They haven't. The logical conclusion here is thus that the evidence you want exists and Uber isn't (and probably won't) releasing it to the public.

Put another way, what guarantee do you have that Uber will actually provide the evidence you're seeking one way or the other? On one side we have a claim made by a former employee, backed by "that doesn't surprise me" anecdotal stories from current and former employees, and on the other side we have... a promise to investigate internally using a highly biased team. It seems to me you're kind of looking for a courtroom-level burden of evidence that simply isn't realistic to expect in this situation.
Miners could also simply decide to not include any transactions with a fee smaller than X. Transactions can't "shop around" for a miner, the first miner to mine a block wins.
Did you check the logs to see whether it had been opened in the meantime?