skysight-inc/HackerNews huggingface dataset:
So, child porn is legal as long as both parties are involved? That doesn't work either. All you will wind up doing is having people magically always have only two people involved. And "teen sexting" isn't even uniform: a 10-year-old sexting a 16-year-old is generally a problem while a 17-year-old sexting an 18-year-old likely isn't.

Your opponents in kiddie porn are two different sets of people: 1) the egregiously stupid, generally teenagers, who may or may not be malicious about it and 2) the horrifically competent and malicious who WILL find a way to exploit any loophole.

Group 2 is what makes child pornography laws so problematic. Anything you do to strengthen your ability to get Group 2 generally increases the collateral damage in Group 1.

This is exactly what "prosecutorial discretion" is supposed to be used for. Unfortunately, it seems that "prosecutorial discretion" is now mostly "scoring poltical points for election."
Yeah, "what if the file system was a database?" was a very common line of thought in the late '80s/early '90s -- see BFS, WinFS/Cairo, Apple's "soups" for the Newton PDA (https://en.wikipedia.org/wiki/Soup_(Apple)), Palm OS' virtual file system (https://www.netmeister.org/palm/PalmMisc/PalmMisc.html#1.7), et al.
Obviously it's to the only factor, but the ICE gave us the ability to mass farm food and products and deliver them throughout an enormous country. It directly influenced where people could live, and how well they lived.
Apparently Tesla is the furthest ahead in terms of having a sellable product. Google however, no matter how fancy their technology maybe, they don't have a window to demonstrate yet and need to rely on existing auto manufacturers, which is developing their own arms of self-driving rapidly and they have vast advantage as to collect data.
In Canada its within 2 years for 12 (or 13?) year olds (I.e. a 10/11 year old can consent with a 12/13 year old) and within 5 years for 14/15 year olds. Though I'm not sure if that covers self distribution of cp (e.g. if a 14 year old sends some nudes to another 14 year old)
> The real mystery to me is why Canada has any software engineers at all.

Some software engineers care about maternity leave, universal health care, and the welfare of their fellows that don't have software engineer salaries.
It is partially cultural too, Stalin started it, he though knowledge was most important resource and he was right too.
No victim means no crime. (Morally, I'm using the word "crime" here to refer to a moral crime.) But it also means that the prosecution of such non-crimes is itself a crime, meaning the "guilty" party here is the victim and everyone involved in their prosecution, up to and including the supreme court, is criminal.
They're really bad about it. But I recently discovered that they offer this service:

http://lite.cnn.io/en

I really wish washington post, nyt, etc would offer something similar, and really miss the days where everyone had wap versions available
Completely agree about the trend.

All I am saying is most startups advertise and pay for 40 hour workweeks while expecting much more. They are the problem - call them out - not this company! Because false advertising about expected work hours is what really kills you - you don't have the "common sense" choice of not applying because you wont even find out until 3 months into the job!

In contrast, deeplearning.ai, by being honest about what they truly expect they really are doing a huge service to candidates.
Which makes me think: wouldn't it be nice if a Tesla or aforementioned dump truck could serve as a battery?

An addition or alternative to a powerwall or whatever the tesla home battery's called?
Now Amazon has a boatload of fulfillment centers inside the UK. Faster shipping time requirements and higher volumes makes it more economical- despite the tax costs- to have their product much closer to the customer.
I dont see a problem - browsers should honor the expiration time and choose the cache copy if it's still valid.

It's up to the server to use proper headers. Why say a file is ok to cache for years if it actually isnt? If the same url will change content then use shorter cache times or require active revalidation and/or etag checks - or just use the typical cache busting querystring parameters.

This "immutable" flag is unnecessary.
Cassini's Impact Site: Infrared Image
What on earth is a "DevOps model"? (yes I did see your ahem model).

Please forgive me if I don't hire you to keep my kool ... whatever ... webby thing safe. I understand that you are commentating in a second language but you used the DevOps safe word and automatically lose.
>> The disaster that is the US health care system

> Doesn't affect engineers in the US.

