skysight-inc/HackerNews huggingface dataset:
I don't understand what he thinks an RFC is in this context? Is he basically just saying that it's an architecture document and he gets feedback from developers? Does everyone not already so that?
Equifax is also the only one out of the big three that shows your SSN in plaintext while you type it in on that online request form. They're just lacking in all departments it seems.
Doing something like that is illegal if you have a monopoly. Apple doesn't (or even majority market share).
You can exploit this in for example poker games that is rigged so that first time players will win.
Co-author here, feel free to ask any question!
That's not what's needed. I guarantee you if the companies responsible for these leaks and their executives faced real penalties with teeth things would get better, licensure scheme or no.
https://jsfiddle.net/yurctL2c/3/
LOL best comment :D
As licensed professionals, they work under the knowledge that there are practices and outcomes that can cause them to lose their licenses.
I wonder where the tipping point will be where, say, about as many people are gay as are robophile.

Now that's a interesting observation.

It might happen in China first, which has about a 1.3 to 1 ratio of marriage-age men to women and a big electronic gadget industry.
For JavaScript, the Esprima parser [1] converts JavaScript to what appears to be a JSON format. It's formalized by the Estree spec [2]. You can try it out here [3]. JSON is just regular JavaScript data structures (maps and lists). If you want type safety, there are Typescript definitions, but you could ignore that.

Another example: Go has a parser and AST that comes with the standard library, which again is just using regular Go data structures (structs and interfaces). If you wanted to write a macro preprocessor, using the built-in parser seems like a much better idea than string manipulation.

So, I'm wondering if there's anything more to the way Common Lisp does it?

[1] http://esprima.org/
[2] https://github.com/estree/estree
[3] http://esprima.org/demo/parse.html
Late to the party so I wondered about:
1. To confirm whether you were a victim of their "cyber security incident" you have to enter (6) digits of your SSN. Uh ... no.
2. We CAN still sign up for their one year credit-monitoring service and retain the right to legal action.
3. We should think about freezing our credit per FCC:

https://www.consumer.ftc.gov/articles/0497-credit-freeze-faq...
That doesn't really seem comparable.
And the hits just keep on coming...

www.equifaxsecurity2017.com uses an invalid security certificate.

The certificate is not trusted because the issuer certificate is unknown. The server might not be sending the appropriate intermediate certificates. An additional root certificate may need to be imported.

Error code: SEC_ERROR_UNKNOWN_ISSUER
Well accepted != next big thing
What Can Deep Neural Networks Teach Us About Human Thought?
Haute Cusine is more than good food. It tends to be avante guard cooking with certain service standards. There tends to be a certain evolution and style to it. Marco Pierre White made some incredible food that was highly influential to Western haute cuisine but anyone serving food that way today would be considered passé even though it's simply astonishingly good, creative food.

Italy is steeped in a good tradition that is its own thing. Haute cusine exists there. Look no further than Osteria Francescana. That caused an outrage in the Italian press when opened but is now universally agreed upon that its one of the worlds best restaurants with progressive Italian cooking. A revolution of a restaurant to a place resistant to change from tradition.

Although I love fancy restaurants I prefer the warm, family style approach to food you see throughout Italy.

Which is why Spain is my favorite food place. A great acceptance of super experimental food with a love for the traditional regional cuisine. It's such an open minded but authentic and true to itself good culture.
But all it did is make people not like him
It is pretty common to have people in tech who studied something else. Or dropped out. And security is one of those places where career changers end up more often. Also, general computer science majors actually learn only very little security in school. So, that is how and why it probably does not even matters all that much.

