skysight-inc/HackerNews huggingface dataset:
>There was a section in the paper where a function apparently ran machine code placed somewhere in data memory.

I have some home computer books from the late 70s/early 80s that use this trick extensively.

On the era where home computers had only slow BASIC interpreters and no assemblers (or compilers), the usual way for speed up was to type in a long sequence of numbers (or characters) that were actually a machine language program.

So you have a line like:

1000 DATA 100,32,65,12,44,32,52,11,255,12,55,22

and on and on, which hold a sequence of bytes (the machine language program)

and later, READ statements would read each byte (of the machine language code) and POKE them into memory, that is, write it into a specific address of the RAM...

... later you CALL to that specific address, which basically instructs the BASIC interpreter to "jump" to the machine language code at that location.
IMHO this exposes risks related to the current state-of-the-art in digital currencies. BTC, and others, are really just an experiment; new technology will replace it that will be far, far more resistant to the nefarious use-cases in effect.
Visualization of Harvey, Irma, and Jose
Came across this tshirt. Seems appropriate
The whole point would be to move off of shared secrets, so data breached from one company's DB wouldn't be usable to impersonate the victims elsewhere. The idea is to abandon the idea that any data (which ever leaves the consumers's hands) is private or needs to be protected to prevent ID theft.

We have the technology, i.e. certificates, signatures, smart cards, identity federation like SAML.
Ask HN: Good place to look at a CRM database schema?
Where is a good resource for a standard relational database schema for CRM's? For example, software like:

www.crexi.com
www.apto.com
This is really odd. Remember that Chinese exchange are regulated now, after the Chinese government crushed down on them not so long ago.

FWIW, BTCChina "has not received any new directives from Chinese regulators" https://twitter.com/YourBTCC/status/906181802548539393
OKCoin and Huobi also haven't got anything https://twitter.com/cnLedger/status/906195967908601856
They wouldn't be stupid enough to try and make this the test case- the giant test case- for TOS. On that basis and the FAQ, I doubt they're trying to lock people into arbitration that way. I hope that they know, or at least suspect, that it wouldn't work if they did.
I was the 10 year old kid who signed up on Geocities and followed the instructions to put up a site. I didn't care about owning a domain; almost everything I went to was on user-generated sites, hosted on the major webhosts.
The Mission of the Hurricane Hunters
Why not docker? One docker image = one virtualenv
Regulation is absolutely capable of reducing the damage done by these types of attacks and incentivizing companies to make the necessary investments. Nothing will ever be 100% secure but that is no reason to just give up on trying. We tried letting the free market do the right thing and it failed, this is the reason the government exists.
Ho ho, is nothing! Try 7,869km, transmitting at 10 milliwatts. The transmitter? A couple passives attached to a GPIO pin on a raspberry pi: https://gerolfziegenhain.wordpress.com/2013/04/13/raspi-as-w...

The catch is, thanks to Shannon of course, bandwidth. WSPR will do something like 1.46 baud. That and the 13 meter long antenna.
Though there's telemetry for it, I've never paid attention to how much our Nissan Leaf's A/C pulls. What I do know is that it doesn't kill the range nearly as much as the heater, so let's say it pulls half what the heater does. Heater pulls, give or take, 3000W (that telemetry, I've paid attention to). Figure out how to squeeze 15 100W panels on the roof and you're golden.
There’s a Very Obvious Voice Assistant Hack: Ultrasound
Can you provide a reason or 2?
Why not use pyenv + pyenv-virtualenv ?

https://github.com/pyenv/pyenv

https://github.com/pyenv/pyenv-virtualenv
PwC report on the privacy-based kids ad market
Price Gouging Can Be a Type of Hurricane Aid
Should a sound approach, then, not be, to incorporate one-self at birth?

What if A Person were to be born into a corporation and all transactions made by thhem be the corporations actions - if things go south, dissolve the company.

