skysight-inc/HackerNews huggingface dataset:
I don't buy the "you can't teach yourself this on your own" thing. At least not in the sense that genius is a necessary requirement. The more time I spend on this stuff, the better I seem to become. The pace at which I learn may be different than other people (which might be due to genetics but it could just as well be due to environmental factors such as having fewer distractions than other people or simply having had habits growing up which weren't necessarily mathematical but might have served to grow the components of the brain that made all this stuff easier) but I seem to be able to do it if I just dedicate enough time on it.

In other words how good a person becomes at the task is essentially monotonically increasing (as long as you don't take a long break and forget it all), the difference between individuals is the slope. The curve doesn't seem to have any upper limit, though at times it seems to have a very slow rate of growth. But you'll only reach a desired level if you invest enough time on it. In school you have a fixed time-constraint, which is why, together with the mental model I described, some people fail (as well as not investing enough time on it of course).

Talent or genius only affects how rapidly a person learns, but as long as you're motivated enough to keep going and your time-constraints are wide enough I don't see a rational reason you couldn't do it. But I also think the growth-rate could be bumped up for everyone if we talked more about the ins-and-outs of how to go about teaching this all to ourselves.
And this btw where a lot of people could contribute - just translating a good article into an under-represented language (or, alternatively, an article unique to some language into more languages) would be much easier for an unexperienced contributor than writing a good one from scratch, and the impact is pretty much as large.
>Their security culture is broken.

That sums it up perfectly. This is not a mistake here or there, but a fundamental lack of appreciation for even the most basic principles of online security. It's like no one there is even thinking about the consequences of their choices.

Elsewhere on this thread, I commented on their reliance on an outside security firm to post-mortem this incident. That is ridiculous. They don't seem to understand that they are in the security business as much as anything else. They can't outsource this stuff. Their internal teams should be unparalleled.

You're right. It's absolutely cultural.
I'll buy it. Please do! I really like the idea of being able to share this with people just getting started who find algorithms intimidating (we're not all math double majors :P). It probably can't serve as a primary source of material but is a great supplement.

Grokking Algorithms by Aditya Bhargava is something I skim for fun occasionally and this seems like a great complement!
There are two major issues here:

1. In your setup, you don't have offsite backup which opens the door for all kinds of potential data loss scenarios.

2. Backblaze's software continuously backs up over the internet, which is not trivial to do with free software.
>Until Equifax and the like get sued out of business, Equifax and its shareholders won't feel the heat.

Equifax's breach might be deserving of it being sold to the government for pennies and having leadership reorganized (read: fired), but I don't think we can nuke it out of existence immediately. Primarily due to it being relied on by so many other banks and services.
FWIW, the referenced article describes it more conventionally:

> The distance was 3,089 kilometers (approximately 1,915 miles)
My solution is to put the buffer implementation into a module that is used as a dependency for a standardized "buffer" functionality. That way, if I know a piece-buffer or rope will be more efficient, I can choose which implementation to fills the dependency.
"The only thing Social Security numbers should be used for is to pay our taxes, which identity thieves are welcome to do."

Likely they may not be paying taxes, but have already found a way to circumvent the system such that they collect something (aid, EI, etc).
My Talking Tom.The Most Viral in YouTube
login.gov is using "Let's Encrypt", which is kinda awesome :)

Should they have used an EV certificate?
I have friends who go there and from how they've described the coursework it seems like it would be very effective. There's a huge focus on students helping each other out and also having to find the information for themselves in documentation/Google. I'm pretty sure they're learning C if I remember correctly. I know they've had a branch in Paris for a while and opened the Silicon Valley branch recently. There's definitely people getting hired from there into big companies. But this is all hearsay. They have info on their website so I guess it just depends on what you're looking for.

42 is free to attend though so if you're talking how they fare as a business, it's funded by a billionaire.
USPS is no longer really part of the federal government.
Very similar to Ithaca Hours (https://en.wikipedia.org/wiki/Ithaca_Hours) which were sparsely used in Ithaca at the farmer's market while I attended Cornell
Applying for jobs my senior year of college was such a pain because of this. Why is there so often no degree option for "I will have my degree very soon".
Last Name:
test

Last 6 Digits of Social Security Number:
123456

> Based on the information provided, we believe that your personal information may have been impacted by this incident.
As another commenter mentioned, I can't take credit for it. I first read it from Joel's blog.
We have a similar service in Hungary since 2005.

I wonder why something like this was not a thing in the US before? I mean we are not a 3rd world country but definitly behind the US in almost every aspect. Is it something to do with the relationship between the states and the federal government?
Use pew, not virtualenvwrapper, for Python virtualenvs
Large amount of low-level embedded programmers are hardware designers who learned C because they needed it and usually use various weird programming styles, usually reminiscent of HDLs and PLC programming languages.

