skysight-inc/HackerNews huggingface dataset:
Yes. I know where it's coming from. The airlines can't actually differentiate on the basic transportation service: you're in the same noisy metal tube traveling at exactly the same speed, arriving at the same time.

There is some differentiation on the service you offer, bigger seats, maybe being able to lie flat.

But that's about it, and since that's all there is the airlines just start making shit up.

"Global Services (and generally 1K) members have their food orders taken first"[1]

Really, this is a thing? Just think about how ridiculous it is. And that it obviously has to be codified somewhere in the rule book. Along with all the other silly rules that aren't public. A friend of mine is a frequent traveller, and he told me a lot of the little tricks you have to pull to get good service.

"GS members have their own phone line, [..] the agents are based in the United States and are extremely helpful."[1]

Well, my Lufthansa agent was extremely helpful to "random joe with economy class ticket".

[1] https://thepointsguy.com/2016/04/top-perks-united-global-ser...
Thanks - I tried Selenium (on the desktop) with geckodriver now and it rendered well. The only thing is that long screenshots didn't work but there is probably a workaround for that.
The URL bar does seem buggy and incomplete. I don't think it even supports copy/paste yet. It also won't let me type "https://..."
Your bash history is stored on your computer, so there isn't really a difference toward privacy unless you permit anyone sit on your computer.

Furthermore, for many people, using the command line is part of their daily job. Not keeping a history and/or log, is akin to compiling your source code, keeping the binary and deleting the source.

If there are certain things you don't want in your bash history, use the ignorespace capability and explicitly do not store them.
Reading the original link, it looks like the kernel corruption only happens when an user space application uses the recvfrom() syscall using the MSG_PEEK option. MSG_PEEK is only used AFAIK only in specific applications that need to "peek" at the message without consuming it. This is not a very common use case, but some research should be done to understand if there is some popular application using it.
Your door-to-door time with those two trips is probably not that far apart, when you factor in time getting to and from the airport, waiting for security, waiting for luggage, and delays.

Plus driving is cheaper and less stressful...
India has developed a technological infrastructure breakthrough
Project Scorpio dev kit is so powerful, we wish it was the real thing
I honestly don't get the 'community' bit. Who gets to decide what is NIH, what is duplication of effort, fragmentation and what is 'good' for the 'community'?

Who do these individuals speak for? Which community? There is no organized overarching community in Linux. Are they speaking for Debian, Redhat, Fedora, Suse, Mint, Ubuntu, Elementary, specific projects? They should clearly articulate who they represent.

This looks like hijacking the 'community' to push personal preferences. I am beginning to feel there is a serious undercurrent of bad actors in the open source ecosystem who are threatened by anything not from that they perceive as 'their community'.

For instance I don't see any knives sharpened by all these 'community' advocates for Flatpak when it is preceded by Ubuntu Snap. In this case no one is harassing Redhat and Fedora about NIH, duplication of effort, fragmentation and pressuring Flatpak developers to join hands with Ubuntu. Why the double standards?

Wen it comes to Mir or Unity it is completely out of control. And its only when I decided to overlook the bad press to actually try Unity that I realized its by far the most polished desktop on Linux in 20 years. This kind of organized hatchet job is a serious loss for open source.

Its too self serving and political and I suggest anyone presuming to speak for the community should be immediately treated with suspicion.
They aren't banned in the EU.

Do you have a link to any individual nation state bans being based on scientific evidence rather than public/media outrage? Because the EFSA has been against the bans.
True, but is that anymore convenient than card tap? Also, We are seeing QR payments happening in the states also (like at Starbucks) though I honestly don't see the point.
Is This What Project Scorpio Will Look Like? New Images Reveal a Compact Console
I have to hand it to you for not even trying hard enough to read the parent's point about type 2 vs. type 1, and then linking to an article that mentions type 2 in the very first sentance.
This is a flag that the application has to explicitly set when receiving data. Looks like this flag has limited usage based on the description. I've checked with the strace tool few programs that use UDP on my Linux boxes: unbound resolver, ntpd, openvpn. None seems to use it.

