skysight-inc/HackerNews huggingface dataset:
My point is that if someobe gets training on how to breach and secure buildings, either in SWAT, or in their previous career in the military, then they will have training which teaches them to aim for center-mass of anyone they perceive as a threat.

Swapping out the type of ammunition isnt going to erase that training and so they would fall back to it in a stressful situation.
If Uber had been circuit-bending the Lyft app or Lyft's API or rider/driver devices, I would think it unacceptable. But this information is being provided by Lyft inside their app. Uber was just aggregating this information and storing and analysing the data.

Also the NSA is doing a lot worse things and we know this for certain. I find it distressing how many people seemingly have forgotten about that. If the NSA were only going this far, I'd be pretty happy.
Fresh funding for Blendle, but what’s the future of the journalism startup?
Running Chrome and Other Browsers in (almost) Headless Mode
It also seems to work quite well for the Stormtroopers. Hell, they even got rid of personal identity, just make a clone army.
Europe’s Rockstart accelerator launches an AI track
A 3D-printed key that can’t be copied
> Security should be embedded in the IoT frameworks and should be easy for it to become the standard practice.

To be fair, almost all of the security libraries suck. The only thing which is SMALL and solid is DJB's TweetNaCl (http://tweetnacl.cr.yp.to/)

If I'm running on a Nordic nRF51 series, for example, things like SSL/TLS are a HUGE chunk of my RAM, ROM, battery, and time budgets. This exploit is a good example. Even if you wanted to use something like a public/private key system, it's not clear that the the Atmel SoC could handle it.

In addition, there are still gaps in security libraries that we need. We don't have a good PAKE (password authenticated key exchange) library, for example. HomeKit standardized on SRP with a 3072-bit key, and then discovered that it was too heavyweight and slow for devices working with a lithium coin cell battery. Even Microsoft with AllJoyn had to deprecate SRP and switch to a non-standardized elliptic curve key exchange to better match tiny hardware.

The crypto folks are falling down on the job here. These things aren't standardized, and they don't seem to have been beaten on very hard. And they certainly haven't been tested on small hardware very much.

Everybody can bitch about security, but until someone figures out the tools required for these small systems, it's going to remain the wild west.
It seems Mark Shuttleworth's strategy for Canonical is expand on support, and sunset projects to decrease costs. So far: Mir, Unity, Ubuntu mobile, etc.

Now, many people suggest to go directly to Gnome, but in reality you have many more aditional desktop manager choices on Ubuntu (tried to limit the list to the ones in active development):

- GTK based: Gnome, Pantheon, Budgie, Cinnamon, MATE (Gnome 2 fork), XFCE

- Qt based: KDE, Trinity (KDE 3 fork), LXQt

- NeXT inspired: GNUStep, Window Maker

- Others: Enlightment, CDE.

They all have their tradeoffs.

If you are used to the MS Windows look and feel, maybe Cinnamon/LXQt/Trinity will be the closest.

If you are used to the macOS look and feel, maybe Pantheon or MATE may be closer.

I personally prefer and use Gnome. The Gnome 3 shell is different from everything else (Gnome 2 included), but it was designed trying to minimize distractions. With some tuning (http://extensions.gnome.org) you can adapt it to your needs.

KDE is fine, but most applications I use are GTK based, so I picked a GTK desktop environment.

XFCE is great and performant but hasn't received many updates lately. Development is still active though (https://blog.xfce.org/).
But how many people breaching houses have only police training? How many are former military or current reserves?
This is painfully condescending.
> Not nearly enough ads were replaced by Contributor. Worse, it was the more innocuous ones that were replaced, while the most obnoxious blared on through.

That was a serious problem, I agree, and not one we could do anything about at the time. The problem was, those more-obnoxious ads were mainly not served by Google in the first place.

