skysight-inc/HackerNews huggingface dataset:
Color me skeptical. I’ve never needed voice authorization for a CC transaction. Ever. And I don’t give my CC # to random people who call me from strange numbers. Seems like, if they already had my CC data, they wouldn’t need to call me. The “supporting” link FTA doesn’t add much, either. In fact, it says that the exploit is still considered “unproven”. Maybe they plan on doctoring the whole audio transcript and then submitting it as “proof” in their favor once someone issues a chargeback?
Commingling is an odd term to use for items kept in separate bins where there is accurate tracking as to which bin it came from. Commingled and separate? Heh.

If it's very accurate, and keeps things separated, you have to wonder why Amazon offers "Stickerless Commingling" and "Stickered Commingling". What does the sticker add if the bin system is working so well?
Looking at something like gsmartcontrol I can only spot the few icons being different than the shell32 ones, so it's still more consistent than most commercial software.
Please don't start flamewars with unsubstantive personal accusations like this.
For the record while I'm for protecting online consumer privacy, I'm not terrified of it being violated either. I was simply giving examples of how it might be problematic.

I work in ad tech, so as a matter of principle I don't have any ad or privacy blockers turned on. But even in my personal life I always keep my blinds open, I don't care if my neighbors see me living my personal life. I also keep all my Facebook posts public, etc.

But I realize that there are all kinds of situations I can and can't imagine where people need more privacy. My own life situation could even change such that I feel the need for more privacy. That's why I believe that people should by default have a right to privacy, but give it away only if they so chose.
Try right-click > open in new tab. Nobody traps right-click in JS :]

Yes, unbelievably annoying, but I've encountered this kind of behavior on a lot of websites.
After attack, UK gov lays into Facebook, Google for not killing extremist pages
Tesla to Begin Taking Solar Roof Orders in April
SetState() Gate – JavaScript Scene – Medium
The car wasn't "hacked" they are reading the canbus and using that data as an input for the controls of a game that runs on a separate computer.

This isn't different than using a USB steering wheel and pedals setup.

It also requires no "hacking" just access to the canbus which can be accessed in most cars through an interface under the steering wheel or in the glovebox.

As long as your car is fairly new all the driver inputs will be transmitted over the canbus.
> Microsoft doesn't think much of the lawsuit. "The Windows 10 free upgrade program was a choice designed to help people take advantage of the most secure, and most productive Windows," a Microsoft spokesperson said in an email to The Register. "Customers had the option not to upgrade to Windows 10

Wow, that is some BS. There are plenty of people who had no choice and screen shots in the article showing that some people had no choice.

If the OS didn't cost money it would be one thing to not guarantee data loss, but these people paid for software that destroyed their data.
Autobinding Vulns and Spring MVC (ModelAttribute)
Side note:

Back when I did Win32 packaging of cross-platform applications, I never liked InnoSetup much, mostly because of the many levels of unpacking into temporary directories, but also because it was relatively slow and not as compact as it could be. Instead, I always preferred NSIS using the makensis command.

Among others, NSIS can be compiled on *nix systems, but still produces a Windows executable file (like a cross compiler), so you can put it in your cross compiling toolchain. That way, you can create your full Windows port including installer without ever having to touch a Windows.
Would most courts also say "You can't have a class action, go do individual arbitration instead."

Arbitration is one thing, taking away class action rights though.
Not unobtanium, but 90 million tons of platinum is worth a decent amount.

https://www.rt.com/news/310170-platinum-asteroid-2011-uw-158...
Flu makes you gregarious [pdf]
Oh jesus, Today I was messing around with Athena and S3, very cool product btw. In the new s3 control panel, I was having the hardest time selecting the bucket and path I was on so I could copy it. Its 2017, wtf?
It seems Messenger was just renamed Messages, probably for this very reason.
It really is. There's at least some level of trust there as well.

At least I was pretty sure they're Apple MFI certified. I've never had any issues with them at all, they're well priced, and so far, reliable. And they have a 1 year warranty, which is nice for a cable.

the Amazon Basics line has a lot of stuff. Dishes too!
https://www.reddit.com/r/netsec/comments/616ozu/ms_edge_refe...
Isn't that the whole point of insurance? Life, auto, home, fire, farmer's?

