skysight-inc/HackerNews huggingface dataset:
I don't know. I found the argument convincing that even naming the breach "identity theft" is beginning to push responsibility away from Equifax and make it seem a personal problem of those affected, or a general societal phenomenon. When in reality it's just Equifax's poor security practices.

As you probably know, the exploit basically is using Java's ability to dynamically execute code from JVM bytecodes (supplied via XML in this case, but that's just an implementation detail). Once you get remote code execution ability, it's game over for most Java backend apps, because these are executed in a single process/address space and thus lack basic process isolation. Even if JAAS were used to propagate authorization contexts within the Java backend, typically (almost always) Java apps operate in such a way that a single database identity/credential sets is used for any and all database access.

Dynamic bytecode execution is a core feature of Java and other JIT execution environments, so you can't use straightforward NoExecute bits (provided by hardware and supported by OS loaders to disallow calling into dynamically allocated memory) to prevent this from happening, and can't contain/isolate execution paths with authorization contexts either. For these reasons, I think this breach should make banks and other financial institutions rethink their Java strategies mid- to long-term.
I love seeing this, and not just because I love PyTorch[1].

It's also because I believe it's in everyone's best interest to have more than one widely used framework controlled by a single company (TensorFlow).

Also, I think fast.ai's approach to teaching deep learning is the right one for the vast majority of developers: start with practical, immediately useful know-how instead of theoretical underpinnings. People who want to delve deeper, say, so they can develop innovative architectures, can always do so at their own pace after taking fast.ai's course. There are a ton of other online resources for learning subjects like linear algebra, multivariate calculus, statistics, probabilistic graphical models, etc.

[1] Here's why I love PyTorch: https://news.ycombinator.com/item?id=14947076
Bank account numbers are on cheques. How would anyone keep them secret? By never using cheques?
I spent hours trying to get setup before finding crestle mentioned in the forums. It's preloaded with everything you need and is billed by the second with 25 hours free
Part 2 is already out: http://course.fast.ai/part2.html
PowerShell Training for the People
"admit to passing over objectively better candidates"

I'd love to see your citation on that claim.
Yes, but then we're incentivizing the future supply of such "below average" individuals that you speak of. That in turn reduces their value by making it a race to the bottom. Which of course, causes our caring society to kick into even higher gear in terms of "caring" for them. And so the cycle continues, with the bottom half eventually tipping the scale immensely. That is why you're getting "inequality", because you're subsidizing its increase without fixing any of the underlying problems.

Edit. Grammar.
For the First Time, CRISPR Has Been Used to Dramatically Change Flower Colour
Zello tops US app store as the walkie-talkie for hurricane volunteers
There's been a Waterstones in the Brunel Centre for at least a couple of decades. Proper bookshop though, sadly not.
> However, with wealth also comes power.

This is certainly true. What's not clear is whether that power can be redistributed equally or if addressing it just leaves a vacuum of power and the risks that entails. More concretely, there hasn't been a form of campaign finance regulations that has actually achieved its goals in the U.S. At least so far.

If the rich couldn't fund their unfair legal teams, would the justice system be more fair? Or would it just give more power to prosecutors who wouldn't have their actions challenged and appealed as often?
The browser handles requests to the backend, and would thus be the one in charge of not allowing requests in case the site enables this proposed “offline mode”. So all the browser would allow would be the initial, user-initiated fetch of the static site, whereas subsequent requests — initiated by the site itself — would be disallowed.
I'm a young-un in the HP world. 48g was my first and still only.

But you can pry it from my cold dead hand because the snap of those lovely keys under your fingers and that stack scrolling up that screen is the visceral feeling of math.
This is one of those rare things on the Internet (startups included) that you just "get" instantly.
Mental tax is a feature, not a bug. Intersections are dangerous; the more attention you need to pay, the better.