It affects engineers who care about people other than themselves.

It also affects engineers who get sick. And engineers who have a baby born with a medical issue and can't get coverage because the complex birth cost $0.5M.

And engineers who can't change job or start a business because they have an existing condition and can't get new insurance.

So, yes, for engineers who stay lucky and don't care about their neighbors, it's not a problem.

[edit: Don't get me wrong, I love lots of things about the US, but the healthcare system is insane.]
My bet is they can't be competitive with Backblaze B2 when they're on top of S3. Every S3 based cloud storage provider is going to be S3 special negotiated price plus minimal profit. The pricing of B2 is almost unmatched for random access storage at half a cent a gig. That's literally half of Dropbox's 1TB price. I've been backing up to Backblaze B2 via Arq on OSX, so I can manage my own archives and not have things deleted from backup when I delete them from disk.
There was a second interview with Cazena that looked a lot like the first interview, but the topic was different. It looked like they were possibly recorded on the same day.

Edit: Bless you for doing this, however you found it.
Until you get to that "previously used names" line on the walmart application. Woof. That's gonna be a tough life.
It can be done if resources are associated, perhaps by site, or by path within a site, and if there's at least one non-cached resource. For example:

Add a HTTP header on resource responses that is 1:1 with the deployment. When this header changes on any response, treat any associated resources in the cache as needing an If-Modified checkin.

Then add that header to a non-cached dynamic page, like the user's home page. When the browser checks this page and sees a deployment change, it'll know to check the static assets.
Yes. Australia is one such jurisdiction.

http://www.abc.net.au/news/2008-12-08/fake-simpsons-cartoon-...
I'm not sure about the gp comments specific case, but in many states in the US age of consent is actually much more nuanced than that. For example, in a number of states the age of consent for a female is 17 if their partner is no more than 10 years older than them at the time.
"the system is architecturally wrongly designed"

Like:

https://www.fastcompany.com/40468811/heres-why-equifax-yanke...
Signing in to personal accounts on a work computer is a terrible privacy practice and also unprofessional IMO.
I don't trust "unlimited" storage anymore. From anyone. Having had to evacuate my data from Microsoft OneDrive, Amazon Drive, and CrashPlan, I'm done with that. At least when I'm using Backblaze B2 I know I'm paying for the usage as is everyone else, so pirates aren't going to screw up the cost model and have me doing another massive data migration.
Then look at Apple, buying up all the tech they need.
Whoooo, got to 17! Inspired by "not hot dog"? https://www.youtube.com/watch?v=ACmydtFDTGs
It's mostly just "18+" is considered an adult for almost all legal purposes.

California has some sanity about "statutory rape", which is what your friend almost certainly got nailed on. The number of years under 18 as well as the age difference can be taken into account, and that conviction could be reduced to a different misdemeanor. However, you need a GOOD lawyer to pull this off.
I think it is covered by compliance, e.g.,
https://www.google.com/search?q=pci+dss+encryption+at+rest&o...

Batch processing on encrypted data is absolutbly ok. For example, you can just pull row-level keys and run your audited and signed binary. Also the pipeline should be put away from the frontend.

I'm not an expert but I think it should already be documented in the compliance doc.
I often hear investors framing their investment decisions in terms of the team as much or more than the product. I would hope that investors recognize that the sort of alleged behavior and culture at Upload is both wrong and poisonous to building a company that can scale. Investors should do more due diligence and counseling around creating a healthy company culture lest any traction be undermined by becoming known as a bad actor, reducing your talent pool as a result, lawsuits, etc.
The modern practice of programming is increasingly around social acts of building software with your team and surrounding community. Yet, evidenced by even this discussion thread, when someone says 'design' and 'hci', the focus gets tunnel vision around the individual user experience. Rethinking the individual human factors of languages is great. But for broader impact, I've long shifted towards rethinking the socio-technical design.

