skysight-inc/HackerNews huggingface dataset:
US citizens can legally exist without any government identification or documentation whatsoever - no SSN, no birth certificate, no driver's license, no state ID, no nothing.

It deals with them the way the government dealt with such cases before government identification ever existed - who do you say you are, and who do other people say you are? Where do you and other people say you live?

In your example, in the modern age, "John Smith" would have an arrest mugshot to aid with identification. Whatever criminal records are kept would probably just have the missing information blank. It's not as if there's a big database of citizens with Felon? Y/N as one of the fields, making you run the risk of marking the wrong John Smith as a felon.

The world is a very messy place - the US system does an okay job of treating it as one.
I think your comment can be easily interpreted as a knee-jerk criticism of American regulatory environment en mass. At best this is a straw-man, and at worse it's a hyperbolic jump to assumptions about the attack vector, existing regulations, and how you believe them to be insufficient.

It's too early to know anything for sure about the breach and certainly holding pre-made assumptions prevents a more level headed, careful analysis of the facts.

That being said, I agree that on the face of it, this is pretty damning evidence that regulations were either not in place, or were not verified to an acceptable level.
Good question. It's rare to be reimbursed. You can sue for malicious prosecution after you have been aquitted, but many times these cases don't prevail.
No amount of governmental regulations can solve the current date breach trends. Even government's own intel agencies got hacked too. No organization is immune to data breaches. It's a matter of time and effort.

A lot of us here are engineers and coders. It's our responsibility to design better architecture, security conscious protocols and write securer softwares. And it's up to all of us (regardless which country you are in) to voice up and resist the idea of weakening encryption or allowing backdoors and instead advocate for adopting better and more securer encryptions to safeguard private and sensitive personal information.
Take a look at the six-core AMD Ryzen 1600, too.
Wow I never realized this. The current CEO of the company I work for actually started out as a help desk operator in Arizona and worked himself up to CIO. Now he has started several companies and is very successful and is the reason I have a job now. Very sad to have lost that pipeline.
> You had to enter your lastname and last 6 digits of your SSN. So there's a high likelyhood that it would be you.

You mean right after the database containing full list of SSNs and last names of virtually every person in the US has been stolen? Of course, there's nobody around that could guess this information. And of course, there's no way to enumerate most common last names and the huge amount of 6 digits... It probably would take literally a million milliseconds!
Using much more nebulous and unreliable forms of PII as identifiers, in my experience, which leads to situations where you could query someone's report if you know their name and street address.
On another hand that point is only true if other issues of overurbanization and lack of supportive infra in cities exist. And nobody buys an unsubsidized electric car in China. Create problems so one can create a solution.. I suppose everyone has a mortgage. And then would have to look at how these cars and batteries are made with such thin margins.. it gets dark at that point
How DNS works is a favorite of mine: https://howdns.works/
Ask HN: Project that allows you to sell API
I'm interested in a project/server/gateway that you can install to secure and sell API access. Something simple with a payment integration if possible.

I'm curious, how and where do you guys sell API access.
How Silicon Valley is erasing your individuality
You're right about the grain of salt, but offering an opt-out to shitty conditions that they know most people won't read about that most people who read about won't act on, and will those waive their legal rights, is an unconscionable condition.

Personally I think that lawyers ought not to draft agreements and contracts that are likely to be found unconscionable or wildly asymmetric as a matter of professional ethics. Adversarial legalism between private parties tends to yield crappy results for the public. I mean, if you've just created a problem for 140 million people, trying to trick them into waiving their rights of redress basically confirms that you're a Bad Person - a bad corporate person, a bad executive making the decision on behalf of shareholders, and a bad lawyer for agreeing to promulgate such trickery.
I guess this is technically stack exchange, not stack overflow, but the answer to this math question is amazing:

https://math.stackexchange.com/questions/1749853/if-there-ar...
Unless you are developing an exploit, such code should almost never be used in production system. Most modern operating systems will prevent execution from data buffers or stack. By having such "tricks" in your code you are opening yourself to buffer overflow exploits.
I'm disappointed to see RiotJS not getting much attention lately. I've been using it for a B2B SaaS application and it has been intuitive and elegant to use, and easy to pick up for any Javascript developers.

