skysight-inc/HackerNews huggingface dataset:
An actual pentest would include (I'm assuming) all sorts of NDA's and legal contracts and stuff, all fine if you work in the industry but if you're a bored hobbyist like me, bug bounties are a fun way to try and make a few dollars.
Stereotype (In)Accuracy in Perceptions of Groups and Individuals [pdf]
Rob doesn't technically "run" boingboing -- they Have Ken Snider sysadmin'ing it ....
The View from Above: Applications of Satellite Data in Economics
I've never felt the need to bring my own laptop to a job interview. If the company asked me to bring my own, I'd consider that strange or even suspicious.
First I've heard of either. How would I set these up?
GWAS identifies 12 loci influencing human reproductive behavior [pdf]
Making it easier to share annotations on the Web
Chances are Google shares patent royalties with companies that help them build the technology they use, so the supplier was likely ensuring their continued royalties by informing on the infringement.
YouTube takedown waves are not examples of the DMCA. YouTube gives rights-holders far more power than the DMCA alone would give.

Which is a shame. If they used the DMCA and you had a video taken down for a spurious reason, you could claim fair-use or no-infringement, and the video could be restored. Then the rights holder would have to sue you personally to get it taken down, and you could potentially fight it.
> Ah but did you witness it?

I am curious about your question. I read Fowler's post, and then subsequent posts,articles,tweets,comments by other women and men indicating that the observations approximately matched their experience at Uber as well. Even in this thread, I see: "I've been with uber for nearly 2 yrs and most of the article content are valid. Employees voicing out genuine concerns will be met with severe rebuke. " . The article this thread is about is from Mitch&Freda Kapoor who are also stating the same.

I'm wondering, do you believe that Fowler's claims are faulty or false in some way and that the issues raised about Uber are similarly faulty/false or are you speaking about other cases/companies?
How big is the OSX/macOS swap? It's a file and not a partition, right?
In 2012 there was a bunch of gee-whiz about how software built by a dream team of engineers drove Obama's re-election: https://www.theatlantic.com/technology/archive/2012/11/when-...

I suspect that it's fun to read and write about new tech applied to Presidential elections but that the new doesn't actually matter more than the same old. If you wanted a really simple model to predict Presidential elections, this would be it: incumbents get re-elected, and then after 8 years American voters are sick enough of one party to try the other party again. One-term presidents are rare.

Maybe you remember the idea of a "permanent Republican majority" from GWB's first term. That wasn't very permanent at all. Maybe you remember the post-2012 fear among conservatives that demographic changes had given Democrats a permanent lock on the presidency. That was short lived too.
Ask HN: How can you cancel a Stripe subscription as a customer?
Is there any way as an end customer (not the business using Stripe) to contact Stripe to cancel the charges if the business is making them without providing services ?
Yep, my bad on that one. I was thinking of archiveteam.org.
> Once you start banning sites for the content they hold, where do you draw the line?

I mean, you could always just draw the line at booters. Not everything has such a slippery slope.
Does VX explain how the two women survived despite using bare hands to administer an apparently skin-absorbable poison? It has binary agent formulations, so each women could have one half on her hand and avoid any contamination by swiping very fast.
Do you know of an example of that?
> This will take weeks to clean, and that's just for Google.

Couldn't Google just purge all cached documents which match any Cloudflare header? This will probably purge a lot of false positives, but it's just cached data, so would that loss really matter? My guess is that this approach should not take more than a few hours on Google's infrastructure.

Of course, this leaves the problem of all the other non-Google caches out there.
I think Linus' point at the time was that the computational cost added to every transaction to protect against a (at the time) highly infeasible event of questionable impact was a poor cost vs. benefit argument. Adding complexity isn't free, and there needs to be a measurable benefit against a threat.

But of course, now is not then. And I think zkms' metaphor "there's angry and armed people shooting at my plane with armour-piercing ammunition" is apt here. The threat is much more sizable now, and so the cost vs. benefit analysis has changed.

