skysight-inc/HackerNews huggingface dataset:
> The timing is extremely suspicious. But - if they can prove they didn't know, they're in the clear.

Burden of proof for criminal cases is the other way around. They will likely spend lots on legal fees just trying to prove they didn't know about the hack at the time they decided to sell. They will likely end up settling out of court (guilty or not) because that's how the US legal system works.

Also important -- July 29 is when Equifax claims they noticed the issue.
> It is Experian, Transunion and Equifax, by holding this fraudulent loan against Alice, who are victimizing Alice.

Credit Reporting agencies report the data passed to them by companies such as banks. In your scenario BigBank thinks it's given a loan to Alice, and when they don't get repaid, report that to the CRAs. Alice is a victim of the thief because her identity was appropriated to secure the funds. BigBank is a victim of the thief because they were defrauded. The CRA is a victim because they were just reporting the information that was provided to them in good faith by their customer BigBank. So saying that the CRAs are "victimizing" Alice is completely false.

Alice bears the burden and risk of clearing her name, just as a victim of car theft bears the burdens of reporting the crime, getting another vehicle, dealing with the any outstanding loans, etc. These burdens are inflicted by the thief, not the bank or CRA.

> perpetuated by the credit reporting agencies as a way to absolve themselves of responsibility, [...] and to avoid realistic identity-verifiction which might slow or complicate the practice of issuing large amounts of debt to the general public.

This completely misunderstands the role of a CRA. The CRA doesn't have to verify identity, it's up to the credit grantor to ensure they are dealing with the person they think they are.
Recognized that just because something seems like it should be true doesn't actually make it true
And I'll state my opinion that The Avengers movies are objectively good.

You obviously disagree. What now?

We seem to have reached an impasse.
At least you get the pin as well. We just have chip, and it does ~nothing.
Use of anti-inflammatory drugs inhibit muscle growth 2x in healthy individuals
The Search for Better Search at Reddit
They could automate the implementation of the protocol from the spec, as has been done to TCP/IP on at least one occasion(VPRI STEPS).
My hope is that with this breach, someone will finally be able to hit Congress over the head with a smart stick and make them realize this.
md5? They use triple ROT13.
This strikes me as sadly typical of so many "just use a blockchain" plans: it has a hopelessly naive understanding of the topic.

Credit reporting agencies aren't just a big ledger. They collect a lot of information from a variety of sources, verifying and evaluating them. They contextualize, evaluate, and summarize the information. They comply with extensive laws that regulate the use of the information. And then they, with obviously varying levels of success, control who has access to that information.

This work all costs money. It could surely cost less. But dumping terabytes of ungroomed personal data into a public database and then crossing our collective fingers is a startling bad idea. (If you disagree, then please put your last 5 years of financial statements, bills, and receipts unredacted in a GitHub repo and put the link here.)
Ask and ye shall receive: https://hellobloom.io/
The side of caution certainly changes depending on whose perspective you take!
I'm glad someone bought this up, it's the first thing that came to mind for me. Even if they are safe in the airport, I'm sure there were more important things they could be doing like securing their home or buying food and water.
There are rules about amending your plans. My company has trading windows (a month or two after earnings, window open for around three weeks) for when people above a certain level are allowed to make trades. Even higher level employees must have a trading plan. You can only modify your trading plan during the trading window and there are restrictions and limits on how you can modify it and if you need permission to modify it.

Or something along those lines, I'm not high enough level to have to deal with the specifics so I only know the generalities I picked up while trying to determine if I needed to care.
> It is solely used to identify you.

Not exactly. It's used to map your Social Security account to other records they have about you. It's not, by itself, identification.
Seems like you're saying the same thing as your parent commenter.
Some folks churn, so they apply for credit several times a month. It's not a very small niche community either.
Is This the Opioid of the Future?
> You must be a professional pilot. Yes, I bet that's it.

I won't claim one way or the other, but let's presume that this person is a professional pilot. Does that not make their opinion/analysis more valuable, rather than explaining it away?
When you get multiple devices that require the same inbound ports (game consoles are a good example) you can open the same port for each device.
Breaking news by award winning journalist JON BRODKIN -

Google customer service does job, resolves rare scenario that computer did not handle.

In other news, utopian future not yet achieved.
I think there's more of a balance between collaborative & big-picture work, and heads-down focus, than you let on.

Sure, teams need to be working on the right things, in the right way, and need team leaders who can focus on the overall product itself, as well as the overall technical direction. But sometimes (often?) you just need people to avoid and ignore distractions and get their work done.

