skysight-inc/HackerNews huggingface dataset:
This appears valuable and well executed, but I worry that private businesses will be eager to outsource their authentication to this service, if they are allowed to. And once it's fully stood up, I suspect the government would be all too eager to oblige.

This might be convenient, but might also mark the beginning of a major new point of U.S. government control over the Internet, with all the surveillance and other civil liberties issues that this might raise, to say nothing of the issues that could arise from this degree of centralization.

Now seems like the time to set the expectation that this service may not ever be used by private websites. Of course, we tried that with Social Security numbers too, for all the good it did us. http://www.nytimes.com/1998/07/26/weekinreview/the-nation-no...
I'll take a chance to plug `vrun` https://pypi.org/project/vrun/ here as well which is a very lightweight wrapper around activate that only applies to the current command. You can use it to start a subshell if you wish.

The fundamental problem is that virtualenv scripts are not actually bound to their actual virtualenv. If you forget to activate and a script shells out in a subprocess to execute another script it will not find the version installed into the virtualenv. This should be fixed upstream but so far it doesn't look like it is.

$ python3 -m venv env
$ env/bin/pip install vrun
$ env/bin/pip install foo # assume foo depends on bar and tries to start bar via subprocess
$ env/bin/foo # fails because bar is not on the path
$ env/bin/vrun foo # works

`foo` is now executed in a process in which the virtualenv is fully activated and will find appropriate dependencies on the path if it tries to run a subprocess, etc.
Lazy async SVG rasterisation – JakeArchibald.com
It mentions on the site:

Other features of SSE 4.2

The strings do not need to be aligned.
The processor properly handles end-of-the-string case for zero-terminated strings and Pascal-style strings.
You can use the instructions with Unicode characters, signed or unsigned bytes.
Four aggregation operations can be used to implement a wide range of string-processing functions.

So presumably not, looks like the processor handles the end-of-string stuff natively.
I'm not saying they're bad people; I'm saying that they're assigned far too many cases to give defendants the time they deserve.
How do you manage dependencies? One of the best parts about virtualenv (to me at least) is that I can do pip install without infecting the rest of the system.

I guess I've never looked, does virtualenv provides a bin/pip which already knows the path of the virtualenv? Does the bin/python in there come with a path that uses the project pip install?
Yeah, I would think so. So far, we've learned that they've exposed virtually everyone's data through their incompetence (thus exposing nearly every adult in the US to a high risk of identity fraud), sold stock to avoid personal financial losses before the news broke, and set up a scam site to trick people into giving up their right to sue.

If this isn't criminal, then nothing is. If someone doesn't go to jail over this, why the hell shouldn't I just go out and commit fraud on a daily basis myself? It seems to be rewarded in our society...
You can't be serious.

Shamans? You think Shamans are a thing? Not only that, you think they are a better thing than scientists?

What kind of Whacky Friday antics is going on here at HN today?
I'm not getting into a nitpick over his alliances to left-wing groups I strongly dislike or that he commonly tries to pull high ranking democrats further left than necessary, etc.
CertifiedMailLabels.com is what I use -- They send it certified mail, keep a copy of the letter (so there is no disputing what the contents of the letter are) and give you effectively indisputable proof of delivery -- they give you a proof of mailing that they sent the letter that is in .pdf form, and then they provide a .pdf receipt that is your return mail copy.

I've had to use it in the past for creditors who don't have a clue.
I've never had this problem or realized it was even an issue. I tend to use my fingers on the back of the phone to hold it. I'd like it to be thinner because it's in my pocket all day.
When you buy a Tesla (Model S and X, not sure about the 3) you get adapters for the SAE J1772 connector and other plugs.
Why is it that of all services I'm scared to actually register and log in to, this is at the top?
I thought it was patch 322
>She had a household income of $250,000

Not making much, compared to what frame of reference?
People in the Metro Detroit area seem to conflate University of Michigan, Michigan State, and Wayne State as being equals / near equals.
The incredible growth of Python
As an example, at the moment I'm juggling a large number of constants where I'm still learning how to classify and group them. I can use alt-d and alt-shift-d to select between local groups, either whole words or just suffixes, and rename them locally. A multiselection is normally, say, 3 to 10 selections of 3 to 10 characters, so the edits themselves are far too tiny and frequent for macros to meaningfully help, yet far too irregular for column selection to help. At the same time, multiple selections are acting as an incremental search and a way to jump between places.