Yet moreover, corporate security is quite uncool to people who do academic anything (including security) or worked as security researchers. Corporate security is more about negotiation, enforcement, standards compliance and other significantly less interesting things to someone who like research or low level details.
Corporations have always been people. If corporations weren’t people, you wouldn’t be able to sue them.
Compared to $1041/head ;) but maybe some stuff that we enjoy here is coming out of the government coffers and not the city coffers although reading the budget reports I've not found any substantial costs "left" out. Maybe they shoulder more costs directly.
> YOU SHOULD ALWAYS SEND LETTERS WITH 'USPS RETURN RECEIPT REQUESTED.' (It's the green card you get at the post office and once the recipient receives your letter, you will get a green card in the mail serving as proof of delivery and acceptance.)

Also: 1) Get the actual green-card form beforehand; 2) type the green-card serial number above the inside address of the letter; and 3) keep a photocopy. Otherwise the recipient could claim that the signed green card, confirming receipt of the mailing, was for some other letter, not the one you sent. As a baby lawyer filling in for a more-senior associate at a court hearing, I had an opposing counsel make just such a claim to a judge; the judge gave the opposing counsel the benefit of the doubt. (The opposing counsel was later disbarred for unrelated reasons.)

Example of such an inside address:

--begin--

VIA CERTIFIED MAIL NO. 123456789

Evil Corporation
9876 Main Street
Anytown, Anystate 54321-9876

Attention: Department of Fobbing People Off

To whom it may concern:

[etc.]

--end--
if you can show me a blockchain that says the same thing I'll have 100% faith in all of you with 1+ confirmations.
I'm working on part 3 for everything that was built on top of the PC and internet revolution.

I'm thinking web browsers, early internet startups / bubble, social & web 2.0 and the sharing economy. Any suggestions?
I thought the twitter list of ethical questions about sex robots was fascinating in the ways it asked some very real questions about this.

The change that I continue to watch for is not when robots are used to do an undesirable job, but instead they are used to do a desirable one. I suspect the first hints of that are programs that write sports copy for newspapers. I have known a couple of sports writers over the years and they really liked what they did, and would (and sometimes did) do the job for free.
> The steps that would necessarily have to occur in order for a case to be brought against you because you illegally recorded a support call that revealed impropriety of the other party are fairly preposterous

It's as simple as "we will settle your qualms against our business in exchange for us not pursuing your wilful violation of criminal law in court". If you say no, a cheap state court filing would be routine for a business but hell for an individual.

TL; DR If you want to record a call, get permission.

Source: I helped a friend who had a call illegally recorded Cc our local AG on a letter protesting the matter. The AG requested information from the offender; they settled with damages for everyone involved's time and expenses. Running your life assuming nobody will hold you accountable works until it fails. When it fails you've handed the other party a ton of leverage.
The target for most network pen tests is to obtain domain by noon of the first day. Generally, they keep going until they succeed and/or someone in the chain cries uncle.
You have the compiler use a special reader which records the source locations of each form in e.g. a hash table. When compiling a specific source, look it up in the hash table to get a source location mapping. There's a couple of downsides to this:

- This only works when the reader returns unique objects. It's possible to track the location of a cons cell, but it's not possible to do it for any specific use of a symbol or a integer.

- CL macros can do arbitrary transformations on the data. If those transformations involve loss of object identity, the tracking breaks down. (E.g. code-walking macros will often end up doing spurious copies, and cause unnecessary loss of source location mappings).
The Afghanistan campaign costs about 3 billion a month, so drilling a volcano for a similar amount shouldn't break the bank. This will contribute far more to our security!
From a real estate business perspective, it's a drop in the bucket so we don't really care about the revenue. It's real value is providing an amenity to our tenants, which has real traction with certain tenants.. again, the tesla driving execs.

But to answer your specific question, I do not know, probably. I think we (300,00sf office tower) buy electricty at a cheaper rate than residential rates, so we have a small potential arbitrage without the customer caring.