The biggest problem with light signals is that they don't force you to pay attention. Normal-sized roundabouts usually have a big feature in the middle that you'll hit if you don't pay any attention.
It's a lot more stable now. Controls are closer to system controls, although it's not ideal of course. It's going to be out of beta next month, so it won't take too long.
You can prove who you voted for by taking a picture of your ballot when you vote. Some thug could rough you up if you can't provide a selfie of your ballot being marked for some candidate
I realize this kind of defeats the purpose, but I applied just a tiny bit of CSS (and Open Sans) to make it look slightly better. Here's the userstyle in the hope it's useful to some:

https://gist.github.com/appel/7a475dcbd3f469d73c756385b2c7cf...
Blocking the view of other roads that also converge on an intersection can have the perhaps surprising effect of reducing accidents, or at least the severity of them. Removing the view of other cars forces drivers to slow down and check when much closer to the intersection. I'm guessing it also reduces lead-foot hubris, but won't stop outright intersection-gamblers. Not all taxes are bad.

(I can't find a reference after an admittedly lame search attempt, sorry!)
Compared to other foods, I've found it's bland and expensive. Personally, if it's not hot, spicy, or savory, I probably don't care much for it. I find the same opionion in my 20-30 year old peers in NYC.
That's why the piece of plastic is only used together with an ID card, driver's license or passport---the plastic has a smartcard but no photo, so the two complement each other.

Alternatively the smartcard can be used as a second factor together with a password but, as you correctly pointed out, it is not enough alone.
The Overcommitted Organization
You should see this. "Epic 2014" : https://youtu.be/Bt3TmUW90B8
It's about as secret as your phone number I suppose. I.e. you probably won't write it on the side of your house but you will give it to lots of people.

The NHS having their own number is also to do with the NHS treating people who don't have NI numbers, and various historical reasons, eg the NHS started in the 1950s and I expect it was easier to just start a new number system than persuade the treasury to wheelbarrow over all the paper.
> do you really feel that society rests on secrets?

Even on a first pass, you have to answer yes. The legal and medical fields exist on a foundation of secrecy. A lawyer that cannot keep secrets is a terrible lawyer and cannot defend his/her client. A doctor that cannot keep secrets is a terrible doctor and will never have patients approach him/her for anything even remotely embarrassing.
Why not save the user the trouble of establishing an Azure account and keep everything local?
doesn't work in emacs eww

0/10
Another fun fact: There are no Apple stores in the Republic of Ireland.
Maybe a plug-in? I use Safari and dont have that issue right clicking.
Interesting vulnerabilities!

For the USA-based folks missing the context, the article describes vulnerabilities in a system called 3D Secure, also known as MasterCard SecureCode, and Verified By Visa.

It was really popular like 10 years ago in the US, too — the banks would let or require you to set credentials for online purchases for your credit card number, usually on first use with an online vendor like Newegg. Of course, it was implemented by a third party on each bank's behalf, so, for better or worse, it was a separate set of credentials than your online banking. And, of course, being implemented by a third party, there was no sign of whether the domain name of such third party was really authorised by your bank to accept your PII — great way to teach folks to provide PII to random vendors you've never ever heard of (but, look, the page has your bank's logo, of course it's legit!), not to mention that it was all implemented in frames (possibly on purpose to conceal the domain name of the shady vendor your bank chose), and with a plentiful of pop-up windows with a hidden URL bar at that, too (of course! So 2000s!).

Basically, a really great and secure standard compared to just the static credit card number you share with each vendor, but, of course, totally ruined by the actual implementations, in the US, at least.

To my knowledge, no single US retailer or bank uses it anymore (IIRC, Newegg and ZipZoomfly did used to possibly require it back in the day). A couple of years ago, I asked Capital One why my online transaction in Russia wasn't coming through — didn't even reach the usual 3D Secure stage, and they claimed that they haven't supported it for ages! (Of course, the infra is still all there, but now it just shows up to the user as a mere splash screen when shopping on foreign websites; still very popular in Russia with all the payment gateways.)

