skysight-inc/HackerNews huggingface dataset:
They got hacked years ago. I know this for sure because I'd used a unique email address to sign up on their website: equifax@<my name>.com

No one else had that email address. Guess what, I started getting phishing emails to that exact address.

Tried letting them know, but it went nowhere.
That's interesting. Stuxnet used a very similar strategy. It was identified in 2010, but could have been in use earlier. So I wonder if the Americans/Israelis got the idea from the Russians, or vice versa. Or maybe they both got the idea from malware hackers. Or employed them ;) Maybe even the same malware hackers. That'd be a trip!
I was really hoping it would turn out as good as 21 jump street.

Didn't bother to see it after the reviews. Will maybe watch it on streaming someday.
> The proposed AGW solutions are not feasible worldwide either which is what would be necessary to solve the problem they outline.

Just to pick out this point, I don't agree, I think actually most of the action to reduce emissions will be profitable. Low energy lighting pays its investment back in 6 months, on a ten year lifetime. Electric cars are significantly cheaper than petrol already in many countries and particular situations. Solar panels are similarly on the verge of profitable in high insolation, high energy cost places. Both are seeing continual reductions in cost, which will open up new markets, which will lead to economies of scale, which will reduce cost. And there are a lot of situations like housebuilders not putting in decent insulation, because they don't pay the heating bills, where good information can again provide the opportunity for investment with an amazing return. A large amount of the necessary reduction is not difficult, once you properly direct the market economy and industrial civilization against the challenge.
I think you misread my response, or maybe I wasn't clear, since I agree with you. I said the lightning network has no security on it's own. It requires an underlying blockchain on which to lock funds. Those underlying locked funds are what effectively secure the payments made on the lightning network channel.
The statement was in the context of a world of city states implied by the article.
I love the concept, because not being able to handle TCP traffic was one shortcoming of the new ALB.

But that pricing model:

Bandwidth – 1 GB per LCU.
New Connections – 800 per LCU.
Active Connections – 100,000 per LCU.

Would be nice to have it added to the simple monthly calculator: https://calculator.s3.amazonaws.com/index.html but I had to read the FAQ to find out what those were: https://aws.amazon.com/elasticloadbalancing/faqs/
What about after I buy 12 dollars worth of popcorn and water?
That's because this is a crime that is very difficult to prove either way, and people are erring on the side of caution.
Surprise you're programming a machine that is governed by physics!

Want to render that scene on that PS4 console over there at 60 fps? Well that disc drive can only read bytes so fast and you have to update the physics simulation before all those effects are applied... 60 times per second. Physics.

There is enough useful stuff in first-order and temporal logic for dealing with all of the challenges that specifying systems with the given properties and level of confidence that blueprints give us.
So presumably a class action law suit against the reporters for slander? Might depend on specifics of the law... Maybe it's time for a better credit reporting agency startup.
Honestly wondered if Jim Cantore was on that plane.
Async IO with Fibers
I have heard of no cases where liability has been shifted in that way.
> > Furthermore telling app devs not to worry about it because nginx takes care of everything is a false security blanket that will bite you eventually.

> Nobody said this.

That seems dishonest to say... From the grandparent:

> Or... you spend your time building something useful, leveraging skills you do have, and let nginx leverage its own strengths.

Really sounds like at least one person in this thread is advocating for app devs not to worry about things that nginx takes care of.

Agree that making straw men doesn't help. There's advice on either side regarding which one to use and realistically both are equally 'false security blankets'. The correct answer is to educate yourself on the benefit and drawbacks of each and make a conscious decision about where to implement your security.
Chartio (YC S10) Is Hiring Python and JavaScript Engineers in SF and Virginia
Welcome to my world mate. However, I happily have recipes that will make all of those things work - IPv4 and IPv6.

However, as you say - a lot of time was lost making things work that should not be too tricky.
Do you think humans aren't animals...?