MSG_PEEK
This flag causes the receive operation to return data from the beginning of the receive queue without removing that data from the queue. Thus, a subsequent receive call will return the same data.
Even with precheck (which i got as well), it didn't really change anything.

I still need to show up just as early (as my local airport often has a longer line for precheck!), i still can't pack more than some stupid amount of liquid, or have my shit thrown out because I used a X-oz plastic bag which is too big!!! I still can't check bags as they just won't ever show up, or will show up damaged, have items stolen, or completely trashed from being searched. It only makes the cost more expensive, and it doesn't really help with the "invasive screening" (oh, i don't need to take my shoes off any more... i'm still getting scanned or felt up)

Plus I had to take a day off of work to go answer a bunch of stupid questions, pay them $80-ish per person, and give my fingerprints.
This is so true. It seems like most of the arguments against C are made in isolation of the ecosystem that has been built around C. At this point we should be helping new programmer learn how to work with C with all the safely equipment we now have.
As recently as last year I had trouble setting up Uber in china because they wanted my Chinese ID number to go along with my Chinese credit card. Thing is, they wouldn't ask if I was using a non Chinese card.
I'd be surprised were it legal to have the police drag someone out of a room they've paid for and been checked into, merely because another guest wants that room.

Sure, you can ask, but on what legal basis do you have to apply violence?
So, this is a guy who apparently wasn't VIP enough:

> Fearns, 59, is president of TriPacific Capital Advisors, an Irvine investment firm that handles more than half a billion dollars in real estate holdings on behalf of public pension funds.
There are radio ads running in Australia or New Zealand (I forget which) that instruct Siri to turn airplane mode on. They are PSAs about texting or dicking with your phone while driving, so I guess they're helpful, but still.
so you relay anecdotes as if they were generally true? That's what seems to be happening.
It makes things look friendlier to a user lacking in confidence, and less like "your computer is dying, look it's dropped back to text mode"; makes them less likely to balk, or at the least start their experience with unpleasant feelings. Particularly when doing, e.g., dual boot, i.e. risking your Windows stuff.
It's a very good question. One might imagine that the browser renders everything into a buffer at some point, and you could simply ask the engine to give you a pointer to that data.

The reality is very different. WebKit/Blink rendering is intimately tied with the graphics system of each platform, in particular through the use of native widgets and native window system compositors.

For example, on the Mac, a lot of compositing within the browser window is done using Core Animation layers. This is a really good idea for performance, because it leverages the work done by Apple to improve their GUI performance.

The downside is that capturing the output becomes very tricky when the browser doesn't do the final compositing. Previously this didn't really matter because 99.99% of browser rendering is for end users and they don't need to capture the output (or if they do, they would just use platform GUI functionality like screen capture).

An increasing demand for headless rendering has effectively forced browser engine teams to rethink some of the internal APIs so that a pipeline can be built to capture the final rendering.
https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2...

Apparently xenial 4.4 is not affected.
The big problem is that the majority of people with 70% of information will go into f*ckup 100% certain. You need to have a talent of some sorts to make right decisions or at least reversible ones.
... but that's what many other malware authors say as well :)

... they probably even tell it to themselves to better sleep at night.
>The only thing I wonder is if this Jane Silber, who I've never heard about before, is really responsible for all these failures or if she's just the goat that gets slaughtered for the oracle of public opinion.

The answer is in the question..

(Though I still do like Unity, it's the least memory-hungry DE of the popular ones)
United is the airline pulling this $#!^. The problem isn't the regulations. The problem is United's execution. There is a reason why United isn't popular amongst premium paying and frequent travellers. I was avoiding their flights way before all this bad PR.
Xbox One Scorpio Development Kit Specifications Unveiled – Geeky Gadgets
when someone disrupts recruiting enough to make all that wasted energy uncompetitive.
Is it Chrome eating memory of the websites you have visited? Suspended tabs suggests issues, which may not free up till you close them.
Spark is one that I was going to suggest - I can't say I've personally used it, but it was something I certainly evaluated before going down a different route. From the outside, it looks like an excellent basis for a SaaS built upon PHP and the Laravel framework.

