skysight-inc/HackerNews huggingface dataset:
From the article: "No Evidence of Unauthorized Access to Core Consumer or Commercial Credit Reporting Databases." Later on they say "The information accessed primarily includes names, Social Security numbers, birth dates, addresses and, in some instances, driver's license numbers."

I am having a difficult time reconciling those two sentences.
Equifax Data Breach Could Impact 143M U.S. Consumers
It is a protection racket that shifts the risks and costs from the financial system to consumers.
How exactly is this making the case? A more likely explanation is words like "douchebag" in the title are weighted lower in Bing and Yahoo.
Have you actually read her account? Or are you basing your opinion on the excerpts in this story alone?

If you have a link to more information I'd be interested to read it.
Equifax Reports Data Breach
Generally, variable reuse is bad. But for something like an error flag that immediately causes function exit and is never referenced again, I wouldn't raise an objection in a code review.
Except I have no guarantee whatsoever that anyone else in the chat is using those.
Isn't Chicago's municipal government spectacularly dysfunctional?
https://www.georgetown.edu/sites/www/files/Hidden%20Voice%20...

This is a little different, it's about audible commands that don't sound like speech to a human.
Change the way checks are issued/redeemed. Right now the customer is on the hook for 7 years because a check isn't cleared until it goes back to the bank that issued the check . The customer thinks by seeing the money in the account the check was good and can clear a sale. The reality is the bank can take that money back if it is later determined to be false/fake.
How often does random personal blog posts like this make it to the top in the first place (unless you are specifically searching for "Tab Atkins" of course)? That post is more than one year old now.
" Disobeying a lawful order from a police officer is another crime" it's not clear that the order was lawful or even that the guard in question was a police officer.
Small consulting development team here (2-4 engineers, depending on needs)

Location: Various (across the US)

Remote: Yes

Willing to relocate: No

Technologies: React, Redux, Node, Rails, Postgres, MySQL, Docker

Résumé/CV: http://sarink.net (please email for individual resumes)

Email: kabir@sarink.net
All my meat is raised on open pasture locally, fed only on wild grasses. I specifically said factory farms are a clear problem. Thanks for talking past me and ignoring my point. This is what makes conversing wih you people get on my nerves. Show some intellectual respect and get some in retuen.
Why not use the fabled "lightning network" layer as layer 1 if it functions as it should?

Is it not just a blockchain slapped on top of the slower blockchain?
My brother's university student ID number was his SSN. It was a top-10 public university. That's how stupid we've collectively been about it.
Yes focus on the P value and ignore a system of science that has no independently-funded researchers.
Short version: Brad Wardell notices article about Brad Wardell shows up inexplicably in search results for “Brad Wardell”. Innocent enough on its own, right? Wrong. The author also links to a Daily Caller article about… the same search results! And before you dismiss The Daily Caller, guess who they interviewed to confirm the story? That’s right: Brad Wardell himself. Who would know better about Atkins’s vile manipulation than its very victim? Damning stuff.

Google is obviously hiding something.
The author really needs to remove the chip on his shoulder before making this kind of accusation, I am not a fan of google and am staunchly in support of Damore and his ability to question hiring practice. But this article is borderline conspiracy theory peddling.

Is it possible that search results can be manipulated, it's also possible that the engineer knows the algorithm and is aggressively optimising their site.

But the derogatory tone of the article completely detracts from this message, it is very easy for people who should be paying attention to issues like this (if they were to be politically orchestrated) to feel defensive and attacked.
To that end: if you're an HN user with the last name "HHHHHH" and with a Social Security number ending in 000000, don't worry about enrolling. I very helpfully took care of it for you!
> So, if I hack TU, all I need to do is get the data of the people who asked for a credit freeze.

Sure, but TU already has all the above information anyways.
Just out of curiosity recently, I looked up some of the best films ever on RT, to see if they all have 100% from critics.

