skysight-inc/HackerNews huggingface dataset:
Doesn't the city of Tiburon already photograph all cars going in and out of the city[1]? There is only one road in and out of it (a circular/peripheral road) and given most inhabitants are of means, they got break-ins and robberies from people not living within Tiburon, so they decided to photograph vehicles going in and out of their community.

[1]http://www.marinscope.com/twin_cities_times/news/tiburon-to-...
https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-b...

This outlines a POC for detecting whether your script is being downloaded or piped into Bash. Beware.
Mozilla Obsidian: Vulkan for the web
Something that is often overlooked about PSD2 is the introduction of a real liability model and explicit customer consent.
What happens today is that account aggregators and payment initiation providers (this is true in US and EU) are operating in a gray area where transparency, consumer protection, and liability are either completely neglected or totally insufficient.

PSD2 will create a clear regulatory framework, will introduce consumer protection, oversight from competent authorities and ultimately will create a transparent liability model for all the actors involved in the flow (data and payments).
I think this is a great outcome for consumers and market competition. PSD2 is not perfect but is shaking the industry quite a lot.

I'm working on TrueLayer (http://truelayer.com) which is a universal bank API platform in the context of PSD2. Email in profile if you want to chat about this topic.
Yay XDR! I still haven't heard a good explanation as to why Google invented Protocol Buffers when XDR already existed and was mature (it powers NFS).
Not quite answering the question posed, but I do want to posit that air passenger traffic has continued to grow steadily nearly every year since it began: http://data.worldbank.org/indicator/IS.AIR.PSGR

There are a lot more people flying and/or flying more and that could increase the complexity of travel. Also, increased security can lead to more variable wait time and thus another variable to consider more now when deciding on what time to leave for a flight. Perhaps the increase in flight apps allows more efficient travel planning and thus saves people a lot of time? Just a thought.
Looks interesting. I have not yet signed up for a few reasons:

1. I have no information on limits of storage.

2. Privacy page is really non-descriptive on a few important topics.

3. End to end encryption is a must. I see no mention of encryption at all.

4. The design hurts my eyes.

5. There are no screenshots of the user interface to interest me in it.

6. There is no pricing information at all.

I could go on. I recognize that this is in it's "Alpha" stages, so just take this as a list of things I think it would be good to improve on just from a first glance. I honestly would not even be interested in testing it unless it had end-to-end encryption (including at rest) that only I have a key to decrypt. This is because I honestly wouldn't want to use it without.

I also just want to mention that there are other services similar out there. For instance, box has notes built in (not a separate app) and you could even just host your own next cloud that does all of the things you mentioned so if you are trying to go in for a profit... you're going into a really crowded market.
Good point, but the domain `raw.githubusercontent.com` is a dumb CDN that a possible attacker cannot control.
The right sentiment. If you called for 3/4 of the staff to resign, you could be profitable.
A trailing /s is the convention. Failing that, perhaps less subtlety? Text is poor at conveying tone.
I'm not the user you replied to, but that app looks like the only good app, atleast for iOS.
> Audi (example): letter (car/SUV/race car)+ number (quality: 1-cheap, 8-luxury) - BMW: first number is a quality class, two numbers is the Engine size. - Mercedes: first letter is a quality class, number is the engine.

You need to already know the brand to know this.

> (quality: 1-cheap, 8-luxury)

How high does it go? If they decide to turn it up to 11 tomorrow, is 8 still "luxury"?

I can't agree that this sort of versioning is any more transparent.

> (e.g. The Audi r8 and the a3, the 90k speakers and the 1k set)

This means nothing unless you already know the brand. There's going to be a minimum set of knowledge required to understand these versioning schemes.
>There has not existed a single EMR I've ever seen that makes any sense whatsoever to the individuals using it.

There are some with good user feedback for GPs and individual doctors like Elation EMR http://www.softwareadvice.com/medical/elation-emr-profile/

but I haven't seen any people really like for hospitals. Epic is often the best reviewed and a lot of people hate it.