(There may have been a period when Contributor only worked on a subset of Google's ad products, mostly for technical reasons.)
Creating fake accounts is pretty common for spiders... standard search engine tactics.
Plenty of people like Unity, it's just that the naysayers are super-vocal about it. Mir was an attempt to meld mobile and desktop at a time when mobile still hadn't really settled down - it was a bold experiment that didn't work. Amazon integration was another experiment that didn't work. They have tried a lot of things, some work, some don't.

But if ubuntu listened to the naysayers, there wouldn't be an ubuntu, and desktop linux would have nowhere near the user count it has today. Ubuntu drove a lot of development towards user-friendliness (directly and indirectly). Another of their success stories was Upstart simplifying service management, which was only unseated by Systemd (which started development nearly half a decade later with the benefit of hindsight).

It's so tiring hearing the constant bitchfest aimed at Ubuntu when they've done so much for the community, including significantly growing it. Yes, they've made some missteps, but so have all of the big players.
better looking does not mean healthier, especially thanks to bleach, whitening and surgery.
What the best strategy that worked for you on high volumes, multiple tabs or multiple docker instances? I am wondering if multiple tabs is as efficient as multiple windows/instances.

Thanks.
I don't understand their strategy; Red Hat has some unique offerings for enterprises, but I've never heard anything from Canonical.

Getting involved inthe systemd and Wayland turf wars is probably not the most effective way to spend developer resources.
My favorite JS book at the moment is http://eloquentjavascript.net/
I'd like some advice about safely accessing gmail from your phone.

In particular an android phone that might not have the latest version of android on it.

Also for situations where not only do you access your gmail from your phone but also your google authenticator app is installed on it.
As a side note: this issue happened to some early Apple watches (basically the glue didn't cure properly, I think?). Since it's a sorta known issue, you might be able to get it fixed for free, even though it's out of warranty.

Here's a tweet from John Gruber of popular Apple blog Daring Fireball, who had the same thing happen to his wife's watch: https://twitter.com/gruber/status/783016045481033729?lang=en
I don't see how this is nefarious, Uber is scraping data that Lyft is sharing publicly. And based on Lyft's response, my hunch is that they do the same thing.

If anything, this story distracts us from legit nasty business practices - like repeatedly cancelling on Lyft drivers to waste their time and lower their earnings.
Who says that romance is dead
You can use U2F in firefox with extension. Last time I tried it worked. However I use chrome most of the time so I am not sure if it still does.

https://addons.mozilla.org/en-Us/firefox/addon/u2f-support-a...
The challenge that I've been trying to express is that individual excellence is hard to replicate at scale. Sure in sports, that works ok, the numbers are small and the rewards are great, the incentives are there for people to comb through thousands of people to find that one candidate who's truly excellent.

But that's not the reality for most companies, they're not trying to hire the absolute brightest and best, realistcally not everyone can. They're looking for some measurable indications that a candidate has a baseline level of knowledge in a given field.

Now I feel that a good certifiation can be part of that. So a valuable activity for the industry is to try and create better certifications to help companies who aren't in a position to judge for themselves whether someone is great at something or not, that there's a level of knowledge and understanding there.

If current certifications are poor, then it should be possible to articulate why they are poor, and describe what would make them better.

My references to other professions were designed to reference the fact that those professions have had to face similar issues as they've grown and in science, engineering, law, medicine, accountancy, etc etc they've pretty much all decided that some forms of professional certifications are the right way to go.

Not to say that they're perfect, but that they could be better than the alternatives.
Are user location credentials often accidentally exposed in other app's APIs? This isn't something I have much knowledge in and am just wondering how often this is a security issue.
> EU and Asian countries are ethnically homogeneous. You need to compare America to other melting pots, like Brazil and Argentina.

Translation: "We need a militarized police because we have a lot of black people."
> can you imagine the NSA being described as doing no-brainer customer research ?

Pretty sure HN would agree with that.
It should be possible, but as a browser rather than a driver so you'd still need Chromedriver to glue Chrome and Selenium together. In Karma with karma-chrome-launcher[1] you can pass options to the browser using the flags option, eg;

customLaunchers: {
chrome_headless: {
base: 'Chrome',
flags: ['--headless']
}
}

I've not tested that yet but I can't really see a reason why it wouldn't work.