Bicycle thieves [arguably the best film ever(it is amazing and does seems to top quite few best film ever lists)] does not have 100%!! David Jenkins writing for Time-Out decided to be an edge-lord hipster extraordinaire and give it a thumbs down. Just thought that was funny. The audience scores seem to be a lot more trustworthy than the reviewer ones on RT anyway, there is a lot of talk going around anyway about how Sony for example are getting 100% by letting certain 'reviewers' review the film on RT before any other reviewers.

Link to RLM guys discussing this

https://youtu.be/_HrR5X72_LM?t=9m2s

_

Also personally. I dont get why anyone would go to the cinema. Be at their location at a time not of your choosing, pay through the nose, get price gouged for shitty food, be subjected to 10 minutes of ads, in order to watch a mediocre film on a super-loud boomy system with terrible audio balance, in a noisy room filled with potential assholes who may block your view / break your immersion, and also you cant pause the film at any point to piss.
Not really conjecture:

> The company has found no evidence of unauthorized activity on Equifax’s core consumer or commercial credit reporting databases.

Since core business was unaffected (nobody hacked the mainframe), I guarantee you some crappy product they acquired got compromised.

And like it or not, you do give them permission to collect your personal data every time you authorize a creditor, utility or employer to run a credit check. Never sign up for utilities, loans, credit cards or get a job and then you'd have a case for privacy.
On a seperate issue - Not a problem with IOTA but rather with seed generation using powershell. Which was a method of seed generation they recommended on their site (now removed of course).
https://www.reddit.com/r/Iota/comments/6v9mj6/psa_nearly_all...
A lot of people like the Python syntax. It has to be about the most readable of all computer languages.
Considering ASCII 'C', 'c', and '3', they have the binary expansions

001000011
001100011
000110011

Notably, that third bit is what shows whether it's nibble value 8+3=11 or just plain nibble value 3. The binary 11 that gives us the 3 is way over at the right.

The way I would think of doing this in terms of bit operations is

(c & 7) | ((c&64)>>3)

However, they're apparently doing the (c&64)>>3 part with the multiplication somehow and I haven't quite understood how that happens.
"Three Equifax Inc. senior executives sold shares worth almost $1.8 million in the days after the company discovered a security breach that may have compromised information on about 143 million U.S. consumers."

https://www.bloomberg.com/news/articles/2017-09-07/three-equ...

Edit: Also discussed here https://news.ycombinator.com/item?id=15196309
It's the quality of movies, and also we're living during Peak Televsion. TV shows have an awesome capability to tell really long stories, that go further in depth than movies can.

For a lighthearted take on it, watch "Fk You, it's January!" https://www.youtube.com/watch?v=H18RUB1cxfI
I hate sites like this. Im probably stupid but I have no idea what precisely it is after reading that page. I just know that marketing team wants me to believe it's going to be my saviour.
I don't think it's fair to be throwing any individuals under the bus like that. There's obviously been several failures at multiple levels but the company as a whole will have to face the consequences, not just a few managers it decides to use as scapegoats.
And what happens if I call to unfreeze but have lost the PIN? Can I never get a loan again for the rest of my life? Or is there some way around the PIN - perhaps only requiring the already leaked information?
Except it's not going to be part of the standard, and there's no way that I can guarantee that the other people in the chat room are using the same thing.
>What is it then?

It is the username you are issued by the government. It is solely used to identify you.
Any time I read "Taser persuaded" I am reminded of their primary form of persuasion. Scare tactics should not fly in Court
The way in which Google released TensorFlow (and the meteoric success it's enjoyed) is an excellent example of a company successfully commoditizing its complements using open source software.

TensorFlow (and stacks built over it) has the greatest mindshare, which allows Google to both optimize the capabilities of its ML offerings based on TensorFlow, knowing most developers will be familiar with it, and to increase profit margins on those services at the same time. TensorFlow makes a significant part of the ML stack convenient and accessible, and releasing it for free opened the flood gates for Google to expand the machine learning industry significantly while shifting the profit generation away from software and onto the cloud (data storage + compute resources).