This doesn't just apply to developers; I hear from many non-technical staff where I work that things like Slack sometimes cause more interruption then they're worth, and need to sign out to get their job done. There is definitely such a thing as information overload, and there is definitely such a thing as interruption/notification overload.
Tripling an Engineering Team in Six Months – Planning to Scale (Part 2/5)
In 2016, after being acquired by private investors, we were given the green light to triple our engineering team as fast as possible. In this article (part 2 of a 5 part series) I dive deeper on how we actually planned the massive task we were embarking upon, the questions we needed to ask, and the important lessons we learned about planning to scale.
A couple of Medium articles written cannily and then forwarded to appropriate business influencers, and this could be made a fashionable thing ...
Raising awareness of what you can do with a smartphones gyro sensors
I agree -- but they don't. Let's imagine that the Internet started with IPv6 and NAT never became the standard. How many legacy routers would there be floating around with no built-in firewall? How would that affect the security landscape?

Everyone seems to misunderstand that I am not advocating for what should be/should have been, but instead providing the benefits of how things played out given the reality of the world.
Perfect. If they're in the business of selling access to sensitive information and cannot keep said sensitive information safe, they should not be allowed to continue to leak that sensitive information.
I guess what I was trying to say was, what planning was done beyond the heroic measures and decisions made by the pilots and supporting infrastructure people? I was curious as to whether this was pure bravery with an informed decision support based on data, or simply pure bravery with a little bit of luck. I am always trying to find positive examples of how data is used for good, to save lives, etc. The more we know about how we can use data for good, the more we can try to do good with data...
Presumption of innocence doesn't mean what you think it means.

In most crimes involving consent, it is only necessary that the prosecution show that the defendant committed the act constituting the crime in order to establish guilt. Consent is an affirmative defense which must be proven by the defense. If I take your car it's theft unless consent can be established (i.e., you loaned me your keys). Similarly if I punch you in the stomach it's assault unless consent can be established (i dunno, you said "hit me in the gut! I want to see how strong my abs are.")

Rape and sexual assault are the only times when consent is assumed and its lack must be proven.

If Bob has sex with Alice, and Alice later alleges rape, that should be taken as prima facie evidence that a rape occurred. It should be on Bob to prove that the activity was consensual. Anything else vastly increases the risk of sexual assault and reduces the likelihood that offenders will be punished.
Emotion shapes the diffusion of moralized content in social networks
> It just shows how emotionally invested you are.

Aren't you? Shouldn't everyone be, in light for such stories?
Even better, they ask for your last name and the last six digits of your SSN to even check your potential impact. The problem is that the first three digits of your SSN are derived from your state of birth, so the last six give up basically the entire thing. http://www.ssofficelocation.com/social-security-number-prefi...

This whole system is so fucked.
I'm 3 weeks into owning an iPad Pro
My information was used to open a fraudulent mortgage loan, then when I asked my bank to not allow opening credit lines or transfers online was told "we can't do that!"
Good lucky. The people responsible for this will likely go on to work in the government.
Aha, that explains why the site works so hard to gather your info and then suddenly loses interest in doing anything much else!

Shit I hope I don't miss out on like $3.37 of class-action BOUNTY!
> Other drug users who dislike hallucinogens and instead prefer drugs like cocaine, heroin and MDMA are less hippies and more partiers who like drugs because they make them feel good rather than giving them access to some spiritual connection with the world

As someone more on the hippy side I'd say be careful simply lumping MDMA in with party drugs. It's certainly used by partiers but it's a drug that adapts your mood to the environment and therefore, in a quiet and controlled environment, has very deep uses for introspection, advanced thought and instead of seeing things as you would when taking a trip, you feel like your body is in another place while your state of mind remains relatively lucid. It's a trip for the body and laser for the mind and would be one of the most important tools I've used for dealing with a violent past (as in being on the receiving end).

Lumping it in with cocaine, which in my (not so humble) opinion is the drug of choice for narcissists, seems unfair.
Ebert really didn't like having to assign a star rating to his reviews, and would have dropped it had The Chicago Sun-Times allowed him.
My understanding is that they value people who are passionate about Tesla and SpaceX products. The logic is that if they truly care about what they're working on, work-life balance and pay can be sacrificed. I know several people that sometimes complain about the long hours at these companies, but they refuse to leave because of their passion.
>I dont know if something is a bubble or not

I was responding specifically to your statement:

>Aditionally the idea that all these things are bubbles is quite suspect

I agree with your point that monetary policy may not the right place to solve a property bubble. I disagree only with the assertions that property bubbles might not currently exist and that bubbles can never be easily identified.

>Also, investment however flawed is simply not the same as a ponzi scheme.

It is if the return on your investment is solely dependent on the continued input of other people's investments.

>Fundamentaly however you have to realise that low interest rates are not artefical.

I am not arguing that they are. Are you confusing me with another poster?

>The idea that the central bank can indepentenly fix housing bubbles and create stable demand is just flawed, its simply not possible. Its the wrong tool for the thing you want to fix.

