skysight-inc/HackerNews huggingface dataset:
>but I doubt this leak will have any lasting financial impact.

I am going to have to stop you there. As someone who works in the financial sector, I have quite a different view of this situation. Best case scenario (for the organization) is that it is fined directly into bankruptcy and someone like FIS acquires them for pennies on the dollar. I am still waiting for CFPB to drop a nuclear bomb over this issue. There will be new PII regulations around the corner for sure.

I also question the extent of the leak... I keep hearing it was just basic PII, but if someone got a dump of the entire credit history database, a huge range of financial products (e.g. Knowledge-Based Authentication) become entirely compromised.
"In fact, the only disciple who really cared about money was Judas, whose greed and unbelief caused him to betray Jesus for 30 pieces of silver."

Going to file that one away next time I hear someone advocating a prosperity gospel.
The edge cases are endless (wheelchair woman chasing a chicken), and without a semantic world model the car will have no idea what to do. Low-level object avoidance architecture isn't enough.
I thought about that too but it could also be possible that they may get bankrupted by lawsuits. I don't see Equifax as victim. I hope they will go down and be warning for the rest of the financial industry.
Thank you, this is exactly spot on.

My personal skepticism on this subject has made me very unpopular at parties (well I don't actually go to parties, but you know) where lots of techy types go. Also earned me lots of downvotes here.
>Short open tags are still in the current builds according to the docs.

No.
Study Calls Into Question Cancer Drug R&D Cost Estimates
Tesla is much, much sexier and better at PR than Panasonic.
Canada forces people to unlock their phones, when crossing the border, quite frequently - and have for years. They will make you unlock it, or disallow entry and/or detain you.

There's a whole series that shows this. It's Canadian Border Guard, or similar. I see it when I cross the border, which I do with some frequency. I just unlock my phone for them.
Hmm, your math is surprising. Let's suppose the leaf has the 30kwh battery. .29*30 = $8.70. You can drive 80-100, say 90 miles. California Gas Prices .com says the avg price of gas in cali is $3.15. Suppose you have a high efficiency car that gets 30 mpg. 90 miles is 3 gallons or 3x3.15 = $9.45, so pretty close. I suppose if you have a prius you get better than that, but most cars dont do that well. Also you'll have maintenance prices that are high on gas.

But with that high electricity charge it makes them closer than you'd think. In Washington state our prices avg out to 11.x cents per kwh, without any special pricing, and I get the all green power option.
they're the same in name only. but not in perf and not in output.

https://github.com/Rich-Harris/butternut/issues/35
You're oversimplifying. This has more to do with politics than SE technical competence. Banking software and systems are regulated end to end, because banking systems are literally the backbone of the global economy.

Equifax? Not so much. This exposure hurts consumers, but it doesn't even put a dent in the economy as a whole. That is why these firms are allowed to operate with such shitty security. If they get hacked, whatever, just a few hundred million customers data exposed to identity fraud. It takes a chunk out of Equifax stock but they'll probably survive. What is the incentive for congress to enact laws regulating corporate handling of consumer data?

Put it this way. Who do you think is louder in Washington: consumer advocacy groups or corporate lobbyists?
My only experience is talking to my friends who are either software engineers, or other STEM people, law people or people who study or have studied rather demanding programmes like medicine. Think roughly the top 20% of the population in terms of academic achievement. In my opinion, most of them would be able to learn software development, with proper motivation - i.e. the raw problem solving potential is there, but it's not used often enough.

Funnily enough, those people are exactly the group that doesn't need to pivot their careers.

Even if you can't make a former manufacturing worker into a programmer, you can still try to have more programmers in the next generation.

There's an interesting talk that you might be able to find[1] about abstract reasoning, and how people weren't able to do it just a couple hundred years ago - "what's the difference between a fish and a bird?": "you can eat the fish". No reason why the next generation couldn't be more suited to software engineering jobs than we are now.