(clearly this is simplistic, but you get the idea)

I want to re-form myself into one of these corporations which has little retribution for actions. I shall pledge 10% of SamStave INC LLC to any attorney on the ~~~prowl~~~ case...
i just use activate and tmux, i'm allergic to tools having an opinion about where my venvs should live.
Makes sense. Thanks for the heads up.
Given the alternative of handing out my SSN and hoping for the best, I'd be more than happy to use this for banking and related services. Presumably, third-party use would be covered by some form of ToS, and maybe we'd see actual repercussions for leaking data that originated here.
You should try Vue.
That was a really nice overview. One thing to consider though, when you gain more expertise through experience, you typically gain more income. Of course, most of the time, homes tend to appreciate as well.

But to the point, it's best not to burden yourself too much with a home. I bought mine in my late 20s. My criteria was that I didn't ever want to move again (and could fit a pool table), so I bought a house big enough for a family to live comfortably that I could reasonably afford in my late 20s. It's worked out so far.
In particular, I've observed reliance on address history, recently. I had a forced pension cash-out, from a place I last worked years ago, and that has since been sold to / merged (and perhaps remerged) into a different entity.

In short, the pension cash-out was handed over to a third party. And a primary factor that party used in establishing that I was indeed the beneficiary, when I called to discuss the details, was to ask me questions about my address history.

In fact, where did they get these details? From an outfit like Equifax, or from the same set of data brokers from whom Equifax acquired them.

The mitigations against such a breach are so obvious -- technical "lockdown" aside. Data rate/query limits. Ongoing auditing that targets anomalous data flows and data rates for mandated attention. Etc. Etc.

You don't have to have "perfect" technology. In fact, you should expect and plan for never having perfect technology.

It shouldn't have been too hard to pick up such a sweeping outflow of records; it should have become apparent that the request channel was (systematically, once you analyse and determine the specific system being used) working its way through the U.S. population.

As for Equifax, if I had my druthers, this would be a corporate death sentence. They've demonstrated a fundamental breach of trust and a fundamental incompetence.

Criminal investigators should squeeze them like hell, flipping smaller fish to fully determine the chain of command and responsibility that decided upon and implemented this catastrophic neglect.

As for the shareholders? Well, ultimately they bet on a company that has demonstrated itself a complete failure. They were happy to take the profits, including the greater profits made by not paying for proper systems and staffing. If their investment now evaporates -- well, I'm getting to the point of simply saying, "So be it."

A few shareholder "disasters", like this, and there will be a lot less pressure for laissez faire short-term profit maximizing, and a lot more for oversight -- internal and external -- and regulation that prevents them from being screwed by incompetently or corruptly negligent management.
It reads like the teacher has setup an account in her own name that she then shares with the class.

> She teaches them to post daily on the class Twitter and Instagram accounts she set up.

This may violate the TOS, but these accounts are shared by the class.
Don't forget to add 'Ask HN:' in front of your questions. That will give you a bit more exposure (readers).
This is straight-up nonsense. You can't just put any clause you want into a contract and expect it to be enforceable. This is also a major concern for startups. You need to always make it possible for clients to opt-out and to understand your terms. The less you tell the customers what they're committing to-- the less likely any judge will care what legal terms you choose.

Don't assume a contract actually means what it says when it comes to enforcement. Seek legal advice.
Most people I've met use virtualenvwrapper. It doesn't work on other shells like fish though. However, I'd simply focus on learning how virtualenv works, and use whatever tool to manage it as you feel like.
This is widespread all across the country. I'm sure it happens in SV as well.
Scrolling gets really messy on mobile but otherwise a neat way to show the visualizations.

Still can't be assed to read it fully though with my scroll being screwed by intermediate textboxes though.
great visualization, If he uses the skills he now has, he's hopefully making 100K+ by now
Wow, all these comments seem to be about all the different environments to use -- new suggestions, and talking about what makes others not the best.