I personally made the age-old mistake of telling myself that it would be cool to build something in a new language as some form of personal development. Of course, the idea grew legs and now I'm learning as I go. Not strictly a problem, as I'm loving Django and Python, just an extra hurdle to scale before launching.
A look at Project Scorpio's Xbox dev kit, built to spec from developer feedback
Would a kernel-level firewall (iptables) help in this case? Or does the vulnerability happen before the packet can be discarded by iptables?

If so, what is a good firewall frontend for Android?
But am I wrong in thinking it shouldn't be that way? Why is the "really fast bus in the sky" so much worse in just about every way? Is it like this in other countries?
> The church said its "police officers would be restricted to the church's campuses and be able to respond to emergency situations while coordinating with local authorities."

How's this any different from the various University police forces? In terms of numbers, seems about similar (4000 people). They're not going to be enforcing religious law from reading that, so... what's the problem?
The crux of the article, for me, is this:

"What United and all companies need to do is to train and empower workers to deal with specific issues as they arise,” she said. “Don’t just follow whatever is written in your policies."

Unfortunately that's so often the case - one may as well be conversing with a robot in many customer service situations. I can only imagine it's just as frustrating for the disempowered service reps.
"O.k. Google, execute order 66"
It must be defined somewhere in law or regulation.

Based on http://www.askthepilot.com/how-to-speak-airline/ it seems like "boarding" means to enter the plane.
I remember working too long on the email version of my wedding invitation for those who chose to receive the electronic edition when they filled out the Gogle Form to RSVP... trying to get fancy with email formatting is such a pain! I sent out the initial "Save the Date" postcard by mail.
Aha - yes, I can imagine how it would.
>Scrape bank statements...

There is Kantu: https://www.a9t9.com/kantu/web-automation

It uses screenshots and OCR to automate web browsing and scraping, to you do not even have to "touch" the DOM. What you do is you simply draw a frame around the areas that you need to have extracted and OCR'ed. It also works with PDFs.
I agree 100%, so I waited and waited and waited and waited.

Then I got tired of waiting 4 years for any of the GPU computing software I was interested in to support it and bought an Nvidia GPU and a PC to run it instead and became part of the problem.
At the moment I wish United gets beaten up well for forced passenger removal earlier this week. However, IMO this article just tries to pile onto the "United stinks" meme and is poorly written (more emotions than facts). Some things missing (for me):

1. When did this happen? The article makes it look like this just happened, but does not mention a date. I suspect the omission is on purpose (if so, boo!; if not, sorry, but please add event date).

2. The fact that the guy bumped off is rich is irrelevant (and going on and on about it dulls the message).

3. The fact that the seat the guy was downgraded was noisy (people arguing on both sides) is irrelevant.

IMO the main point is valid -- the person was first to the seat and in general whoever gets into the seat first keeps it in case of a seat collision or a duplicate ticket. He should not have been asked to free it to another passenger (who should have been downgraded instead and compensated somehow). But conflating this with unrelated issue to get on a "United stinks" meme is a cheap trick. My 2c.
Well, I was not reading a major German newspaper here. Last time checked, this was hacker news. I don't see the connection between the two, but anyhow, let's just go with it for a moment.

I actually like your comparison: this post is comparable to major German newspapers reporting that the British queen had a cold. I could not have come up with a better analogy.

If you see anything remarkable in the latest nodejs update that makes it worth being on HN - point it out to me please! Maybe I have been missing something.
I can't answer all of your questions, but this thread may interest you: https://news.ycombinator.com/item?id=14102248
How to Get Ideas and How to Measure
tokenizerrr | https://news.ycombinator.com/item?id=14105616

Even without root. Just run a backup and extract it from that. You can do it with just adb or helium.