1 - I vaguely remember it was something about an old survey of Russian far east villagers (who live(d) as they did hundreds of years ago, for all intents and purposes).
Nice! I love the visualization for dihydrogen monoxide.
So true, keep your head down and wait for your bonus. Everyone in middle management is too busy with self preservation to bother doing what's best for the company.
Totally valid points, I just worry about the long term cost of decommissioning nuclear sites and storing the waste - those numbers aren't in your figures (or the other comment on this thread) . I accept that we are going to need something for the short term though, and nuclear may be the least worst option - just storage and management or spent fuel and other waste gives me the fear...
> What data does Google collect that Apple doesn't collect?

I don't know what Google collects, but the simple answer to this is "virtually everything". Apple collects very little data from their users and does everything they possibly can on-device (and the stuff that requires the cloud is either encrypted or heavily anonymized). Nearly all data that Google collects, Apple doesn't.
totally agree. i think designing software so you dont have access to customer data (zero knowledge or customer held keys) will eventually be a big selling point for SaaS companies
What? Venmo doesn't show you the payment amount for others' transactions.
What kills this platform is entities other than people participating. I ignore anything else of facebook baits for posting/visiting.

In the beginning I added artists and maybe some companies I fancied: that's a huge mistake. FB is only an ad framework for these entities and they are going to occupy 100% of your feed.

You erase all that and I started to see some friends doing stuff again, which is nice. I still think tho
the algorithm to generate your feed is real s*.
Android 7 (lineage/cyanogen at least) can do this.

Settings>Sound>Do Not Disturb>Priority only allows

You can limit notifications to starred contacts only for calls and also SMS, and then only star the contacts you want to allow.
Google Fi only allows Their Nexus and Pixel phones on their network. It is like an ISP seeing that you are running Linux and not letting your traffic through, just a bit more complicated than that. (SIM Card, Modems, Frequencies)
Yes, absolutely.

I think the @grandalf idea of selectable trust list providers has some merit (although there are some security trade-offs there).

I don't think the automatic mistrust of certificates from "CAs from China, Turkey, Russia" automatically follows from that.
Project Fi does some things to switch between several carriers (T-Mobile, US Cellular, others) behind the scenes that doesn't work as well on iOS. Also, you need a Pixel or Nexus device to activate initially anyways.
"there's definite consumer value to seeing tickets that sold. It helps correct an information imbalance between sellers and buyers."

I don't think you're playing the devil's advocate.

By all means - they and and as you indicate - maybe should show recent tickets sold. That's valuable information.

But what they are showing is made up data. Not good. And definitely 'anti valuable'.
Yeah, that's the updated one. Prior to the release of TouchID, something similar was released.
As I read the First section of the Pennsylvania Charter of Privileges, I see a colony founded on religious belief. In part my reading is based in the historical context of Quakers having been persecuted by the English State for the expression of their religious beliefs. That it is possible to see Penn's religious views as more consistent with an outline of contemporary liberal democracy does not, for me, make the document any less a codification of Quaker religious views.

http://www.ushistory.org/documents/charter.htm
Someone recently wrote about their dark patterns, and how sometimes it's actually false information: https://medium.com/@ilyadoroshin/bad-ux-how-booking-com-dece...
Well at least up here in Canada there are and pretty sure they at least used to have them down there. I got a call from mine a month or so after purchase, just to check on me and see how happy I was.
Lying to a federal agent is a crime.

Edit: No seriously. See https://en.wikipedia.org/wiki/Making_false_statements. Refusing to unlock your device is one thing. Claiming that you did unlock it but in fact just used a "duress passcode" is a lie and can land you in jail.
Here's the whitepaper about iOS security: https://www.apple.com/business/docs/iOS_Security_Guide.pdf
If they only showed the sold tickets that would be OK. But they first show these tickets as available, them change them to sold in front of the user, as if they had just been purchased. This is outright lying.
Largely the same here, I'm giving up on Windows too, and I've been using MS OS' since DOS. I'll pay a premium to keep my data secure.
Why is this called "The Great Man Paradox"? Is it that we think Marie Curie would never have been dumb enough to fall under a tram?
TED: How to Build a Super-Intelligent HIVE MIND
The first I saw was Curl from MIT:

https://en.m.wikipedia.org/wiki/Curl_(programming_language)
I quit Facebook initially because of notification spam. However I discovered something afterwards. I had less negative feelings toward family and friends. I had unconsciously been forming an opinion of them that was based on the habits Facebook was encouraging rather than their actual personality.

