skysight-inc/HackerNews huggingface dataset:
As a Java developer, this gives me the lesson not to use smart meta programming facilities, like reflection, where possible. You reduce amount of code, but at the cost of making your protocols injectable to arbitrary code often in unobvious ways.
If you can quickly sell 42M worth, it's risk free. Otherwise, you're betting on the long term viability of Ripple.
Certainly more relevance than a Music degree. Having been a security researcher in the past would have helped too, but that's not on the menu either.

I would like to understand the thought process that resulted in hiring a Music major to run an organization in charge of protecting one of the largest troves of PII in the history of mankind.
1) Target individual for identity theft.

2) Search their twitter history for "I just froze my credit" or similar.

3) Try the PIN corresponding to t-1, t-2... t-5.

4) Profit!
It's not really important if the community is ambivalent on using it. Who here opts for using custom elements (and the extra work) over a library like Vue, React or Angular?

Is there even a consideration on how these new features become just another tool to spy on people?

To me it is far more important that Apple take its time letting these APIs mature and being reviewed for security and performance than blindly implementing anything that Google demands.
I'm not jumping to any conclusions. The exploit appears to be a deserialization bug in a the REST plugin for Struts that allowed the attackers to perform arbitrary code execution:

>The bug specifically affects a popular plugin called REST, which developers use to handle web requests, like data sent to a server from a form a user has filled out. The vulnerability relates to how Struts parses that kind of data and converts it into information that can be interpreted by the Java programming language. When the vulnerability is successfully exploited, malicious code can be hidden inside of such data, and executed when Struts attempts to convert it.

>That means intruders could easily inject malware into web servers, possibly without being detected, and use it to steal or delete sensitive data, or infect computers with ransomware, among other things.

https://qz.com/1073221/the-hackers-who-broke-into-equifax-ex...
It's actually spelled 'raycis.'

And the reason why Kaepernick's kneeling is silly is that black-on-black crime is orders of magnitude more of a problem for the black community than police shootings of young black males. Black males committed 52% of all homicides between 1980-2013, despite comprising only ~6% of the population. That's almost an 8.5x per capita murder multiplier.

There's also evidence that in lethal force situations, police are more likely to shoot whites than blacks (https://www.washingtonpost.com/news/wonk/wp/2016/07/13/why-a...). In less-than-lethal situations, it may be the case the minorities are treated more roughly, but that's not what BLM is about. It's a movement which is confused about statistics, and which I suspect is sublimating a more generalized anger about the West and a relatively low position on civilization's status hierarchy into an emotionally charged topic that they think has good optics.

I expect this post will get me banned, because applying logic to identity politics is taboo in 2017. #JamesDamoreMatters
No facebook account here. Never had one, never will have one.

Also pay off CC in full every month, so no interest payments on what are effectively short term loans.

Neither is at all psychologically expensive. However paying off CC in full every month does require sufficient income (and/or restraint in spending for those without the sufficient income) to be able to do so.
It seems that the most likely explanation for the pay gap is the gap in dedication and energy spent at work. Until recently, many studies had found a bias against hiring women women in education and tech. But once corrected for lifestyle/marital status (i.e. single men without children compared against single women without children, etc), we observe the opposite picture. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4418903/pdf/pna...
That certainly hasn't been my experience working with JEE.
Please, read the description of the bug. The bug isn't caused by layers of composition. In many sense, the bug is very similar to SQL injection.
Did you reply to the wrong comment? That doesn't make any sense.
Irma devastated St Thomas, my home while I was off island. My residence was lucky but many are without homes, the roads are covered in debre including live power lines. The hospital has been ruined. Streets flooded. The BVI is just as bad. The island still has very little communication. It took 50+ hours to hear from the people who bunkered at my house which happened to have a concrete roof.
The grid is down and it sounds like it will take months to get it back up. Those who do have generators will most likely run out of fuel soon. I've heard of only one operational gas station.

If anyone has any contacts that could help send supplies we have a few jets leaving from NYC Monday. Solar generators, power walls, anything like that.
>If everybody switches to electric do we have enough raw materials for batteries like lithium to supply the whole world?

This is a common misconception about batteries. Lithium makes up about 2% of the mass of a Li-Ion battery, and
it is more abundant in the Earth's crust than lead or tin.
60*24 = 1440 possibilities. If you guess half these numbers you would expect to crack half the pins.
Do you mean Allen?
It is legal in, for example, Sweden:
https://en.m.wikipedia.org/wiki/Telephone_recording_laws
Run Xbox and PSP Games on Android 2017
Whats the benefit of opt-out? Whats it about? I know Equifax was hacked but havent had the elusive free time to delve into it.
Where are the lob.com guys?? This is a GREAT PR opportunity for them.
> they would have to find a human judge who would let them, and I imagine those are in short supply in a case like this.)