To not go bankrupt and share the risk.
>Life is not a zero-sum game.

Life might not be, but most things people actually want, are.

If you want to work at X, you have to compete with others for the same job. If you want to start your own company, you have to compete with other companies for your market. If you want to marry person Y, you have to compete with people also interested in Y. If you want to be a writer, you have to compete with other writer's for people's attention. And so on -- and we haven't even touched the real competitive fields, like pop music and sports.

>Choose the path of abundance and create new value for others over the path of scarcity and competition

What would that mean in concrete terms for someone wanting to make a living as an X, and there are not many job positions available?
Only from an end user perspective and frankly I hate it. It has all the size and performance problems complained about in that article but without the benefit of native widgets. And frankly if I wanted to run a web app on my desktop then I'd rather run it in my preferred browser.

I know I'm getting old (in IT terms) and grumpy but I'm unconvinced our current frontend web stack are the right tools for modern web development; albeit it's what we're stuck with. So I'm even less convinced that it's the right stack for "native" desktop applications.
There's two reasons why commercial airliners are conservative with their projections: the first being that "moonshots" like the 787 embarrass them with programme delays and compulsory groundings due to unanticipated faults costing their clients a lot of money, and the second being that more ambitious projects might threaten to render the aircraft they expect to deliver to their existing loyal customers over the next five years prematurely obsolete.
(airframe/engine update cycles and percentage efficiency improvements are pretty predictable, and embedded in a lot of financial models that involve big Boeing/Airbus customers borrowing a lot of money)

But to put that in context, the major airframers and engine manufacturers also have a lot of talented aerospace engineers very keen to make their mark with more radical innovations, well-publicised "concept planes" with funky designs like open rotors and even those skunkworks projects likely have a bigger budget than aerospace startups
Depends on if Xamarin emerges from the ashes or if they disappear along with the rest of Microsoft.
The Incredible Pytorch
Senate votes to allow ISPs to collect, sell personal data without permission
IANAL, but as far as I know, the law always takes precedence over contracts. You cannot sign a contract that makes you a slave, or that gives somebody else the right to kill you, for example.

Less extreme examples likely (IANAL!) are that you signing a contract that gives you a job that pays below minimum wage or gives away your right to vote isn't enforceable, and makes the entire contract containing such a clause null and void (some contracts have provisions to prevent such things from making the entire contract void)

Contracts can only operate in the space that the law leaves open for them.

Back to this case: for software licenses sold to consumers, AFAIK, there's little jurisprudence about whether they are enforceable. That probably applies even more to the Windows 10 upgrade because Microsoft, using 'innovative' tactics, made it extremely easy to upgrade.
https://www.amazon.com/gp/help/customer/display.html?nodeId=...

That may be why they stopped calling the option commingled. They still use the word, but the option is just called "manufacturer barcode". It used to be called stickerless commingled inventory.

There's no stickered commingled option. There's stickerless commingled and stickered separate inventory.

One reason amazon keeps the stickered option is because some people might want to be able to get the exact inventory they send in back. And some items don't make sense to be commingled, like used items, items with experation dates, etc.
Please leave out threats like this from comments, even if they're made rhetorically; they're not part of a civil and substantive discussion.
> Symantec will vigorously defend the safe and productive use of the Internet, including minimizing any potential disruption caused by the proposal in Google’s blog post.

What they will vigorously defend is disruption to their reputation and their bottom line. What benefit does a business get from Symantec that they do not get from Let's Encrypt? EV?
Do LinkedIn and Skype also disappear? Nokia? Mojang?
The short answer is: if you're a minority, yes. If you're white, no. Either way your potential will be harmed, but like many things, this can be overcome as well. You'll have to be probably way above average to overcome the "gravity" that will hold you back as a felon. After that I'd say there will be no more barriers, sans management positions.
Well, even if people don't agree with his methodology or analysis, there there appears to be actual evidence of Chinese contact with the aboriginals of Arnhem land [0].