In a sense I'm a lot happier not knowing that Great Aunt Gertrude shared that post. And most of the time Aunt Gertrude didn't even think about what she was sharing so the opinion wasn't based in fact.
I'm not sure they actually care in Washington. I was impacted by the OPM breech. I got a form letter and some credit monitoring. All that outrage and, as near as I can tell, not a damned thing has changed.

I might be biased and jaded.
Gigafactory is to produce the new 2170 form factor.
It is sometimes a maddening fight to get software quality shipped and not ship a maintenance nightmare in certain orgs. This especially depends on if the company is engineering led or more bizdev/mba led or how much the latter values engineering.

Equifax is a business that is not engineering led today and probably will never be as it is a credit agency and not consumer focused. For a company that has been around since 1899 and through many technological changes, they should have really focused more on cyber security in this age. Then again, Equifax is not a consumer company, they are a credit agency and only answer to their customers that probably don't value spending on securing personal data as the ones that are accessing Equifax want that data.

The question is, should a company that doesn't care (nor their stakeholders) about securing data as a way they make their money, should they be in control of all that data?
> No, they often won't, because while ER stabilization without regard to ability to pay is mandatory, subsequent admission and treatment is not. If the condition is not stabilized in the ER, they may be admitted for stabilization to fulfill the mandate, but there is no mandate for admission for treatment after stabilization.

That's not really true, and it's a common misconception that arises due to the way the ER mandate is specified in law (explicitly, and via a single bill), as opposed to the confluence of a few different regulations.

In short, because of the intersection of ways in which hospitals are and are not allowed to discriminate against patients by insurance status, what ends up happening in practice is that the decision to admit a patient is rarely made with the patient's insurance status as a determining factor.

That's especially true for public hospitals, but it's true of many private hospital situations as well. (Note that this doesn't apply to the decision of which hospital to admit a patient to - a single ER which has more than one associated hospital may decide to admit a patient to the public hospital instead of the private one based on their insurance status).
To be fair, it's not 'technical competency' but rather a broad range of operational, process, product and engineering competencies.

Also, a lot of companies just don't have a thoughtful process for this.

Think of how much data Google and FB have, and they've never been breached. As much as I loathe them, I actually feel more 'secure' with the data that is supposed to be secure with FB than with my local bank.

FB depends on talent, banks depend on thick process, regulation and massive risk aversion.

Equifax depends on mediocre eng, product, ops etc..
I get paid a lot more then $30-50/hr. I discounted my rate for time I'm not at work.

After a point, I will absolutely pay $30 to not lose another hour of sleep.

Either way, you're missing the point. Time is money. People spend money to save time, and people spend time to save money. Different people have a different rate at which they'll strongly consider doing one over the other.

For most of us, the amount of money we have is very limited. For all of us, the amount of time we have is very limited. Eventually, we'll all be dead.
Whatsapp hacker
Show HN: Simple English translator WIP
Thats exactly what I'm saying. There is near zero incentive for congress to enact consumer protection legislation.
Thanks for sharing that info, but I think the problem is that Apple is marketing these methods of identification as methods of authentication. Sacrificing security for convenience.

Even if they have a kill switch in place, the users least likely to know about it are the users who are most likely to use insecure methods to "secure" their phone, I would think.
Zappos is a huge success for customer service and returns, but they've been losing marketshare for years. Amazon just wants to show high revenue numbers and mask operating losses. Don't think that Walmart with acquisition of shoebuy is going to sit around and not steal revenue. Too many people think if Amazon buys a company it's going to turn into gold, the only thing that is goldmine is AWS. Whole Foods won't be immune from stiff competition going forward, everybody knows there brand is expensive regardless if they drop prices 25%.
You can also make only some email messages cause notifications.