Ketamine is a very safe and effective drug when used properly. In many areas it's a first drug of choice for prehospital ("ambulance") sedation. Around here our protocols prefer benzodiazepines like Versed, but we have Ketamine on the rig, and use it in cases like this.
Oh honey America's role in Afghan poppy industry goes so much further back than 15 years ago. America built a dam in Afghanistan in the 1950s. The dam changed the soil conditions and what could grow in the region. It was found that opium would grow well in the conditions, which meant that people would grow it to provide food for their families. Then the Taliban started controlling the trade, and profited tidily, and expanded it significantly. Destroying the opium trade would likely just add to the misery, by now.

http://articles.baltimoresun.com/1997-03-29/news/1997088009_...
And it's also not very charitable. It's an aspect of a mindset that perpetuates the cycle of violence. Long term, it works better for victors to be forgiving and magnanimous. But sadly enough, it's probably too late for that. Maybe about a century too late.
> Nobody's going to Chicago.

Maybe nobody you know is going to chicago but 75% of my friends from the midwest have all congregated to chicago. I moved out west for the better tech jobs but I would instantly jump on the chance to move back to chicago to be close to friends and family.
Cloudera Acquires AI Research Firm Fast Forward Labs
The dates mentioned are all from 2014. Has this been updated in recent years?
This argument is akin to splitting hairs. The fraudster who applied for the loan against BigBank was at fault. The BigBank accepted the Fraud and reported it to the credit agency. The Credit Bureau reports/includes the data provided by BigBank; it's what they do.

If there is a dispute between what BigBank says and what Alice says, it's not necessarily so easy to resolve, and that's the position the Credit Bureau has to deal with.

To absolve the fraudster of the primary fault is ridiculous. That said, this is the problem with difficulties in identity verification, we all want privacy and security at the same time. While they are not mutually exclusive, having both is much more complicated than one or the other.
this is an Envoy competitor. If my reading is right, they want to jump on the Istio bandwagon (https://istio.io/docs/concepts/what-is-istio/overview.html) as another data plane option.
Show HN: Client App for HN
Right. But to me the word "wreckless" even looks like what I want in this sentence. I think I take the meaning to be "as if wrecks weren't a thing."

As opposed to how the pedantry points out, that if "wreckless" were a word, it would actually be more of the opposite of "reckless."
You might be interested in Topicbox, which we (FastMail) have built for precisely this reason. We use Slack for our real-time comms, but we still used mailing lists for more thoughtful discussion and documenting decisions, so we made mailing lists unsucky:

https://www.topicbox.com/

It's still in soft-launch at the moment while we finish off a couple of key features that we identified in beta.
Show HN: Smooth Hacker News Mobile App
I wonder what they wrote it in. I'd guess C++, Java or Erlang, or a combination of those.
The justification can be found on the Reddit:

"Because we needed an efficient hash function for IoT and the future of ternary computing (memristors, spintronics, optical computing and the trend in Artificial Neural Networks)

This has been known since before we even began the project. I spoke with the Keccak team about this all the way back in early 2015 before a code of IOTA was written"

Source: https://gyazo.com/03cacbaf9de433c544eaffb8fd1c92ef
To play devils advocate to most in this thread, what is Axon/Taser to do about people potentially holding them accountable for every taser related death? Tasers are a better alternative to guns. Axon can't possibly be liable for every death. The police have to have some accountability with their use of a weapon, just like with hand guns, right?

Obviously the more liberal the police are with tasers, then the more accidental deaths there will be. So if the police treated them like firearms, then Axon wouldn't need to get so involved to try and defend itself. Gun manufacturers are never liable for gun related deaths.

Is the problem how tasers are marketed as non-lethal? Do people want to see tasers outlawed and have the police go back to using guns?

EDIT: if this isn't a relevant contribution to the discussion, I don't know what is.
These fuckers should literally be put out of business. They have one job, and they fail at it time and time again. They can't be trusted with our data. They need to be shut down. Does anyone know how to start a ballot measure in California to create a Proposition to stop using Equifax in California?
> Adjusted for inflation, earning power is less. Taking my date to a $3 movie in 1992 was a relatively smaller investment than taking my kid to see a movie for $15 today.