I agree.
Coolest science ever headed to the space station
The Latest Hype on Estonian Digital IDs
This is not financial advise:

I remember a few commentors on HN recently saying they have made large gains by buying stock of companies after the news of cyber security breaches significantly reduced the share value, then waiting for the dust to settle(reaction-news-cycle to complete) and the price to rise again.
It looks like the deep linking to the LCU page doesn't work (you have to click the tab for Network Load Balancer), so here's what an LCU is from that page:

---

An LCU is a new metric for determining how you pay for a Network Load Balancer. An LCU defines the maximum resource consumed in any one of the dimensions (new connections/flows, active connections/flows, and bandwidth) the Network Load Balancer processes your traffic.
Those diagrams are fantastic. Great find!
It sounds like NLB passes through source IP - does that mean outbound flows are through the IGW?
I probably go the cinema once a year, and don't really watch much at home either, but I have some movie buff friends so I get tangential exposure to which movies are good: I just Googled what's out and the ones I've heard were very good include Dunkirk, the new Planet of the Apes, Baby Driver and The Big Sick, and Beach Rats. On top of that are the movies that I probably wouldn't enjoy seeing but that someone who likes movies would likely enjoy: Guardians of the Galaxy, Logan lucky, maybe even Wonder Woman (I just know that one's popular, but not much about how good it is).

This is just stuff that I (who doesn't even enjoy going to the movies) happen to Know about, and wouldn't mind being dragged to if a friend wanted to socialize at the cinema. I find it kind of hard to believe that "Hollywood is putting out garbage" could be true to the degree that that's the reason there's nothing you want to see.

Note that I've left out indie movies since those tend to be less accessible and more polarizing and also left out popular things like the Transformers movie.
On the topic of phreaking, does anyone know if modern condo entryphone systems are vulnerable? The fact that pressing a button on my phone unlocks the front door to the building makes me wonder how it could possibly not be vulnerable to having the right pitches played, but I would hope that the dangers of in-band signalling have been widely understood for long enough that systems would be protected...
Amazon does not do that. (Except for a country as a whole.)

I'm sure they could, but they have never done so before. Their prices do change constantly - but for everyone at once.
That's a bad idea I think. You are giving your card company proxy rights, and more data about yourself then they should have.
There is a sense of entitlement that comes without context.

If all anyone knows is the 40-hour work week, it'd be easy to think that we're entitled to it, or that we'd be better off with just 32. But when we learn of our grandfathers working 72-hour weeks (and maybe cleaning the foreman's house on Sunday) in extremely dangerous factories, that lets us appreciate both 1) the labor movement and 2) the status quo. Of course, our grandfather's grandfather probably worked the land for subsistence and had a much smaller say in his own destiny, so the fact that food is abundant and we can vote is really cool.

If a music download goes slowly, would you rather be resentful and be look to spend more money on download speeds, and then you'll be really happy? Or would you rather appreciate that:

- You didn't have to go to a live concert to hear the song

- You didn't have to buy a vinyl that would wear out over time and skip during playback if you walked across the room too heavily

- You didn't have to go out to the music store to buy a CD, or wait for a store to ship one to you

- You didn't have to rip the song to your computer

- You didn't have to buy the whole album to get the one song you wanted (if you're into that)

- It cost less than a dollar

- You had a broader selection of songs to choose from than any previous generation could have dreamed of

I guess if your worldview is hedonistic this argument won't stick to you well. But, your reply doesn't give me confidence that you're able to find contentment in your life. Of course, that's assuming it's representative of your entire outlook on life!

Trying to summarize my position better: Each piece of progress brings its own benefits and challenges. It can improve on what it replaces or not, but more likely it'll improve some things and hurt other things (cars come to mind!) There will be people who will benefit by the new thing and people who will be hurt or unaffected, but more likely it'll be a mix of both. If I had a clarity of mind before always-on Internet that I don't have now, and if I think that's a loss for myself, then it's my job to try and share or instill this perspective on a new generation that would have a very difficult time doing so on their own. Even if they reject me as a curmudgeon, maybe they gain and appreciation and thus contentment in what they now have.
Previous salary? Soon, the question might be illegal
So, what should we do? Should we just fire/jail everyone who has ever worked for a company that was breached? You realize that would be literally everyone, in pretty much every company ever, right? There's a saying in the cybersec world: "there are two types of companies: those who know they've been hacked, and those who don't realize it yet".

Cybersecurity is a field where there's already not enough good talent. And even the very best talent is still going to not be good enough from time to time.

It is simply completely naive and unrealistic to expect a company to be 100% hack-proof, and if you start punishing people for that, then you're just not going to have anyone taking the job at all, and you're going to have even less security.
> I see this as you being too strict with your definition of "identity".