Incidentally, one of the requirements of the SHA-3 competition was that it not be related to previous hashes. So while there are no demonstratable attacks against SHA-2, we nonetheless have "two ...hashes, and that they are based on totally different principles."
they aren't good reasons now.
They were good reasons ~20 years ago.

language spec should probably now default to zeroing memory unless you specifically ask it not to....and maybe that should be a verbose option :)
That's terrifying.

Thanks to Uber now requiring location services on Always instead of just when hailing a car, my and others' personal location history even outside of Uber usage could have been compromised. Sweet.
The A-10 isn't a plane, it's a gun with a plane wrapped around it.

And it hunts tanks.
I'm curious why such a universal ID hasn't been implemented? I would assume there must be some people against it, what would be their rationale?
Haha you reminded me of the old riddle about how British engineers decided where to place armor on their bombers, because, "if they put it everywhere the plane wouldn't get off the ground!"
>which we all protested and complained about, but nothing came of it.

Just curious to what extent you protested?
Awww, QNX! I remember booting that from floppy disk, must have been '97 or early '98... (I wonder if there's an ARM SoC version of it? I'm guessing I must have been running that on a Pentium grade machine - a Raspberry Pi or NextThing CHIP is _way_ more powerful...)
I suspect Haskell is a bit faster now than it was in early 2008.
You can contact your credit card provider and request a block, but i dont think stripe will do this.

Its always in a company's best interest to cancel if you request or provide a mechanism.

I would suggest trying to work it out with the company, then file a complaint with stripe and finally contact your credit card company to block future charges.
> But if you're actually a working scientist, you should understand that already and not take everything you see in a journal as actual truth, but as something maybe might be true.

I believe that's called "skepticism" which makes you a heretic and "anti-science" in certain fields.
Prices of SNES games have gone crazy recently. I'm seeing the same with Gameboy/Gameboy Colour, but not with Gameboy Advance.

Anyway, I'm very happy that the games got to you eventually.
There is a chrome extension named "claire"[1] which tells you if they use CloudFlare or not, but not sure about other browser (FF or else).

[1]: https://chrome.google.com/webstore/detail/claire/fgbpcgddpmj...
Surely thats where the best thinking gets done...
Do you really think any banks were concerned enough about Occupy Wall Street to bother trying to disrupt it? I'm sure they were quaking in their boots.
It takes time to do that.
MIND diet may significantly protect against Alzheimer’s disease
If you find any domains with this please add them to the list:

https://github.com/pirate/sites-using-cloudflare
Doesn't this already exist for processor scheduling?
We took a couple of minutes off this afternoon to watch some Warthogs pulling some tight maneuvers... to think, USAF wants to sell them all to Poland...
Many many years ago, I was at a software company, and a competitor popped up making very similar software. They made a presentation of their software at a conference, and had a slide showing a screenshot. Our typos were clearly visible.

Fun times, fun times. We got a few people fired, but that was about it.
Oracle is just death & evil incarnate.
If you want recent comparison then while gun technology has changed little, there has been a 10+% drop in private gun ownership from 1961 to now. Though there is some very high error bars on those statistics. Hunting has also become significantly less popular.

These really are significant shifts is public behavior. And eventually public attitudes really do influence politics.

IMO, advocating for the rights of gun owners is a losing strategy, you need to promote gun ownership.
Yep couldn't agree more. It's actually embarrasing how many times I end up seeing the Focus App blocking screen during a very distracted day.
Specifically, during the war the engineers took a Bayesian approach and put armor on the bombers in locations where bombers which came back did not have damage. Reason being that hits in those sections of the planes were more likely than not resulting in fatalities. Smart thinking.
FWIW while I created the bounty, the bulk of that 2.48 BTC was donated by people other than me.
We're compiling a list of domains using several scrapers and updating it here: https://github.com/pirate/sites-using-cloudflare

You can start by cross referencing your password manager with this list, and working your way out from there.
You are correct: by the pigeonhole principle, if the sum of the lengths of all the hashes/checksums is less than the length of the checksummed data, then collisions exist.
(A detail: If checksums are included into the input of other checksums, their length doesn't count towards the amount of checksummed data, because they are not free to vary.)
Rules of thumb involving more swap than RAM probably date from decades ago, when Unix virtual memory systems were sufficiently primitive that the total amount of virtual memory you could use was just your swap space, not swap space plus (most of) RAM.