Basically, the tech is really useful for reasonable authentication, but suffered the same fate as the Chip in the States back in 2000s (ironically, Target was one of the first vendors to use it in early 2000s). Now if your purchase is declined or you're a new customer with a big discount warehouse like Provantage, you just have to call them offline and verify your identity manually; how smart!
Is there somewhere an index of text-only pages?
Google was a huge improvement because if you searched for Foo Bar Baz it would only give you pages that had all the words Foo, Bar and Baz whereas AltaVista et al. would give you pages containing any of the words, if memory serves. But the speed was a huge deal too, especially on a 56k modem (and the thing had to be rendered in IE4 on a Pentium II too, let's not forget).
If you could summarize, what are the key takeaways to create awesome, fast and minimal sites like this lite CNN?
I was trying to figure out what was different about this convolutionao neural network for about 60 seconds.
I can't remember which country it was, but it was either a Vodaphone or O2 sim which would inject their little banner at the top of websites that weren't HTTPS. It was super annoying, especially seeing it on my own site!
Twilight is a third party app.

It draws a red layer on top of everything else. This is why the system displays a notification : it wants you to know that an app is drawing on top of everything.

The system settings works very differently, it directly applies a matrix to what needs to be displayed. This is way more efficiencient since applying this matrix is basically free instead of adding one layer with alpha composition.

It also allows other customizations, like adapting the screen for deuteranomaly.

Ideally, Google should open the API behind this feature at some point.
That is SO annoying. When it happens I don't even read the article anymore, I just rage close the tab.
Doesn't the pixel has both night light and O ?

Also, why do you need to test night light on O ?
3 Use Stream API simpler (or don’t use it at all) – Tagir Valeev – Medium
Because it's a separate site? I have no idea. It takes 30 seconds to convince yourself it's theirs, though, so I'm not sure what you're asking me.
Something that came to mind in this article is that when children were concerned with fair distribution, it was with regard to two other people. When younger children were shown to be more willing to give themselves more while others got less, it was with regards to themselves. Makes me wonder how much self involvement affects these types of attitudes. It wouldn't be surprising, to me, if people are generally satisfied with inequality when they themselves are the ones with more.
The Book of Ingenious Devices
I am quite surprised that they are focussing on the US only. After all, the search is going on in North America, not just the USA - would have preferred to see this covering at least Mexico and Canada as well..
Based on my Twitter account, I learned that I'm "extremely negative and pessimistic", while "a generally positive individual".
I'm also "even tempered" even though "emotional and judgmental".

(Full generated profile below)
"[my Twitter user name] is quite compassionate, cooperative, even tempered and helpful and is sometimes taken advantage of because of his trusting nature. He is extremely negative and pessimistic. He is emotional and judgmental. He is a generally positive individual and likes being around other people. He has a good social circle and can be assertive when needed."
> If people respect pay for work, then they despise the opposite, including wealth earning income for no work.

That logic doesn’t follow. Respecting something doesn’t always require despising it’s opposite. Plenty of hard workers hope for wealth earning with no work for themselves, check the local lottery.
Never Stand behind such a rockstar car
> 99.9% of people don't care or don't even know what bandwidth

...but they sure know what data rates are. Not that a website is the root of their data problems of course
A Berlin Borough Buying Out Private Landlords
I haven't explicitly kept up after graduating from my interaction design masters, but in general the alternative inputs being researched for VR work around two-handed input. Leap Motion for example can distinguish both hands (although often it regresses to "one hand is the touch-menu, the other taps on it").

Games and input devices for games also always design around bimanual input, even if rarely consciously.

Side-track: something almost nobody noticed when the Wii came out is that it's wiimote/nunchuck setup works both for right- and left-handed people. I'm left-handed and I automatically switched to a left-handed input method for my games without even thinking, for the first time in my life! I didn't even realise this until a few months in myself!

And yes, I completely agree with you! Something I forgot to mention is that for certain types of tasks, this kind of input lowers the mental burden for the user (something that Buxton showed in his papers).

