skysight-inc/HackerNews huggingface dataset:
Verizon exposes estimated 6 mil records of customers. S3 bucket misconfig again
Looks like a third-party firm, NICE Systems, left an S3 bucket externally accessible. The data included PIN codes and phone numbers, which are used to verify customers. This info could be used to impersonate a customer and get a new SIM card. With the SIM card, the impostor could hijack the customer's phone and hack into personal and corporate accounts that use 2FA. Here's the full article: https://www.upguard.com/breaches/verizon-cloud-leak
Juno Perijove 05-06
Because I want to protect it for the whole world for the future. Netflix, Google, Amazon, Facebook, Wikipedia, Twitter, Reddit, and other major services you use which are supporting net neutrality all started as American companies. If this measure fails, it's less likely that equally good companies will come from the resulting situation.

Sorry about your Internet today, but they're doing it for your Internet tomorrow.
Technically, the US President holds the power to end life on Earth should he so desire. To the best of my knowledge, there is no safeguard in place that could prevent such a course of action if it were attempted. Even Comcast's power seems rather pitiful in comparison.
As macintux, said they don't really compare. Messaging is everywhere in Erlang, in a way that nobody would do with a message queue. For example, you don't read or write to a tcp socket; you receive and send messages to a 'port'. The same is true for file i/o. Rather than calling a method on a shared object, you generally would send a message to a process that owns the state (or a process that manages the state in a database).

Sending messages to processes on other nodes has the same syntax as sending to a process on your node, which makes it easy to run a distributed system. (Ports are different, you'd have to setup a proxy process on the remote node in order to send/receive from that).

Of course, with the base of process to process messaging you can build a higher level messaging queue (see RabbitMQ for a popular message queue built in erlang).
Testing HTTPS Logic in Web Apps Locally with Nanobox
I went through the video and I can barely understand less than 10% of what he is talking about. Can anyone eli5 this ?
The runtime, of course. No GC, etc.

BTW Haskell has been used to write OS kernel modules: [1], [2]. It's still quite a bit cumbersome.

I also wonder why ATS language does not receive enough love in this area.

[1]: http://www.pfq.io/
[2]: https://tommd.wordpress.com/2009/09/13/kernel-modules-in-has...
Same here. Been using Bluetooth heavily for about 10 years with no problems I can recall. Certainly far more reliable than wi-fi where devices and routers frequently need restarting for no obvious reason.
Ah, missed that when I skimmed through. Looks like there's no way to secure it against people who are on the same wifi network.
I think "dark magic" in a lot of these cases is just a lot of domain specific knowledge to get a general understanding of the topic. I think the Internet has really helped. With a "dark magic" topic like graphics, you can get started with a little bit of domain knowledge and the right template code (which wasn't as easily available before the Internet). Without the right template code, you're doing a lot of yak shaving and having to learn a whole lot at once just to get a triangle on the screen.
Same in Germany. The problem is that many car drivers don't know this. I have been honked at and showered with profanities more than once. And I am not a slow walker.
You can hide individual posts, posts similar to it, and posts from individual groups or people.

That solution doesn't require defriending or unliking a page. Facebook uses this feedback when recommending content
Cool, thanks :D

What does an increase of 10% mean? That I could get 10% more Watts from the same area of panels?

How much do we need? Would a houshold in Canada need much more panels than one in Mexico?

Is 15% or 20% already enough to power a whole 1-family-house?

Are batteries or PV panels the bigger problem here?
Yeah, that's certainly weird.

My work has websense and I've seen it before that it silently doesn't load some content on a page when that content was loaded from another domain (which was blocked) which can be confusing, which is why I suggested that. But upon further investigation it looks like this page is loading images from it's own domain.
Be aware, this changes in 316 days, when the EU GDPR comes into force, and makes even for those cases opt-in required.
It's actually harming Rust. And not just a little bit.
There's no extern inference required here as all the original sources are passed directly through Google Closure Compiler. As a benchmark for feasibility when we started we chose React.js as it's non-trivial and heavily depended upon in the ClojureScript ecosystem. We discovered that over all of React's sources we only need 4 extern definitions for 4 generated names in EventsPlugin. So as long as the JS library in question isn't relying on string-based meta programming everything should work.

Granted this rules out some libraries, there are plenty of libraries written in a simple straightforward style that will work just fine. In particular I am bullish about fantastic results with ES6+ libraries written with ES6 classes with static import/export. Closure will eat that stuff up.
1. If you have Google Drive for PC/Mac installed, it will update it to Backup and Sync.

2. The difference in the two endpoints are the defaults selected during the setup wizard (which you can change from either). The Photos versions is geared more towards Photos users and the Drive users more towards Drive.