(The limitation came about because the simple way to handle swapping is to assign every potentially swappable page of virtual memory a swap address when you allocate it in the kernel. Then the kernel always knows that there's space for the page if it ever needs to swap it out and you're never faced with a situation where you need to swap out a page but there's no swap space left.)
There is no news here about the product or service that they're working on. We only have a name and HD Moore's involvement at an advisory level.

This is not interesting.
I suppose it's better than the alternative, where no voices are answered.
You should almost always roll your 401k into an ira soon after leaving your employer.

If your employer goes out of business it can be difficult (read involves the dept of labor) to get access to your money.
>with a memory safe language and prevented all issues like that from ever happening.

drastically reduced, but not quite ever.
For instance, use a GC language, especially in this domain, you might do some data pooling to reduce GC overhead. Maybe you forget to clear data in the pool. Same kind of error can result.

But yes, I feel like security sensitive stuff like this shouldn't be done in C / C++ any more.
This culture sounds awesome. Prescient and rare nowadays.
"States' rights" has a specific history going back to slavery. It's not a neutral term.
> Most of this besides the external hard drive part can be done by any employer who owns your work your gmail account.

Actually, I think that would be the easiest as I would assume any external USB devices connected to a computer would automatically send an alert to the security team due to how easily they can infect your computer with malware. I'm not sure my company has something like that but we have posters everywhere telling people to never plug external USB devices into our computers so I would not be suprised.

>What really should be alarming is how easy it is for your employer to get lots of data on you even if they aren't some tech giant.

Right? So much for the Principle of least privilege.
Can you not protect processes from the oomkiller? This is trivial and very useful on FreeBSD

https://www.freebsd.org/cgi/man.cgi?query=protect&sektion=1
Here is Mercurial's response to the SHA-1 attacks: "SHA1 and Mercurial security: Why you shouldn't panic yet."

https://www.mercurial-scm.org/wiki/mpm/SHA1
If of the all evil things Uber has done since its inception it's the harassment of an employee that brings in the most attention, then something is seriously wrong with people.
Bullshit. The fact that they've been allowed to run for years without fully funding their pensions is the real scam.
Wait, as a driver?
Avira System Speedup Pro 3.1.1.4250 Crack Final Download
'There's Enough Time to Change Everything'
Probably not.

If someone knew about this exploit they're not going to be messing with people's Uber rides for lulz.
Indeed - I was half expecting this to be an Our Incredible Journey dot tumblr.com post...
Voter opinion can be pretty malleable.

E.g. Republican's have become significantly more pro-Russian recently:

> Back in July 2014 just 10 percent of Republicans held a favorable view of Putin, according to a poll conducted by the Economist and YouGov. By September of 2016, that number rose to 24 percent. And it's even higher today: 37 percent of Republicans view Putin favorably, the poll found in December.

http://www.politico.com/story/2016/12/gop-russia-putin-suppo...
I think you're violently agreeing with Linus here.

He says:

> pdf's don't have that issue, they have a fixed header and you can fairly arbitrarily add silent data to the middle that just doesn't get shown.

In other words, he expects the PDFs to have the same size because silent data has been arbitrarily added to the middle that doesn't get shown.
You don't need to editorialize the headlines, the administration has been a complete shitshow.

They don't even spell check, in an age where that just happens for you.

That's a special flavor of sloppy.

Given the number of grammar nazi's on reddit, what did you think would happen?
That's one phenomenal leap of logic there. Why would you think that?
Thanks.

Unfortunately, the company does not respond to emails which is why I wanted to contact Stripe directly.
Blogspam of

https://www.rush.edu/news/press-releases/new-mind-diet-may-s...

with author credit stripped out.
And Firefox
> No scientist treats published studies as gospel.