Frequently I do want to do regular operations, but columns are way too restrictive. Say I had something like the anonymized code

Salad foo;
foo.fred = chance(mulch, 4, 1);
foo.fools = chance(mulch, 7, 4);
foo.cheese = chance(mulch, 10, 7);

Salad bar;
bar.run = chance(mulch, 4, 1);
bar.jump = chance(mulch, 7, 4);
bar.fly = chance(mulch, 12, 7);

Salad crouton;
crouton.crunch = chance(mulch, 4, 1);
crouton.splat = chance(mulch, 7, 4);
crouton.swim = chance(mulch, 12, 7);

and I wanted to subtract one from the middle argument to each call to `chance`. Column selections aren't impossible here, because there is some structure, but with multiple cursors I can just select all the relevant `chance`, ctrl-right to the end of the relevant number, write "-1", ctrl-shift-left so I select the expression, and press my evaluate key (ctrl-shift-e) to run the subtraction.

Or say I have some Markdown and I want to give a correct-width underline to a title. ctrl-d to duplicate and select the new line, shift-left to unselect the newline character, alt-c to break the selection into characters, and then just press "=" to replace them all.

Or say I want to reformat a function call so all the arguments are on new lines, I will naturally gravitate to selecting a separator (the comma in all likelihood) and just adding a newline there. I can keep some arguments together by just skipping those.

This isn't to say multiple selections is the only way to do this stuff; this is just the way I like doing it with my editor.
The preferred environment for Python development and deployment changes more than the latest trend in JavaScript frameworks.
And Amazon employees will never want to leave the campus because of the horrid weather!
Predicting people faces using genome data
Does anyone have information on the hack and what OS / Server they were running?
I'd say https://github.com/ofek/hatch is the more robust (and easier) choice for virtual env management.

FD: I'm the author
A step in the right direction, I guess. Ontario can be surprisingly conservative about these things... they only recently started allowing alcohol to be sold in grocery stores. Seems the initial round of legislation will legalize it, but with heavy restrictions.
Forget regulation. Pass laws and just fine them. A lot. So much it's a threat to the company's existence. Pretty sure it'll turn out to be a solvable problem.

If it isn't a solvable problem then we need to start talking about getting this data off the Internet.
Finance industry regulation is a joke in the USA. It's largely self monitoring based! http://scholarship.law.cornell.edu/cgi/viewcontent.cgi?artic...
This whole endeavor was fairly ill-starred from the beginning. Looking at their list of arbiters, they're pulling in places like Politifact whose bread-and-butter is in parsing out politicians' statements themselves and ranking them N pinocchios, or whatever.

This kind of "fact-checking" is inherently political, since everything depends on exactly how much charity you grant the speaker for simplifications that may or may not convey an accurate picture of reality, or out-of-context presentations of true facts that don't have the implications a naive audience might draw. Therefore, all such attempts will have a necessary and massive credibility problem; it's very easy for non-mainstream elements to simply paint the fact-checker as biased. See, for instance, the alacrity with which Trump and his supporters turned around the label "fake news" itself as an insult against the mainstream organizations they feud with.

Meanwhile, there's the separate issue of clickbaity news stories that describe events which simply never happened, presumably for the ad revenue. Unlike political stories, these can generally be quickly and objectively categorized as such; however, Facebook also has the incentive to keep these on their platform to drive more engagement with Facebook, and so it's near-certain they won't be productively addressed, despite being a problem that everyone can agree on.
I see, well I appear to have misinterpreted then. I'd edit my post to mention that but of course we can't.
where can i use these login credentials?
> Even today, if you were to create a brand new language, you'd likely write the compiler in C (or maybe C++).

