skysight-inc/HackerNews huggingface dataset:
This article, http://www.marketwatch.com/story/equifax-ceo-hired-a-music-m... , is brutally ridiculous and unfair. The major point seems to be "Hah, they hired a stupid music major to be their Chief Security Officer!"

Some of the best software developers I've known were music majors. I know nothing about Susan Mauldin, including any of her other qualifications or lack thereof, but implying someone is only qualified to do what their college major was tells me this author is a complete idiot.
The ruling is correct, but the law is stupid.
iOS shows it inline. Android can do too; it usually starts a download instead but IMO that's the browser's fault (should default to embedded).
> What is the rationale behind defining child porn age < 18?

This is actually known (as to the USA). When the law was passed, pornography producers didn't have to keep records of their models. The goal of setting the legal threshold at 18 was to make it really, really easy to convince a jury that a model who was e.g. 12 was below the legal threshold. It wasn't expected that photos of 16-year-olds would be prevented, because if all you're going on is a photo, they aren't easy to distinguish from 18-year-olds.
To be fair- if you turn off standard features, you can't complain when you get a sub-optimal experience.
And also many mentions of no schema validation in Rethink, so that's probably not a gap.
Failure to apply a patch for a two month old bug led to this entire nightmare scenario. What are some best practices to ensure that ones dependencies are always up to date?

-asking as a relatively inexperienced dev
> Are there any countries out there that take a sane approach to this moral conundrum?

Most of the rest of the world actually.
> Is it cultural?

It's cheap. You need a few people and clever ideas rather than enormous capital. Russia has people and education.
> This is about a 17 year old sending a picture to an adult non-consensually - the court declined to rule on whether "two 17 year olds sending pictures of themselves consensually" would be the same.

But, from the OP:

>> The case itself involved a 17-year-old sending “an unsolicited picture of his erect penis” to an apparently unwilling recipient, but the logic of the court’s reasoning applies even when the recipient is pleased to receive the photo. The court does say that, “because [Gray] was not a minor sending sexually explicit images to another consenting minor, we decline to analyze such a situation,” but I think that — given the logic of the majority opinion — the analysis would have to end up the same way; nothing in the majority’s reasoning turns on the presence of an unwilling recipient.
/me search thread for "paper"

No hits
That is not my purpose. I have no idea what her qualifications are, I saw the LinkedIn page and it contained almost no information. That is hardly relevant.

I personally believe that she was backed into a corner, based on the interviews I watched from some time before the breach (that I can't show you, and I won't link to the transcripts because I know they are incomplete and by far less impactful.)

She sounded to me, exactly like a person who was given a budget that was effectively no budget, and then put into this role because people with a larger stake were sure that she would comply when they said "this is your budget, and not a penny more." I know exactly what that is like, because I have been made CIO and put in that position before. (I'm sure she was better paid than I was...)

There is absolutely 100% a coverup going on. I am so bummed that I did not save the interviews when I first watched them. You would agree too, if I could show you.

Edit:

Here is the transcript, but with the disclaimer that it is 100% not the full transcript. Although it is in her own words. Make your own judgement about her qualifications please.

https://archive.is/6M8mg
Also, apparently, the rocket exhaust actually recirculated up the sides of the Saturn V inside the boundary layer, well past the point where the fins attached. See the picture in the following paper, where it appears that the exhaust is originating from a point about halfway up the first stage.

https://www.nas.nasa.gov/assets/pdf/Kiris_Gusman_PlumeCFD.pd...

Which tells you something about the size of the Saturn V boundary layer.
> Guilty of what?

In US we have a lot of what's called regulatory crimes. For example, https://www.law.cornell.edu/uscode/text/42/1320d%E2%80%936

Similar laws can be created to deter people from violating privacy of financial information. We can call what's happened a negligent disclosure financial information.
Her job titles since then on LinkedIn are "Professional."
How many times have you had a cop point a gun at you or order you to hold your hands up?

You are worried about a tiny percentage of cases. Most people are worried about border agents (who have authority as much as 100 miles inland) or cops in traffic stops asking to see their phones. 99% of the time you will be able to hand them the phone and disable it before they get it. They aren't allowed to ask you for the pin-code, so it's game-set-match at that point.
Pace has slowed down by all accounts. I am only talking about big opportunities outside of GAFA. Also look at GDP growth.
>So what to do?

They've spent over 30 billion building GCP. I'd rather they continue expanding GCP than waste a dime on Snap.
> Isn't saying "capital should own things," not so much an ideological perspective but rather just a rephrasing of "things have costs"? Things having costs is a fundamental fact of nature.

Not at all. In fact, so far not at all I'm actually confused how you think that's true.

Could you elaborate on why you do? It seems important for understanding the rest of your post.