[0] - http://www.abc.net.au/news/2014-08-10/old-chinese-coin-found...
The obvious answer is Qt but I also use wxWidgets[0] for projects with serious GUI requirements and Nuklear[1] or libui[2] for simpler ones.

[0] https://github.com/wxWidgets/wxWidgets

[1] https://github.com/vurtun/nuklear

[2] https://github.com/andlabs/libui
I can say from my own experience that a Ph.D. has no effect on the ability to teach. It's actually kind of weird in the way that if you want to teach high school you have to take education courses, but it is assumed at the university level that you just magically acquire the ability to teach in the course of doing your research.
Your comment is a little broad; maybe that’s why you’ve gotten downvoted. But effectively I agree with you. I know for a fact people DO get this exact call. But the evidence for the endgame of the exploit is pretty weak.
I think a lot of us aren't excited yet because it costs $5000 and therefore isn't a realistic option for most people. When the price comes down, I'll be ecstatic.
Brian Kernighan’s Algorithm
> we have to be realistic that having Google's weight behind it significantly increases its marketing

It also increases no of expert engineers contributing to project full time.
I'd go with a Dell Precision M6800 or M4800, depending on your desired size. It can run linux natively, has a full sized keyboard, and all components are replaceable (even the CPU is a pretty doable replacement).
Well, they already had a big instance of that, in the Minsky Papert book "Perceptrons", talking about linear separability. Talking about backpropagation (as opposed to delta rule) in opposition to that is a sort of mushing of history but it's interesting to think about
The article is concerned with unfairness in life in the sense of what people get (from society, other people, institutions, jobs, etc) not accidents or acts of nature.
The point is in most languages operator overloading is no more complex than a method call.

It's not exactly magic.
>number of people you affect is true but it's multiplied by your impact/value over other offers

Something which the article does hammer on for several paragraphs...
Sigma isn't a for loop, either. You can sum over infinite sequences. A for loop -- or any computation for that matter -- implies a certain dynamic process, with a certain computational complexity. A mathematical expression has no dynamics; it just describes an object. So Σ 1/(2^n) doesn't mean "sum up all 2^-n" -- i.e., it is not a process -- but simply, "the number equal to the sum of all 2^-n". Of course, summation of infinite sequences requires its own definition using limits.

You can have math that is entirely computational -- it's called constructive math -- but the result is a very different math. For example, in constructive math, all functions over the reals are continuous, and not all subsets of finite sets are finite.
> ... the powerless non-autistic people in the room must be simply incredulous.

This doesn't belong on HN, so please omit these sorts of things from comments.
Blogspam of

http://www.med.ubc.ca/inactive-teens-develop-lazy-bones-ubc-...
That's such a tired old argument. I don't have kids, why do my taxes go to schools? Because it's a requirement for a functioning society. The current system isn't good either, but we need to start by ensuring everyone participates in the healthcare system, use it or not.
I was thinking the same thing. It's easy to forget just how much the ancient Greeks accomplished 2,500 years ago.
Newest updates (creators) aim to fix it.
> So they rebuilt Talk on top of a new protocol. This time, it's proprietary. This time, it's much slower in the browser. Oh and you lose half your contacts if you upgrade to it. But at least now it works on phones?

Talk had a full-featured native phone app way back in Android 2.1 with multiple device support, which Allo still doesn't have today. I used it religiously on my Nexus One.
Hi Kamil,
Thanks for the reply.

One point may not have been clear-- this isn't just a matter of a single bugfix being available to the userbase sooner rather than later. Rather, it is that multiple iterations through a development cycle were missed. From my rough recollection:

1. There was a problem setting up an OSX guest to work with virtualbox runner on OSX with passwords. We worked around this using pubkey-based auth between guest and host.

2. There was also a timeout issue mentioned on the tracker for which Sam found the relevant code and suggested (but did not create) a fix.

3. Sam seemed to think a snapshot-reuse approach was too complex and likely to hang or fail. I didn't agree and was trying to explore ways in which they could run reliably as it cut CI time in half for my use case.