For those just starting Python, I'd say just go with virtualenv. It works, it's common, and there are tons of tutorials about it. Don't feel bad about using the old mediocre libraries. And in general, learning basics isn't embarrassing.
But can still be mined...
I don't believe tenure is still a thing.
On Movie 'Suburbicon' Reveals New Official Poster and Trailer – Watch Now
It's interesting that no one here has yet mentioned the UK government system "Verify". Fundamentally there are different authentication mechanisms and idealogies at work, but it's the same UK CESG GPG implementation as Verify. I genuinely wonder if the US people understand the privacy implications of a central authenticating party as opposed to many federated ones?
So you just wanted to attack him personally without having any obligation to back up your opinion? Do I understand correctly?
Cool visualization, but kind of a useless statistic. The question that matters is: How many years will it take me to pay off my mortgage after my expenses (food, transportation, housing maintenance, utilities, taxes) are taken into account?

It doesn't matter how cheap a house is if you can't save any money.
Greater than 40 hours is not long. I mean over 60-70 hours a week.
What we learned

* You can't change the currency of a Stripe customer.

* Stripe won't transfer US Dollars into a UK US Dollar accounts. We set some up with our bank only to find out later Stripe won't do it. So we have US Dollars => British Pound conversion cost.
I live on the border of New York and Ontario/Quebec and I can't see how this won't spur legalization here. The border is already incredibly porous and the smuggling routes already exist. This will just make it even easier.
He's advertising his own service. His criticism night be justified, but there's no new reason he mentioned why he would leave Twitter exactly now.

It's an ad.
I use Autoenv. It has one ultimate advantage - you don't need to learn any new tools/commands or execute anything manually. Also it's totally up to your decision where do you want to have the virtualenv.
Just put a file `.env` with anything you want to execute automatically (eg. `source venv/bin/activate`) into your project directory, and that's it - it will run any time you'll `cd` or open a new shell there.
Starbucks launches a new PWA
From the Equifax webpage[1]: Criminals exploited a U.S. website application vulnerability to gain access to certain files.

[1]: https://www.equifaxsecurity2017.com/

This is inexcusable in 2017. Hacking humans may be easier but it's up to Equifax to figure out how to mitigate that risk. "It's hard" doesn't excuse their behavior.
Indeed. I wanted to see if I was on the list, but the site they set up to check looked pretty sketchy.

They've clearly demonstrated I shouldn't trust them with my SIN (not that I ever willingly did in the first place!) so why should I enter it again? Into a different domain, no less?!
A rather important bit from the Wikipedia page to keep in mind when reading that quote:

"His account was largely sourced from a 1797 work by Johann Beckmann titled A History of Inventions, Discoveries, and Origins.[11] In fact, Beckmann's account, and thus Mackay's by derivation, was primarily sourced to three anonymous pamphlets published in 1637 with an anti-speculative agenda.[36] Mackay's vivid book was popular among generations of economists and stock market participants. His popular but flawed description of tulip mania as a speculative bubble remains prominent, even though since the 1980s economists have debunked many aspects of his account."

Also see the "Modern views" section. Basically, as far as anyone can tell Mackay's account of tulip mania is mostly bullshit.
"...and inherited wealth of several million dollars..."

It's this part that definitely makes her rich.
Is it really necessary to own a home if your mortgage is going to be 20 years long?

I get that renting is like throwing money in a hole, but people are so much more nomadic these days. What's the big deal in moving once every 10 years once rent gets unbearable?
The sales were unplanned, meaning they weren't entered per the usual stock sale cycle. If that's not evidence enough of at least insider trading, coupled with your timeline, I don't know what is.
Show HN: My First Web Site
Ever hear the one about the pot calling the kettle black?