> How does socialism supersede capitalism's benefit of promoting the transfer of economic value in the form of currency, or capital, from one creative realm to another which has immense creative potential over a less abstracted approach?

Socialism is perfectly capable of that process as well -- the difference is who makes the allocation decisions, people who own capital or people who produce things via work. There are arguments for why either side might be better at that task (and in practice, a mix of the two strategies seems to work well).

> Are you saying that socialism basically boils down to prohibition of people owning anything that they did not make with their own hands? And I guess handmade goods can be traded? Do they lose trade potential after they've left the hands of their original creator?

Nope, not even close. Again, to the point I'm confused how you got that impression.

Socialism is just the idea that corporations should be co-ops of their workers rather than property of their shareholders. (Well, okay, there's some fiddly details in particular models, but that's the gist of the difference between capitalism and socialism -- if you structure society around corporations owned by investors or owned by workers.)

> I've generally seen capitalism, not as some sort of cause that emerged from some Magnum Opus

Have you heard of our lord and savior Adam Smith?

The rest of that comment is based on the misunderstanding I pointed out at the top -- all economic theories deal with things like the cost of producing goods and the circulation of goods within the economy. Capitalism is far and away from being "objective" in that regard or the only way to organize activities around that. Capitalism in just as opinionated as Marxism (with just as outspoken of supporters, if not more so), it simply has different opinions.

> when you try to impose laws and regulations that run counter to natural orders and fundamental truths you inevitably run into trouble

Capitalism is none of those things, thankfully.

In many places, you seem to conflate "capitalism" with the notion of economics in general.
Sorry, that comment was worded badly. Both System F and System Fω can express self-application at a particular type, but they can’t give a general type for self-application, e.g., Ω = ω ω where ω = λx.xx.
The 17-year-old did it consensually. The adult did not solicit the pics. That is, the "victim" here is also the perpetrator.
Correct, but, even if not explicitly said, the cached entries should be associated to the certificate's fingerprint and immediately discarded once the certificate expires or is changed.
Payments made to Clinton tied organizations by Russian banks who profited off of a uranium deal days after the ink had dried = Nothing to see here

Cyrillic characters in a binary = Definitive evidence
I know equifax is probably dealing with a hairy legacy system, but really you should design all your systems to be able to push out a fully tested blue/green deploy in hours not months. There's no excuse not to with Jenkins/aws/docker/etc.

You should be testing and pushing updates regularly as a matter of course, not as a red alert only when security vulnerabilities are published.
Some states have a (I think it's called) Romeo and Juliet law that does in fact protect say 19yo dating 16yo or some range depending on the state.
"...rather taking a more nuanced view."

Aka concern trolling.
Have a process to know what all your shit is and be paranoid about using any shit. Being paranoid helps.
Well my greater point was that high speed high altitude intercepters were becoming obsolete while the Arrow was being built. As much a pleasure as the Delta Dart may have been to fly, it wasn't produced in great numbers because it wasn't designed for the new threats.
"Having complete control over their machines" being a non-goal is not the same thing as "not having complete control over their machines" as a goal. And trying to spread malicious rumors about GPLv3 only matters for the latter, not for the former.

> What security do you get from not being able to replace the window manager?

Well, you could argue that a third-party window manager could be snooping on all of the content visible on your screen (that otherwise isn't available to third-party apps) and could be doing whatever they want with that potentially-sensitive info. But that doesn't even matter, because the real answer here is "it's a massive amount of work to support third-party window managers, since the window manager is such a crucial and low-level and highly-integrated part of the system, and there's no motivation for Apple to expend that tremendous amount of work, especially because they'd likely end up with a far-less-stable system as a result".

> Well, we're talking about it right now aren't we?

We are, yes. Apple isn't. No matter what I say on the subject, that doesn't mean Apple is spreading rumors. I don't work for Apple.

> This is the very definition of a rumor.

You're free to accuse me of spreading rumors if you want. And I can't very well deny that because I can't provide any verification, but this interpretation of GPLv3 is a fairly common interpretation so I don't see that there's any reason to doubt it.

But you can't accuse Apple of spreading rumors because people like me are making statements about this.
I could easily see 30 days in jail being a traumatic experience that could ruins someone's life, especially if jails are as violent as often portrait.

It's a complete miscarriage of justice: throwing a minor in jail, using a law supposedly created to protect minors. It could only be more cynical if they tried them as an adult–I didn't check, for fear of what I may discover.
The real punishment in cases like this is sex offender registration and a record, which is basically the end of your life.
Classcraft makes the classroom a giant role-playing game – with freemium pricing
A similar technology is used in Formula 1 to harvest energy during braking.
Is he on the sex offender list, though? I'd rather go to jail for a few years than end up on that list.
Jury Nullification is always an option.
Solaris is dying. Not worth learning, IMHO.
What is this supposed to mean?
Looks like JP Morgan got caught buying Bitcoin today (use google translate)
I use multiple firefox profiles at the same time and it works fine. try

firefox -no-remote -p
You picked up the adult pretending to be a minor bit wrong.