Sublime execution, really. Once machine learning passes through this hype cycle (over the "trough of disillusionment" and onto the "plateau of productivity"), Google will likely have made the majority of the machine learning industry accessible enough for most software engineers to pick up something like TensorFlow and hit the ground running, which will gradually exert a downward pressure on ML specialized salaries for all but the top end. But this will continue even as the industry continues to expand, which means Google will come out ahead earning even more profit even if salaries plateau or decrease.
I agree with you completely on your main point, but you must admit that a person needs some time to concentrate in order to produce code. Even just 2 hours a day.

Unfortunately, a lot of companies are starting to measure "time working" via "time on Slack." My company is one of them, but it works out for us because my team exists in multiple time zones (making the interruptible hours of the day fewer).

This is not a problem that's specific to Slack. I guess if you're working in an open floor plan, you would have the same problem - or perhaps many people would be more shy to bother someone in person than online. Slack (and apparently this new tool too) doesn't help though. It seems to support an ever increasing array of notification options. You can set your status to "do not disturb," but people can and will still ping you when they feel like it.
Peacock Spider
Thanks good to know.
Have you looked into movie pass? We've gone 6 times in the past 3 weeks, saw 2 boring movies, 4 good ones, but only paid the single monthly cost.
I work on VS Code. The release notes are just markdown [0] that we render inside of the editor. The interactive playground on the welcome page is also just markdown [1] but we replace all the code blocks with embedded editors

We don't provide a standard way for extensions to show their own release notes but we do support showing users the CHANGELOG file on extension pages. We are also tracking allowing extensions to contribute their own playground sections [2]

[0]: https://raw.githubusercontent.com/Microsoft/vscode-docs/mast...

[1]: https://raw.githubusercontent.com/Microsoft/vscode/master/sr...

[2]: https://github.com/Microsoft/vscode/issues/20449
RunPee is a great app that gives you good times to leave for 3-6 minutes to go pee. But yes, it's a problem, and while RunPee is a solution, it's an awkward solution.
> If it's yours, don't try to hide it, because it's usually easy to spot. It's ok to submit your stuff, but don't submit too much.

Not mine.
>I don't understand why we still allow overbooking when we regulate so much else in the flight industry.

Because it's a good thing that results in a much more optimal outcome in the majority of cases. Fuller flights and travelers with flexible schedules get vouchers for other flights.
The lightning network has no security (protection against double spend) on it's own. It relies on the underlying blockchain for that.
Of course. What I meant is that his post does not make the case that, with respect to employment difficulty, there is any deliberate conspiracy.
Just saw this at the end of BBC Newsnight. I had no idea.
As someone who has lived through some of the strongest hurricanes in recorded history you are wrong on multiple counts. Flying through the storm and the wall eye is dangerous and NOAA has lost planes to it. One of their hardened P3 had equipment and life raft ripped from their anchors [0]. There is definitely lightning and waterspouts during a hurricane. That is not reserved for thunderstorms.

This was a flight to evacuate crew who are stationed in PR. Non-rev refers to crew who are commuting or on holiday. On a typical flight a plane may turn over in a few hours but the crew may remain for 24 hours and leave the following flight. This crew was down route and needed to head back to their operating base.

[0] https://www.wunderground.com/resources/education/hugo8.asp
Slack, Discord, Gitter, Microsoft Teams, and Atlassian Stride aren't just "chat rooms". They are essentially hosts for programmatic bots.

Imagine a newly hired developer posts a question on Stride about some feature-request/bug for a product. A chatbot smartly intercepts this question, posts a response linking to the precise jira ticket that addresses this feature request, when it was closed & who worked on it last. This exists. Imagine the savings in cost & time.

New developer posts a question - hey how should I implement this feature in xyz language ? Bot intercepts, posts a response connecting to the API docs of xyz, or better yet, posts a code snippet from stack overflow implementing the algo in xyz. Imagine how much $$$ that saves in onboarding & training costs. This exists too.