When I think of what's interesting about Go and NodeJS, and about even more ambitious ideas for the next 10 years, my head is around languages built for communities of programmers. Even better, designing languages that improve over time by leveraging the combined activities of programmers and users, in code and out.
Whoa. You're brave. This is what I love about sysadmins. They keep the show on the road, even in trying circumstances.
> When asked about being mentioned in the suit, Mr. Gopman, who has drawn attention in tech circles before for criticizing homeless people, said he was not happy about it. “How am I going to get married some day if I have to explain that?” he asked. Upload declined to comment on its former employee.

Really now?
They've likely spent way more than that, since the article's number is only through the end of 2015:

"Between Project Chauffeur’s inception in 2009 and the end of 2015, Google spent $1.1 billion on developing its self-driving software and hardware"
The Z80 Membership Card Computer
Is this bad news for Linux?
> There's a quote about doing the same thing and expecting different results...

It's the definition of insanity.

The abortion topic is interesting because we're talking about how we socially define a human life in a realm where science can't help at all (or at least has failed to give a concrete answer thus far). If it was an accepted truth that human life begins at conception, then abortion is murder. Even our laws reflect that at a certain stage prior to a baby exiting the uterus the thing is, for all intents and peuposes, alive. I actually think using fuzzy privacy prose to defend the right to terminate something that may or may not be conscious or "human" is really a stretch.

Anyway for all the other stuff I agree: insane.
High tech green energy used to more efficiently strip mine/mountain top removal. Yay?
Do they use this reasoning to justify all of the recessive diseases they pass on from inbreeding? Is that hacking too, you stupid fucking idiot?
“You got this because you’re a girl.”
Actually it does.

A majority of housing is no felon. Work is damn tough, and people get paid bottom dollar. In some places you can't vote.

A lot of activities prohibit felons too. Being a coach, for example, isn't a walk in the park.

And your traffic stops? Ugh.

I know this due to a friend stuck with one. Hanging with the wrong people, group case. First offense. It's pretty brutal.

In many States expungement isn't possible on many felony crimes either. Someone who got the message, living right, can't escape it despite the clear reform.
That TechCrunch article cites BuzzFeed as its source for the claim that YC said that they kicked him out particularly for that comment, but I don't see that in the linked BuzzFeed article [1]. It says that he was kicked out "for violating its harassment policy", and that this occurred after the Facebook comment, but I don't see any statement in the BuzzFeed article that YC mentioned that comment in particular. I may be missing it, though.

[1]: https://www.buzzfeed.com/nitashatiku/trump-supporting-startu...
Good Forecasting Takes Strong Nerves
So, who has close ties to Cuba and has capability to design such weapon and would test it on US diplomats and would win if there was some confusion between US and Cuba relations?

Always look at who has to gain from it and who is capable of
HDF too https://en.wikipedia.org/wiki/Hierarchical_Data_Format
Which is better, to have a few horrifically competent go free or have a few innocent teenagers on the sex offender registry?
It'd be so much easier if as a society we agreed that everyone should have healthcare, and that reproduction should be a choice positively made, instead of the default consequence of sex.
Unbeknownst to you, this goes both ways.
They're referring to the (still?) banned practice of photoshopping a minor's face onto an adult body.
How does this fit into the bigger picture? Is there any punitive action?
You disagree with the choices the specs have made.

From the cache control rfc:

When a response is "fresh" in the cache, it can be used to satisfy
subsequent requests without contacting the origin server, thereby
improving efficiency.

From the immutable rfc:

Clients SHOULD NOT issue a conditional request during the response's
freshness lifetime (e.g., upon a reload) unless explicitly overridden
by the user (e.g., a force reload).
I grew in Brazil, where it was possible to have a big family and grow up in the city. The issue is not that one has grown up, or that one has a family. The issue is that society forces you down a path at a certain point in life, instead of presenting the options (which, if they were given equally, living in a city would almost certainly win).
Thus far, the only way I've found to do this is by changing jobs. I've been somewhat successful at it, I think, but that somewhat puts a limit on how frequently I can do this, and I'm not fond of the negotiating.