Would it be possible to find any judge who can try this case, since the set of people affected by the breach is basically everyone?
What happens when you have 10 valid applications as a landlord? Do they even have to tell you the reason why they chose application 3 over all the others? How does that work?
So, you read the article after being called out for not reading the article and are now trying to selectively re-interpret it so you don't look silly?
Well, Tesla has that whole change out the entire battery in a few minutes thing going. There's also research into superchargers and capacitors that work like batteries. There's also the change in behavior and expectations. People can adapt some of their driving habits to meet charging requirements. Also eventually the whole move to self-driving cars.
Show HN: Watch YouTube from Menubar with MenuTube for MacOs
Literally any restaurant or shopping center will install a charging station in a heartbeat since it means an opportunity for a captive audience. They already have the space and the power supply, just need a reason to want to bother. My group is installing 2 spaces this week in one of our properties in downtown Memphis as an incentive to all our Tesla-driving office tenant execs. And we aren't doing it for free; charging for a power fill up is a new potential (small) profit center for us, and we will gladly install another dozen if and when We need more (edits: to clean up language)
Congrats on shipping.

I think your copy could use some improvement. Casual professional is a hard tone to do well.

Also, this should be a single call for a user where you give me all of the users feature flags. Then I can put it in a session cache and be done with it. These things by design never change for a given user.

This is not a technically difficult thing to do (until you reach scale) so I think you will get more return from investing in marketing than development.

Gl.
I am not the downvoter (and I didn't donwvote you) but I explain why it won't help. Struts is packaged as a jar file which is distributed inside of the war file which is basically application. The struct's jar is an essential part of the application and it can't be updated separately by the OS.
Storage is backbone of the Internet persistence. Just a few quick ideas below.
I would keep this "storage" label and invest in some higher abstraction level knowledge like Ceph, GlusterFS, AWS S3.
Also SSDs are ousting HDDs nearly in every on-premises application with hot data. Maybe writing some tooling for massive storage fitness/performance analytics would help you land a niche/job. To understand a new role you would need to learn what problems you can solve for potential employer/customer.
Maybe try to apply for eng. position at some Internet giant companies G, A, FB. They often get interested in smarties in other fields.

Definitely your career transformation will need a lot of effort and sacrifices if you stay full-time at old place but it is doable. I wish you best.
No, you're exactly right. If you think about it, both of these things are (almost) exactly equivalent. In both cases you are separating out a third control branch. The only difference is the syntax you use to specify what happens on that third branch, and whether or not that branch is taken immediately when the non-true-non-false value is generated. It is exactly the difference between (say)dividing by zero throwing an exception or returning an infinity or a NaN.
*Allen
How do you get a text message when crims setup a new credit account in your name?

That's what the 10yr monitoring is for?
If we are ever in that situation, what's going to change is the way the car is used; people will adapt to the new expectations just like they adapted to not having a 'real keyboard' on their phones.
Evasi0n – an untethered jailbreak for all iPhone, iPod touch, iPad and iPad mini
> It's quite trivial to go from here to execution of arbitrary code.

Code that does what? Dumps all environment vars? OK, maybe that produces a DB2 connection string. Refactor code, re-inject, does the connection work? OK. Refactor code, re-inject and dump all tables. etc...

This attack requires an iterative trial-and-error probing process, typically done behind a proxy for many weeks/months.

From Equifax's PR: "the unauthorized access occurred from mid-May through July 2017.".

That's a reasonable amount of time to probe all systems involved and develop sophisticated code.
Friend mentioned a coworker with a Nissan Leaf. Coming to work to find all the charging spots taken up by Tesla's. The butthurt being, they're topping up because it's convenient. Charging is free and the spots are right in front of the building. Where he needs to top up to get home after work.

Improved, 200-300 mile range fixes a lot of that. With my current 30 mile round trip commute I'd only need to charge a Chevy bolt once a week. With my old ten mile commute... twice a month.
Something worth taking into consideration is these companies are not Engineering/Tech companies at the core. They were probably born as paper-companies and digitized their operations later on. I am hoping for the day something and more appropriate for this age will make them irrelevant.
For all developers who loves YouTube and audio content such as podcasts, interviews, audiobooks or music.

Free and open-source:

https://github.com/edanchenkov/MenuTube
Of course, most of the really great stuff had been funded by ARPA before the whole thing became DARPA. Weren't a lot of the Xerox PARC people refugees from that whole process?
So people seem aghast at this move e.g. Calls of "rent collecting" (which I assume really means "rent seeking" [1]).

Michael Carrier (in the article) notes the tribe "played no part" in the drug's development.

So the question that occurs to me is what about the tax arrangements made by tech companies to "sell" patents to foreign entities and then lease back the rights in what is transfer pricing [2] by any other name?

Those countries and entities played no part in that development either.