Maybe the Atlassian Stride chatbot will have more meangingful jira webhooks that the Slack chatbot won't.

This is really a next-gen NLP+AI play. Nobody cares about the actual chat per-se - Chat is just a QA platform, and superior QA bots indistinguishable from human are one of the primary goals of AI.
> Added heuristics to convert CMOV into branches when it may be profitable

Does anyone know why this is the case? I thought CMOVs are a straight win over branches but I guess modern CPUs might be more complicated than that.
The advent of NAT in home routers killed so many useful applications. Things like sending a file to someone in a peer-to-peer fashion, without middlemen, used to just work in the 90s. Then came NAT, and everything broke.

I wonder if the centralized internet we have today - where information sharing between people usually involves large server farms run by big corporations - would have happened without NAT. Maybe, without NAT, people would have just stuck with the old way of doing things. Why involve a third party when you can just connect directly?

NAT made it easy for the centralized services to take over. When NAT came, all the good p2p apps of the 90s and early 00s either ceased working completely, or at least became unreliable (applications were then trying all kinds of tricks for NAT traversal, but it was often slow or failed). The generally overly complex configuration for port-forwarding on routers didn't help either - if you ever tried to walk someone through setting it up back then via chat or telephone, you'll know what I mean...

With a clean slate like that, with the vacuum that was created, the centralized services could just walk in. Simply because they worked. Together with all the user tracking and surveillance that came with it.
I'm not at all surprised, but I am disappointed (to say the least).
> A lot of these suboptimal examples come down to the complexity of the optimization problem.

That and the rest of what you wrote is true in a general sense, for many examples of suboptimal code generation. I don't think it's true in the specific case of (most of) these suboptimal examples listed in the featured article. Almost all of these seem to be due to programmer oversight in formulating some rules or pattern matches, not due to heuristics for combinatorial optimization making unfortunate choices.

For example, of the eight issues listed for CompCert, only the two concerning spilling and coalescing seem to be due to imperfect heuristics. A bunch of the others are simply due to pattern matches that nobody had thought (or bothered) to add, as you can see from the linked patches. No combinatorial optimization, heuristic or otherwise, going on there.

Other missing pattern matches are Clang's vnmla instruction selection issue (again, there is a patch that simply adds a pattern somewhere) or the fact that it seems to lack some rules for computing the possible value range for expressions of the form "x % c" with c constant (or propagating such ranges to divisions by constants).

Even for some of the examples involving registers and spilling, I don't think it's unfortunate heuristic solvers. For GCC's "float to char conversion through memory" issue, a developer stated in the bug report that the cost model is wrong, implying that fixing the costs should make the solver find the "right" code. And the GCC "spill instead of register copy" example never even touches the r2 register anywhere in the function, so it would be available for allocation by even the most primitive heuristic solver. There, too, I would suspect a bug in the model rather than an unlucky solver.

So I think my point is, it's true that NP-hard problems are a curse in many subproblems of optimizing compilation, but there are many, many other possible reasons for missed optimizations.
Paper checks are going away. Some of the online banks don't even support them. ACH allows only 60 days to claw back the money(disputes) and with same day clearing requirement we can get rid of 2 day holds.
Hmm this is very distressing because all the relevant societal facts and not just the facts that paid for floor time must have voice in the court system. Inadmissible evidence and Evidence policies should not preclude common sense, inquisitiveness, a desire and action to become informed on a topic, and general understanding. In a case where media exposure would implicate certain individuals I can understand an imperative such as "watch no TV" but how in good conscience can one say "learn no more about the matter than what you know this very moment!" Seems like an easy recipe for buy-the-verdicts-you-like
'hand-rolled'?? Is there some other way of programming I don't know about?

I mean, say, immature, or lightly tested or something, but 'hand-rolled'??
So then you are like Triplebyte?