I went to a hackathon for nurses three months ago where they were complaining the hospital systems are crap and asking for fixes and thought oh I'll knock something up and have not got very far - in three months you can't even read what other people have tried really - there are over 300 emr systems listed on softwareadvice.com and I read elsewhere the average hospital uses about 80 separate systems. It's a complicated mess.

I've been working on an idea for something like Dropbox with a viewer to display the different formats, HL7&v2, FHIR etc with basic search as a step up from people having to print stuff out and fax it. Not really an EMR but a tool to view record which could maybe be extended. Dunno if that has legs or if anyone had done it already?
I will sell you my Pizza Rocket idea for 25K....or less with royalties. It has an expired provision patent, some marketing material and a huge market. The Pizza Rocket is a 12 inch frozen pizza that is rolled up into a 4 inch tube and then it unrolls itself in the over. It fits in the freezer door so you dont have to wrestle with it in the freezer. VIDEO HERE: https://ksr-video.imgix.net/projects/1304706/video-464332-h2...
Two words: bidding war. My realtor was worth every penny she got.

And I don't know where you are located but I've always known the standard commission to be 6% (3 to buyer and 3 to seller agents). But everything is negotiable, I got mine done at 5%. She knocked 1% of the seller agent fee to be my buyer agent on the next transaction when her fee wouldn't come out of my pocket. She got me a second great deal, could I have gotten the same? Maybe, but knowing that negotiation isn't my strong suit, probably not.

But then again, most people buy houses so infrequently that one or two experiences either good or bad is going to color your whole outlook on the industry. I've been lucky enough that my few experiences look like net wins from my perspective.
Ironically, was actually contemplating implementing wavelets approach in our project, so very timely!
I had a Galaxy Nexus on Verizon. Fool me once...
I'm very curious what CPU it was, and what the bug was.
How much rape is too much rape?
Wonderful that you connect to that state at all!

There are certain breath techniques that will land you in the clouds. If you do a practice like that without proper grounding, you are likely to be very disconnected from physical reality. That's my opinion and personal experience. In general (and they have the science to back this up) it heightens awareness of your senses. Though people who meditate have higher pain tolerance -- not because they feel less (since they feel more) -- because they have developed willpower to not react to stimulus the same way. Super fascinating!
When did you know you were a cunt?
List of Domains Blocked in the UK by High Court Orders
I would suggest KeePassXC, which in my opinion, looks better since uses Qt rather than mono so has a more native feel.

https://keepassxc.org/
Was your rape unpleasant
I got a counterfeit laptop power adapter. The thing had the brand name on it, and also the model number. But the counterfeiters decided to be clever and put in several model numbers on the same device. These numbers corresponded to completely different adapters listed on the actual manufacturer's site.

I guess amazon has a new brilliant business plan where thy make money from returns. Or Bezos has given up on AMZN and decided to buy UPS stock.
That is pennies for the kind of information they have (assuming they have it). It's also not smart to ask for gift cards because they can easily associate it with personal apple ids of the hackers. Seems like an amateur job.
Omi.js--Open and modern framework for building user interfaces
I think that says more about your teacher (and maybe about you) than it does about Java as a first language. Bad teachers will teach poorly no matter which language they're teaching.
Follow up question then. If there were a way to run it seamlessly, same level of effort as Trello.com would people do it?
Agreed.. Not like an athlete. Maybe more like someone who masturbates too much? They won't grow hair on their palms or stop growing, but certainly may become a hermit :)

Although I have heard several anecdotal stories of people going coocoo after raising their kundalini energy. Maybe their physical bodies were intact, but their minds were melted.
You're not aware or either purposefully ignorant to the power dynamic inherent to the employer/employee situation.
What a ridiculous comparison. No, I wouldn't say bathrooms are a luxury. A $1600 chair is. What world do you live in?
£60,000 after 6 years of battling them is outrageous. Punitive damages should have been in the millions.
Imagine how many good ideas may have been lost because those pitching them didn't have any connections? They don't even get the chance to be boring.
You apparently like to argue. Even if the sub-discussion is about accidental collisions centuries do not remain to fix the problem, which is that there was a recent practical attack of a mathematical speedup for certain types of collisions. Your conclusion doesn't follow from your premise.