The world would be a better place if people just paid people what they were worth. If we could start having more honest conversations about salary (e.g., talking about salary, and comparing salaries should not be taboo…), I think it'd go a long ways.
If you're lazy and dealing with a non-critical system, `yum update --security -y` as a nightly cron job goes a long way.

If you're working on something important, say critical national economic infrastructure, you do the equivalent with automated staging and testing happening before any potentially breaking changes are made to live servers.

Or... you do nothing, as the case may be...
It was never "taken for granted", but it's still basic quality of life.
Even SSDs need file systems.
>It's too easy to handwave this away as "well, get a better architecture." Everyone knows that; the hard part is, what architecture?

How do you read linux firewall documentation with the first example being old school public->DMZ->private? So your web server got hacked? That means what? Your database is across a single port through the firewall, and ACLs mean that any traffic arriving at the part from the DMZ CIDR can only do the limited set of queries that provide single-person-at-time. SSH from hacked box to database? Got a zero-day for the firewall (because 22 isn't open from there), and a zero-day for sshd (because its keys only). I know this and I'm not one of our hundreds of security people. (And as I'm not the security guy, if any actual security guys want to school me here, please do so!)

Sure, I agree that business peeps will say "Oh that's too expensive I don't care", but lets not pretend that we don't know how to do this.

Be clear, if you are the IT security guy, and you agree to bow down to "business" people (you're a business person) who tell you "No, that's too complicated", then just be clear that you are getting fired when the shit hits the fan.
>Some of your list is just basic quality of life. Sleeping? Eating at the table? Talking to them? This is all general parenting.

Unfortunately, there are still many children whose only meals are served at school.
If you can batch process the dataset, an attacker can do the same thing. They take whatever creds the batch script is using and use them directly. If the program only runs from a certain box, then they run their modified script on that box.

"Well don't let that happen!" Nope, not that easy. This threat model concedes that the hackers have RCE. They're on your network. That's why they can do this.
Failure to patch wasn't the cause of this breach. The causes of this breach were:

1. Reliance on a consumer-grade component in a security-critical system holding high-value data.

The portal should have had a small, audited code base with secure coding techniques and minimal reliance on third-party components.

2. Excessive attack surface on a system holding high-value data.

The machine hosting the portal should never have had read access to SSNs. Sensitive data should have been "thrown over the wall" to a secure backend with a constrained interface. This would have greatly reduced the scope of the breach.
No, not trolling, providing some perspective to someone who has, it seems, not lived within the American system and has some views that have been promoted by certain Canadian elements which are borderline bigoted.

The 'Canadian view on the street' of the 'American system' is misinformed, and it's largely due to a certain consensus promoted within the Canadian elite. It's a very highly politicized issue.

As another Canadian ex-pat pointed out below (and as so many Canadians living in the US can attest to) - the 'Canadian consensus view' on the American system is not correct.

FYI - Canada is the only country in the world wherein it's legal to pay a mechanic to fix your tire, but it's illegal to pay someone to fix your broken arm.

I personally had to live through this conundrum. The 'official position' in Ontario is to move people away from doctors - and to push them into clinics where they can't get 'long term' type of care.

I was sick - and there were no doctors in my region taking patients. I was forced to go to a clinic where they couldn't properly diagnose me. They didn't care at all, as the are 99% dealing with 'kids with colds and the flu'. Every time I went I saw a new doctor. I was ill, with weird symptoms, the doctors 'didn't give a s*' - and there was nothing I could do about it within the system.

I finally went to the 'Cleveland Clinic' - an American not-for-profit entity operating in a 'grey legal area' in Toronto, and they helped out. Thankfully, nothing serious - but it could have been.

I have family members in Canada who waited years for hip and knee replacements - and they think this is 'normal'.

Most Canadians who have no exposure to 'other' systems have a limited view of their own system vis-a-vis others.