You might write the bootstrapping compiler in C for portability reasons, but you'd probably write the real compiler in the new language itself. Not to mention that if you don't mind the extra dependency on POSIX platforms you don't even need to write the bootstrapping one in C. For example, the Rust compiler frontend was originally written in OCaml, and is now written in Rust with a fairly complicated bootstrapping process. The backend is still C because it uses LLVM, but it hardly has to be
That's also problematic. If I can capture your data, then I can supply that data at a later point. Even if there are "secure" endpoints that collect that data for verification; I'd just need to compromise one of those.

Identity is hard.
Speeding tickets aren't criminal offenses.
Yes, exactly. bin/pip inside the virtualenv installs into that virtualenv.
You assume it's different for Equifax.

Hacking humans is quite often the easiest point of entry.
any way to check if we're affected by the hack without putting info into their form? i called them earlier to see if i had an account, but i don't.
I second this. Love the idea.
Just checked. Definitely is for me. Menu on the left, auto-play video is the first thing at the very top.
Exercising is straining, but I'm planning on doing a 60 mile bike ride tomorrow, purely for the enjoyment of it.

Meaningful work and a sense of accomplishment doesn't seem like it's caused by a culture of shame. I can get that from a hobby (painting, writing, programming, carpentry), or I can get it from a job (painting, writing, programming, carpentry). In either case, it seems normal beyond the boundaries of culture to derive satisfaction from this.

It might be a lot harder to derive satisfaction from hobbies with no "productive" output (my long bike ride, hiking in the woods) due to a culture insisting on productivity, but I don't think it's true that the productive ones would be valued less than non-productive ones if not for enculturation.
Show HN: Cheapest way to buy IOTA
You're forgetting that all those supposedly "clean" coins need to come back into fiat without tripping any alarms somehow, which is the central challenge in any laundering operation.

Plus, it makes absolutely no sense that this supposed money laundering scheme is the price driver, because if the intention is to launder money by buying/renting CPU power, then the fiat coming in would not have any upward pressure on the price (as it goes into hardware to mine coins) while at the same time the coins mined in such operation would actually push the price of BTC down.

Finally, I really can't see the connection behind Asians moving assets into real-estate in Canada and Australia and cryptocurrencies, unless such transaction are being paid for in crypto. I haven't heard/read of such cases.

My 2 cents: it's a classic bubble. Bunch of people made incredible nominal returns (think 100x or 1.000x) by having bought really early, and then price being driven up on relatively small volumes by new people increasingly piling in. This created an impressive social proof, and the masses started to pile in.

I'm sure we're in a bubble right now, and that it's going to burst/deflate. The question is when, and what's going to be the trigger. Judging from the recent events, heavy-handed regulation is a possible candidate for a trigger. There's so much bullshit ICO's, and that may be a red rag that sets the regulators on a crackdown.

That being said, I'm long term bullish on BTC and ETH, but there's likely going to be a massive extinction among the altcoins during the next bear period.
Does the IRS lose money if they give the refund to the wrong person? Or is the onus on you to find the criminal and sue him?
I have had previous addresses also used as a identity check. Fortunately I knew the one that I have never lived at that is on my credit reports. Trying to fix the mistake was not worth the time to me. Hopefully that does not bite me in the ass someday. Maybe the credit bureaus could check your credit rating and, if it is high enough, let you correct your credit report without much hassle. :)
How far back does "recorded history" go for these sorts of detailed space weather measurements? The linked #8 ranking seems to be based on 20 years of data
>> why the hell shouldn't I just go out and commit fraud on a daily basis myself?

Because corporations are protected, individuals are not. This is what happens when business(profit) takes precedence over human rights.