If we turn your idea around: laptops come with a trackpad by default. If only OSes would allow for distinguishing between it and and external mouse (for example), then we could already cheaply and easily experiment with this on our laptops!
With Scumbags Like This, It's Easy to Understand Why Bitcoin Is at $4400
"This is what the world needs." maybe the world needed back in 1983 ted turner never to start up 24/7 news? Didn't and doesn't human DNA jive better with less news, less often?
When you load an article it shows only the first sentence and then

Read More ... ( 19213 bytes )

Brilliant!
Virtual DJ Studio 7.8.3 and Serial Keys  Crack Free Download
Someone pointed out below, but in a comment way down in the thread, but CNN is actually who's behind this:

https://twitter.com/CNN/status/906821174805630976

I'm not sure if the reason behind this is because of possible weak phone connections or that the hurricane is a good way to promote the text only site, but either way, huge shoutout to CNN for going forward with this themselves.

I've thought for a while about scraping news sites to just show their text, or something like classifying articles based on their subjects from different ones. On this front, they did it first.
The real reason POURNE was so unpopular with the people running the MIT-AI Lab during the 1980's had to do with the fact that he was a belligerent alcoholic who acted entitled to the free computer services and expert advice that he was taking for granted and criticizing, rather than his politics.

In spite of the fact that many of those people who he accused of being "communists" went far out of their way to spend their precious time patiently answering his questions, tutoring and helping him (RMS even personally wrote some free software for him at his request -- how communist is that??!):

https://www.jerrypournelle.com/reviews/bookmonth.html

>"I first met Richard Stallman (he called himself RMS in those days) when he was a graduate student at MIT and I was just learning about the ARPANET. He was immensely helpful to me in those days, patiently showing me things about emacs — his full-screen editor that he wrote in TECO, and the less said about TECO the better — as well as adding some special code to take care of things I wanted to accomplish. I learned then that RMS and I have a common failing: We don't suffer fools gladly or indeed at all, and we are sometimes wrong about who is a fool. But that's another story for another time."

But POURNE certainly threatened to use his political connections as a weapon against them. POURNE is the one who made his own politics an issue, who told John McCarthy (the computer scientist, not Joseph the commie witch hunter) that he thought MIT was run by a bunch of communists, and who posted ranting threats on BIX.

Re-read the sputtering mis-punctuated threatening screed he posted to BIX, and decide for yourself if you think he was drunk, or if he just acted that way all the time purely because of his political beliefs:

One thing that is known about ARPA: you can be heaved off it
for supporting the policies of the Department of Defense.
Of course that was intended to anger me. If you have an
ARPA account, please tell CSTACY that he was successful;
now let us see if my Pentagon friends can upset him. Or
perhaps some reporter friends. Or both., Or even
the House Armed Services Committee.

It was widely known in the SF fandom community that Jerry Pournelle was an alcoholic during the 1980's, because he was always drunk, loud and and obnoxious at science fiction conventions, which a lot of MIT-AI lab members and turists attended and witnessed first-hand.

http://newsgroups.derkeiler.com/Archive/Rec/rec.arts.sf.writ...
Space is not an actual problem with farm land. Setting up LED lights outside is a vastly easier solution. Remember, there would still be natural light, just significantly less.
The same reason Google, Facebook, Apple, et all still bus employees 40 miles south from SF to their offices -- having people together in one office (or campus) makes them more productive, no matter how much technology you throw at it.
There are no official plans for Fuchsia.

If anything O makes you think that Google plans to keep Android around for the long run since it aims at putting it in a good architectural position for the next 5/10 years.
It’s a pretty simple concept, people don’t like getting screwed by someone else, and equality of outcome is impossible. Frankly, most people don’t give a damn how much some actor / CEO / athlete makes if they can pay all their monthly bills and have some money to enjoy themselves. Envy really isn’t in the national character until our lives are sucking.
Very interesting!

"This is an edited extract from A Book Of Silence, by Sara Maitland, published by Granta on November 13 at £17.99. To order a copy for £16.99, including UK mainland p&p, go to theguardian.com/bookshop or call 0870 836 0875."

https://www.amazon.co.uk/Book-Silence-Sara-Maitland/dp/18470...

https://www.amazon.com/Book-Silence-Sara-Maitland/dp/1582436...
>USA and Eritrea are unique in that they will tax your worldwide income even if you no longer live in those countries (are non-resident.) No other countries in the world have the brass balls to do that.