I wouldn't want 'the American system' for Canada, and it's far from perfect, but it has some merits which are often overlooked by the CBC-centric types.
Interested in Cryptocurrency? XRED Pre-ICO: X Real Estate Development
You HAVE to prosecute them. If you didn't, a child could send a naked photo of himself to all his teachers, call the FBI, and see them all arrested (there's no defense against possession.)
As an engineer, I do the interviewing, but I have no insight into salary details. I have no idea what my coworkers are paid, were hired for, how much this candidate thinks he is worth or is asking, or what we've promised or advertised through recruiters, etc.
Mainly it is serving Allah.

Everything positive is an act of piety, from smiling to strangers, answering Stack Overflow questions, to simply getting a contract done quickly and above expectations. Avoiding anything that pulls me towards sin - things like banking/finance institutions is the major temptation for sin, as well as day trading.

Never focusing on money as a goal in itself. Money is there to do good and to invest into good deeds. I would invest all my money and energy into something if it is good enough for the world.

Being honest, especially when it is bad for me. Never be deceptive. The truth, the whole truth, and nothing but the truth. Never promise or commit to that which can't be done, never hide flaws when selling.

Liberating others. People are trapped in dead end jobs, especially where I live. They are forced to accept bribes, lie, and other immoral things. I like to work with people whose goal is to train and improve pay for their staff and avoid jobs whose only goal is to disrupt and make life difficult for the majority.

Craftsmanship. I see craftsmanship as not the process of creation, but extracting the meaning of what is already there.

Like when you take photographs, you don't just look for a subject matter with beautiful lighting, colors, crisp focus. A food photographer tries to capture temperature, flavor, moisture. A wedding photographer tries to capture emotion and even inject a little sexiness.

With programming or UX/UI, you are not just building features. You are solving a problem. You understand the pains of the user, the emotions, the process, find a way to cure it.

It's not about creating something new, but deeply understanding, appreciating, and immersing myself in God's creation, both the good and the bad.
> He was 23 and dating a 17 year old, got convicted, sent to prison, and is now labeled a sex offender for life.

What third-world country would send someone to prison for dating a 17 year old? I doubt even Iran or some other theocracy would do that. Where was this?
Yeah they tried to throw Struts under the bus but actually just confessed to criminal negligence.

I don't think they are competent enough to realize how damning this press release is. This company is finished.
Curious - do you need parental consent to enlist?
None of the listing above told us what exactly she is doing as VP of those firms. No detail on whether she fulfill a tenichal role or administrative one.
S(he) may be white or may well not me. Best not to assume things about strangers online.
I think the concern is more around privacy the face data: Apple says they don't store it on their servers or track it, but how good a model of your face can they get from the depth map they get.

E.g., would Snapchat or Facebook now be able to pull a 3d model of the face of all their iPhone X users into their own servers?
Where 360/VR throwable proto ended up
why is a dick pic such a big deal?
I use 33mail for countering spam, and I recently switched to my own domain. So I might do organization@33mail.com, or slack@33mail.com, or organization@mydomain.com, or slack@mydomain.com, and it's a huge hassle to be trying all these combinations.
This depends on your goals. If you only want to communicate, a secure channel with a shared secret can be established with the Diffie-Hellman key exchange.

However, this will not authenticate the other party, which means ensuring that you are actually communicating with the expected partner and not with a man in the middle. For this, the partners need to present something only they know. This would usually be solved with asymmetric crypto, like verifying certificates signed by a trusted third-party or using previously seen public keys in a trust-on-first-use scenario.
5 of those a week is only 30 minutes a weekday. What's the problem with that? Hidden hours in preparation and transportation? 30 minutes is not even a tenth of a school day.
Companies need to stop making CIO & CISO positions diversity quota hires. The CIO during the Target breach was originally a department store buyer.
I agree with this. My girlfriend has unfortunately had to deal with racist name calling as an Asian (I can't imagine what it must be like for those that are even more targeted by the alt-right) in San Francisco, a "liberal" city in the eyes of Americans.
And modern dentistry...