Other embedded programmers are just that, programmers who found a programming job that happens to be in this sector and learned the peculiriaties on-job.

Also bear in mind that there are different levels of "embedded" which ranges from writing code for some obscure MCU directly in hexeditor (as it is so obscure so nobody bothered to write assembler for it) to writing applications in Java for something that is essentially android tablet bolted onto some larger system (be it car, airplane or some industrial machinery)

Edit: also habing custom hardware is not that capital intensive unless you plan to mass manufacture said custom hardware. And almost any piece of custom hardware has some MCU programmed in C and/or device driver which is also written in C.

Over last 10 years I've participated on development of about 5 different pieces of custom hardware for various niche applications. This includes industrial sensors, IoT-ish stuff and somewhat peculiar reliability and security enhanced PC platform.
Yes, read the full terms for yourself. But you linked to the equifax terms, not the TrustedID terms (which do not include the FCRA exemption).
A highly de-centralized one, with information joined together across services only after authentication, authorization, and a lot of artificial identifiers. Or at least, in a context where the people driving product decisions place a high priority on security.

In reality, we're in the world you hypothecate right now. Centralization is really convenient for a lot of uses, and security advocates are rarely in a position to impose the kind of privacy controls the rest of us might like. And the average people who buy services LOVE the convenience enabled by centralization - until there's a breach, and they disapprove for a few days.
A benchmark of how quickly a development team produces value has no relevance whatsoever to whether a language can, or should, be more aggressive at function inlining. These two notions are orthogonal.

The benchmark detailed doesn't necessarily make a bulletproof case for the usefulness of more inlining in the Go compiler, as it's only a single benchmark, but for its intended purpose it at least shines a light on one aspect of the Go compiler the team may wish to evaluate more extensively in the future.
I'm getting "Oops, something went wrong" for nearly everything I do to create an account. Took two or three tries to get my password correctly set. Then I was given the prompt to add my phone number, but got another error and ended up signed out again. Definitely needs some work.
I wouldn't - I'm saying someone can trivially damage the chip on a stolen card and just use the mag stripe and signature instead.
Not sure what film to watch? Try goodmovieslist.com
If Uber matches a driver 10 minutes away to me when there are available drivers 3 minutes away and I cancel, it seems like Uber's fault for any distance that 10 minute away driver traveled needlessly.
There wasn't when I posted the comment.
I agree with your principles. Unfortunately I don't have a solution to recommend.

As with all cybersecurity incidents there are going to be a lot of vultures circling this mess, happy to Hoover up your money in exchange for nebulous "protection"-- but even Lifelock got hacked some years ago.

Paying for "credit protection" doesn't also address some of the other things fraudsters can do armed with your PII, such as filing and collecting fraudulent tax returns. Have fun sorting that out.

My own data was leaked. What am I doing? Admitting I'm fucked, refusing to feed the vultures, and for all else I have the number of a good attorney.
The reason the focus is on the SSN is because it enables credit. Privacy is important, but so is protecting your finances.
It is possible, but Go functions are not C functions: https://golang.org/s/go11func
> which, as far as I can tell, started in earnest with Julia Evans

Sacha Chua <http://sachachua.com/blog/> used to do this way earlier than Julia Evans.

No flame though, just wanted to point this out.
The interesting thing about this example is that literally both of those specific companies (and other QSRs with online ordering) are actively researched by hedge funds this way. You can uncover a truly magnificent amount of data by doing this with, say, their mobile apps' private APIs.

I have no idea if they do it to each other though. I'd guess not.

To make this comment even more meta: I leave it as an exercise to the reader to figure out how you can use this technique on Uber to get competitive intelligence about, for example, how many total restaurants are currently signed up for UberEats, how many have ever signed up and the rate at which more are signing up in each region. The UberEats mobile APIs offer a way to do this, though individual restaurants use non-sequential UUIDs; do this every day, break it out into a timeseries, and compare it to GrubHub. Voila, you've turned their game against them.
Caixin reported that this is based on clause 3 of the regulation issued on 9/4.
> Sometimes I'll watch a movie, I'll think it's an 8/10 but then see it has 4/10 on imdb, so I'll give it a 10.

Do you really do this?
Who is trying to leverage his lowly position into the governors office or a senatorial seat.
Nah. DV gives you the same cryptographic guarantees, but with the benefit of 100% automation.
> Now, the crypto world was created as a direct response to that problem - nobody can issue fake bitcoins/file coins

Depends on your definition of "fake"? Anyone can ICO a new "real" crypto coin, but what gives those coins value beyond speculation?