I tried learning Angular but found it to be too monolithic, and I'm currently using React Native to develop the mobile apps. If React Native is any indicator of how React web works, I don't think it compares to RiotJS in terms of developer happiness.. i.e. React has a tougher learning curve, the code is less readable and not as concise, a lot of things feel unnecessary, whereas RiotJS is significantly more lightweight, more intuitive, and faster to get things working (from my experience)
Something of a parable (not my words) follows:

In Chesterton’s The Secret of Father Brown, a beloved nobleman who murdered his good-for-nothing brother in a duel thirty years ago returns to his hometown wracked by guilt. All the townspeople want to forgive him immediately, and they mock the titular priest for only being willing to give a measured forgiveness conditional on penance and self-reflection. They lecture the priest on the virtues of charity and compassion.

Later, it comes out that the beloved nobleman did not in fact kill his good-for-nothing brother. The good-for-nothing brother killed the beloved nobleman (and stole his identity). Now the townspeople want to see him lynched or burned alive, and it is only the priest who – consistently – offers a measured forgiveness conditional on penance and self-reflection.

The priest tells them:

> It seems to me that you only pardon the sins that you don’t really think sinful. You only forgive criminals when they commit what you don’t regard as crimes, but rather as conventions. You forgive a conventional duel just as you forgive a conventional divorce. You forgive because there isn’t anything to be forgiven.

He further notes that this is why the townspeople can self-righteously consider themselves more compassionate and forgiving than he is. Actual forgiveness, the kind the priest needs to cultivate to forgive evildoers, is really really hard. The fake forgiveness the townspeople use to forgive the people they like is really easy, so they get to boast not only of their forgiving nature, but of how much nicer they are than those mean old priests who find forgiveness difficult and want penance along with it.

From Scott Alexander: http://slatestarcodex.com/2014/09/30/i-can-tolerate-anything...

Forgiveness here is somewhat like free speech. If you are for free speech when you do not find it objectionable, you are not really for free speech at all.
It's time for the USA to adopt EU-style GDPR protections, by constitutional amendment if necessary.
I was flying both a manned aircraft yesterday as well as a very expensive drone. I saw some really weird stuff all day long on both of them.
True, but I believe a standard reply to this from a pro EV perspective is that it's still better to be using fossil fuel->grid->EV than fossil fuel->ICE because of the overall efficiency of the former's process over the latter's, to the extent that it results in less CO2 emitted per mile driven in an EV over an ICE vehicle.
1. It's a DoS vector. Can you think of why?

2. Then by creating new outputs one could make the snapshot arbitrarily large, making it impossible to sync a single snapshot.

3. Why?

4. Why?

5. So you agree there's an unfixable DoS vector?

6. Why?
Consider this may be on purpose:

Not all information requires an identity system to manage
access. You can protect the privacy of users and reduce
the security risk to your systems by avoiding any
unnecessary collection of personally identifiable
information — this even includes contact details.
Is there a link to this that's not behind a paywall. Very interested in understanding the flaws of such a system, as a 2 key system seems like the most viable and secure way to establish identity.
There's issues with going that way though - it gives the police the power to arrest and detain people in secret and prevents anybody talking about it. Historically police forces have a bad record of abusing that kind of power.

It's also going to be pretty unenforceable in the era of social media.
There are plenty of ancillary reasons to avoid overflying hurricanes when possible—such as passenger comfort, to avoid possible turbulence; or if it disables nearby diversion points in case of an issue inflight.

