skysight-inc/HackerNews huggingface dataset:
Squirrelmail Remote Code Execution
Nope.

Input validation is good practice (checking that the input is what's expected), but input filtering is problematic for two reasons:

1. Since input filtering lacks context, the usual option is to filter very broadly (e.g. to attempt to filter for SQL injection and various forms of XSS simultaneously). This leads to much more complicated filtering strategies, adding maintenance overhead, risking data corruption, and generally increasing technical debt.

2. Data loss. This is less of an immediate security issue, but full data retention can be useful for debugging, for future migrations or data transformations, &c. It also ensures you don't get data corruption (e.g. where filtering for one context breaks your data in a different context).
Your examples have a point in them -

To really understand how insects fly, it is helpful to build and analyze various machines that can flap its wings - since aerodynamics is complex and the equations we use to model airplanes don't really work on that scale.

To understand how exactly humans walk, it really helps to build a machine that can lift its two feet in alternating motion and analyze how all the minor forces interact to make it work. It's immensely useful when we're building e.g. powered ankle prosthetics, and bipedal movement has some advantages in terrain, so we also want machines to be able to do that (e.g. https://www.youtube.com/watch?v=rVlhMGQgDkY)

For understanding human eyes - experimenting with lense systems that change focus was how we got to "augmented vision" e.g. humans with spectacles.

The same goes for analyzing and understanding how human brains work. It's also valuable to think about minds in general, but for many purposes we care about a particular mind, and all the individuals I currently care about are homo sapiens, not machines; so we need to understand their brains.
>>This might be a good idea for running a military unit but fails miserably in IT.

This explains why IT has such losers in management positions. Most managers in IT think all they are supposed to do in a day is browse internet, forward emails, approve leaves/vacations, build their cartels and leave.

Sorry. But to ensure people under you understand the work they do and the sole responsibility of achieving the goals assigned is on you, the manager.
Well, we got both types here:

>> Why are fundamental things like resource allocation at least not standardised in the kernel?

> I think this is a typical reaction from someone with no clue what is going on inside.
> But if there was a pervasive, total cultural failure at Amazon, I'd have seen it by now.

Ex Amazon SDE here. Did you fail to notice the incredible turnover rate among engineers? Most stay less than 18 months. (I've seen the real numbers from tools that mine employee IDs and join date).
I won't consider SuiteCRM to be part of this. Understand that even though SuiteCRM was a fork of SugarCRM CE, the community has made so many changes that I will consider it at this point a completely different product. All the vulnerabilities listed above do not apply to SuiteCRM in its current release and if you look at the blog of SuiteCRM, it is heavily advertised that SugarCRM CE is full of security issues and everyone should migrate out of it[1].
Here is the quote:
“SugarCRM Community Edition users need to migrate to an alternative platform as soon as possible. The number of current vulnerabilities in Community Edition is worrying. There will be no more support for Community Edition after April 2017 and the vulnerabilities will increase as the software ages. Simply put, if you're running SugarCRM Community Edition, you're becoming a soft target.”

https://suitecrm.com/index.php?option=com_easyblog&view=entr...
Apple iphone 8 giant is coming with ridiculous features
Many important concepts start as unknown, and then once explained in great detail, seem plainly obvious. It took a lot of reasoning to convince people that in fact zero is a number (but zero doesn't exist!) and now it's taken for granted.
My OnePlus 3 is great. Decent build quality, up to date and clean version of Android, cheap, and with a bit of care I can make it through two days without charging. Another nice bonus feature is it charges from basically empty to basically full in 30 minutes (or from dead to 20% in 10 minutes) if you use special charger it comes with.

If buying a new Android phone today I would definitely be getting a new OnePlus.
U.S. EPA orders turn-off of opendata.epa.gov on April 28, 2017
Probably for same reason as they use the name "vector" to refer one dimensional array, "matrix" to refer 2 dimensional array. Tensor is generalization of matrix to more than 2 indices.