There will be no repercussions for those responsible. No changes will be implemented. At best we'll get a public apology, but even that seems far-fetched.
I really wish they'd step back and let the free market handle it, instead of once again heavily restricting distribution and sales to another bloated government monopoly.

Plus, the number of stores at launch is way too low - people will simply continue to purchase higher quality weed for less money from private sellers. It's a bad move all around.
Biometric national identification is used in many countries, with India's Aadhaar system being the best example. Those systems are mostly used in developing countries that are leapfrogging their financial technology past the legacy systems that the 1st-world powers developed in the 20th century. 'Privacy reasons' is an American cultural anomaly, especially considering the lack of privacy we suffer from the system used by companies like Equifax.
Even when there isn't a data breech I don't understand how all big 3 credit agencies survive doing their business as they currently do... which is to expose people to the injury of identify theft by default, and then tell them to pay up if they want a product that protects them from that threat.. How is that not seen as akin to a gangster protection racket?
What I meant was: Since facebook new licence was posted

https://news.ycombinator.com/item?id=15050841

numerous articles appeared on HN front page, like

https://news.ycombinator.com/item?id=15052691

https://news.ycombinator.com/item?id=15147462

also some about other alternatives. Which is a good thing, all together.

BTW, for what it is worth, I don't have stake in any of these platforms, just wanted to point a possible reason to the GP's comment "I'm just really glad Vue is now included in every "X vs Y" framework, or "choosing a js framework", almost every article for the past two years have only been for Angular or React."
#1 seems almost certain if the spilled data really is as extensive as it seems. The government would be all but forced to go to some other mechanism (or at worst just open up a new space of numbers and give everyone a 12-digit "SSN+"). It's possible that the "possibly affecting 144M customers" bit is spun though and that only a tiny fraction of that ever left the datacenter.

With #2, nothing is going to change. The credit agencies business isn't identifying people (as we are discussing, they outsource that to the government), it's tracking credit activity. And that works extraordinarily well from the perspective of its customers (the banks). If Equifax dies, Experian and TransUnion will just see more business. If they all die, the banks will find some way to do this for themselves.
Probably an acquihire to bolster their product/engineering team with some startup blood. Luxe will likely get shuttered.
I am still unsure as to how any of the credit bureaus exist legally at all, I never consented to having all my eggs in those three vulnerable baskets. Why is this my problem all of a sudden?

I get that consumer protections in the US are not very strong, but this just seems like a shady cartel in cahoots with the banks/insurance companies. Please tell me I'm grossly misunderstanding something here.
Trending App: Resume Builder Pro Create Resume and CV in 5 Min
Your 4% number is also based on emission rates. My number and yours are both nonsense for the same reason. You can't make the attribution by looking at emissions alone.
There is a bin/pip you could call directly and have it install packages to the correct path. Even commands installed from packages work that way.

I would only use 'bin/python' directly from scripts called from cron, or other similar places.
Good point. Maybe if we made fewer things illegal we wouldn't have more people incarcerated per capita than any other country ever.
Friday Front End: Faceoff Edition. Dueling Grids, JavaScript Frameworks, and More
If I remember correctly Go's first few compiler implementations were written in C, but later were written in Go (bootstrapped by C).
Because conda (and by extension, Anaconda) harms the Python ecosystem with their non-standard package format. If Continuum Analytics cared about making scientific packages like numpy and scipy more accessible, they would make binary wheels for Linux/Windows/OSX with the MKL. There is no technical reason that prevents them from doing this. Instead they lock you in to their package/environment manager and create confusion when you have pip and conda packages installed at the same time.
You missed the point. I am arguing that no amount of investment is big enough to make data breaches go away. Even the top intel agency with top budget and top resources can't avoid breaches, what else would you expect a corporation?