3. They are saved in Drive, and are synced to Photos. However if you delete in either Drive or Photos cloud, it will affect the other. Whether it is deleted from your hard drive depends on what you have selected in the deletion settings portion.
Easier way to manage feedback
Once you establish that the FCC can regulate the internet, you can do all kinds of very opaque regulation that is difficult to change (e.g. other guy needs to control White House and Congress or sue the government and win).

Heavier regulations usually favor established players who can engage in regulatory capture, to shape the new rules to prevent future competition from smaller companies and firms that don't even exist yet. Often times they cloak this motivation with justifications that sound uncontroversial and difficult to object to.

I don't know specifically what the real goal is here with Net Neutrality, but that's the sort of thing that happens in other industries all the time. Often in terms of "safety" or "helping the environment."
Linux/BSD/Unix are hardly the only systems programming environments. I'd hesitate even to call them the majority.

And for now, there are definitely ways to handle signals using libraries.
I am currently trying out tesseract/pytesseract on shop receipts but I have not being able to get meaningful result . I have tried adaptive Gaussian and mean threshold, I have also tried blur . But no joy yet. You mentioned building from scratch, how ? And what is your minimum size ?
ESCORT ANGELIKA – ESCORTS – ESCORT ATHENS – ESCORTS ATHENS
I'm glad it makes you happy!

I'm actually surprised to see that quite a few people find it useful, I had no idea there was such a small gap to fill with such a simple tool.
I'm finding this difficult to believe; any references for some of the features and capabilities "years beyond ZFS" that are in a shipping, supported, enterprise-level commercial product?
This is a nice step forward for developer experience. I struggled to get NPM and Clojurescript to play nicely. Ultimately, I had two different build systems at play in one project. (Three if you count Webpack.)

It'll be nice to have such an easy integration.
In terms of area of impact, farms impact far more land than cities and suburbs do. The farms would all still be there.
Express JavaScript basic app with email auth
Do you even explicitly free() a RAII-managed pointer? If yes, why?
> I think it's just a package install away on many Linux distros? Also installable on macOS — I had a ZFS USB disk I shared between Mac and FreeBSD.

It's easy to install if you want to use it as an additional filesystem. But if you want to install e.g. RHEL on root ZFS, it's quite an adventure. Even Ubuntu with first-class support for ZFS does not support ZFS on root from the box. Actually I don't understand it. Of all the features, snapshots looks like killer feature for Linux distributions. Make snapshot before upgrade, allow easy rollback if upgrade gone wrong. Something like Windows restore points, but much more reliable.
Look into Drive File Stream.
The biggest problem is that distributions have their own build systems and cargo just doesn't fit in a variety of different ways (not to mention projects that pin nightly compilers).

Distributions such as Fedora and openSUSE need to have a package for everything installed on the system (and everything required to build said packages). Now take into account the you can have multiple versions of the same library in a single rust project. While you could handle all of this on paper, automating it and putting it all into every distributon's build system is a very big task.

Ruby has similar problems, NodeJS is even worse than Ruby in this respect but I believe that Rust might make this the hardest for distributions. Personally I've never liked cargo that much as a user either, but as someone who works on openSUSE and was thinking about packaging rust packages I decided against it. It's just far too difficult and I'm not convinced it's worth the effort, since it feels like people have forgotten the reason why distributions exist in the first place (to provide a cohesive experience and provide you seamless management of your software). Having a shiny new package manager for every language just makes life difficult for everyone involved.
Every company is a software company now (some way better than others, but the point stands). And there aren't nearly enough developers to fill all the jobs. So there is a basic supply and demand answer here.

Other factors like the importance of very high levels of skill for companies like Google make great developers even more valuable. Which gets you into the six-figure incomes we currently are seeing.
wildcard certs are not a solution to this problem. Sharing a private cert with all customers isn't what the solution does. every customer gets their own cert

second letsenrypt has low limits of 20 certs per week. so imagine VLC added a Plex like streaming feature. they'd need far far more than 20 certs a day given how large their user base is
EMMC to SD Hack Rescues Data from a Waterlogged Phone
Methane has a short half life in the atmosphere ~10 years ish and there is already quite a bit of it there. So, it's only really important when the amount released is increasing relative to the average released over the last 20 year. AKA if they cut release in 20 years then (ed: it's contribution to) temperature would drop fairly quickly. https://en.wikipedia.org/wiki/Atmospheric_methane

Note it does break down into more CO2 than the wieght of Methane because Oxygen molecules are heavy.

The real risk is if warming the arctic starts to release a lot of stored methane, which would be very bad.
It's disingenuous for big business to try to frame this as a grassroots movement for freedom on the internet when they were completely silent about illegal NSA spying. The only difference between NSA spying and losing net neutrality is that without net neutrality their profits might be threatened.
Clickable: https://www.upguard.com/breaches/verizon-cloud-leak
Yes, it was actually on my todo list!
I'll work on it pretty soon, keep an eye on the repository ;)
> Who cares if you can impersonate your own lightbulb?