HOWEVER, fast forward to a not-so-distant future where majority of tenants demand/request a charge, now we are talking real money.
I recently turned down a job offer at Experian; it (at least their San Diego office) was a shitshow.
Parts of mongrel2 were sadly a solution in search of a problem. Mostly the "let's redo FastCGI via ZMQ". Was still immensely fun working on and with it.
Around 5 years into career, it does not matter what you studied or whether you finished. It matters only what you do now and how old are you. The process starts with music major getting job out of music industry and then working her way up the corporate ladder just as anybody else ever worked his way up - except with having some disadvantage in the beginning.
But then you also have to guess their ssn and last name on top of guessing the correct day in order for it to be 1 in 288 chance, no?
Ask HN: How profitable is your productised service?
I'll take your word for it. I'm not very interested in electoral politics. or the Democratic party.
It's perfectly okay for a Boolean algebra to have four values. The two extra values can't behave the way JavaScript's “null” and “undefined” do, though.

No three-valued Boolean algebra exists.
Okay, sorry, perhaps my point is different.

It is irrelevant whether you have any credit cards, or whether you have a bad credit rating, or whether you care. If you have a mortgage in the US, then Equifax, Experian, and TransUnion have your number. They have your number,
they have mine, and they have brownbat's.

Now, other people have my number. And the only way I could have avoided that was to have paid cash for my house and/or had a fairly limited set of landlords forever. So the OP's point still stands, but I strongly agree with patio11's
comment that my credit rating cares about me irrespective of how I care about it.

EDIT: sp
> But lots of people are plenty happy in the "boonies". They just have different interests

I don't disagree. Different people want different things. I'm just pointing out 1. why people like living in big metros and 2. the flaw of basing where you live entirely on the cost of living and real estate.
Xtermcontrol: change colors, title, font and geometry of a running xterm
At this point, I will be legit shocked if there aren't actual lines forming around courthouses, full of plaintiff-side lawyers trying to get a piece of this unbelievably stupid and negligent company. Holy shit.
I'm a co-founder of Snips https://snips.ai we are building an open-source Voice AI platform for embedded devices, you can use this on your Raspberry Pi3!
Good point. One reason why I never liked the idea of hydrogen fuel cells, it'd be another system with a high barrier to entry. Electric is a lot nicer in that respect.
On the other hand, advertising is something like a means of buying votes. But the authors have assumed the possibility of influencing other voters away.
My pet theory is that the rise in the "Japanese" style of fine dining -- which to me is characterized by pristine ingredients and a sort of atomized style, where most dishes appear as a combination of elements -- is in part explained by a roughly concomitant growth in the weight of reviews in determining a restaurant's place in a hierarchy. Maybe I'm underrating the influence of professional reviews before the 60s, or overrating the influence of professional and amateur reviews now, but it does seem to me that "Japanese" style cooking is easier to justify intellectually, and for that reason more likely to earn the Michelin etc. plaudits that make these restaurants' names.

An audience can pretty easily grasp an account of the right grower/forager/fisher supply chains that produce really nice ingredients, and they're fun to write and read about too. And being able to discuss a dish as a sum of constituent parts (how many "nice" menus these days describe dishes as just a list of ingredients, one of which are unexpected?) makes the task even clearer. The built in diversity and, sometimes, narrative of a tasting menu also helps.

Compare this to the difficulty of explaining why a single curry or mole tastes good, where it's hard not to fall back on hand-waving terms like "complex", or "haunting" or something. These dishes are, at least to me, far harder to pick apart and analyze in a convincing way, and that sort of analysis seems necessary to justify "fine dining", from what I can tell. Last I checked this was reflected in the allocation of Michelin stars, for which there are close to zero Indian, African, or Mexican (to name a few huge cuisines) last I checked, (though I think Mexico may have made some headway recently.)
Amusingly, the loading time for the "full experience" is long enough that it's cut off in the video. I think that says everything needed about the "full experience" on the web in 2017.
Co-author here. We will provide our dataset for the sake of reproducibility, in the meantime we strongly encourage you to compete to our ongoing Mangaki Data Challenge, organized with Kyoto University: http://research.mangaki.fr/2017/07/18/mangaki-data-challenge... Deadline October 1.
I mean like misspelled properties eg. obj.x

edit: I figured it out myself, just replace ASSIGN with MEMBER ! Awesome!