The attack persists regardless of the lack or presence of accidental collisions, therefore there aren't centuries to fix the problem.
It's a very expensive, very customizable appliance. Hence Amazon's AWS F1 instance and Nimbix cloud.
If you're going to code something yourself, you have to be skilled enough to do it. Admittedly, one of the benefits of frameworks is that they allow low-skilled developers to produce reasonable and safe results quickly.

But if you are skilled, you can easily produce code equivalent or better than the average framework out there. And it will likely be simpler because you're only coding for your own use case and not every case that exists.
I buy a lot on amazon, but groceries? I can't see it happening. I really don't want counterfeit Oreos.
From NYC.
Now in Manila, Philippines.
It seemed like he didn't escape but instead cracked the password using ssh.
Can you say the same about raw.gjthubusercontent.com ?

Also, the attacker can push an update if they can successfully guess the window between you reviewing a file and you installing a file. Not nearly as reliable as that POC, but hardly impossible.

Best to avoid building bad habits. Perhaps worthwhile to build good ones - even when it's "safe" to skip.
I thought it was pretty obvious and the italics made it more so.
Yes - no bar code? I won't self check, but also the large items that won't fit in the bag. I learned the hard way that it can take too long for them to get the self checkout lane to stop crying about how I didn't put a 10' pipe in the bag. Unless I have one or two well marked, small items, I avoid the self checkout.
But the purging hasn't gone far enough. You have the likes of Life College, Sherman and even Cleveland who still hold to the debunked foundational ideas. Those who graduate from these schools are taught to be high visibility charlatans who are the ones seen by the decisionmakers (legislators, etc.) and keep the majority of chiropractors (evidenced based) from moving forward in the healthcare world.
Living with a Zettelkasten
Yeah, I ordered a Lenovo laptop charger that seems to be fake. It is lighter and the cable is thinner than the genuine item. It also has a manufacturing date on it of 01/2013, although I received it in early 2017. But it was like $12.
How to Improve Your Productivity at Work
Well, he was using Freenet without obscuring his IP address. That's pretty much not "really try[ing] to conceal what he was doing". But that's what Freenet devs have recommended, crooning of "plausible deniability".
No, in my experience accepting a severance payment does not prevent you from claiming unemployment benefits, however the severance is treated as salary and you can't collect benefits until however many pay periods it represents have passed.
Most people I know (including myself) seem to break their screen in under 2 years, and have to buy a new one.

Meanwhile, PCs are often shared by family members
SFO's API program
I'm not sure, but you can look at GitLab, WordPress, and Sentry[1]. All of those can be run fairly seamlessly with a little bit of research. All of them have customer bases who choose to use the hosted option.

There are some pros to the paid/hosted option that can never be replicated by self-hosting:

- someone else handles crashes, bugs, and other emergencies
- economies of scale (large, purpose-built operations with costs shared my many customers)
- free (or cheap) customer support

The biggest reason I see people moving to self-hosted options is to keep their data private.

1. https://github.com/getsentry/sentry
No it hasn't--not as far as the decision makers (legislators) are concerned. Graduates of the schools who espouse the debunked foundational ideas (Life, Sherman and Cleveland) are generally high visibility charlatans who are seen by the legislators and those who work in mainstream healthcare. They also speak out against any progression by evidenced based chiropractors.
35 years ago my name was entered incorrectly into a data base. I'm still getting mail with the incorrect spelling.
Errrr... Then The Flaming Lips are guilty as sin with Are You a Hypnotist?
Bathrooms are for spoiled corporate brats. Real scrappy startups just have poop buckets.
OMG. Arbitrary code execution just from visiting a URL, and dump all the passwords?
Trump signs NASA bill aimed at sending people to Mars
I use the open source Keepass2Android which is open source and supports the new crypto, has just about every utility I could want.