[1] https://github.com/karma-runner/karma-chrome-launcher
How shoelaces come undone
General relativity isn't all there is to physics. If you check e.g. wikipedia (..I know, but eh), you'll find that the term has been used in cosmology (dark matter) and quantum mechanics as well. (Everything from strings to gravitons.)

Negative-mass matter is matter which could fit the 'exotic matter' definition you're using, though. Not the stuff in this article.
Google launches Areo, a hyper local app for food delivery and services in India
Cup, I didn't read it as condescending, came off more in the way of a poetry jam (to me). It's an approach.
What do you think about IoT devices with powerful motors that are able to kill people?

Or conversely, what do you think about current regulations regarding cars and aircraft?
Or, just maybe because she's a smart, sophisticated, charismatic leader, with engineering degrees in both computer science and mathematics, and business management degrees from Oxford and Vanderbilt?

Jane has been one of the most powerful, honest, decisive, and passionate person in the open source technology world for the last 14 years.

In an industry fraught with executive impropriety, her integrity has set the golden standard by which I'll forever measure any other CEO that I ever work for, or hope to become.

Mark and Jane together have long provided the yin and yang balance that's so fundamental to the indelible passion that is Canonical and Ubuntu.

She will be missed, and she will go on to do even more incredible things.

@dustinkirkland
A high-carb diet may be appropriate for someone who perform a constant degree of physical activity.

> https://www.iifym.com/iifym-calculator/

It's alleged but unknown if the metabolism can be (cumulatively or not) damaged over the long term if the diet is unbalanced to our needs.

And in the human history no population has had a lifestyle as sedentary as we have now. The natural selection adapted to something else.

The mutation of ApoA1 in ApoA1-AS [http://jamanetwork.com/journals/jama/fullarticle/197579 - https://www.ncbi.nlm.nih.gov/snp/28931573] is an example of how the body is adapting to our new diet-lifestyle.
Trying to think through how Hell must have worked, Uber must have decoded Lyft's encrypted Rest APIs and were able to hit an endpoint that returned the 8 nearest available rides given a user and geolocation. Given a large metro area such as LA, you would probably need to make hundreds of requests with fake geolocations to be able to map out the whole area. You would probably only need to do it maybe every 5-10 minutes to get decent resolution for a semi-live map. Depending on Lyft's rate limiting you might get by with in the order of dozens of fake accounts. Given Lyft's scale this would probably be small undetectable noise in their analytics and wouldn't really degrade their systems. I would say it's only semi-shady, probably doesn't rise to the level of civil or criminal lawsuits.
I love how "There has been some recent tension between her and Kalanick, with some investors blaming bad press for Uber’s woes (wrong!), although sources said that was expected given all the controversies at the company of late." becomes "Uber’s head of communications Rachel Whetstone recently quit, reportedly because of conflicts with Kalanick."
Bought a U2F Yubikey more than a year ago. It is pretty sturdy. Better buy two and use one as a backup. U2F is really convenient to use. Compare that to all the OTP apps out there.
> I had to look hard to find out the CEO's name

It's immediately under the title.
Works for me when using https://github.com/cyrus-and/chrome-remote-interface
I do not understand how Ubuntu brought users to the Linux desktop. When Ubuntu started, it was just a crappy version of Debian. It was exactly as user friendly (or user unfriendly) as Debian. It ran the exact same software! Everything that made Ubuntu user friendly (or not) was there on Debian.

Then they made Unity, but that was after it was established in popular culture that Ubuntu is "user friendly". But now they are abandoning Unity anyway, so it must not have been that important after all.