If I make "klipt-coin" (which would cost me nothing but a little time) will you buy it just because it uses cryptography? If so, I have a crypto-bridge to sell you.
I once got a parking ticket, and I was trying to figure out how to pay it online. I found a site for the city that I was supposed to put in my license plate number and my date of birth to look up a parking ticket in order to pay it online. I realized that the car was registered to one of my parents, honestly I wasn't sure I had their birthdays exactly memorized, and I couldn't contact both of them at that very moment, so I tried guessing a few dates for the birthday field. I got frustrated, and ... well I've participated in a number of security CTF challenges / puzzle games, where SQL injection is a common technique you're expected to do, and step 1 of many CTF challenges is to literally put the following characters into each text field you find:

' OR 'A'='A

It's like the SQL-injection version of "open sesame". It's generic, fitting a common coding mistake, not tailored to any specific site. It's a force of habit to use while working on CTF challenges ... Desperate to solve my problem of finding my own parking ticket, I reached to that knowledge without really thinking about it and used it. It worked, and the page showed me hundreds of parking tickets with people's full names, license plate and driver license IDs, addresses, and ticket amounts and descriptions. (A glance showed a few people were racking up thousands of dollars of parking tickets, seriously wtf?) I worried about what I did and closed the site. (Well first I scrolled through the list to see if my own parking ticket was there. It wasn't. Turns out where my parking ticket was given was actually in a different city; I was checking the wrong site to begin with.)

I thought about reporting it, but given that I already exploited it and saw private information, I thought twice. I've reported security issues at sites before, but never at a government site or involving me having seen people's private information. I got panicky and just closed the site. I don't owe them the report and the risk it puts me at. It's a nice thing I do for people who invite it or when the risk is low, but somehow I think legal actions are more likely from the site for a local court. If anyone owes anyone, it's the developers for risking people's information so carelessly and for putting me into this type of bind, but somehow I think if I reported this I think I'd be the only one at risk of being treated as a criminal.

I'm not fully sure why I felt compelled to think this was all relevant to this thread. Maybe just to illustrate some of the stress that comes from the vulnerability-reporting side of things. If you want secure systems and for people to report issues as they see them, then sometimes you need to invite the reporters. The difficulty described in the article of even reporting the issue makes me think I'm probably very far from alone in avoiding reporting this type of thing.
What's "MFA" here? Many furry animals? Multi factor auth?
In 1925 the Federal Arbitration Act was passed. https://en.wikipedia.org/wiki/Federal_Arbitration_Act The intention of the FAA was to provide a way to streamline legal/business relationships between two corporations and it was largely used that way until...

The Supreme Court said "Other laws don't matter - if there is an arbitration clause you have to go through that: No Court For You regardless of how you were injured." ( https://en.wikipedia.org/wiki/Southland_Corp._v._Keating )

And then they were all like "Even if the law explicitly says you can take the party that harmed you to court, you can't": ( https://en.wikipedia.org/wiki/Preston_v._Ferrer )

And then in 2011 they went absolutely bonkers and were like "OK, listen guys. Before this was just between businesses... but now a business can use it against people." ( https://en.wikipedia.org/wiki/AT%26T_Mobility_LLC_v._Concepc... )

and then all hell broke loose and now every company tries to use them for everything.

The link provided was just the most recent example of the SC expanding the power of the FAA.
> Not all people update their Windows. Some just don’t care. Others people don’t want to connect PC to the internet. There’re also people who use mobile internet and pay for bandwidth.

And sometimes Windows Update simply stops working. I've seen it happen more than once.
My experience was that any "Instant Qualification!!" fails instantly, and then you can't unlock it.

After Equifax lost my data in the last (T-Mobile) breach, I locked all three providers. Each of the places charged me $10 for the privilege. I still claim that Equifax should have covered if not for all providers, at least themselves, instead of providing me with worthless credit monitoring. But that's a whole other rant.

I was applying for a credit card. The bank then followed up with, "We killed this because we asked Equifax, and they said no. If you still want a card, you can apply a temporary unlock for us."

The problem is, as is clear from all the other posts here, Equifax is terrible. You need to send your super-secret unlock pin via mail to somewhere and link it up with something and blah blah blah...

It was more trouble than it was worth. I asked the bank if they would consider switching to another reporting agency because Equifax was demonstrably terrible, but they said that once they select an agency for a transaction, they're locked into it.

So, I let that request die. I can try again some time, and there's a 1:3 chance that I'll get screwed all over again, and a 3:3 chance that I'll have to unlock something, and a 100% chance that I will get angry.
It seems to me that all three of the above depend upon being able to certainly verify someone's identity.
I didn't know the China gov't new agency had such an online presence (and in English).

Their "recommended reading" includes an article titles "The miracle called Communist Party of China"[1] written by the Chief Minister of Punjab Province, Pakistan.

The CPC defies conventional wisdom and logic pertaining to political outfits. This dizzying pace of transformation defies logic, for this was done in barely a few decades and only could have happened because a robust body like the Chinese Communist Party stood behind the strategy.