Tell that to the climatologists burning their peers at the stake for heresy.
https://github.com/GDSSecurity/EvilAbigail#scenario
She made specific allegations with reference to evidence (emails, screenshots) that is all entirely within Uber's purview.

While this isn't a court, I have reasonable expectation that Uber would refute individual specific claims of hers if there were not true. That they haven't is fairly damning... it's not a conviction by any stretch, but their actualy response drops the threshold of support or forebearance that I'd extend to Uber to a low enough level that I consider her allegations to be true.
I think you're conceptually close, but wrong. My money's on something like this:

https://techdocs.altium.com/display/DMAN/Design+Data+Managem...

Edit: much better link than the above: http://www.altium.com/documentation/3.0/display/VAULT/Altium...
Frequent failures and solution in Series resonant test
The new FINsix DART-C
Do we know they were bare-handed?
Tell me more about this coffee idea.

I drink coffee.

I heard it said like this: "Drinking coffee is borrowing time from later today. Drinking alcohol is borrowing time from tomorrow."

I did go for many months without coffee because if headaches. So I know it is doable.
The Ballmer Peak: https://www.xkcd.com/323/
If he knew, sharing such information would probably not be consistent with the practice.
That's a reasonable stance as far as it goes, but in pragmatic terms I worry that now that there's a new round of debate, planting a flag at the status quo risks inviting a new compromise that's more restrictive.

edit: Basically, it means that the other side doesn't risk actually losing anything by picking fights again and again and again, while the Internet Archive's side has to fight just to stand still.
I really can't get worked up over 0.00006% of the federal budget. That's into fractions of a penny of my annual tax bill.

Anyway, the CDC's job is promote public health and they have an office of public policy so advocacy really does fall under their mandate as required by law. Ed: As does Saw Blade Guards oddly enough. Now, you can disagree with that mandate, but nobody was blowing public money on hookers and blow or something.
But what if the existing code is terrible?

(I still agree that "rewrite in Scala!" is a bad answer, but some kind of extensive refactoring or rewrite may be called for.)
If the sha matched an existing one, would it be merged as part of the changeset, or just ignored?
I'm a little drunk so please forgive me if I'm way off base here or if I'm ultimately describing a service that already exists.

Unless I'm mistaken, CloudFlare's services necessarily require they act as a MITM. Would it be possible or practical change the DDoS protection service such that it uses an agent on the customer's end (the CF customer) that relays relevant data to CF, instead of having CF MITM all data?

As it is now, we have:

End user <-> CF MITM to inspect packet data <-> CF Customer site

where CF uses the data discovered through MITM (and other metadata such as IP) to determine if the end user is a bad actor.

What if we, instead, had something like:

End user <-> CF TCP proxy <-> CF Customer site
^ |
| v
CF decision agent <-- CF metadata ingest

The CF captive portal would not work with this but they could still shut down regular ol boring TCP DDoSes.
His favorite quote: "I drink your milkshake."

Wish I were kidding.
Blogspam of

http://www.ucl.ac.uk/news/news-articles/0217/230217-long-ter...
It uses a dynamically-sized swap file rather than a dedicated partition.
Seems to have been a spray bottle of some kind?

> Family members and Indonesian officials have said they believe she was tricked into thinking that the attack on Mr. Kim was part of a comedy video, involving spraying liquid on unwitting victims in public. The Malaysian authorities have said that both women were aware that the liquid was toxic.
yeah it seems funny, but it happens all the time.Perhaps there are reporting requirements from the funding?
An invariant you get from most kernels is that all new memory pages are zeroed when mapped into processes (normally through mmap or sbrk), so you only have the paging problem when initializing with a value other than zero.
I am told the gun is also quite good at shooting ground troops. A relative of mine had an A-10 stay with his group most of the night. Every time the enemy decided to go after them the A-10 came back and made them rethink their actions.
Apache Mesos vs. Google’s Kubernetes
> Can't really use an environment variable at that point, right?