But people here are making wild claims that overflying hurricanes is inherently dangerous and puts lives at risk. That's factually incorrect and is what I came here to correct. You (and others) are making examples about the NOAA's Orions (which are reinforced to fly through, not over hurricanes, flying into the wildest parts on purpose), and or other turboprops which fly 10-20k ft. That's not what we're talking about here… we're talking about commercial jet aircraft which fly at 30-40k ft. Business jets fly even higher, sometimes up to 52,000ft. Just this week, I flew private in a Citation X at 49,000ft.
Ah, I get it. Thanks for the explanation.
As someone who isn't exposed (I have like .02 bitcoin from a fountain in the early days), but has been an interested observer, the possibility of a crash down to rock bottom does make it seem like a good time to at least be in position to play with cryptocurrencies with some disposable funds. Maybe I'll take out some of my prediction market money that's been sitting since the election.
Ironically, since the data was leaked, how will they prove it was "you" that even checked?
Do solar flares affect commercial airliners?
Why would Beatrice in that case? She's not making that much and a recurring thing in that article is it is a mix of high paying work and old money. People are really weird about money (which is kind of the theme of this article). Direct personal employment is a difficult thing, you have to pay someone else within your means and make sure you have enough money to pay them if you yourself have a lapse in employment/money issue.
CB Insights – NYC – ONSITE – Engineering, Research, Sales, Marketing, Operations
HDF5 Spark Connector – Beta Testing
> other than for tracking government benefits managed by the SSA, and possibly also for tax filings with the IRS

... and all of the other government benefits, programs, or mandated activities, many (all?) of which demand your SSN. Are you even sure that the credit industry, i.e. banks, originally misused SSNs? I wouldn't be surprised if they were required, by the government, to use them, precisely because it is the closest thing to an official "unique identifier".

Some people also might be concerned with not receiving their SS benefits either, which isn't entirely far-fetched given that others might now be using it for nefarious purposes (like trying to collect their SS benefits).
Show HN: I'm making a content curation and marketing SaaS
The Government equivalent of Equifax. YAY!
>Off topic, but say someone is a late-20s/early-30s guy who for financial reasons wasn't able to do the "backpacking Europe/Australia/NZ/whatever" thing, how does the experience significantly change throughout the 30s/40s? I know a few people who still do this.

Well, not the same wonder / starry eyed optimism for everything you see, not as easily content on sleeping in any kind of accommodation (not many 30s/40s will sleep in bunker bed hostels for example), less casual sex, less bodily demanding "adventures", etc.
Is the problem really government agencies or the many companies which tried to cut costs by misusing an identifier as an authentication secret? The law you propose seems like it would have no effect whatsoever unless it applied to the private companies which created and perpetuate this problem.
Vagrant calls the backends "providers." It ships with 4 providers IIRC (VirtualBox, Hyper-V, VMWare, Docker), and there are plugins for dozens of others (it's so large a list because there's one provider each for pretty much every cloud service out there, even ones I've never heard of).

I think that VirtualBox and VMWare are the only two providers that work everywhere, unless docker runs on windows now.
Alleged Equifax hackers demand $2.6M Bitcoin ransom
Sure, in a fantasy land. If you where to hold the management criminally responsible for their lack of investment in IT, security etc you might see increased investment.

The very fact that all this data was accessed from their public site is very troubling. What's the chances this is a basic SQL injection issue? What's the chances they didn't invest in security at all?
A relative of mine got some fees waived and a $1000 gift card at his choice of a number of home goods stores.
DOM Attributes in React 16
Blockchain startup R3 sues competitor Ripple
C is still pretty special in that it's generally used to write the compilers for all the other languages. Even today, if you were to create a brand new language, you'd likely write the compiler in C (or maybe C++).

Also it still remains the most practical language for fundamental system components like an OS kernel, drivers, etc.