But to be fair there is a rather large exemption, around US$ 100,000 per year, the nuisance is that you have to file some tax forms anyway:

https://www.irs.gov/individuals/international-taxpayers/us-c...

https://www.americansabroad.org/us-taxes-abroad-for-dummies-...

>The Foreign Earned Income Exclusion (FEIE, using IRS Form 2555) allows you to exclude a certain amount of your EARNED income from US tax. For tax year 2016 (filing in 2017) this exclusion was $101,300.
You know hacker news people live in a world of their own when a post regarding stripped down Cable News Network website gets more up votes than all the posts on convolutional neural networks combined

https://hn.algolia.com/?query=convolut&sort=byPopularity&pre...
> At this point, though, we’re going to eliminate Portland, because it makes little sense for the company to put a second headquarters so close to Seattle.

Nonsense. Most or all of the reasons people have speculated on for why they want a second headquarters work as long as it is not in the same state as Seattle.

Portland is only three hours from Seattle by car. That's close enough that it is not unreasonable for someone at one office to make an occasional day trip to the other. That could give some flexibility they would not get if the offices were farther apart.
Please link to original article: https://www.theatlantic.com/science/archive/2015/10/people-d...
The poster is maybe referring to James Damore's interview with Joe Rogan, where he claims that Google executives admit to diversity procedures in hiring.

Disclaimer: I have no opinion on this topic. I am merely speculating the potential source of info.
How did you manage to convince yourself it's theirs?

Why couldn't they just put it on lite.cnn.com?

If you try to look up the whois for cnn.io, you only get:

Registrar: CSC Corporate Domains, Inc.
Registrar IANA ID: 299
Registrar Abuse Contact Email:
Registrar Abuse Contact Phone:
Name Server: NS-24.AWSDNS-03.COM
Name Server: NS-630.AWSDNS-14.NET
Name Server: NS-1845.AWSDNS-38.CO.UK
Name Server: NS-1268.AWSDNS-30.ORG

There is nothing here that indicates this is legit CNN?
I'm very skeptical of their data considering it doesn't include Peapod, the oldest and largest internet grocery delivery company.
The thing I'm wondering about with this is why ld by default creates only two LOAD segments, one r-x and one rw-. .text and .rodata are put into the former while .data is put into the latter. This is the only reason this works. So my question is why there isn't a third LOAD segment with access r-- for the read only data? If anything it would reduce the surface of where to find ROP gadgets slightly so couldn't hurt, no?
The opening sentence of a linked article sums it up quite well: "If nobody understands a mathematical proof, does it count?"

The abc conjecture may be solved today but only when a sufficient number of people understand and accept the proof as a proof.
Well, at my high school, the "stoners" were also drinking, sniffing glue, eating nutmeg, smoking banana peels, etc. In adult life, the few people I've met who only smoke weed have been pretty level-headed. There's some selection bias because I try to avoid people who appear to be of the glue-sniffing variety. Maybe they're just big reefer junkies after all.
Whatever it is, people are getting far less of it.
Why? I don't see any way in which it would be "fair" to get an advantage (or disadvantage) because you happen to have been born in a particular family, which is a random process. Of course, there are implementation difficulties associated with it - how would you enforce something like that - but in essence I think it's a pretty good idea.
They have a lot more than I do http://patents.justia.com/company/facebook?list=patents
I misinterpreted the comment as asking why Amazon would drop cities with strong job growth.
Runtime Type Checking for TypeScript
Remember, people voted to join the EC, and politicians then signed the UK up to the EU without asking the people. The UK was never meant to be part of the EU. The UK & US helped start the EU to prevent Europe from falling back into war, but it was never meant to engulf the UK, who as Churchill said, is too incompatible to ever be a part of it.