However this is not an excuse for Equifax to not put more focus and investment on their security.
> The volca series is also great entry level gear

Entry level but also unique! I recently got a Volca FM and I absolutely love it. The alternatives were either vintage or insanely expensive. This was cheap enough for an impulse buy.
Over the past few years, I have been conditioned to be weary of handing even more control over my personal life to the government than they already have. Assuming they open this up to private businesses (which I don't believe they're planning to), I wouldn't use any business that uses this service.

I apologize if this sounds futile or like I'm donning my tinfoil hat, but my guard is way up these days.
That's retail and the pricing seems highly inflated. Does anyone actually buy these services at that price point?

Credit real time monitoring should be an entitlement for those whose data is being collected.
Emacs = Editor MACroS

It started out as bunch of TECO macros.
I would argue the companies pay the price of training anyways via the higher cost of hiring the hard to find specialist.
Use neither. Use Nix.
Before the digital age, a stash of nine-digit numbers could be kept reasonably secure in a locked filing cabinet behind closed doors. So long as consumers volunteered the numbers judiciously, most people could make it through life without ever suffering a theft of identity.

Old guy here. The reason I know my SSN by heart is that it was my student ID number in college and had to be given at the beginning of each semester to get my course list, later for grades, etc.

I had a credit union account from the 80's and as of the 90's my SSN was printed on each monthly statement.

Both were before the "digital age" and neither could be considered "in a locked filing cabinet" nor under my control.
A basic internet connection was easier in some ways. There were disks with free hours all over the place. And hosting wasn't hard. Tripod, Geocities, Angelfire, ISP-provided hosting were all available, and easy enough for me to figure out when I was 10 years old. I had a few sites up on Geocities in the mid-to-late 90s.
I signed up to be notified before I knew that doing so waived my rights to sue them. Those damn agreements, I need to read the fine print.
To me, this is the right attitude towards this. Really? Are you more scared by your own democratic government than by facebook?

Besides i'm not even american, so whatever
"Then the executives sold their stock a day before they announced the hack to the public."

Selling stock the day before the news makes these guys seem like absolute criminals, but (a) it's not what happened and (b) the soundbyte doesn't represent what is likely the case.

The reality:

- Breach happened between March - July 2017

- Breach detected July 29th (A Saturday)

- Executives sold stock August 1 (A Tuesday)

- Breach announced September 9th (5 weeks later)

From the company's own statement, which you can BET was vetted by a lot of attorneys:

"Equifax discovered the unauthorized access on July 29 of this year and acted immediately to stop the intrusion. The company promptly engaged a leading, independent cybersecurity firm that has been conducting a comprehensive forensic review to determine the scope of the intrusion, including the specific data impacted."

I would bet, dollars to donuts, this is just terrible timing optically for the executives.

What is much more likely reality is that they detect breaches on a regular basis, and until the forensic team came back with the bombshell - likely many weeks later - of the scope of the data loss, the executives were not even informed.
Sounds like Stack for Python
Except if a service facilitates it and aggregates folks' resources to get something nice collectively, like crowdfunding.
And Mike Allen is no longer with Politco (he left to co-found Axios), which makes your complaint erroneous and unfounded.

Moreover, this article has interviews with the very fact-checkers Facebook has partnered with to try to stop "fake news," as well as comment from Facebook itself.
PokerPad: Play Texas Hold’em Poker with up to 4 players using just one iPad.
Hey thanks a lot for making this! I'm very much looking forward to the automation of the "Machine Economy" and as a seasoned Computer Scientist, the Tangle looks to have solved many BTC issues for such high-throughput low-latency transactions (that can later graft onto the greater Tangle)
I still use vex and am very happy with that

https://pypi.python.org/pypi/vex

https://news.ycombinator.com/item?id=7987259
A true U.S. of E maybe?

I have a hard time envisioning the various Euro heads of state accepting a subordinate role to a Euro-prez but hey, we did it back in 1787. So it's at least possible.
VDJServer: Analyzing and sharing antibody and immune receptor sequences online
Finally! Let's put the money that made drug dealers rich, and put it back into things the people actually care about! Like education, health care.