Not that I'm defending patents in general or in this case. I just wonder if people view the situations similarly.

One claim by the company is clearly absurd, calling the patent review board "double jeopardy". It's no mor doubl jeopardy than hearing a case in Federal district and appellate courts is (yes, yes, I know appellate courts don't try facts). The review process is meant to streamline th process and is simply the first step in a judicial review process.

[1] https://en.wikipedia.org/wiki/Rent-seeking

[2] https://en.wikipedia.org/wiki/Transfer_pricing
> Whats it about?

If you'd clicked the link, you would've seen the following on the home page.

> What's all this about?

> In light of Equifax's recent security breach, they are offering a year of complimentary credit monitoring services. The media have noticed that in their Terms of Service, they include a binding arbitration clause which means you give up your right to sue them in a regular court and must instead go through an arbitration process.

> While the company has since clarified, under pressue, that the security breach is excluded from these terms, binding arbitration clauses are a growing trend that remove legal remedies like class action lawsuits from consumers. It is especially reptillian that they would have consumers give up their legal rights in the aftermath of a breach, for a product we only need because of the breach.

> The arbitration clause has an out, in that you can opt-out within 30 days of signing up. However, opting-out requires sending a statement by mail, which is sure to dissuade a lot of people. In order to make opting-out as simple as opting-in, I created this site.
You can simply ignore the political posts on HN. If criticism directed at Trump and "social justice propaganda" is bothering you so much, perhaps you need to reconsider your life.
Here's my guess: We hit the target of the Paris accord without having to pay anyone a dime!

The talking point: "it doesn't compel anyone to do anything" is probably still valid.
> super illegal

Trafficking large quantities of drugs, aggravated assault, serious sexual assault, murder. These are super illegal. No one is going to prison for recording a support call that reveals impropriety on behalf of the company providing support.

Many people here seem obsessed with laws, as if they possess value and worth in and of themselves, when really they are a very high latency side channel of society and power. The steps that would necessarily have to occur in order for a case to be brought against you because you illegally recorded a support call that revealed impropriety of the other party are fairly preposterous.

Anyway, all of this can be avoided by simply stating something along the lines of "I am recording this call for my records. Please advise me now, or at any stage, if you wish the recording to cease."

The illegality of acts like those I mentioned above can't obviated by stating your intention to commit them and offering an opportunity for the other party to decline to participate. In some jurisdictions it is a form of assault to seriously state your intention to harm another.
Cue logo_prime_finder.py in 3…
Re: "their own fault". In one sense, yes, that's true, but this type of reasoning irks me, because you're kind of assuming that the language design is inconsequential -- when it clearly isn't. I could also (somewhat absurdly) also argue that Malbolge[1] is a perfectly reasonable language. After all, if you fully understand Malbolge, it shouldn't be that difficult to write correct programs in it, right?

This is obviously a bit of an Argumentum ad Absurdum, but I think it makes the point pretty well? There are concrete, important differences between languages regarding error-proneness, etc. The reality is that humans are lazy, fallible, etc. and we will make random mistakes, so if we can prevent mistakes (or at least catch them early), then that may be a worthwhile trade-off. Especially for such a trivial case. When was the last time you actually needed "null >= 0" to be true, for example? :)

[1] https://en.wikipedia.org/wiki/Malbolge (pleasantly surprised to see that it has a Wiki entry)
I tried to briefly summarize this in the "What's all this about?" section, let me know if anything is unclear. Essentially the benefit of opting out is you don't give up legal rights to a company that just proved incapable of handling your data.
Does anyone have any information about taking them to court yourself (small claims or otherwise)? This breach has affected me and as a cryptographic software engineer, I am exceptionally upset. I intend to go as far as my funds and personal knowledge will carry me.
And unlike oil, Lithium can be recycled indefinitely
Well I mean, what it comes down to is you need someway of establing that it's actually you over a phone or Internet and you can assume that an equifax-equivalent would be storing that info regardless of exactly what it is in Sweden.
Jeff Bezos Mandates Programming Shift at Amazon Studios
Safari doesn't compare with how IE was in its heydays.

In IE times, it was the majority browser and web shops were complaining that they were developing on less popular platforms (typically Firefox, and Netscape before it) and then ranting about how IE did things differently. Had they developed for IE all along with an aim for compatibility with FF, they'd have done things differently and, in many cases, compatibility wasn't that hard if you targeted lower common denominator - that is, a few earlier versions of each browser.

Sure, you'd miss out on the latest browser features, but that's not what web dev was about then. Rather, it was - depending on the shop - about making a site work on all platforms, or about making it work on IE and to hell with other platforms - with great despise from the rest of the community.