In physics people use tensor as a shorthand for tensor field.
Looks pretty much the same here though a slightly different setup:

- Chrome Version 58.0.3029.81 beta (64-bit)
- uMatrix 1.0.0
- uBlock Origin 1.12.1
- Privacy Badger 2017.4.19.1
This is what I was going to say: is a way to work. Taken to the extreme, it's where the developers themselves deploy.

The pipeline for this needs to exist though, so one might say that the profession of an operations engineer is changing from someone who gets the code and deploys into someone who sets up the pipeline and keeps it going.
I have a oneplus 3 which lasts for more than 24 hours of moderate use. Plus it charges very quickly, and that's a huge plus. I suggest you go for the 3T
I get the same as the first image.

Firefox 53.0 (64-bit).
uBlock origin, HTTPS Everywhere, Decentraleyes, and Javascript Toggle.
Whatever other data structure you use is not going to be simple, and will have even worse drawbacks: e.g. using hash tables for handling allocation pools and free blocks could be even worse.
Woh
Mary Poppendieck: “The Scaling Dilemma”
3D Printed Shoes, Huh?
I am working on a Startup with a similar aproach but using a fixed wing vehicle.

I speculate the kitty hawk vehicle will have 10-15 minutes airtime and will cost around $100k
Indian officials can no longer use flashing lights to skip traffic
Show HN: Beautiful and responsive project landing page for everyday projects
Google has a drag and drop feature of its Android operating system
I do this with my dog. I pretend she asks "Can you describe the steps to recreate the issue".

And then she just gets in an endless loop of asking "Why?", until I can't explain 'why' any more.

It's at that point I've probably found my issue.

Added bonus. She's happy to sit there and blankly stare at me in confusion whilst I chat away. Good dog!
You can share live photos as a gif or video on whatsapp and maybe other apps.
Volunteering has taught me a lot about being a servant and a leader.

I've spent a lot of time -probably thousands of hours- volunteering, so it has been a significant investment of my time, but I'd do it all over again. Not only is it very rewarding, but it can develop your character and leadership abilities in all kinds of positive ways.

I started my volunteer experience at a homeless shelter in the Chicago area. It got me out of my comfort zone and challenged me to face difficult, often confusing situations that I was very unprepared for. At the end of the day, it constantly challenged me to simply be a servant of others without expecting much of anything in return.

Since then I have volunteered a lot at churches, in the foster care system, crisis pregnancy centers at and other non-profits in my community. This has given me a ton of experience working with people and dealing with people issues. I'm a programmer by trade, but a people person at the end of the day. I have found this invaluable in the business world. Most of my leadership experience has come from volunteering in non-profits. Much of my leadership style has also been developed from that experience. I've been recognized as a very uniquely skilled leader at my company and there's no doubt I owe it to my volunteer experience, so I'm thankful for that and would highly recommend finding meaningful ways to give back to your community.
It's a balancing act. You don't want your country to be a pushover because it can affect the l
ives of your citizens negatively, but at the same time, you don't want to ditch any semblance
of national self determination in exchange for an increase in external power/influence.

I feel that citizens of rich countries put too much emphasis on the importance of their country projecting power externally.

It's cool that you want European countries to be able to stand up to the US and China, but recognise the cost.
If you like this you might also like Lilium. https://lilium.com/
I got a Huawei Y6 about half a year ago. It's got its share of crapware preinstalled, but it's very little and unobtrusive compared to what Samsung puts out there.

I usually keep Wifi, Mobile data, Bluetooth, and GPS turned on 24/7, and listen to music via Bluetooth headphones when commuting to and from work.

I haven't tried how long the battery will last when pushed, but when used lightly (i.e. music and the occasional text message) it will last at least 48 hours, probably more like 72. I usually charge it over night, but I forgot a few times, and on the next evening the phone was still at ~60% charge.