For MITM - you think you are connecting to your device, actually it's my proxy (DNS spoof, ARP spoof, TCP hijack, ...), you still get the green bar in your browser saying "über secure Philips lightbulb", you just don't know it's mine because the domain matches and it's signed by the same CA (assuming neither of these protections is in place).

> If each device has its own key and CA then they still can't impersonate your device, and they still can impersonate their device.

Without manual installation of my CA your browser won't accept the certificate ripped from my device.

You said in another post that providing correct address is better than per-device CA. No doubt it's more convenient in a commercial product, assuming you can solve the DNS problem somehow (which doesn't seem possible without working Internet connection or editing hosts file). From pure security standpoint though, I feel like per-device CA has an added advantage of resistance to typosquatting. But it's getting academic now, it's hard to squat if it takes buying a physical device with the right ID.
Any link?
The problem is that the ISP resources are shared resources. Some day we might all have 1Gbps+ fiber to our houses but today this doesn't exist. Many parts of the network you use to access the internet are common to some other set of people. So if you were to saturate your internet line, your neighbors (or possible more people) would have seriously deteriorated access. There is no way around this problem without upgrading the last mile connections everywhere, which is expensive. You're essentially paying for the most profitable and acceptable internet the ISP is willing to provide.

Maximum throughput and quality of service are not their goals. They want as many people as possible paying for service on a line they paid $X to install. And they get this by being able to throttle their user's traffic in order to allow as many people to use the same line as possible.

What you're saying is basically the same as the "unlimited" argument in terms of internet access or even cell phone plans. You don't have a personal internet connection just for you that you can use in an unlimited way. The internet line run to your neighborhood is essentially zero sum. If you take a huge chunk of the bandwidth, then other paying customers get less. Charging you more doesn't help unless you fund entirely new network lines and installation. They want everyone to have an equal size of the pie. You can't have a dozen households sharing a connection to the internet and all be streaming netflix in 4k. There simply isn't the infrastructure to support that right now, in most places. No matter how much you're willing to pay.
I can't even enter the USA without a visa that is expensive, hard to get and doesn't guarantee entry but I'm getting all these net neutrality PSAs today telling me to send letters to FCC and Congress... I'm supportive of the idea itself but it's a bit funny and stupid, the Americano-centrism.
Getting your first 10k users even if you don't have a growth team
Standard React advice is that copying values from props to state is _usually_ a bad idea and should generally be avoided. It _can_ be useful in cases where you have something like an editor component that wants to allow updates to the values internally, only notify the parent when the edits are complete, and overwrite the edited values if the props change. The most common mistake in copying props to state is only doing it in the constructor, and forgetting to also do it in `componentWillReceiveProps`.

So, that snippet is actually valid - presumably they want to initialize the internal state value based on the corresponding prop, and use an empty string if it doesn't exist.
Microsoft Creates New AI Lab to Take on Google's DeepMind
Because Google Photos does not have an Android TV app, I periodically do a full Google Takeout to pull all my images so that I may rsync newer ones over to my NAS so that they appear in Plex and my wife can then view them on the Google TV.

Can you stop reinventing things that already exist, and perhaps fix things that are real customer pain points.

Like not being able to view Photos on an Android TV, like not being able to use Google Drive or even this new Backup and Sync on Linux... or the big one, the fact that GSuite accounts are crippled and the majority of new products cannot be used by those with GSuite accounts or can only be used in a severely crippled way.
Not as much as rust, but still. I'm not sure whether it qualifies as memory safety for you but using Controlled types alleviates a large part of the problems of dynamic memory allocation. http://www.adacore.com/knowledge/technical-papers/the-gnat-i... might be of interest for the underlying implementation.

I also find that 'not null' access types, typed pointers and in general the in/out/in-out parameter passing mode help making ownership clearer... And there's also the limited types in the toolbox, to 'hide' ugly pointers/resource ids, etc.

Spark2014 still excludes pointers and aliasing, but I think some work is in progress. Previous HN thread : https://news.ycombinator.com/item?id=14346032
Where do you live? I've found that just living in a place with lots of energy can help boost my own motivation and energy.

Recently I've been in Austin and it is a great example.

Vigorous exercise can also be a BIG help.

Best of luck.
this is revolutionary. they have passed the final clinical trial stage of I understand correctly. How does this makes the trial and approval process for other types of gene alteration therapies easier, apart from the president it has set?
Building an email marketing platform on Amazon SES
That is a fair suggestion, but the devil is in the details: how do you implement that?

How do you prevent journals from accepting? How do you force researchers to disclose?
> Vulkan is not a good first-step path to learning graphics. It's maintainers will tell you to start out by learning OpenGL or DX11.