Not sure if there's a better way for gmail, but the way I did it was to have a second gmail account, then create filters that send only important messages to that account. Then in the gmail app you can control notifications on a per-account level.
Too soon to tell. For all we know, Face ID may give you the option to provide a facial expression to unlock.
Many of the enterprise offerings are for subscriptions

https://store.docker.com/editions/enterprise/docker-ee-serve...

https://store.docker.com/editions/enterprise/docker-ee-serve...

https://store.docker.com/images/esystemstech

https://store.docker.com/images/gitlab-enterprise-edition

Some appear to be free/trial edition/subscription based, etc.. There are a couple that allow the end user to setup a subscription after trying out the free version of the software (trial edition) or a limited version of the software that allows end users to upgrade.
Equifax has an $18B market cap. Can you name one instance of a government imposed fine for improperly stored PII exceeding even $100M?

Furthermore, do you have evidence that the PII was improperly stored, or that Equifax's security practices were lacking in any way? The vulnerability provided full RCE, and I know of no info-sec magic that inoculates you against that.
Wouldn't you say it would be enough to pin those certs to TLDs?
I'd take issue with title because it does imply a broad applicability that isn't supported by the content. A more accurate title might be, "I didn't have to risk everything to Start My Business."
Sensors help, but the real bottleneck for edge cases is artificial general intelligence.
The problem is lack of commercial incentives. Apple, Google, Facebook, etc all have serious dollars at stake if they don't get security right. Equifax on the other hand...
did you read the grandparent? you use the same bug by checking out a commit before the bug fix was applied.
I thought the same thing reading this title and it makes me want to invest. Companies who ignore user privacy are in for a hit I think, in the wake of equifax.

I'd support companies with excellent privacy / data security records being exclusive brokers of my information. Apple is on that very short list.
>they've never been breached

HA HA HA HA HA HA lksahdgiua bregil nAG HA HA HA HAH!

http://www.reuters.com/article/net-us-facebook-security/face...
Australians told to eat more kangaroo as population hits double that of humans
That was my point -> "evil megacorp"
But maybe death is preferable to living with your anime collection out there.
Has the 5th amendment been officially repealed?and the 4th?
AI Gym Workout
Target lost tens of millions of credit card numbers and paid just over $18 million to settle every lawsuit against them.

People seem to conflate the way they think things should be with the way things actually are.
It's accurate. My other websites have not been as successful, they make $50 - $200 / month :(
> If someone out there has the ability to remotely turn off airplane mode, they aren't going to burn it outside of a WW3-level crises.

This assertion relies on an assertion that such exploits are so rare as to be priceless.

You might be right that if someone only had one such exploit that they would be very, very cautious about using it. But what if they have a half dozen or so?
Beating a human is a crime.
They're bulk uploads over home WiFi, and Tesla hired plenty of ML names like Andrej Karpathy. Having said that, AGI is the bottleneck for full self-driving.
> This is an A+ study which seems to confirm that banning subreddits can be an effective way to silence their inhabitants.

Was a study needed for that? It's really isn't a good study because it doesn't say anything.

> It's nice to get some hard data to counter the theory that if you ban a subreddit consisting of undesirables, they'll simply invade other parts of reddit and continue. In reality, the other parts of reddit aren't nearly so tolerant.

But they did invade, that's why all of reddit became censored.

> So what's the implication?

There are no implications. Censorship works. There are reams and reams of studies that show that.

It's why you won't see much tiannamen square stuff on chinese internet, go any lgbt stuff on russian internet or atheist stuff on saudi internet.