The specs are not overly impressive - 2GB RAM, 4GB internal storage (it has a MicroSD slot, though), I don't remember what CPU. But for my lowly needs, performance is satisfactory. Plus, it was pretty cheap, I got mine for about €140,- off of Amazon. The battery is removable.

There are two drawbacks, first of all this model is on a version of Android 5.x and won't get updates, secondly 4GB internal storage is not that much. There are other models by Huawei, though, that come with more recent versions of Android and are still quite affordable.

I don't know how long this phone will last. I usually use my phones until they just won't work any more, so six months is not a long time in my book. But I have no serious complaints so far.
Yeah, I agree. She doesn't quite have the temperament for what America wants from a leader: duplicity is hard for her and straight-up gaslighting even harder. She can't pull it off in a way that is convincing, and so people perceive her as untrustworthy.

Meanwhile, her opponent is almost a parody of the stereotype of the politician who lies about everything to get votes, and people just assume he's playing 11-dimensional poker and his actual goal is whatever they want to think his actual goal is (and this includes both people who agree with him and people who disagree).
The "Obama" material sounded quite good, but reverb can cover up a multitude of sins...
This is exactly why job listings for "devops engineers" as a separate role from "software engineer" is such a confusing thing.
I always carry an Anker battery pack with me so I don't care about how good the battery life on a particular smartphone is.
McAfee’s MGTI ‘Macpool’ Mines 100 BTC per Month
I used to do something similar on my S2. With most things switched off, I frequently got 2 weeks without a charge. Others I know used some 3rd party apps to automatically switch wifi / data on for a few minutes every so often, to allow apps to sync. It's fairly easy to tap things on and off nowadays.

On the other hand, if you absolutely can't live without all the features turned on all the time, there are a variety of power banks and other ways to get a few more hours out of a battery.
Driverless cars trial set for UK motorways in 2019
Ask HN: Just started a tech book club, book recommendations?
I literally just started a tech book club. It just got approved by Meetup. I only have 3 sign ups so far so I have no clue if it's going to succeed or not. One thing I think that would help is if built a respectable list of books for future consideration.

I do want to do what I can to make it succeed. I think I picked a solid good first book, "Elon Musk: Tesla, SpaceX, and the Quest for a Fantastic Future" and I've started to make a list in pinned discussion thread of books for consideration for future meetups, welcoming members to contribute ideas, too.

I'm realizing as I re-read what I wrote that I make rather bold claims on what reading and discussing these books, though I do think it's true.

Anyway, if anyone wants to take a look and offer critique on any aspect of it, I'll listen with an open mind and won't take offense by criticism. I consider it a favor when someone takes the time to offer a cogent critique. I'd love recommendations of books to that you think fit the bill for me to put on the list as having a deep reserve of really good books can make all the difference.

https://www.meetup.com/eugene-tech-book-club/

Write up and a couple videoes for the first Meetup: https://www.meetup.com/eugene-tech-book-club/events/239429596/

Thank you!
Now make it say the Navyseal copypasta with Trump's voice, but make him speak slowly and with emphasis.
H2 is already happening: https://twitter.com/tdp_org/status/851470269508202497
CRUDE OIL: Vulnerable, Retains Bearish Bias
please disregard Lilium it's simply an hoverhyped marketing company.

https://news.ycombinator.com/item?id=14167870
Hollywood scrambles to keep the show going as strike threat looms
I'm on the organizing committee for a yearly STEM event for high school students in the local area. We host a day long event every spring with a bunch of local businesses and colleges. It's a rather successful event that leads to a lot of networking and makes a lot of students stand out to local businesses, so it opens the doorways for internships and job opportunities, as well as opens a dialogue between students and prospective colleges.

We are by no means a large city, but we are a decently sized Midwest town with a lot of companies that fulfill a lot of different roles. Students don't know about many of these businesses, so they learn about what exists in the immediate area and it fosters an organic growth between schools and business. Some students are already locked into Ivy League schools, and others aren't sure what they want to do in life, so it's a great opportunity to meet students from all walks of life and see what their interests are, as well as were students are headed.