I do not understand why Ubuntu became more popular than Debian. I really don't. Something to do with those free CDs.
Daniel Miessler's Comments on the OWASP Top 2017 Draft
Indeed. Quoting the article:

Hell originated after Uber created fake rider accounts on Lyft and used software to trick Lyft’s system into thinking those riders were in certain locations. This allowed Uber to see the eight closest available Lyft drivers to each fake rider.
I like the fact the ad managed to show the potential unwanted side affect of such device in a manner that everyone understand. I do see the appeal of smart devices and it has to start somewhere and all such start would be painful. But with the issues of IoT, the rampant ignoring of privacy by big corp and govt. alike, the lack of understanding of potential impact by even the knowledgeable, the apathy of the masses makes it a very dangerous time for some of these innovations.
At this point, is anyone else feeling like there's might be some vendetta-driven campaign directed against them?
I think Linux "works", but only if you pick the right hardware, just as with Hackintoshes. The Intel GPU in my laptop has always worked out of the box, but the GTX 1080 in my gaming box still requires lots of fiddling.

Of course, that isn't great for an OS that people often install on computers they already happen to own.
I think you underestimate how radical a rational position can be.

You've invoked consciousness, purpose and meaning as if they were important. All of which are like the higher being - they aren't real outside psychology. They are compact labels we made up to try to capture some aspects of our psychology. They help us predict each other's behaviour and communicate effectively.

There's no hard problem of consciousness, no problem of meaning or purpose, no need to ground anything in faith, no solutions exist, because all these things are psychological concepts that have no meaning at all outside the psychological context. They aren't nonsense - they are important to us as people - but that doesn't make them real in any fundamental way. They are contingent on the details of our brains. Its very important to realize that we don't need cosmology to be compatible with these things.

Consider how difficult it is to even define any of these terms in satisfying way. They are all metaphorical, like the higher being.

This means that:

> what is actually a very reasonable idea: there is some purpose to the universe which is probably beyond our understanding and which will never be revealed by science.

is incoherent. 'Purpose' is a property that is convenient to ascribe to brains. There is absolutely no justification to apply it to anything else. And if you look even a little closely, you can't even find it in brains.
This is very much just some aliases for flexbox properties. If you were planning on using it, I would advice just learning flexbox instead and be compatible with the rest of the world. Google "flexbox froggies" for an awesome tutorial.
> The skull and cross bones on the label was bad enough but seeing what even the smallest of drops did to plants was an eye opener.

VX (and VG) nerve agents were originally intended for use as pesticides so this isn't surprising.

https://en.wikipedia.org/wiki/VX_(nerve_agent)#Discovery
https://en.wikipedia.org/wiki/VG_(nerve_agent)
Amen.

Also, I am not sure the melding of desktop and mobile is such a bad or even a dead idea. It has apparently died at Canonical but I think that may be due to the position Canonical specifically is in. I mean Samsung just entered this space in a big way with Dex...and that is 4 years after the original Ubuntu Edge Indiegogo.

I have lamented elsewhere over the death of the Unity mobile direction...so I won't repeat myself but I still think it would have been really cool.
> it's actually really easy to believe that Lyft isn't tricking Uber's computer systems

How, or why, is that really easy to believe?
What part of that page says it has to do with version 2.79 of Blender though?

I think the actual page that talks about Cycles rendering performance improvements in version 2.79 is this wiki page: https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.7...

But that page doesn't seem to mention any comparison between OpenCL and CUDA.

I think something is still missing to make a concrete link between "OpenCL on par with CUDA" and version 2.79 specifically.
Aga ovens security vulnerability – hackers turn off oven
They created fake accounts with fake geolocation to extract information, then they exploited a design flaw in Lyft's software to perform an enumeration attack that allowed them to extract full information about all drivers in real time in order to exploit that information financially.

Google crawls public websites while respecting counter-measures like the `robots.txt` protocol. They also don't create fake accounts. They most certainly don't perform enumeration attacks to find more content to index.

This is nothing like what Google does. If Google did this, they'd be called out the same way.

Heck, if anything, this is similar to what Aaron Swartz did, except Aaron did it to make the information public rather than profit from it for financial gain -- and the data he did it with was neither sensitive nor private.
Hmm, not entirely sure I would title this wedding at scale. It does seem like a fairly standard wedding size. Great homebrew solution though.