This article is literally advocating the opposite. 'So how did I finally break through that wall of understanding? ... "But Vulkan is the hardz" I hear you saying. "Shouldn't I start with something easy like OpenGL?" Emphatically I say NO.'
ReFS has data integrity checking and repair.
How to Create Your Own Online Store
Btrfs is a mess too, especially with its metadata system that you have to manually resize constantly, data-loss bugs and fsck problems. I've had nothing but problems with it and will never use it on a production system.

LVM on the other hand makes it easy to do snapshotting, RAID, volume resizing, adding more drives, etc - at the cost of some performance in some cases. For the most part, it's the best trade off available if expandability is a requirement and you can't get away with simple mdraid.
So, the Matrix was wrong we won't be batteries. We'll be data storage.
In the Notice of Proposed Rulemaking (Docket No. 17-108), much is made of the rapid growth of the Internet under the former "light-touch" regulatory regime. The notice overlooks that this was also an environment in which competition among many Internet service providers could and did flourish.

Since then, the provision of connectivity has consolidated among only a few very large companies, which among them have strongly oligopolic power to enforce whatever conditions they please upon their customers, both residential and commercial.

In the late-1990s, early-2000s environment of healthy competition among Internet service providers, utility-style regulation of ISPs, such as that here under consideration of repeal, was not a necessary measure.

However, in the current strongly oligopolic environment, only the regulatory power of the United States Government can continue to provide and enforce sufficient oversight to maintain a semblance of free market behavior.

Internet-powered entrepreneurship greatly benefits the US economy. The small, and occasionally large, businesses thus created have an outsized economic impact in terms of taxes paid and jobs created. Absent a true free market, or even the regulatory semblance of one, for Internet connectivity, these businesses may well find themselves severely hampered in their ability to earn revenue, with concomitant negative effect on their ability to contribute to our economy.

As such, I must strongly urge the new regulatory regime proposed in this filing not be adopted.

I thank you very kindly for your time and your consideration, and trust that you will decide in that fashion which you regard to best serve the interests of your constituents and of the nation which you serve.

(Also, the "Battle for the Net" folks would have done well to hire a UX designer - or perhaps to hire a different one. The lack of any clear confirmation that one's message has been sent fails to inspire confidence. Perhaps there's an email confirmation that has yet to arrive, but...)
Very helpful reply, thank you. However, I still believe they should have outlined this in their Help Center rather than have users figure it out by trial and error.
Discord, Google Hangouts
I didn't even consider this. Thanks for the explanation! Makes tons of sense!

Incidentally, many modern filesystems (including NTFS) store very small files in the FAT rather than taking up a whole block for this very reason!
At the point of sale, no. For a debt, yes.

If you go to a store or a fast-food restaurant where you pay before being able to take the goods, then they can legally refuse to accept cash.

But at a full service restaurant, once your food has been delivered to you and you have eaten it, your bill to the restaurant is considered a debt. They legally MUST take cash in this case.
Prioritization and focus. Get a Best Self journal. Really good for helping distill the path to success. https://bestself.co/
> Neutrality regulations have jack-all to do with peering mutual maintenance agreements.

Can you please write more about this, or provide some links where I can learn more? I don't feel I have an understanding of how peering would change under proposed net neutrality rules.

Particularly, I am curious about the claim that "[Comcast was not throttling Netflix traffic]". Under the proposed FCC rules, would it be claimed that they were throttling in that 2014 situation? My understanding is that they would be seen as throttling, and I see that as a problematic outcome because Comcast loses significant bargaining power and essentially is forced to eat losses whenever a link becomes saturated... I think I read that the FCC would step in and mediate such talks, which is even crazier.
I second on this. The multicore support is not far away. Right now we have a memory model for multicore OCaml and even a multicore OCaml ARM64 backend.
> For someone who is not a RF engineer, hopping might simply mean "an AP that has multiple radios that uses one to scan the 802.11 2.4Ghz space to see what channels have the least utilization, and then restarts the other radios on a that channel, possibly forcing all clients to lose their connection as if out-of-range and reconnecting again on the new channel as they find it".

Bingo, except add 5 GHz (and soon, 900 MHz), too.
> And for real low level to the metal systems programming, everything is unsafe; so you may as well be writing in C.

You might want to take a look at this series: http://blog.japaric.io/fearless-concurrency/ .
If you think that posting things that interest you is bragging about your intellect, I think that says a lot more about deep-seated problems you may have than it does about Facebook.

The thing is, I agree with you that many people's Facebook usage probably isn't particularly good for their psyche, but that doesn't mean that it's impossible to use it healthily (at its core, it's just a communications medium) and the assumption that articles about theoretical math is "bragging about the size of your intellect" is honestly just pathetic.
Thought about this yesterday when searching for some tutorials. 10 years ago, they were made by enthusiasts for free. Now they are made by companies for money and is generally of lesser quality. I need Jimmy to guide me on the internet.