I personally got my foot in the door at the event a few years ago with a company solely because I asked about internship opportunities for high school students, and although I have since moved on from that place, I still help organize the event because it is such a good opportunity for students.
A tensor is any quantity that transforms in a specific way under rotations. Essentially, it is required that a tensor describing some process gives the same answer no matter from which point (literally) one looks at it.

Tensor fields are spatial functions whose function value at each point is a tensor.
High-performance .NET by example: Filtering bot traffic
The Obama one is much better, but the thing is none of these are even remotely close. They sort of seem close on the surface if you simply don't engage any critical parts of your brain, or try to extract any meaning, but if you do the semblance of meaning that's inherent in the words melts away into nothing.

To generate output that contained meaning that you could actually engage with, you'd have to first generate the meaning and then turn that into text. That's a fundamentally different process to what is going on here. This is also why 'Turing Test' competitions involving chat bots are never going to give us artificial intelligence.

This sort of text generation is like a magician's trick where he appears to saw the woman in half and put her together again. I don't care how good the magician is at the trick, he's not going to be any help at all to a surgeon that's actually cutting someone in half and then stitching them back together again.
I am not using Java but I am right now making a booking system. I am storing local time (with Offset) and the timezone identifier such as "Europe/London".

How does using Day Count help?
Definitely like the idea of carving out time for a passion project and going from there. I'll probably start out with a couple of MOOCS or something in each field and give some thought to what that passion project will be.
PEGA is trending Now? Enroll
The Rich Are Living Longer and Taking More From Taxpayers
I did Peace Corps (US overseas volunteer program) a few years ago in my mid-20s. I spent three and a half years living and working in Burkina Faso in West Africa. I was teaching basic computing (think kids who have never touched a computer) and training other (Burkinabe) teachers to do the same.

I helped to build two computer labs using funding from various French groups and trained one teacher intensely to the point that he was able to run the curriculum himself. I know that it lasted at least a year after I was gone but unfortunately haven't kept up since then.

Anyway, life in Burkina taught me a hell of a lot about myself, patience, culture, language and communication, community and a whole range of other things. It has deeply defined who I am now and was incredibly valuable for me. I still, however, struggle with the question of whether or not I recommend such programs to others.
I won't dispute you've had a good track record in the past, but past performance doesn't predict future results, as evidenced here. I understand and appreciate why you're doing it, but I can't simply accept you trying to sweep this DC under the rug. If what the original story said is true, the SC DC is an environmental albatross and you all should hang your head in shame, especially based on past wins in this area. I can not share your confidence that using millions of gallons of drinking water per day for cooling "was the best option" (unless of course you meant to add the words "to our opex" after it).
I haven't had a need for it yet professionally but there are a good number of blog posts I've seen extolling the virtues of doing your unit tests in F# (even for a C# application).
Thanks, yeah, I was looking at cyber security specialization at courseera and will take a peek at edx too. Definitely all comes down to time for me since I still work full time and am raising kids but I can find a way to carve out the time.
AWESOME!!! HAHAH
Note: I'm not really sure what's being shut-off here. The linked-to post has the details from the contractor that built the EPA Open Data site and launched it in 2016, but I'm not sure if that launch included data that is not found anywhere else on EPA's many other sites.

From the post:

> The EPA Open Data web service includes detailed toxic chemical information, a 30 year history of toxic chemical releases reported by industrial and federal facilities, collected and curated by the EPA’s flagship Toxics Release Inventory Program. Per the EPA, “TRI data supports informed decision-making by communities, government agencies, companies, and others.”

Note that other federal open data sites are being shut down because they are seen as redundant, i.e. the data can be found elsewhere. The most notable example is the White House announcement that it would end the contract for open.whitehouse.gov:

https://www.nytimes.com/2017/04/14/us/politics/visitor-log-w...