"However, the Court found the prohibition of images that appear to be, but are not actually, minors improper"

They found the prohibition to be improper. It's oddly phrased.
I you are white, this is such a strange comment to make.
Yeah it’s definitely a pain. I support a bot that we use for devops and I’m already going through and doing a search/replace op in our commit messages that get posted into slack.

Seems like this is a classic ‘push the work downhill’ thing they’ve done that just costs all the devs who write slack apps.
For teams that use a DevOps model, fast, predictable deploys that can be safely rolled back are important for security, for this reason.

If deploys are like playing Jenga on a sailboat, you're not going to be able to patch fast or safely.

That said, even becoming aware a CVE exists in the first place is still a problem for many teams. There are plenty of good options, it's just underinvested in early on.
The bottleneck we experience is that we lack design capacity to keep up with our engineering capacity. Thus is the plight of a startup I suppose, maybe? Obviously I'm a very limited sample of experience but I've yet to think that we could be doing better if my designers knew JS.
I think a better way to handle this would be to use subresource integrity [1]. Then, if the browser's cached version matches the hash, it can be sure that it doesn't need to do any requests.

[1] https://developer.mozilla.org/en-US/docs/Web/Security/
> 4) Software tends to be a winner-take-most industry.

Yeah. I think this is it. I remember when google paid $1.6B for Youtube 10 years ago, people thought they were insane. Look at them now. Youtube dominates the web as video platform.

Pretty much the successful self-driving AI platform will probably dominate the market and will be installed in most cars. Like how Android dominates the smartphone market.

In tech/software, it seems to be winner-take-all market.
There was no jury. This was a Supreme Court ruling.
Although I'm sure Equifax is not going to be very forthcoming about this aspect of it, not having plaintext passwords visible after logging in as admin/admin also helps.
Never mind adults pretending to be children. In some jurisdictions, child pornography includes cartoons. In one case, Simpsons fanfic.
Applying patches when they come out...
A few people might have been betting or at least hoping BeOS becomes popular, not so sure about 'next big thing'. Windows was already dominant when BeOS popped up.
Patreon changed the really quirky but cool logo on the front of their building to one that's considerably more boring. I wonder if it signals significant internal changes. Why bother changing such a thing?
You can define 'intelligent life' however you want. No matter how high you set the bar though, an algorithm that reproduces the intelligence of the average human and can be run in parallel at speeds unhinged by biological constraints would provide immense power, wouldn't it?
More like 8 years, it took that long for an economically viable jetliner to be created. The 707 was viable because it was far larger and had enormous range, it revolutionized long distance travel.
I think most would agree there is a profound difference between a 23 year old dating a 17 year old

...or even a 17.997-year-old.

The problem is that the world is mostly continuous, not discrete, but laws try to be the latter.
Here's a map of age of consent per country, ranging from 12 to "must be married."

https://en.wikipedia.org/wiki/Age_of_consent

"Most jurisdictions have set a fixed age of consent" but also
"Some jurisdictions have laws explicitly allowing sexual acts with minors under the age of consent if their partner is close in age to them."
Isn't Uber testing in Pittsburgh and Phoenix? They wouldn't report those miles to California.

What about R&D outside of the US?

I don't think California reports are an adequate measure of progress. Additionally, I am not sure mileage matters as much -- you even suggest why in the next paragraph.
Yeah, if you can create a good enough multi-task (which driving is) learner to know how to navigate city traffic, it will easily learn to park.
A vast part of Youtube's audience are minors who don't have credit cards and couldn't pay for content. So they are shown ads.
He had been required to register as a sex offender for a prior unrelated case.
I should point out that a co-worker tried to convince people we could easily do it with a generated PDF and throw away the damn $500 MICR device but that was swiftly deemed 'impractical'.
It's not terribly useful for people who open stuff from within the browser, but for the past couple of years I've actually had my default browser in Windows set to incognito/private mode of whatever browser I'm using. This way I don't have to think about it, and I also don't have to deal with things like Gmail deciding that I've already seen some emails because my inbox loaded in a background tab.
TL;DR: patching is hard, so use defense in depth to minimize/mitigate the impact of individual components becoming insecure from time to time.
Well Snapchat is surely screwed. There goes their second most popular snap after putting cat ears on a fidget spinner.
How Motherhood Affects Creativity
Ask HN: What are the best basic phones for hckrs in US? Which phone do you use?
Not sure if it's the right place for this kind of question, but anyways, there you go:

I'm having a hard time finding a good basic phone (not smartphone) with great battery life that is available for use in US. The kind of phone that would be perfect for zombie apocalypse (battery, radio, walkie-talkie mode, radio etc) and for 2factor text-base auth.