1992 was, actually, a notably cheap year for a movies (ticket prices
dropped, even before accounting for inflation, from 1990 through 1993), but even so, $3 ($5.23 in current dollars) was well below the average ticket price ($4.13; $7.21 in current dollars ) in 1992, $15 is nearly double the average ticket price (~$8.89) today.

And inflation-adjusted earning power (whether you look at median wage or median income measures), while some measures have been relatively static over the last several decades, and generally have underperformed aggregate output growth, were actually lower in 1992 than today.

See, for ticket prices,
http://www.boxofficemojo.com/about/adjuster.htm
So one guy sold 1 mil of stock, the stock dropped 6%, so he avoided a 60k loss. Let's say he expected a 20% drop, and he saved 200k.

If a were a millionaire, I wouldn't risk prison for 200k. Even the litigation to avoid prison could cost 100k.

And this is the kind of thing you know all angles will be looked into (it took a news agency a few hours to unearth this).

If he did it (insider trading), he is very stupid.
Lamborghini Huracan Surprises Turbo Supra on the Street
What about NJ? It's not really a city but it's the densest state and they could pick a location close to NYC. I read somewhere they want the place to be immigrant-friendly and NJ is that.
Given a formal model or proof of a system and the two teams will either succeed or fail.

Give them a specification in prose and they will have a little too much wiggle room. Such specifications are useful to a degree but I look at them like sketches on a napkin.

If you use a more formal method of mathematics as your specification then you can be more precise about the invariants that matter and model your system more faithfully. And with a good proof assistant or model checker the computer can even help you catch flaws in your design that you would never have been able to think of on your own.

It's true that the source code is a proof of something. It often helps to know whether you've built the right thing. And that it does what you think it does.
"Effectively meaningless" in order to establish which it means to have email, which is what we are talking about. Not the entire field of UX.

You are correct, I have confused table 1 and table 2. Here is what the definition from your link says:

> Email is the electronic version of the interoffice, inter-organizational paper-based mail system. Email is not simply the exchange of text messages. Email is really a system --- a system of interlocking parts, each of which is essential for ordinary people to communicate effectively with one or many others, in an environment where different kinds of information must be shared (memos, documents, files, etc.) i.e. the modern office environment.

It then lists 30 some odd features in Table 1, followed by:

> All of these parts, interconnected together, were essential to the functioning of the interoffice mail system. If any one component was taken away, such as Attachments or Folders or the ability to send Carbon Copies, you no longer had a functioning interoffice mail system.

By that definition, I did not use email for many years, despite thinking that I did use email.

Specifically, BSD Mail did not support drafts, attachments, folders (including trash folders), an address book, return receipts, or prioritization, to pick the most obvious ones. [0] According to the above definition, I didn't have a "functioning interoffice mail system".

Which is perfectly fine with me, as I didn't need one. But that's because I do not believe that "Email is the electronic version of the interoffice, inter-organizational paper-based mail system."

Otherwise, what's the word which describes what I did in exchanging messages over SMTP?

The entire argument is based on a definition of email which is so hyperspecific that it would be laughable if there weren't expensive lawsuits involved.

[0] I composed email messages as files. Once done I sent the file. BSD Mail can append a message to a file, but not to folders - I specified the filename. The first time I saw an attachment in a mail application was at a NeXTStep demo. MIME wasn't out. Instead, I uuencoded any "attachment" manually, and included it as part of the message.