https://keepass2android.codeplex.com/
I'm not interested, but you may want to include the name of the company / a way to contact you for those that are.
Nintendo Switch has cut deep into porn traffic
I can understand this approach to GET

But how would you, say, bulk delete 5 different resources? I typically send those payloads in the request body of a DELETE request.
Ugh, so I did. Here's the link: https://github.com/bringhurst/tlaplus/blob/master/examples/P...
I would not suggest this as KeePassXC does not support the new KDBX4 format with the upgraded cryptography - only the old Keepass format which relies on a custom AES-based key derivation function, which I cannot in good faith recommend.

Once it's implemented I may reconsider, but for now at least, I'd shy away from it.

https://github.com/keepassxreboot/keepassxc/issues/148
As I read it, the comment you were replying to was still restricting its discussion to overlapping quorums, and merely pointing out that that's not actually synonymous with majority.
Hiring and firing is not a silver bullet to have an efficient tech culture
LastPass has a bit to go until I'd call them a sham. I was talking in general. There have been much worse examples before.

Yes there are vulnerabilities in every software. Even if your code is perfect the compiler will generate bugged code. Even if you fix that, the CPU still has bugs. These are certainly hard problems. However there's a difference between a subtle bug caused by a typo and complete lack of understanding of fundamentals. [1]

As for what products I consider having strong security, the crypto part of the Go standard library is good. Among large projects Chrome is good. Neither of them are perfect.

--

[1] I especially like the case of CryptoCat, a chat program that generated random crypto keys by concatenating strings of digits. https://tobtu.com/decryptocat.php
Broadcom Sibyte 1250. I had pre-release silicon, and there was a known bug that prefetch would occasionally hang the chip. I wanted to have a little fun goofing around, so I modified crashme to replace prefetches in the randomly generated code with a noop. A few minutes later, I hung the chip.

If I identified the right erratum later, it was: if there is a branch in the delay slot of a branch in a delay slot which is mispredicted, the cpu hangs. It was fixed by making this sequence throw an illegal instruction exception. (It was undefined behavior already, I think.)
Seems like it would make more sense to go the other way around... who voluntarily writes in JS to compile to some other language, as opposed to writing in any of however many dozens of other less horrible languages (but maybe typed JS is better? never tried it) to compile to JS?
Not to demotivate anyone / anything, but this sounds like the least useful parts of both worlds; programming JS (and having to deal with typing and correctness with other tools) to run on the OCaml runtime (which as noted, is really only better on a small subset of devices).

On the other hand, cool to see the investment in OCaml, and such a popular language able to run on its runtime! I hope that with all this newfound interest from the industry and the community more OCaml resources and more development in the compiler start to happen!
Probably only in their front end code.
So we should start to teach ppl to fly planes by first teaching them to ride a bike? Riding a bike will not help you fly. Programming isn't hard but if "public static..." melts your mind, software may not be for you.

Also the classic file read idiom (the C one) teaches some of the most basic things every programmer should undertand:

. file encoding (which you ignore)

. buffer sizes

. error handling (likely 80-90% of production code)

Your python example ignores these basic instructive points. Why is there no "String str=String.read(file)"? Because it's seldom useful in production (see points above).
A Github course in reinforcement learning in the wild
By running their own Freenet nodes, investigators can create databases of observable chunk hashes and file content. And they can see traffic to peers. So they know that his node handled child porn.

But they can't really know that he was looking at child porn without finding saved files. They may also be interested in communications with other potential suspects.
I had the same question about cameras dealing with those issues, but this article says "Products are embedded with tracking devices that pair with customers’ phones to charge their accounts". It sounds like this means every product has an RFID / other tag, rather than using computer vision.
I feel you, I grew up on this stuff. I might have read this as a kid in 2002. I ran ratpoison back in the day (on Slackware, another blast from the past), I still routinely quote the "inspiration" [1], "SCWM, Pot and the GPL":

>all the real elite programmers are wobblies.