People are celebrating this study which essentially says "water is wet". Yeah we know.
Old job description.
There should be paper schedules available in the station.
From what I understand Facebook has "phantom" profiles for people who aren't on Facebook but who have friends who are.
Why wouldn't you just put up a speed camera at that point?
Rendering Bodies Out of Rendered Machines
You are correct. Android does not require you to enter a passcode to trust a computer if you have a fingerprint registered. The change is that Apple now requires you to enter a passcode if you have set up a passcode on the device in the past. If you haven't, the attack vector still exists, and if you are traveling with a trusted laptop with fingerprint unlock, the attack vector still exists with one level of indirection.
In Android Do Not Disturb mode can do this. You can set it to "priority only" and define who is the priority contacts. iOS should have a similar function.
Thanks for putting the discussion back into the realm of reality.

For as long as I'm in IT, there has always been the story of an upcoming holy grail of technology that'll change everything aka the silver bullet. Reading through this thread, that role seems currently occupied by WASM, with wild projections of all kind of perceived problems of frontend development and beyond onto WASM.

The reality is I have yet to see a single app making use of WASM on the web. And even when, if, there eventually is a WASM app, it won't be able to do anything that other (native) development environments haven't been able to do for ages. I'm not sure the world needs a new bytecode format, when only the ARM and x86_64 ISAs are still around. OTOH, what's new with WASM is that the browser and the internet acts as a gatekeeper for starting apps on your device, which I'm not sure will be met with enthusiasm by users. Furthermore, since WASM lacks APIs for even the most basic things, it would take ages to establish a platform, with all the fragmentation this entails.
You clearly haven't ridden the buses in Boston.
With the facial recognition tech they might be able to measure duress. Or geofence known customs checkpoints. Would love to reasonably claim that I can't give up my data while I fear for me freedom.
No, there is an actual landing page. Might want to follow up on that via the provided instructions if you're getting that page.
That's pedantic.

"You'd Don't Have to Risk Everything" implies an option, not broad applicability.
Where has ethics gone to in the corporate world?

I also came across them displaying say only 4 tickets for what it seems like a sold out event but in reality it was never sold out and the prices were cheaper on the day of the actual event.

I recall seeing something along the lines of the event being almost sold out.

Maybe Stubhub only had 4 tickets during that time so I could be wrong. It is a sale from ticket holder to ticket holder.
Waymo is more server-side, requires hi-res maps. Tesla's approach should be more adaptable long-term.

Their AP 2 is actually In-House AP 1.0, of course it does less than MobileEye v 15.0 or whatever.
Photographer wins 'monkey selfie' legal fight
I'm at the point where I don't do that any more, to avoid the shame of being asked about it later and having to admit I haven't worked on it in months. Some people say they find having others know about it to be a motivator, but that hasn't been true for me.
Ask HN: We have a Who's Hiring thread, why not a Who's Interning thread?
For example, Bob needs 1 year experience to get foot in the door and initial contacts and to get positive feedback. Jill wants to hire interns and could help Bob get that experience.

Could you see this as being a successful regular sub similar to Who's Hiring?
All of a user's device data is encrypted by default on Android as well. In this respect, they are no different.
I just read about how the hack was done. Shockingly stupidly easy!

1. They realized that Equifax uses Struts. 2. They modified struts!

and 3. Equifax used the updated code on their servers.

DUUUUUHHHHHH!
Im glad that im not on facebook. 20 years ago, facebook could be equivalent of sitting in street and checking on what others are doing/liking/commenting/ranting/watching. Nutsos.

And even for that matter i ve stopped limited use of twitter. As i see some of good classmates have become kind of trolls on few topics.
The information they collect is in their OSes' respective privacy policies. I've looked at them. They are pretty much exactly the same.
You can't ship without restricting where the car goes, punting edge cases to remote drivers, or actually solving the tail end with AGI. Actual full self-driving is far more satisfying than "you can go from here to the airport" or "you can drive in downtown SF."
That's a great capability I hadn't considered. Your passcode isn't just a 3d composite of your face, but instead could be a 3d composite of your face performing a specific gesture over a short amount of time (wink, kiss, tilt, etc). Would be harder to spoof.