I've been thinking of how to do this statically for a while now, but dynamically is good enough, as it still will be able to point out the bug before you even start debugging. I think this is game changing and will make things like Typescript feel like stone-age. I'm currently working on an editor/IDE for JavaScript and I can just add a check-box like "static typing" and you'll get warnings every time a variable or function parameter change type.
Every financial institution you deal with gives them your info, and they do it so collectively they all have lower risk on loans. I suspect if this wasn't in place, we'd be paying significantly higher interest rates on loans.
POLYBIUS – The Video Game That Doesn't Exist
It's taking space that could be taken by yet another article about confidence/burnout/fitness/sleeping/nutrition!
> they couldn't survive without the credit agencies

Europe operates just fine without the notion of credit or credit agencies.
Indeed. But I think the text of the article already agrees with you :)
So they need to re-drill constantly? (after each m3.)
This is a unix system! I know this!
Trust me, you should watch this if you're even remotely interested in the game or urban legends. Because unlike many articles and videos on the subject, Stuart Brown/Ahoy really goes into depth about the history of the urban legend, how it originated on coin-op.org in the early 00s, who Steven Roach really is and how an article in a retro gaming magazine ended up propelling it into the spotlight.

It's gaming journalism done right, at least in my opinion.
Thanks for this great summing up! I will add that the whole Mangaki platform is on GitHub: https://github.com/mangaki/mangaki/
Is there a recommended book on ant behavior? Have always been casually interested, ever since reading about the bit of it mentioned in Surely You're Joking, Mr. Feynman.
Deep learning models and active learning techniques at US Open
Quick question: who is the target audience? Have you tried showing it to them?
Only if the web of trust:

a) eventually links to someone you personally know and trust

b) has not been compromised, intentionally or carelessly
It is precisely an either/or because it has made $8B in profit last quarter. Apple as a massive company must make thousands, hundreds of thousands of tiny decisions to make it's business more profitable.

Investing in iOS attracts more customers and buy in to its products and services. Investing in Safari is not a key differentiator for their business and rivals will be able to easily implement the same features. Apple is smart not to play Google's game.

If Apple were to engage in this, the browser now becomes a selling point of the phone. Apple goes from iOS/iPhone company to Safari company. They give away their offering/unique selling point that no other company has, along with their massive advantages as a market leader.

Because their tech and business strategy is more developed in this space (browsers), Google can start acquiring customers at a lower cost than Apple without having to differentiate its core product more than the fact that it has more APIs/features. We see Google already does this to a degree, they market their products more on the feature set rather than the mission and brand.

Web technologies also inherently support Google's business strategy, the more APIs in the browser, the more data Google can collect on Apple's users, the more advanced targeting they can do to swipe away Apple's customers and collect intelligence on what Apple is up to. Do not be fooled, every time there is an API added to the browser, there are teams of people at Google ready to capitalize on it to help drive profits.

It would be a bad, bad bet for Apple to start all of sudden focusing its energies on Safari. As a SWE, it is completely understandable why Apple gives Safari little love, I'm okay with it.
Or look it up in the breached info.
I don't encounter either problem:
1) If I'm editing things that don't fit on one screen, I'll scroll and check them all after I'm done. This is no slower than the scrolling needed during the step of applying a macro everywhere and checking it. And I at least get feedback from one page while composing my edits, with macros I get none.
2) I use multiple cursors with Vintageous in Sublime, so I get most of the power of vim macros, but with multiple cursors instead.
I'd like if Equifax was just shut down and the assets redistributed to the affected parties. Shareholders have no incentive to hire ethical and competent managers if they don't have to bear the losses stemming from bad decisions.
Open Source ML Platform
None of that would've happened if Struts didn't have remote code execution bugs in it either. My original point was precisely that there are many attack vectors, and a complex stack makes it nearly impossible to account for all of them.
No, I don't have one either. Where do I find it?
This is great! I really like PyTorch compared to TensorFlow; it's more straightforward and easier to debug with common Python tools. With TensorFlow I felt very disconnected from the model, like I was dealing with things through robotic arms rather than my own hands. When something went wrong it was often hard to isolate what caused it.
Thanks for taking the time to do this!
We could start holding companies responsible for their products as opposed to suggesting they are blameless even in the face of shoddy software.