--

I can't quickly find any examples online that don't specifically mention requiring rooting the phone. Just this anecdote: https://community.spiceworks.com/topic/465582-google-authent...

If you do a backup (even if not rooted you can use ADB to backup your apps and data,) then you can simply restore the app and data to your new phone and the codes for the device come with it.

This article appears to contain the most detailed instructions, stating that both Titanium backaup and manual extraction require root: https://www.howtogeek.com/130755/how-to-move-your-google-aut...

If your Android is rooted, you can use Titanium Backup, which we’ve written about before, to take a backup of your Google Authenticator app data. [...] If you have root access to your device, you can actually extract the credentials manually

It was at one point possible to extract from iPhone backups: https://dpron.com/recovering-google-authenticator-keys-from-...
Given that the PEEK flag is needed, I'd say an application needs to try to use the data first (with that flag). A firewall would do the trick to block that I guess.
I can't wait for the outlash when an Alabama mosque exercises their privileges under this new statute.
Longer code-phrases actually give the voice recognition system lower probability of false positives and false negatives. Additionally, the code phrase needs to be something slightly obscure right now; you don't want the machine triggering every time you walk through the front door and yell "Honey, I'm home! How was your day?"
Wait a sec, back up, please explain to us europeans, what on earth is a university police force and why do universities need them?
Electron Visual Object Tagging Tool Enables End to End Object Detection in a Box
It is certainly not an improvement for a systems language
This getting ridiculous.

The removal was awful, and they did deserve all the bad press. This article however is just trying to ride the wave to get some clicks.

There are millions of people who travel every day. Stuff like this must happen hundreds of times every day on pretty much every airline.
PHP fpm and cli log configuration
How to Market SAAS Apps
I've been doing development on it for a bank for about two months now.

Things I like:

-Let's you have an infinite number of virtual monitors with applications such as word, outlook, browsers etc.
-Developing for it is really easy with tools like Unity
-Battery life is not too shabby, rarely have to take it off to charge while I'm doing something
-Great demo piece

Things to work on:

-Field of view isn't terrible, but could still use improvement
-Price point precludes a lot of consumer applications
-Feels like you're always wearing sunglasses indoors. This takes away from the augmented reality bit as it can be pretty hard to interact with the real world sometimes (e.g. hard to read my real monitor when I have it on)
-Gets kind of uncomfortable on your nose after a while, though that may depend on your face morphology
-Interacting with voice commands in an office setting can be awkward/amusing
-My colleagues think I'm never working
Eric Garner wasn't choked to death. Even then, what does he have to do with conformity?
A device designed to passively harvest as much information as it can.
Flying Lufthansa or SwissAir or Norwegian - basically any of the the European national carriers - is orders of magnitude better than the US carriers. It's like what flying was like 20 years ago.

Even the cut-rate European outfits like WOW are better.
Spatial Analytics with PostGIS, PL/R and R
what you said is a total non-sequitur.

the antisocial behavior of the person who harassed you is a result of poorly treated mental health issue. to use the shamanic model, this would be a person who has not been properly guided through a spiritual transformation and therefore is living in a state of painful unintegrated delusional paranoia. a shaman's job would be to help them complete that transformation and cease their antisocial behavior.
Question for those of you more involved with such headless tasks. Do you think that chromium and firefox supporting headless will induce a surge in bots crawling the open web from now on?
I had to click around to find the video, but here it is: https://www.infoq.com/presentations/bank-go
Daimler, Bosch Partner to Build Self-Driving Taxis
Show HN: AI for personalized Maker Projects
Russia decreased their budget ... leaving them fewer options to choose from if things get dicey ... making nukes a choice they would be +x% more likely to make.

Even for tiny values of "x" I still can't call this a decided improvement on the nuclear risk.
There is no contradiction. Let me break it down again.