[1]http://en.people.cn/n3/2016/0711/c90000-9084277.html
On an emotional level, the further down the stack, the more excited and enthralled I am, and the higher up, the more disillusioned I am with how and why things are done. I've been looking for a foot in the door to embedded.
Consumers always make objectively ideal decisions. What you think the best good for them to buy is not necessarily what they think, and they are the ones who are right.
Selective recall? Those guys predict a lot of earthquakes. You really have to look at it statistically in terms of all hits and misses of their predictions.

I can predict there will be an earthquake in the pacific ring of the fire in the next 72 hours, but me being right doesn't mean I know anything except that there are a lot of earthquakes in the ring of fire (which is something, but not specific enough to do anything with).

Also, if there is a link between solar activity and earthquakes, earthquakes should show an 11 year cyclic pattern, and they don't.
Actually what they do is early filing to receive any refund that would be coming to you.
Right, though some side effects (e.g. Status registers) might be affected. (One reason strict modes blow floating point optimization, generally.)
There is no "criminal defense insurance". Believe me I looked all over. There are just some surprise expenses out there you have to be prepared for.
Sure you can do this, but (other than in the context of shellcode), why?
Attorneys' fees in a class action have to be approved by the court, and for large class actions the percentage fee tends to be lower than what a privately-retained lawyer would receive. The privately-retained lawyers in NTP's lawsuit against Blackberry got an approximately 1/3 payout of a $600 million settlement. 20-33% is quite typical in a pure contingency situation. Most court-approved fee awards in class actions that large ($100m+) tend to be a lot lower than that, in the 10-20% range. Courts usually will demand that attorneys submit their billing records (or summaries thereof) along with their fee petitions, and will regularly cut down any fee requests that exceed a certain multiple of what the attorneys invested in the case.

This case is typical: https://www.paymentcardsettlement.com/Content/Documents/Orde.... $5.7 billion settlement, about $500 million in attorneys' fees, or less than 10% of the fund. $160 million worth of time invested by the attorneys to get to that point.

> And you can't make any kind of cost argument because a billion dollar case isn't anymore complex than a million dollar case.

That's not true at all. Big dollar value cases involve either large harms to relatively fewer people, or relatively small harms to large numbers of people. The former kind of case often involves complex subject matter, such as financial transactions, medicines, etc. The latter kind of case often involves a very diverse class and complex issues of causation and damages. Consider the TicketMaster lawsuit: the basic theory of damages is that class members would not have purchased the tickets had they known that TicketMaster was marking up things like UPS charges. Well, clearly lots of class members would have purchased the tickets anyway. Coming up with a realistic damages model in that scenario is difficult. Furthermore, in big consumer class actions like that you've got class members in fifty states with fifty different sets of laws.
Don't forget pasta, avocados, pineapples, chocolate, potatoes or chocolate
I would be careful with anything politico's says about fake news or anything for that matter.

"In November 2013, The Washington Post wrote a lengthy article detailing a payola scandal in which Allen would give favorable Politico coverage in return for advertising dollars.[10] Mr. Allen has refused to publicly comment.[11] Jonathan Chait described Politico's response as 'evasive tripe'.[12] Writing in Salon, Alex Pareene described his work as "indistinguishable from a paid advocate for business interests."

https://en.wikipedia.org/wiki/Michael_Allen_(journalist)

Politico is a well known "fake news" money grubbing operation. Their "news" stories are pretty much paid advertisements.
Given that this is a typical identity provider, I'm curious there's interest to make this service available to the saas industry at large.

For example, I'd rather NOT have to manage login credentials for my bank, mortgage car payment, and various airlines.

I'd rather let login.gov handle it.

Moreover, as a saas provider, I wouldn't mind deferring this liability to someone other than google or facebook.
great, then I'll buy the whole 16 millions of it, I could not care less about China, I think their presence in bitcoin is bad, as in everything they do, they are not consumers, they are locusts, they are in it only to profit, to make money, I dealt a bit with chinese, eg. wow gold and is a simmilar story, they did more harm to wow with they gold selling than good.
Have you ever had a post paid cellphone plan? Rented an apartment? Gotten car insurance? If so you are probably in the database. You can check what data these companies have on you here:
https ://www.annualcreditreport.com/

>What's to stop them from re-entering society in 10 years only to discover they have a massive amount of debt?

Nothing. They would have to file several disputes.

>There must be some way for me to exclude myself from this market, from the woefully inadequate security practices of our financial system

There is not.

>I'd like to look into this 3rd party agency you mentioned, if you don't mind sharing the name.

I am not the person you are replying to but I do my credit monitoring with Credit Karma and it's free.
Uber eats the cost every time you contact a support agent regarding your cancellation fee (assuming that your fee is indeed credited.) :)

Automatically taking responsibility for all cancellations--whether malicious or not--would be a vector for fraud and abuse.