Google did nothing wrong with its use of 38 open source Java API header files. Neither did the juries that presided over the trials. What I do find troubling, however, is your improper use of the word "Fork", to describe what happened.
Can someone eli5?
This is my first attempt at creating an ecommerce site, building a brand name, and generating online buzz. Open to all comments/thoughts/suggestions.
With all the Equifax headlines today, I was wondering if there would be a few poor souls in the the Equifax Tech Department who feels atleast a bit responsible for the whole mess. ( I do understand it is a collective responsibility of the management as well )

edit: Was the analysis of the hack published?
Unfortunately, many power plants in china ignore environmental regulations and don't install scrubbers (or have them but don't turn them on when officials aren't looking). China's pollution problem is primarily one of governance and rule of law.
Containerization at Pinterest
Will you share the location? Or do you like it too much to do so?
> If the DRM prevents me from doing things that would be trivial for a pirate, something has gone horribly wrong.

The "solution" is to pay for the legitimate version and then get the pirate anyway. I often do that with stuff that can't contain malware/viruses (such as movies and tv shows).
> Reality exists independent of the observer.

Quantum mechanics would like a word with you.
Toronto is currently full of dispensaries on every corner. Some are open late and you're always close to one, independent local businesses with people in the community making money and spending it locally.

It will be sad to see a government monopoly turn weed distribution into the LCBO style. Expect prices to go up to $15-20g, cut down the number of locations and closes at 9pm.
> What does "and then nothing" mean

SoundCloud? Just look at the recent downround.

The 'incredible auccess' is decades ago. USV had its best times.
July 29 < August 1 < September 9

I don't see anything exonerating in the timeline you described. You are making assumptions here that could excuse the executives if they were true. These are nothing but assumptions though.
As French are getting tired of Macron's "same old", it's time for another grandiose statement-fest, this time about EU, deeper integration, unity and whatever.
Trust me, there are lot of people who make more for less.

Developers can provide extremely good value for a company.
Well of course it didn't have to be this bad. But when criminal negligence for corporations remains unpunished in an industry for 40+ years, you're not going to have corporations that dedicate the time, let alone the money, to do things right.
I've lived there. Best to have US clients, except you still get paid in $, aka 0.8 euro on the dollar
It's a historical fluke. Credit bureaus trace back to agencies that compiled third-party reports on the creditworthiness of business persons. So long as the information collected is accurate (and not defamatory), this type of activity is protected under the first amendment.

See the first segment of this episode of the Backstory podcast for a retelling of how these early agencies worked: http://backstoryradio.org/shows/keeping-tabs-2016/
Your argument that credit rating agencies shouldn't be on the internet is really terrible.

People pay credit rating agencies to retrieve their credit reports, get credit scores, and open disputes, and the best way to do all that is online.
It's a nice read. Some statements are hyperbole but overall I can say that it lines up with my own beliefs.

>> To proclaim loudly that you think it’s mostly luck is, ironically enough, the best way to make sure you are excluded from the lottery.

I've had the exact same thought before; it's almost as though rich people conspire together (at least subconsciously) to make sure that no critic of capitalism joins their ranks. It makes sense though; if top capitalists like Jeff Bezos and Warren Buffet started preaching about the evils of capitalism, it would pose an existential threat to the system... Top capitalists are the popes and priests of the economic order so they need to be devout.
I'm reading a book now call "Liquidated: an Ethnography of Wall Street" by Karen Ho from Princeton. There is this incredible part at the beginning of the book where the Vice Presidents of Goldman Sachs are training the incoming group of Junior Analysts who have all just graduated MBA school, telling them how to treat the executives of the companies they are going to be analyzing.

They make them shout over and over "MANAGEMENT ALWAYS LIES, MANAGEMENT ALWAYS LIES, MANAGEMENT ALWAYS LIES".

That scene took place in the early 90's, and I can't imagine anyone thinks it's gotten better in regards to the ethics of top management, their understanding of technology, or their desire to participate in insider training.
I have a Britta filter, which I think is the activated charcoal you mention. What should I get instead?
>What is much more likely reality is that they detect breaches on a regular basis, and until the forensic team came back with the bombshell - likely many weeks later - of the scope of the data loss, the executives were not even informed.