For some reason, things changed in recent years. Chrome is now dominant, and for whatever reason developing against its latest version has become the new normal, with web shops complaining that other browsers aren't keeping up fast enough, and no echo chamber to counter that discourse by pointing out that "hey, why aren't you targeting older browsers to begin with?" In case it needs reminding, iOS 7 is from 2013 and iOS 5 is still running on 2010 devices. That's only a few years ago. For comparison, we coped with IE6 for well over a decade, and XP (from 2001) only recently got deprecated.
This seems to imply that NFL players come from the middle class, and without them there will be a lack of players. But is that actually true ? The sport could just end up being watched by middle class and played by the poor, who might be more willing to risk their brains to overcome economic hardship
Parent says "Pensions are a Ponzi scheme, don't fall for it."

While public pensions like social security have certain features of a Ponzi scheme, they can be sustainable forever, unlike other Ponzi schemes. In fact, they can be more efficient than everyone saving and investing for retirement themselves: https://www.economist.com/news/economics-brief/21727877-fina...
Isn't a call option really a call bond, and a bond is an instrument of indebtedness.

This article has typos & I fail to understand what they're trying to say, specifically this part:

> If that code is never called upon again than it would have been foolish to clean it up in the first place. However, lets say a radical new feature is going to added – these quick fixes and become very expensive to deal with. Time has to be taken to fix these issues right before deadline or no one on the team remembers pertinent information need for the code to make sense in the first place

Ignoring the fact this is full of grammatical errors & makes no sense, the "call option" metahphor implies I may have to cleanup an entire codebase at some unknown point in time, which isn't true -- its always possible to shoe horn in more quick fixes instead, just like you could pay off a credit card with a cash advanced from another credit card, going further into debt. So Debt is the more appropriate metaphor in my opinion.

> The problem with technical debt as a metaphor is that for managers debt can be a good thing

But technical debt can be a good thing. And so can a call option, if it never gets called. The article itself points out you may find out later on that you do not even need the code after all, and therefore any cleanup would have been wasted effort. The author is grasping for a metaphor to make technical debt sound more evil than it probably is. No one is going to force you to cleanup your code. You still have the choice of adding more messy code, and going further into debt. Because you have that choice, its just debt, not a call option. Debt, including technical debt, can be a good or a bad thing. Just like real debt, technical debt can be used as a growth hack. If you can write some crappy code that makes you a million dollars, you can go back & pay someone to clean it up later. Its not inherently evil.

A call option would be a good metaphor for a security problem. For example an Equifax programmer may have pointed out the leak to his boss, who said let's spend time on new features & instead ignore the security problem [therefore giving out a call option to the public, for short term financial gain]. Then some hacker from the general public came along & called the option, by exploiting the leak. Now Equifax has to pay up. So technical debt is not a call option, security issues are call options.

Since writing messy code has been shown to correlated with bugs & security problems, I guess you could actually argue that messy code is a call option because it might get exploited, or crash production... both of which are a loss.

Although a liability would be more appropriate metaphor, because you can eliminate liabilities as you gain new information... your product starts becoming more popular over time. A call option cannot be canceled just because of a market uptick. Messy code can be eliminated as your product's market is validated.
EVs in China produce two to five times the amount of smog as gas vehicles, because the supporting energy mix is so dirty.

https://www.scientificamerican.com/article/in-coal-powered-c...

Should be good long term, if China realizes other energy sourcing goals, just... EVs alone don't fix everything.
I would read the PDP-6 Lisp description as meaning that negative and larger integers were boxed, not that there wasn't a way of representing them.
In 20 years the tech might advance so much that we could be charging them at home, like iPhones.

(maybe it's impossible, not a scientist, but I'd like to dream)
Yes, I suspect they will be as pervasive as vending machines or pay phones 30 years ago. The biggest trick is faster charging.
> The wimpiness of the Nix language is a virtue.

Why does there need to be a language? Why can't there just be something like a manifest in JSON?
Yes. The Nissan Leaf has a range of 107 miles. How is most of Florida supposed to evacuate before a hurricane if they all drive EV's? There already isn't even enough gas down there for everyone.
Do AC induction motors (like Tesla's) use magnets?
crazy alternate theory
It's only trivial when your needs are trivial. See https://launchdarkly.com/buildbuy.html

At scale, a hosted solution might be justified.
Spending cash is a lot harder psychologically than spending money with a CC. Dopamine is in effect.

Much easier to keep scrolling and consuming on FB than stopping.

That's the comparison.
> How do you record the consent itself?

I suppose using a call recording device for a fixed line telephone, or an app for a smartphone.

> I'd assume you'd need proof that you had asked for consent prior.

My point is: even if you neglect to ask for consent, no company is going to sic their lawyers on you if you play back to them a call recording that proves they lied and therefore failed to meet their contractual obligations.

Edit: Oh, sorry, I see what you mean now about recording consent. You start by recording the call by default, if the other party requests the call not be recorded you cease recording. It would probably be okay to retain that portion of the recording.