Right? That'd certainly add economic incentive to quality.
Maybe it is, but that's also just a way of trying to push the costs onto the low-level employees. the attitudinal problem here is with the senior management and shareholders, who are the actual responsible parties. If they really cared they'd have established such a certification or announced an intention to adhere to some existing standard.
I'd love to read about how you can use so-called “type hints” to mechanically rule out programs that inspect the internal representation of abstractions provided by third parties.
With respect to This issue is solved I suggest rewording it as This issue is partially solved, since in almost any real-world large web application, there is a significant number of third-party libraries that won't be automatically updated.
The cert is signed by GeoTrust and works perfectly fine on my Chrome on Windows 10.

[Edit: Ah, the chain is incomplete, see https://www.ssllabs.com/ssltest/analyze.html?d=www.equifaxse...]
Because I need FIFO ordering for tab switching with Ctrl+Tab, and every time I check, Chrome doesn't support it and extensions can't offer it (because they cannot override the shortcut).

Firefox supports it via extensions, although the author has noted it will stop working in 57.
Unfortunately, any project to drain the supervolcano's energy will meet with immense resistance from various groups of humans with limited intelligence who don't realize its power and the extinction-level destruction its explosion will cause. The article lists at least two ways of safely extracting the supervolcano's power without risking the triggering of an explosion, but this won't be enough to convince the idiotic naysayers. By harnessing its energy, we can have clean energy for millennia.
There is no school or course of study that will prepare you for a career as a CSO.
I was surprised they didn't even use a link on their main equifax domain, but set up a new one that could just as well been any phisher.
I can confirm at least the first 6 digits are MMDDYY based on the date that I saved it into 1password. The last 4 digits seem like could very likely be hhmm.

Edit: Can confirm: The pin is the exact date/time stamp that my freeze was applied. I'm able to tell based on another note saved to 1password. It is within 1 minute :(
Seems like it might be prudent to first try extracting 35% of the heat from a volcano smaller than the Yellowstone Caldera. We might learn some things, and if we get it wrong the consequences don't result in widespread starvation.

That said, it's obvious that this plan is just the start of serious investigation into how we can engineer mitigations to an eruption at Yellowstone. I would be interested in seeing a model of the impact that surface-level cooling would have on the pressures deeper in the system. If we prevent an eruption now, are we making it worse in the future?

Other solutions I can envision might be to deliberately trigger smaller eruptions over longer timescales at the boundaries of the caldera. We could also look at large-scale mitigations for volcanic particulates in the atmosphere, including solutions that may require several hundred or thousand years of advanced preparation for success. If we could control the impact of a significant yellowstone eruption to a single hemisphere, or limit the duration to a single summer, most ecosystems would be able to recover quickly.
Do you apply this line of reasoning to your doctors and lawyers as well?
Subject matter aside, our society will have major problems if we condemn someone before getting a full picture of what they are like.

When a suspected criminal goes on trial, and testifies, and evidence is presented, we are able to decide for ourselves how good or bad a person is.

When someone tells us, "you should hate this person, just trust me", our society turns into an angry mob.

Why?

Whoever people listen to, that person is human, and can make mistakes.

So, if we all rally around a person who is telling us to condemn someone, and we haven't all informed ourselves of the available evidence...

... it is a witch hunt.