Why not?
No as a customer
We're compiling a list of affected domains using several scrapers here:

https://github.com/pirate/sites-using-cloudflare
No as a customer.
on that note, can the mods add a [2008] to the title please?
Yes, I actually do have this backwards .. in more than one way ..:P

Sorry, I was thinking of Lua for Qt5 .. That was silly!

And, it is a pity about PySide, it was a neat project. :(
For endurance athletes like your marathon runner, this is certainly the case. Strength and power athletes can certainly expend far more energy in a shorter time than someone who is less fit. It's a bit of a paradox where the better shape you are in, the sooner you can tire yourself out. From everything I've read, it certainly seems possible to reach oxygen depletion in a very short period of time.

https://mobile.nytimes.com/blogs/well/2016/04/27/1-minute-of...
Hi! I had serious problems from becoming gradually more sedentary through a desk job and less laborious lifestyle. I didn't have the same type of pain you describe, but I had some issues particular to my shape and proportions.

My life (as far as comfort, basic strength in daily movement, eliminating chronic back pain) was literally changed by Eric Goodman's Foundation Training. I simply cannot recommend it enough. Use the free stuff on YouTube for a while and see if it helps. If so, the DVDs have plenty of extra value.

I am not affiliated with Goodman or his company in any way.
In this time, where populace can be moved with a tweet and a like, instantly en mass globally in micro seconds. On platforms that are all fully capable of being handed over to the care of the autistic like abilities of neural networks, many platforms already are and publicly announce this "feature" like it is the coming messiah. In this light the idea of publicly owned prisons doesn't make sense to sovereign free citizens. Prisons for profit are bad for society, rehabilitation centers are better for them
https://energy.gov/eere/fuelcells/hydrogen-production-electr...

Still not deleted by the new administration! It was near the top of Google results for "electric to hydrogen."
You don't understand what freedom of speech actually means.
I disapprove of assassination but I've got to admit this one scores 10/10 for sheer style.
I'm scrambling to compile an list of impacted domains and some easy-to-understand instructions that I can send friends and family:

https://github.com/pirate/sites-using-cloudflare
I've always wondered if Google did that. Seems obvious enough to just watch people using premade searches and see what they are up to.
Yup, running it now. Results are being posted as fast as I can here:

https://github.com/pirate/sites-using-cloudflare
Maybe I'm not parsing your comments correctly, but it seems like you're claiming that Uber has a real cultural problem and that problem is endemic to tech in the Valley (if not in general) -- but you're arguing that confronting those in positions of power or leadership is unfair to them?
There's a lot to be done at the semiconductor level for solid state LIDAR. The ASC units work great, but the sensor requires an InGaAs fab, like night vision sensors, to get good light sensitivity and thus range. Others are talking about getting good performance with a sensor that can be made in a CMOS fab, but nobody is shipping yet. This is an area where Waymo has a strong interest, even if they're not making the sensors themselves.
Good idea, I'll try that next and add the results here: https://github.com/pirate/sites-using-cloudflare
I deleted the app after the last round of bs and I'm not the only person who did this that I know. Not all customers are amoral wallets.
See also src/services/GeocodeService.js
I stand by this statement despite the single (possibly accidental) downvote. Mob justice is not justice.
> While addressing a spellbound audience of young officers, he would sometimes partially immerse one finger in a small beaker of pure VX for a few seconds. Without interrupting his lecture, he would then amble to a nearby sink and casually wash the deadly chemical from his finger. The teaching point was that VX could not enter the skin instantaneously, and that accidental exposure of a small area would not be harmful as long as the site were promptly and thoroughly decontaminated.

https://www.amazon.com/Chemical-Warfare-Secrets-Almost-Forgo... - Chemical Warfare Secrets Almost Forgotten: A Personal Story of Medical Testing of Army Volunteers, by James S. Ketchum MD
Obviously not, right?
Came here also to recommend Chasing the Scream. It was an enlightening read for me.