4. For uploading artifacts, the OSX guest's gitlab-runner binary had the wrong name requiring the user to manually create a symlink with the correct name. (I think this is fixed in 9.0, but not sure since I still have the symlink there and it's still working.)

At the time my CI builds (and probably Sam's) weren't working at all, so we both ate the cost of learning how the CI build system worked in order to debug it. If there had been feedback saying that his MR was the right (or wrong) approach I would have been happy to apply my knowledge gained at the time to the related problems mentioned above in order to debug and eventually fix them.

But now that knowledge is gone. The cost for me to regain it outweighs the benefits of small improvements to what is atm a working if imperfect system.

Edit: formatting
I've thought about this, too. All the chat and social network tools are constantly shifting their UIs and naturally, I guess, trying to highlight new features, which on a tiny phone screen is equivalent to making them easy to accidentally click.

The worst I've done is accidentally send a Facebook "thumbs up" in an inappropriate context, but it's easy to imagine how you could do much worse.
Yes, and it annoys the hell out of me. Even Chromium's "GTK+" theme doesn't look right next to other GTK applications, where as Firefox does.
It's not difficult at all to write Angular apps where links can be opened in new tabs. I would imagine the same is true for all the major SPA frameworks.
Blogspam of

https://www.ras.org.uk/news-and-press/2967-astronomers-ident...
Byng's execution is referred to in Voltaire's novel Candide with the line "Dans ce pays-ci, il est bon de tuer de temps en temps un amiral pour encourager les autres" – "In this country, it is wise to kill an admiral from time to time to encourage the others."[1]

[1] https://en.wikipedia.org/wiki/Battle_of_Minorca_(1756)
Neither did Google. The Android app for Hangouts is com.google.android.talk
But was the theorem proved?
The title sounds like you can please the AWS team by making links ctrl-clickable.
It's illegal for corporations to make campaign donations. McDonnell has nothing to do with that.
Understanding JavaScript Tree Shaking
Alpaca – Functional programming inspired by ML for the Erlang VM
Support.

And as mockable as that might sound, it comes in handy for businesses with special requirements.
Ah, you're right I wasn't clear (it was early.) What I meant was, it's Uber's policy to charge a fee if a ride is canceled some amount of time after the driver accepts you as their fare. I think the grace period before the fee is about 2 min though I may be wrong. This my experience in New York and Boston.

I've never canceled a ride before waiting 5+ minutes and two of the three times I am referring to the driver drove past me twice.
It looks excellent, and I love cl, but it's just too expensive.
Some Symantec customers are in a position to file a complaint with Google well over the heads of the Chrome cert team. Some have many $millions of transactions dependent on Symantec certs, and aggressive legal staff.

Imagine if Chrome started reporting all Apple and Microsoft domains as insecure, with no warning. That's straying into very deep waters.

To be clear: I support Google's action against Symantec, and it is causing me to look at other CAs. But I need time to make an orderly change.
> All teams will henceforth expose their data and functionality through service interfaces.

http://apievangelist.com/2012/01/12/the-secret-to-amazons-su...
Seal script is significantly older than that. 2100 years ago is squarely in the middle of the Han dynasty, after the square script we are familiar with was already standardized.
The new UI is uneccessary and incomplete. The old UI was a fine flat, plain design ala Goole. The new UI lacks many features of the old and feels more clunky; it should not have been enabled yet.
In The Righteous Mind, Jonathan Haidt argues that it's not about altruism, it's about parochial altruism. Niceness is okay. Niceness aimed narrowly at your own gang is fantastic.

He mentions that it isn't new, though. I thought it was a neat observation since it was new to me.
I was hoping for more talk about how great a foundation Mr. Fritz's programming class at Sycamore was.
Well, part of the reason I use Amazon is how little free time I have.

Amazon has lots of stuff that I either can't find elsewhere or don't have the time to go and purchase in-person.
All mass media will inevitably produce things that are garbage. Video has been the dominant form of media since it became widespread in the 50s.