Also, I still use BSD Mail as quick reader because I'm always logged into my mail server machine, and it's easier to type "Mail" followed by the message number than to download it into Mail.app.
The content of the landing page (since it appears broken, here's the content from Reader View):

Equifax Announces Cybersecurity Incident Involving Consumer Information

[Equifax CEO statement]
https://youtu.be/bh1gzJFVFLc

No Evidence of Unauthorized Access to Core Consumer or Commercial Credit Reporting Databases

Company to Offer Free Identity Theft Protection and Credit File Monitoring to All U.S. Consumers

September 7, 2017 — Equifax Inc. (NYSE: EFX) today announced a cybersecurity incident potentially impacting approximately 143 million U.S. consumers. Criminals exploited a U.S. website application vulnerability to gain access to certain files. Based on the company’s investigation, the unauthorized access occurred from mid-May through July 2017. The company has found no evidence of unauthorized activity on Equifax’s core consumer or commercial credit reporting databases.

The information accessed primarily includes names, Social Security numbers, birth dates, addresses and, in some instances, driver’s license numbers. In addition, credit card numbers for approximately 209,000 U.S. consumers, and certain dispute documents with personal identifying information for approximately 182,000 U.S. consumers, were accessed. As part of its investigation of this application vulnerability, Equifax also identified unauthorized access to limited personal information for certain UK and Canadian residents. Equifax will work with UK and Canadian regulators to determine appropriate next steps. The company has found no evidence that personal information of consumers in any other country has been impacted.

Read More
Each NLB starts out with several gigabits of capacity per availability zone, and it scales horizontally from there (theoretically to Terabits). That's more capacity than many of the busiest web-sites and web-services in the world need.

If you expect an instantaneous load of more than about 5Gbit/sec, in those situations we work directly with customers via AWS Support. We really try to understand the load, make sure that the right mechanisms are in place. At that scale, our internal DDOS mitigation systems also come into play. (It's not a constraint of NLB).

The load test in the blog post was done with an NLB, and was done with no pre-provisioning or pre-warming and allowed us to get to 3M RPS and 30Gbit/sec, which is when we exhausted the capacity of our test backends.

ALBs start out with less capacity, and are constrained more by requests than bandwidth. I don't have a precise number because it depends on how many rules you have configured and which TLS ciphers are negotiated by your clients, but the numbers are high enough that customers routinely use ALBs to handle real-world spiky workloads, including supporting Super Bowl ads and flash sales.

Each ALB can scale into the tens of gigabits/sec before needing to shard. ALB also has a neat trick up its sleeve: if you add backends, we scale up, even if there's no traffic. We assume the backends are there to handle expected load. So in that case it has "more" capacity than the backends behind it. That goes a long way to avoiding some of the scaling issues that impacted ELB early in its history.

If you have a workload that you're worried about, feel free to reach out to me and we'll be happy to work with you. colm _AT_ amazon.com.
Ah. Thanks for the link. I didn't see anything that section talk about passing values with the Errors, based on your comment, is that even possible?

If you had an error you wished to pass a reason string for, would you need to use a global static or something?
This is why I'm not secretive about my SSN. My neighbor, roommate or a random passerby isn't the attack vector, it is the trusted institution.

I'm not going to post it here, but I wouldn't even mind saying it over the phone while standing in line somewhere. Its just not the real attack vector.

Result here shows that whispering it and writing it down on posted notes for a bank teller have zero bearing on your identity security.
I never understood this argument. A gun is not a shield, so how does it protect you from being shot?
E-Estonia’s Estcoin proposal shot down by ECB
All financial companies are required to have you SSN for reporting income for taxes and also report money movement under the anti-money laundering laws(AML). Know your customer(KYC) requires a financial company to gather documentation and information to verify your identity and to ensure your not on any list of people we're legally not allowed to provide services eg terrorist watch list.