The original DOJ press release[0] when Schwartz was charged:

> If convicted on these charges, SWARTZ faces up to 35 years in prison

That maximum sentence is not uncommon in CFAA cases as most charges carry 10 or 5 years and layering charges together is very common (ex Mathew Keys faced 25 years on 3 charges for sharing a password)

Facing 35 years Swartz enters plea talks and is offered 6 months recommended, up to 6 years but guilty to all charges

The prosecutors tell him if he doesnt take that deal and goes to trial then they'll be seeking a 7 year minimum 35 year max

A lot has been written about the problems with not just federal sentencing and plea agreements (internationally it is a unique system) but also specific problems with CFAA and sentencing guidelines:

https://www.eff.org/deeplinks/2013/03/41-months-weev-underst...

[0] https://web-beta.archive.org/web/20110724043722/https://www....
How blockchain technology can help build a transparent future
So all the data is just appearance frequency of positive and negative connotation words with no contextual clues other than order... yeah, this is not good science.
google should hire him
"deep within, the subconscious" is a very esoteric thing.
If I've understood this correctly, it turns it into a local privilege escalation opportunity: run a vulnerable application as the user, use the exploit to get code execution in the kernel.
Lol? What exactly is you issue with zsh?
http://m.imgur.com/L1GyFnt

There's more volatility in the stock to be sure, but I wouldn't call this "paying the price for this mistake" according to public perception just yet. I don't know airlines well enough, but if I were going to take a position, it'd be long. The initial dip in the stock price tapered off, and the current price in pre-market trading has reached parity with 4/7 despite the relative increase in volatility.

Aside from market perception, I don't think UAL is going to lose much in sales (I'd love to be proven wrong though!). Airlines do not seem to really need to compete or differentiate themselves in customer service to be profitable.

These controversies have an impact on the stock price that is like the "villain of the week" impact on a show's overall plot - it's entertaining this week, but next week no one is going to care.
Any device that generates TOTP tokens needs the secret key available by design. Your could read the source code or spec sheets but an easy way to prove this by backing up Google Authenticator via Titanium Backup and restoring it to a new device. Now both devices generate the same codes.

There have been plenty of iOS exploits as well as Android and everything else. Phones have a lot of attack surface and are not a reasonable place to store 2FA of any kind, IMO.

The separate hardware TOTP device never exposes the private key to system memory or disk at all. Even if your phone was rooted by a remote attacker, they could not generate tokens.

Likewise even if someone physically stole your unlocked phone and your pin-protected key... you are still in pretty good shape.

With a hardware TOTP device is just a "viewer" for one code at a time, as generated by the token.
Jeff Bezos' annual letter, released yesterday, had a good line (one of many) that immediately made me think of this United situations and broadly the crazy rules we've created for air travel and the culture that surrounds it all:

"It’s always worth asking, do we own the process or does the process own us? In a Day 2 company, you might find it’s the second."
We created this prototype that generates "Maker Projects" for you.

There is so much great content online by fellow Makers for building things. They've put a lot of effort into amazing instructions, designs etc.
Creative people often build on something that already exists: remix, modify, recombine to make it personal, and fit to individual needs.

We take a similar approach and make it as easy for anybody whatever the different needs and indifferent to your skill levels to just start making.

We're excited what you come up with to make and looking forward for feedback and some tough scrutiny from the community!
Ya, I've seen people deboard if there wasn't enough overhead space...in America...it is completely in their right if they bought s full fare ticket.
Rabbit MQ: Publish, consume, and retry messages
My experience is that people don't do well when asked to monitor systems that rarely change for rare events. It doesn't matter how strongly you impress upon them the importance of the work or how much potential reward you dangle in front of them the monkey part of their brain will pull them from the task.

This is a common enough problem that it's a well understood factor in systems failures and has been extensively explored in literature with airline pilots, nuclear technicians and TSA X-Ray techs as human factor in engineering.