I did something similar in 2009 with a custom Wordpress plugin. However, guests were imported from a CSV of our Google Sheet guest list as Wordpress users. Each guest was automatically assigned a randomly generated dinner code. The code was included in the wedding invite card as we wanted to be fairly traditional.

When a guest confirmed they received an email with custom directions from their home address and a printable parking pass. Guests could cancel up to two weeks before the event at which time an email was sent to the caterer. The plugin also generated email reminders 7, 2, and 1 day prior with the same links.

Two weeks prior to our wedding the guest food selections were compiled and sent directly to the caterer for final numbers. Seating charts and name cards with food selections were also printed using the WP database and PDF templates via pdftk.

Guest who provided email addresses were sent photos from the event via Picasa Web Albums 3 weeks after the event.

While this is much lighter weight and as others have expressed fairly impersonal the grooms family and bride probably knew this.

Kudos on a quick and fun implementation! In retrospect I wish I had use Twilio ;)
Only 8 mentions of Rust per C/C++ related link. I am disappointed!
No tinfoil required, there are now companies you can pay that will "manage" social network comment sections in your favor.
A lot of phones stolen in the west are laundered just south of the border here in Hong Kong.
$ ping mods

This should point directly to the article on The Register [0] instead of being a link to a Slashdot submission that links to the article.

Maybe update the title to the original one ("Canonical sharpens post-Unity axe for 80-plus Ubuntu spinners") instead of Slashdot's embellished title, too?

Slashdot's title: "Dozens Of Canonical Employees Resign ..."

Quoting the article: "One individual has resigned ..."

On a side note, I'm kinda surprised to see that Slashdot actually still exists.

[0]: https://www.theregister.co.uk/2017/04/12/80_canonical_staff_...
Looks like there are more Android Banking Trojans on Google Play as we think
One standard solution to the "tragedy of the commons" problem is to change the incentives such that the actors don't destroy the commons. Usually involves an external authority (i.e. government) to enforce though.

Additionally, this is not a new or unique problem. Similar problems exist in the areas of car safety, flight safety or product safety. The way it's solved there is by enforcing safety standards and denying market access to products or services that don't meet those standards.
For type 1 and type 2, the more insulin you take per day, the lower your blood sugar will be. If you a1c is too high, you unquestionably must take more insulin. Simple as.

Should you exercise more? Yeah. Should you eat better? Yeah. Should you cut refined carbs? Yes, you probably should. None of these are unique to diabetics, but they get levied on us when we talk about insulin prices or complications with our condition.

Also, you owe it to yourself to be extremely skeptical when looking at any "diet doctor" selling a book. Most stretch the cure factor of lifestyle far beyond its limit.

The advice to someone with a high a1c is the same in every case: take more insulin.
Wolves don’t lose sleep over the opinion of Sheep – Irish Tech News
became a viable stable enterprise?
Mine also focused on Therac-25, but I'm not from Berkeley. It's likely that it was used throughout several campuses.

Though I feel that's not so much about ethics as it was appropriate safeguards/testing given the problem space.
Learn How to Make Money Online Selling High Ticket Affiliate Offers on Facebook
I think one of the major driving factors initially was that Ubuntu didn't follow the long package tree freezes that Debian stable/testing was subjected to after a period of time. Debian stable still tends to contain older packages with security patches applied rather than the latest and greatest(tm), which most standard users tend to prefer over stability
I found the answer on moz hacks https://hacks.mozilla.org/2017/04/hacking-contributing-to-se...
Servo is written primarily in Rust...

I'm not a Windows developer by any means, but my understanding was that the major different compilers on Windows aren't ABI compatible. Also it's entirely possible Servo links against an external library that is built with VS.
> You are talking about potential. People don't care about that.

What people care about is irrelevant. What should be legislated for the better of all is another matter. Car safety laws were unpopular with a lot of regular people as well.
More frequent releases. Mattered a lot for hardware compatibility.