You don't need to provide a SSN to get cell service or provide real information. Lots fraud is done through tethering through burner phones.
People can (and do) experience "excited delirium" without a cop anywhere near them...
Assuming heartbeats occur about once per second, that’s a 3.5% chance of a taser shot being in the vulnerable period. That’s pretty big.
Out of curiosity, how would I go about looking this up?
You probably did if you have any sort of bank account or loan or job application or rent. It's pervasive in contracts/agreements that they report to partners and credit agencies.
There are measured ring-width chronologies from all over Europe. Years which are hot and dry give small amounts of tree growth; wetter years give more growth. The sequence of thick and thin rings correlates across large regions, allowing the dating of oak wood with a sufficient number of rings -- about 100 for good certainty. In many cases it is possible to identify a much finer location where trees were grown. While there is some correlation between (say) weather in Sweden and Germany, the correlation is much higher in nearby locations. It is often possible to locate wood to a specific forest just based on the ring widths.
Because of fidget spinners and the cloud, got it.
All those consumer gateway boxen that do NAT can also do firewalling. The ones supporting IPv6 even tend to present the same (or similar) UI for "create firewall allow rule" and "create static port/host mapping".
In-person has non-interrupting ways to get information about how busy someone looks. Chatting someone up at the water cooler is much different than someone at their desk, which is different still than someone who is looking through things with headphones on and a puzzled look on their face.
In the limit, a central plan that works well is going to contain a detailed simulation of something that looks like a market economy, with rational actors modeled out at every step.

Turns out that at our current state of technology, doing that isn't feasible yet, but that may change at some point.
Good point. Maybe a hybrid then where by default everyone delegates their vote to a representative, but at any point you can re-allocate your vote to a different representative for any given issue, or vote on a single issue.
We use Vagrant with docker containers inside running our web apps. Vagrant functions as a disposable virtual dev environment (on Mac) to do our docker development in linux and know everyone's machines are identical when developing for production. A new dev can just download our latest vagrant repo, vagrant up and it'll provision their development environment to be exactly as it should be.

It doesn't have to be one or the other.
You call them up... but this will probably no longer work b/c of the data breach. Otherwise you snail mail them a letter with a govt ID and they send you a new pin.
On my Mac, I tend to use Vagrant w/ Virtualbox when I want to run Linux locally for any reason.
There IS a Add-on for exactly that use case: https://marketplace.atlassian.com/plugins/net.seibertmedia.c...

Disclaimer: I work for the Add-on developer
Yes they have a role, but most water management happens at a local level.
Sorry.... I had to.

"I think this is mostly correct, but I see it a bit differently. This bubble is slowly building up real housing for hard working poor and middle class people. Use cases like pay-day loans and sub-prime mortgages become more and more viable as the network size grows. Eventually enough people own mortgages that it makes sense for it to be baked into a CDO, and for it to be used in lieu of liquid assets. Bubbles are the boot loader of real utility."
> They'll want some place that doesn't flood or get snowbound, since their HQ city will include some distribution centers. That knocks out Minneapolis - St. Paul

Snow removal in the Minneapolis/St. Paul metropolitan area is quite efficient and even heavy snowfall rarely causes issues. Plenty of large companies are headquartered here and do not struggle with this issue, ex: UnitedHealth, Target, Best Buy, and 3M.
Introductory advertisement for the Apple I Computer
How to tell your significant other you are starting a company
Interesting fact: commodities were not subject to such a law in the USA until Frank-Dodd Act. The rule was named for Eddy Murphy, who played a commodities trader in Trading Places[1].

The reasoning, as I heard it, was that all farmers who hedged their own crops with commodities trading, had some amount of insider knowledge just by looking at their own farm/crop/weather. Stealing a data report before it is publicly announced, however, seems like it would violate some laws. Paying to access reports early seems to be a lucrative offering of some of the data providers.

[1] https://en.wikipedia.org/wiki/Trading_Places#Legacy
3-4k per... what?
>>And what happens if I call to unfreeze but have lost the PIN? Can I never get a loan again for the rest of my life?

Exactly. There's no shot this "PIN" is like one-way a encryption passphrase. There is definitely a way around it.
Am I missing any?
Most likely C/C++, Erlang / Java is not fast enough for this kind of work load.
Why is everything broken?
Thats a crazy lot of them.