Your hypothesis is predicated on the fact that you trust their timeline, and make assumption that type of events could have occurred within each groups at Equifax on those days..
Well alot of problems that the EU has had have been related on countries having fiscal control but not monetary control.

http://www.investopedia.com/ask/answers/100314/whats-differe...

Before the EU and a central currency a country like Greece would print money to deflate its debts, this would cause the currency fall in relation to its neighbors, which makes it cheap to visit Greece, which stimulates the economy and the economy inflates until its time to repeat.

With the Euro currency this option is off the table for Greece. I'm not sure how they solve this unless they move to a model more like Canada where the Federal government controls the majority major monetary decisions and lets individual provinces(EU countries) decide how to spend the money that the main government gives it, thereby limiting the local governments(EU Countries) ability to go into debt and preventing a situation like the absurd spending that went on in Greece.
To be fair an AG does have plenty of power, but it's the power primarily, of the office. That comes with all kinds of oversight and politics, while the Big Three are just... apes.
how many years will it take to pay off your mortgage? thats done for you, about 15 or 30.

how does other factors like food/transportation/taxes factor in? though not always, but they tend to go hand in hand no?

the cost of real estate is factored into much of what we buy / spend money.
> bought a house big enough for a family to live comfortably that I could reasonably afford in my late 20s.

Well, we'd all love to do that, but where? (That was a rhetorical question, I personally moved to Edinburgh and bought an affordable family house in my late 30s)

I remember a website tracking London affordability that pointed out that in some years price appreciation made it literally impossible to save for a house: the value (maybe even the minimum deposit) went up faster than average income.
Awesome! If you want me to notify you when the book comes out, I put together a simple mailing list at coderscoloringbook.com. Thanks
I have one credit card that I got in my twenties, and have never taken a loan. I'm wondering too what these people are doing.
plus the opengl shading language is the orange book

Interestingly, the vulkan book is also red

also: graphics red books are more like anotated standards
This is just pure crazy. There should not be any non-govt agencies that store such sensitive information. This is not like credit card where you end up getting a new card. You can't change your name and ssn. I wonder how we will tackle this problem.
"While coding boot camps had many course listings on JavaScript, Ruby, and web development, they had none that covered product management, wireframing, cloud computing, DevOps, or Agile methodologies"

As a bootcamp grad (Hack Reactor) this is only partially true; while you can easily skate by without needing to learn any of these things there are many who elect into them.

Anecdotally, from my cohort:

* Testing and version control were a part of the entire curriculum from the first sprint to our capstone code freeze. Basic git was drilled into us, as well as exploration of more involved git workflows when we began our project phase. We learned about TDD and BDD and had a sprint dedicated to setting up our own tests (with tests against our tests).

* People could elect to take product management/scrum master roles in their project teams (of which there were 3); some people elected to take these positions every project, some avoided them, but most served in a managerial capacity at least once.

* Deployment (admittedly most to Heroku, only one to AWS) was a soft requirement of every project and it was part of one of our sprints.

Outside of my cohort, many people spent extensive time working with things that weren't a core part of what we did. During my database sprint my partner and I decided against the offered MySQL sprint and wrote our own Postgres branch. Many people took deep dives into algorithms and data structures - bloom filters, red-black/b-trees, various sort implementations, etc. Some project teams built CI pipelines and deployed on AWS/GCS/Azure. Overall, while these things aren't a part of the core curriculum you'll find many people electively choose to take on far more than what's mentioned.

And I learned _none_ of that in my _full year_ of CS.
No Sun did not have it figured out and history has proven this. Sun just couldn't compete from a technology perspective because no OEM was going to choose a vastly inferior OS.

BTW, here's a picture of your SavaJe phone. No wonder OEM's fled in horror.

https://www.engadget.com/2006/05/13/savaje-releases-jasper-s...