Hopefully the ugly self-hosted sites hosting bespoke evilwm patches, and troll posts about SCWM will be preserved for posterity. I'd hate to think young programmers are missing out on our rich heritage.

[1] http://www.nongnu.org/ratpoison/inspiration.html
> Therefore, this allows complete access to internal privileged LastPass RPC commands. There are hundreds of internal LastPass RPCs, but the obviously bad ones are things copying and filling in passwords (copypass, fillform, etc). If you install the binary component (https://lastpass.com/support.php?cmd=showfaq&id=5576), you can also use "openattach" to run arbitrary code.

Any lastpass RPC was able to be called, which does mean that it compromised the passwords. Now, the worse part is that any code (any .bat file, which on windows is similar to a bash script) could be run on the host computer, which means they can effectively take over the host computer.
We’re building a massive public dataset about new coders
What are the best customer support tools available?
To put this in perspective, the population of Western Australia is about 2.6 million people. Most of those -- around 2 million -- live in Perth. Around $33k spent for every many, woman and child in the state.

A lot of that $88 billion (Gorgon and Wheatstone) was spent on local labour and supplies. And Gorgon was one capital project. At the height of the boom, there were hundreds of billions of dollars of capital projects underway simultaneously across Australia.

When I was last in SF a few months ago it reminded me of Perth at the height of the boom.

And I found it unsettling.
I'm a big fan of both and I recently loved Diaspora by Greg Egan. It's a bit more heavy on math/physics references but it's still amazing writing and an epic piece of world (and universe) building.
Five graphs that will change your mind about poverty
You're the one who started this stupid argument. There is no 'attack'. This is was the conversation:

Someone: "Huh, they say it would take billions of years for an accidental collision at checkin rate X"

Someone else: "What if the collision rate were much higher? Famous last words, 640k, herf glorp"

Me: "Even at a million times higher checkin rate you are unlikely to see collisions anytime soon"

You: "It's about ethics in gaming journalism!"

My conclusion doesn't follow your premise because your premise is simply wrong. Enough.
Travel Tips from a Real Space Tourist: Get Ready to Feel Awful
The particular fascination of big box home improvement stores has seemed a bit odd given the number of items that don't fit with the model. Sure a lot of small purchases do but many don't.
The biggest threat to most users is that their password on SomeRandomSite gets out (db dump, hacked, whatever) and since they use the same password everywhere, now their bank and/or their email password is out in the wild. If you are willing to carry an encrypted password file around with you, and consult it every time you need to enter a password, go for it. Yes, that is more secure than LastPass. What LastPass offers is balance between convenience and security.

Also, I believe that a hacker who gained access to LastPass's database would merely get a bunch of encrypted passwords. LastPass doesn't know your master vault password, which is needed to unlock your vault and use the passwords that are stored there. So, they are a big target, but primarily for attacks like this where an individual page might be able to hijack the plugin for users visiting the site, and not because some could hack LastPass and get everyone's passwords.
Are there any plans to make Guetzli available as a library for iOS and Android? Would be great to process images right on device with this level of compression.
MoMA on Coursera – In the Studio: Postwar Abstract Painting
What if 4 shoppers are wearing the same black Google hoodie, noogler hat, and walk closely as a group? Good luck on phone or visual localization and/or tracking.
How Mike Moloney Bootstrapped a Profitable Startup as a Teenager
> He got his career torpedoed

It sounds like mental health issues torpedoed his career. He "felt unable to go back...[to] work" (emphasis mine) because he "became fearful of working with young females." This made him "paranoid". Nowhere does it say he was fired.

Mental health issues are serious, and I do not want to minimize the suffering Mr. Lang subjectively felt. While the police bear some blame for that suffering, they seem to have corrected their error as quickly as reasonably possible, exonerated him and paid him restitution. I think the restitution should have been higher, but that's a separate issue from saying they "torpedoed" his career.