Great battery life is a major factor (4.5Ah and up with at least 1 month stand-by).

Another factor that goes hand-to-hand with battery is security and control, should be "hackable" and powered by an OS other than Android (iOS is obviously out of the question).

My search started a couple months ago with Nokia 3310 relaunch, which I think is just ideal basic phone i would buy immediately if it were available in US (1 month battery in stand-by is priceless!)

There is a limited selection of some very great looking options (Cectdigi T19 and Easyfone No.1 on Amazon for example) but unfortunately all those as well as new Nokia 3310, mentioned above, are not compatible with US carriers, these are bound to 2G which is non-existent in US (AT&T shut down 2G in Jan 2017 and T-mobile is shutting it down by the end of 2020)

Any advice? Thoughts?
This is huge! I work for an IT consulting firm and we have accounts for each client which I store in their unique chrome profiles. Keeps things organized but switching between windows can get tedious at times so having them per-tab is making me switch back to Firefox
I agree. The guy who is stealing the phone basically has to show it to the owner's face before running away with the device.
Tractors != automobiles. I think we could easily use autos less and have a net improvement in health; many people do just that.
"Toxic" views I suspect along the lines of,

It does more harm than good to the individual and society to entertain the delusions of mental health conditions.

The condition of gender dysphoria is a personal issue best dealt with between the affected individual and their health care provider.

But the key driver for Peterson was that pronouncements on these issues have absolutely no place in the Canadian constitution.

I think it was only with this issue(legislative lunacy) that he started discussing this, and it wasn't out of some contempt or animosity for people inclined to dress and behave a particular way, but rather because when societies start legislating what people are and aren't allowed to say and think, things tend to go real bad, real quick.

Peterson felt a strong duty to take a stand here due to his long study of the horrors and atrocities of communism the 20th century that often stemmed from mandates imposed on acceptable speech and thought.
Only if the same machine has to run on every farm in the world, without the option of learning what local conditions are or having them configured.

Machines operating farms in Australia can easily just assume the soil is dry, like the farmers do, as long as they don't also have to operate farms in Louisiana.
A few years is pretty rough, and you'd probably be a felon then anyway. Is that really better than being on a sex offender list?
To be fair, Some androids have a similar feature, the comments on this HN question are enlightening.

https://news.ycombinator.com/item?id=13957797
Why Dropbox decided to build its own infrastructure and network
Guilty or not could you imagine the rest of his life.

At an interview "so I googled you... what's this about the Supreme Court having a ruling over your dick pic, brah"

Better start his own business or get to flipping them burgz.
In this case he had a prior registration for something that's unclear but the new sentence also included registration.
What other things that you can do to yourself are illegal? Suicide. Abortion in some places. What if I cut a piece of my body and eat it, is that cannibalism?
Is it coming down to Patreon vs. Medium?
As a theoretical solution to what you are saying, you could implement this in aggregate -- the ISP accepts a flat "content" payment from all its subscribers, sums the time spent on each site from each user, and then pays out micropayments to each content provider as a percentage of the total content payments received from all subscribers. Sort of analogous to how the Tor network prevents deanonymization. You could even implement it as an open-source browser extension in the same fashion as Tor.

Ultimately however, this solution has two major flaws that I can think of up front -- first, it is too susceptible to botting, and second, it relies on a steadfastly privacy conscious central party (the ISP in this example) that never accidentally hires an Eric Schmidt-type who gives in to the monetary value of data. Having just read Tim Wu's "The Attention Merchants" I don't have a lot of hope for that.
Equifax makes their partners have a fully implemented and tested patch management program and audits annually (or via a third party) that you stick to it, making this situation even more hilarious.
Here's an article from February covering the California DMV reports:
https://www.wired.com/2017/02/california-dmv-autonomous-car-...
If they control all the nodes from your computer to the secret service you are connecting to, they can trivially deanonymize you. Staying in the network doesn't protect you.

Also the case if they are missing a few nodes in the middle, as long as they control the entrance, exit, and never miss two in a row.
Here they left the door wide open. Google does not leave the door wide open. Google does not have perfect security. But we expect them to make the cost to an attacker high enough that it requires massive investment for a successful breach. Why should we expect less for a company that keeps 140+ million customer records?
I think there's something incredibly valuable to that perspective.
I think generally yes, we as a society look down on those who are starved enough for attention and validation to constantly need it from strangers. That's pretty much how society has always been.
Love the concept. Keeps the process light, streamlined.
Awesome quote. Added to http://github.com/globalcitizen/taoup