Marshal McLuhan was the first to clue in to the effects of media types, with his famous quote "The medium is the message". He wrote extensively about media. A book that you are likely to identify strongly with is "Amusing Ourselves to Death". It basically argues that we are becoming a trivial culture because of our dependence on visual media.

It can easily seem like you get dumber the more videos you watch, but I suspect that's because it's far more common to have Facebook autoplay some retarded video of a fluffy animal your 'friend' shared than it is for someone to write out a thoughtful essay or email to you.
Just don't link your app statically.
Social playlist for YouTube
Blogspam of

http://www.brandeis.edu/now/2017/march/mrsec-dogic-fraden.ht...

with actual author credit stripped out.
Recursive r/w locks
>Why would I trust that some online coffee merchant I've never heard of isn't up to the same tricks?

Because they use "recurringcheckout.com" as a payment processor, which lets you do this.
but 'you break it, you own it' is a good rule.

You are suggesting that westerners should, of their own accord, import millions of fighting age and potentially bitter men into their homelands. You admit this is a 'bit of a problem' for those westerners. Now you are suggesting that if westerners choose not to import these millions of people into their homelands, some nebulous force will haunt them. And your basis for this claim is, ultimately, the fact that civilizations tend to fall apart after a while? Given the enormous complexity of the causes of the downfall of great civilizations, do you realize how absurd that sounds? Given the enormous, albeit temporary (as all things are), success of civilizations that didn't feel bad about taking advantage of their neighbors, do you understand why your argument is so unpersuasive?
The GP is talking about the straight-faced lie that the PRC peddles in international circles that Taiwan is a province of the mainland government. It is the international equivalent of putting their hands on their ears and shouting "LA LA LA I CAN'T HEAR YOU!", and about as legitimate as Mexico's claim to Texas.
Descriptions of all possible points of view are presented in the Wikipedia article "Political status of Taiwan" [1]. Among these is the (fringe) theory that based on various post-WWII treaties, the US currently holds sovereignty over Taiwan [2] (a view not endorsed by the US government, by the way).

[1] https://en.wikipedia.org/wiki/Political_status_of_Taiwan

[2] https://en.wikipedia.org/wiki/Political_status_of_Taiwan#Arg...
This is a great deep-dive into the GUI approaches taken by some nice cross-platform apps, but the author seems to have decided early on to ignore web technologies. It would have been nice to see an Adobe UI broken down, or Spotify, or Steam. (It's not like their HTML/JS-based UIs look any whackier than some of those audio production apps!)

If you have infinite time and need infinitely great performance, writing your own GUI framework on top of each platform's native libraries is probably the way to go. But a huge team of people already built and bulletproofed one called Chromium. It's icky in some ways and abstracted far from the native layer, and it'll probably eat an extra 50ms when someone clicks a button, but you can build and ship a cross-platform app in less than three years. The docs are written, the bugs are known ones, and it's easy to hire people who can help you. Just saying :-)

(full disclosure: I worked on an Electron-based mail client—definitely biased :-) )
Did that update solve any problems? Other than perhaps for someone who didn't like accessing advanced properties like object metadata? Or maybe people just really wanted a too dark blue color scheme? I switched back to the old after giving it a try and getting frustrated; wasn't ready for prime time.
Rishi Lakhani's robots.txt
I agree entirely with that.
Lamar Smith lays out political strategy at climate doubters’ conference
They consult on 6-month long projects. After 4-5 months of rest they start looking for next gig. At worst they have to look longer than they plan, but it works. But you must be willing to move to wherever next job site is, SV, Boston, DC, etc.

I also have several friends who work 3 day a week (24 hrs) by choice so they have more free time.
I ultimately plan on starting my own thing. Whether that be consulting, or SaaS, or whatever, I'm not sure. But I don't feel I'll ever be fulfilled until I'm making money for myself. I'm going to be graduating with quite a lot above the average student debt, though, so my first 5 ish years after school I plan on spending as an employee, gaining skills and dumping everything I can towards the loans. Thank you for your response!
Exploring Multi-stage builds in Docker