Also, this will definitely work great until you scale and when you are out of qualified engineering leaders who can help you vet candidates. How do you plan to manage that?
Apologies, I misunderstood it. You're right.
If it comes pre-configured with the same behavior as NAT (no unsolicited ingress), what does that really solve over using NAT?
The cure is ketamine? That's an animal tranquilizer.
Isn't this problem theoretically also suffered by e.g. ~5-person contract/consulting shops?
Is there a reliable exchange offering reliable short contracts?
Adding Ethereum to an illegal thing doesn't make that thing less illegal.
Τα γκολ δίνουν την λύση στο στοίχημα
And not only do I have to give them personal information to check, I have to use google's sign-reading I'm-not-a-robot captcha - feeding a little of my intellectual capability to their self-driving car companies.

They keep taking...
I see $130 for one of them and "Usually ships within 1 to 2 months." for the other.
>"What's similar is that there's a resource manager underneath - Borg for GCP, Mesos for DC/OS."

Maybe I don't fully understand DC/OS then. I was under the impression that DC/OS was simply a distro for Mesosphere. But your comment make me think that either my understanding is incorrect or else DC/OS has become something more than a Mesos distro. Could you elaborate? Thanks.
Right, until you don't like something that Google does with Tensorflow in the future or breaks compatibility with your app. I think alternatives in complex abstractions like these are always a good thing. Only a few companies can afford to do it so we have a guarantee that you won't have tens of them. Just a viable alternative.
> I'd be more curious what Clang did for values that would result in different behaviors for some ranges of a.

I don't think I understand what you mean. Can you give an example?

As for "the developer should write what they mean", one standard answer from compiler developers is along the lines of "but this code might not be hand-written, it might come from a primitive code generator". You can decide whether that convinces you or not ;-)
"just"

Consumers would love this. Financial institutions would not. Guess who wins this battle?
I think the funniest part is that fiber optics are irrelevant in space, you'd be better off just pointing a laser at another satellite and just using space as the medium.
The ZCash team is pretty serious: https://z.cash/team.html
So you're saying that companies that get hacked are "asking for it", or are complicit in the criminal activity? That's an incredibly broad stretch.
Clearly, both the bank and the individual are victims of the crime.

Generally speaking, the impact to the customer is usually greater, as bank business model aren't dependent on every loan being repaid. Consumers stand to lose money directly and lose the opportunity to access capital.

The credit agency or anyone else who has a breach is usually a negligent third party.
FEMA should stock empty water jugs, then sell them to stores in areas about to be hit.

Would be a lot easier than shipping bottled water.
I'm concerned that prior-hacking will become the new p-hacking.
This is kinda sad, but HTC havent released a really solid phone since the One M7.

After Scott Croyle left their design work really suffered too, the M7 wiped the floor with what Apple were doing design-wise at the time.
In regards to OSS, with Discord adding screen sharing and video chat this month, I don't see why anyone would try their product.
> Surely you choose Minecraft because it was unusual, unusual in delivering so much wealth to one person.

Notch shared a lot of the money, hence my focus on the total sales price. Lots of people have gotten extremely rich on an individual level from video games, if you want to nitpick about that: Gabe Newell or Palmer Luckey. There are other Asian examples, and a number of billionaires benefit heavily from video games, like Bill Gates or Mark Zuckerberg. None of this affects my point: no matter how you slice it, the quoted aristocrat is not particularly wealthy.

> You also said the House of Lords is "largely inactive" which doesn't really seem connected with reality either.

That's literally from the article.

> Do you mind sharing why you're so keen to minimise this?

Because I am incensed by lying with statistics. There is no excuse for lines like "Nearly half the land is in the hands of 432 private individuals and companies". That is lying to the reader and trying to trick them. Unforgivable.
The bad thing about that is the first 3 digits are the location digits, so someone that has the last 6 digits can easily guess your full SSN if they know where you were born (or where you lived when you got your SSN).

https://en.wikipedia.org/wiki/List_of_Social_Security_Area_N...