> We, as people, have multiple identities. We have one with our government, another with our employer, another with our friends, another on pseudonymous websites, etc.

Which is not relevant here, as this is not about different sets of attributes pointing to the same body, but about the exact same set of attributes being claimed to only possibly be pointing to one body (hence they supposedly identify Alice) while it is claimed at the same time that they can be replicated by a "thief", which necessarily implies that they don't identify Alice, and hence are not an identity, therefore tautological impossibility.

For example, it is claimed that being able to say the DoB of Alice is an attribute that identifies Alice's body. Then, it is also claimed that somebody else saying Alice's DoB supposedly is an act of stealing her identity, and that the set of such people is non-empty. Which means that being able to say Alice's DoB is not actually an identity in the first place, much less one that could be stolen.
Wow, nice find! I've been looking recently for a language like that. I like Swift but I dislike the heavy coupling with macOS/iOS and ObjC. I like D but dislike its somewhat arcane syntax and bloat, plus it has a GC so it's not the same category. I like Rust but the borrow checker is brutal.

I will give ziglang a try!
http2 termination is not very useful, most people want ELB -> backend instances.
I've seen plenty of iPhone 7s, and very few air pods. They don't even seem like a good idea.

I personally got conductive wireless headphones and really like them. Not Apple, of course.
> I was not a good risk.

Banks are using actuarial science to make loans. You were (possibly) an outlier. That doesn't matter. All that matters is that their risk models work in aggregate. If they're right enough of the time, they profit. It doesn't have to be perfect.
Like mention above IPVS: http://www.linuxvirtualserver.org/VS-IPTunneling.html

This is heavily used by Facebook for their loadblancer on their racks.
They're a a foot in the door to chat ops, which leads to customer buying the best integrated tools with said chat app: the same companies that make the ops tools.
"Then you're left with water in the extract when the acetone is boiled off."

This is why you've got it on the hot plate for an hour - at 150F the acetone's gone in 20 minutes, you need the other 40 minutes to purge the water from the extract.

Heptane is also about 6x the price of acetone.
Wow, I learned a ton from this comment. I would have never come up with this on my own.
We Can Achieve Anything If We Stop Trying To Do Everything
Curiosity's balky drill: The problem and solutions
Direct link to phone numbers for security freeze: https://www.consumer.ftc.gov/articles/0497-credit-freeze-faq...
Which, of course, ends up hurting people more.
Not a job board per se, but you might get some mileage out of poking around the /r/cobol sub-reddit.

https://www.reddit.com/r/cobol/
That means you are affected. If you enter a non-existent name and SSN, it will say that you are not affected.
> Which, of those statements, do you consider to be wrong, and why?

Every one of them. You do not understand the difference between what the program code does and what the programming language implementation does, and your underlying assumption is that there is a difference in how a Lisp runtime without garbage collection would manage memory allocation and how the C standard library manages memory allocation.

I am going to assume you need a stdlib.h refresher:

void *malloc(size_t size);

void free(void *ptr);

How do you think free works? How would you write a linked list implementation in C?

I just happened to have done some software archaeology on a Lisp implementation without a garbage collector a while ago (https://github.com/vsedach/Thinlisp-1.1), and the memory allocation and lifetime management is exactly the same there as in C++ - manual management and dynamic extent regions (RAII).

Now I really want to get pedantic with each of your points, because individually each is wrong in interesting ways:

> 1, that every newly-created cons pair requires an allocation

This statement is a redundant tautology ("every new allocation requires an allocation"), but even the correctly phrased assertion that "CONS always allocates" is not always true:

https://en.wikipedia.org/wiki/Hash_consing

http://3e8.org/pub/scheme/doc/lisp-pointers/v1i3/p17-white.p...

> 2, that every new list entry is a new cons pair

Again, redundant, and again, not always true, because of hash consing and CDR coding:

https://en.wikipedia.org/wiki/CDR_coding

> 3, that you can avoid creating them but you have to keep a very careful eye on your code in order to do so - the normal way of writing code will cons frequently.

If you do not need to allocate lists, do not allocate lists. There is no "normal" way of writing code that exists outside of what your performance requirements are, what the language semantics are, and what the language implementation provides in terms of those semantics. The only situation where you cannot avoid frequent allocations is when all the data structures are immutable.
If you hope to live, you should comply with $random_armed_thug, especially if they are not lawfully authorized. In fact, the less authorized, the more you should comply, unless you're saying you should start fighting an armed mugger in order to protect your wallet.
Actually it is the state that has to prove mischief. They still enjoy presumption of innocence.

I agree the timing is suspicious, but the amounts are pretty small. Even if the stock drops 20% long term due to this (which IMO is highly unlikely), a high ranking executive risking a jail term to avoid losing 50k of stock is (again IMO), absolutely irrational.