> The White House also said Friday that it was ending the contract for open.whitehouse.gov, the government disclosure site that contains the visitor log data as well as financial disclosure and salary information for White House employees.

> The information is available elsewhere, the White House said, calling the site a waste of taxpayer money. Ending it would save $70,000 by 2020, it said.
> Photoshop has nearly undermined photographic evidence

No it hasn't, not at all.
I shot cola out of my nose in the middle of my office. My other coworkers were like 'Pass the link, I've never seen you laugh so hard'
That's all well-and-good for benchmarks that don't need to delete elements, but suboptimal for kernel data-structures that don't require O(1) find but are mostly round-robinned like multiple sockets. Using reallocated arrays instead linked lists also increases memory bandwidth and puts kernel data-structures at increased risk of random bit flips (most machines lack Chipkill ECC), in addition to cache evictions.
I think unique pointers are basically RAII for pointers, which does not help for lifetimes that aren't controlled by lexical scope. Shared pointers have reference counting overhead, which I think is used mainly for concurrent access in the kernel. Furthermore often kernel people want to "see" and control where stuff happens.
I don't think my eyes are ever going to recover after reading[1] the n-gate.com about page. :O

---

[1] 'reading' being a highly optimistic term.
Yes, I'm sure the use cases I've had to deal with have been very simple to start with.
A database containing 25M books nobody is allowed to read them
From what I understand, DevOps is when a single person or team is responsible for developing the software; standing up , configuring and maintaining the instances it runs on. So the person or team is responsible for not only the software, but everything it takes to run successfully in a production (dev/qa/etc) environment. It stands to break the wall/barrier between development, DBA, and NetOps.

It's actually empowered by cloud services which are easier to stand up / maintain than a local infrastructure. I hope it's not dead, it's super efficient. It does take a person / team who is willing to learn the nuances of network / database administration though.

It's nothing new, but it's new to employ at larger organizations which typically silo development, database admin and NetOps.
Latest Single Board Computer: ASUS Tinker Board
Although if he is bootstrapping the MVP, maybe he can bootstrap it all. 100% beats the investor treadmill in some ways.
Yes? I missed literally all his dialogue because he was so poorly animated I couldn't take my mind off it. So out of place and jarring.
These are 50 projects actually making America great again
Unless absolutely necessary, putting drive motor mechanisms and flying mechanisms on the same package is a waste of efficiency.

Why have your engine pull the extra weight of your propellers...and why have your propellers lift a drivetrain?

I get your point that "flying car" may be a tad misleading, but my guess is that they made this first iteration a "water vehicle" to get around the majority of regulations while still getting a product into the field to test and (perhaps) make some money while they're at it.
Thanks for enlightening me :)

Even so, it seems like a bug that you aren't offered the Marathi version (or a choice between that and English) when you download Firefox from a Maharashtra IP. Maybe something to report to Firefox bugzilla? Btw, do you need to download additional language packs to get Windows or MacOS localised to Marathi when you buy a new computer there?

And what do you think of the UI-solution suggested in the blog post?

-----

Crazy alternative: Browsers typically include language detection libraries, used for detecting LTR/RTL status and spelling[1]. The default setting for Accept-Language could be based on the languages detected when the user types into spell checked text fields.

[1] Firefox doesn't do this for spelling yet, but I think Safari at least does https://bugzilla.mozilla.org/show_bug.cgi?id=1203024
I had something close to that with Bank Sabadell. They had 40 four digit numbers on a card and you gave them one of the 40 which they chose. They've now moved to a fancier app based system,
A principle is just a foundational truth that you start a chain of reasoning or behavior from.

You can have principles for maximizing profits, principles for good software architecture, principles for increasing reliability of your vehicle.

These are principles for leadership, OP is conflating that with principles for moral living, or principles for ethical behavior, or something like that.
>>upper management was not particularly good at reining in the bad apples

This thing tells me the upper management itself was the bad apples.