Most people don't work on compilers or kernels, so I'd say most people don't actually need to learn C. But, unless C is ever unseated from its position, we'll always need some people out there that know it. :)

To unseat C, we'd need a language with similar low-level expressive power, minimal overhead, and a compiler written in that new language that can compile itself.
Why not just plain virtualenv?
Please keep anything related to anime away from here.
>Unfortunately much (> 60%) of China's electricity comes from dirty sources (largely coal). Until this is fixed, the environmental benefits of EVs there will be limited.

True, but with China it never helps much to look at where they are instantaneously. It's all about the rate of change. They are extremely aggressive with their renewables goals. Far beyond the US or EU.
I've never heard of teaching not being a desirable profession. There's no shortage of teachers around, and the low wages are partly due to the teachers being a buyer's market, frankly.

Maybe things are different outside of the northeast, but between the enviable schedule, the union protections, and things like tenure, teaching is quite desirable, even if the raw salary looks poor on paper.
For all the things that are not aligned vertically in strictly consecutive lines.

Suppose you wrote some silly code like this:

(cond
((eq x :one)
...)

((eq x :two)
...)

((eq x :three)
...))

Replace "cond" by "case x". Select first "eq x", mark the other two (you have 3 cursors now), forward to the keywoard, M-<up> (with paredit):

(case x
(:one
...)

(:two
...)

(:three
...))
So, if you use CoinList, are they an intermediary?

Where did you confirm they have to be one?
High. And they won't be the only agency. I guarantee you we'll hear from the other 2 in the next month or so. Because people aren't held criminally responsible for the security of user data, so why give a shit?
Just like Equifax is trying to get out of screwing the public over as cheaply as possible. Don't pretend they are somehow victims or noble exemplars, or that you aren't just complaining about the status quo because it's politically expedient for you. If you haven't been arguing for structural reforms in how we select public officials then your objections don't really carry any weight.
Lifelock themselves were subject of a data breach in 2015.
Generating vaporwave track titles using a neural network
Do you know him personally? I'm a New Yorker and I'm pretty happy the AG is taking this seriously and communicating directly with his constituents.
There's a link in the article which explains why

https://gist.github.com/datagrok/2199506
> The less cynical interpretation is "someone threw up a website, and the standard procedure within the company for throwing up a website is to include a link to these boilerplate terms of service."

As somebody who has been building websites for living and worked with corporate clients, this is about 99% likely to be true IMHO. Unless they run an extremely efficient legal department with lawyer equivalents of Superman working there, it just doesn't happen that new and specifically case-targeted TOS appears that fast, especially in a large corporation environment. "Just toss a standard link there, nobody reads it anyway", OTOH, happens all the time.
My guess is they paid an 3rd party bs service to "scan" their site for vulnerabilities.
I was okay with social-curated news when my social feeds were chronological, but now that everyone's doing algorithms, you miss way too much if you aren't looking at something like RSS.

Personally, I use TinyTinyRSS on Sandstorm.io. There's a fantastic TTRSS client available for Windows UWP that works on Windows Mobile too.
It is the government's job to prove you remember it. They have the burden of persuading the court that you don't remember it. This is spelled out explicitly in the Supplemental Order issued by the judge, PDF freely available at:

https://ia601303.us.archive.org/0/items/gov.uscourts.paed.50...

What is at stake is a burden of evidence production. The difference between production and persuasion, in a court room, is a distinction both of quantity and quality. You "produce" single pieces of evidence, whether weak or strong -- then the totality of all of the pieces of evidence, evaluated together according to their strengths, "persuades" the court. "Produce" is quality-agnostic and refers to single pieces of evidence; "persuade" or "prove" refers to all of the evidence on both sides and weighs them by their quality.

And what's really at stake is that your lawyer, at a contempt hearing, cannot merely claim, "Well, your honor, the prosecution has not proven that my client is definitely able to fulfill the order, because they have not disproven every possible reason why my client could not fulfill the order." The reason that this is not enough is that it is asking the government to prove a negative, "you cannot possibly have any excuse."

Instead the procedures that courts use to decide these cases require the defense to identify specific reasons why the defendant cannot fulfill the earlier order, and then the burden falls on the prosecution to prove that those specific reasons are BS. And for this purpose they need to produce some evidence -- it doesn't need to be strong, persuasive evidence -- that the defendant cannot fulfill the order for that reason. Because it does not have to be strong or persuasive, a statement of testimony is taken at face-value as sufficient.

The only attack the government can make at the evidence-production level is "even if this evidence were 100% persuasive the defendant would still be able to decrypt the drives", so the evidence has to have some clear logical relation to the excuse. But obviously if your sworn testimony that you cannot decrypt the hard drives were 100% persuasive, you would not be able to.

It's still the government's job to prove you remember it, but you need to produce some sort of pertinent evidence (no matter how flimsy) that you don't, so that the court even evaluates this defense in the first place.
Did you read the article you linked to?
It clearly states:
"The sauce is a transparent, amber-colored liquid, produced by fermenting anchovies in brine"
It is variable-bandwith spread spectrum modulation, so talking about discrete channels does not make that much sense. But each of frequency bands it operates in is notionally divided into 9-11 uplink and downlink channels.

The modulation scheme is essentially FM with a twist: high bitrate mode is essentially straight FSK and lower rate modes are FM modulated with sawtooth, which is or is not inverted in each period depending on the transmitted bit. The idea is essentially same as various QRP modes involving painting images on waterfall diagram. (Full gateway nodes receive full band and can track ~50 transmitting nodes at once)
It sounds like copy/pasted boilerplate that may happen to be overreaching, rather than a conspiracy.

Probably, but people and companies should stop doing that. Equifax has the resources to pay lawyers to do things fairly if they want, they're just choosing not to.
Employee Departure Could Be a Large Risk to Your Business
Reality exists independent of the observer. If there is some relationship between eclipses and hurricanes or between solar flares and seismic activity, they existed long before life originated on earth and would continue to exist far beyond our extinction. While we should not discount their possibility without some research, there is not much reason to believe there is such a connection without further evidence.
In Europe you start to see some projects like that to connect renewable energy sources to consumption areas. The last notable one has a 1.4GW capacity[0] between France and Spain.

[0]: http://www.eib.org/infocentre/stories/all/2015-february-02/c...
For every editor there are people negative on it, Emacs doesn't particularly stand out. This thread is remarkable in how little editor flamewar is going on.
Not all banks re-service mortgages. BB&T is known to keep servicing mortgages that they originate.[1]
Disclaimer: I have a mortgage through Wells Fargo (that was almost immediately re-serviced!), but I work for [redacted].

[1]: https://www.nerdwallet.com/blog/mortgages/bbt-mortgage-revie...
That right to opt-out does not appear in the complementary protection enrollment, those terms are here:

https://trustedidpremier.com/static/terms
If there are 140 million members then any settlement will be individually quite modest (Equifax has annual income of ~600 million dollars, so multiple years of all of it to get to even $10).

It does seem like any penalty for something like this should severely impact the ability of the company to operate though.

I suppose a $0 way to penalize them severely would be to force Equifax to allow individuals to opt out of having Equifax store information about them. Lots of people would do so without understanding that it might impact their ability to get a loan, but so what.
Given that they are reporting 143 millions of US persons affected, which is pretty close to "every adult US person that has credit card, bank account, etc", I'd say if they made the script answer "yes" in any case, they didn't err much.
Maybe these guys are partaking in "taxonomic vandalism" for the wrong reasons, but I think there might be a place for a reminder that genetic variation, while not continuous, is far more fine grained than our taxonomies, and that relying on those taxonomies too heavily might lead to mistakes.

The article points out that:

> this biological classification system has allowed scientists around the world to study organisms without confusion or overlap for nearly 300 years.

You have to wonder how the system would look now if 300 years ago they had had the understanding and techniques (e.g. bioinformatics) that we have today.