skysight-inc/HackerNews huggingface dataset:
Safari has had this for a while in the public beta of High Sierra and also has turned off plugins by default for eons... now how about following its lead on that cookie thing advertisers love to do to track... oh wait.
Ted's sitting across from me right now! He says this article is old, and wanted to link to a video he recently made talking about his life and work, if anyone's interested: https://www.youtube.com/watch?v=mmfjM-SGlGs

We're also hosting an ongoing archival project of his junk mail that he's saved over the years: https://archive.org/details/tednelsonjunkmail (more details on the project: http://ascii.textfiles.com/archives/5206 )
How do you come to that first conclusion?

It seems difficult to tell who is the “furthest ahead” because it’s a pretty complex race.

For starters, we can’t even say with certainty who all of the competitors are. Some are very quiet or at early stages but could be working on a breakthrough problem that turns out to be a pivot point.

Some are specializing. Who is going to scale up the best and most cost efficient solid state lidar? There’s a whole list of key problems being worked on.

Do you mean hardware or software? Just the algorithms are a huge piece. Just hardware is a huge pieces.

Beyond price and performance, it’s common that unforeseen factors end up being important in determining who becomes the most successful in selling traditional manufacturers components or whole systems. Surely we don’t realize all of them yet.

Also there is so much still being held close to the vest. These guys are keeping lots of secrets about how far along they are truly, roadblocks, etc.
How did Apple get consent from a billion people to use their likeness in their training set of images? Is it possible to train a facial recognition software acurately using different photos of the same person VS different people all together?
A simple org-copy-subtree (C-c C-x M-w) and then paste (C-y) would do it. Or did you mean something else?

https://www.gnu.org/software/emacs/manual/html_node/org/Stru...
They may also look back and marvel at our inability to implement even simple solutions because they fail to seem optimal. It's debatable whether the hepA outbreak is due to the scarcity of plastic bags the homeless were accustomed to using to do their business. But it's plausible; and it's an easy fix. But it's possible that future generations will look back and wonder- why did they spend all that time debating 1000-lightbulb ideas about how to care for the homeless, never reaching any consensus, when they could have just hung up plastic bag distributors downtown.
> Some day, somebody is going to figure out how to do JIT train shipments and make a lot of money here.

> Having said that, trains have last-mile weakness.

That LAST-Mile weakness will be fixed by 2030 when we have Autonomous Trucks doing hand holding of "Standard size container boxes" TO and FROM a TRAIN in an automated way .
Don't know about how it's in the US, but if it's anything like in some European countries, a question is:

How much of that $1.1 are recouped as "investments in research" etc. and thus contributing to tax-deductions (and in some cases even subsidies)?
Seemingly trivial data can be combined to form a detailed picture of someone. Regarding irrigation: How is the farmer's business doing? What kind of seed are they using and what is their schedule? Is the homeowner home? Are they following local water use laws or guidelines?
I trust Apple's security team to have implemented this in a way that preserves safety and privacy. Apple have shown themselves to be very good at that.

That said, I find Face ID extraordinarily troubling, because it normalizes the idea that your phone actively scans your facial features during use. Just like carrying around an always-on pocket beacon became part of the 'new normal' with the introduction of the smartphone, a phone that looks back at you during use will become part of the new normal, too.

When you combine this with business models that rely not just on advertising, but on promises to investors around novelty in advertising, and machine learning that has proven extremely effective at provoking user engagement, what you end up with is a mobile sensor that can read second-by-second facial expressions and adjust what is being shown in real time with great sophistication. All that's required is for a company to close the loop between facial sensor and server.

Apple is unlikely to be this company. But Google, Facebook and Amazon are. What I anticipate is the next generation of Home and Echo to have cameras (Amazon is already moving in this direction), along with whatever piece of hardware Facebook produces. The idea of devices that look back at you will gain acceptance, just like always-listening voice assistants have gained acceptance. All of these will become input sources to learning algorithms.

What is already an incredibly potent toolchain for political manipulation will become even more powerful, with no oversight, accountability, or even much understanding by those who built it on the way it can be profitably used and misused. Its effects will be field-tested in democratic elections that affect the lives of billions.

This is what Zeynep Tufekci has called the architecture for networked fascism, and by manufacturing a mass-market device with active facial scanning, with the best of intentions, Apple has moved us a big step further along this dismal road.
Well, you are asking for perfect security. Everyone here is. That's what it means not to ever be breached. I think that's the uncomfortable truth we've obscured. We are asking for the impossible.

If you don't feel that way, I propose asking some of your pentester friends how they feel about the breach. Somewhere between unsurprised and shrug, probably.

It doesn't change a thing that this situation demands higher security. We're fighting against forces of nature. Except instead of extinguishing forest fires, we're asking for the equivalent of no forest fires, ever, and arguing vehemently that modern technology is so good that forest fires should not have been allowed to happen.
Do the Bewitched nose twitch thing! Automatically turns off face id and texts the ACLU. Jobs would've insisted on it. :P
Official translation at https://netzpolitik.org/2017/secret-documents-reveal-german-...
It is fantastic to hear this from a seasoned academic about his own field-- People get trapped in orthodoxy and become unconsciously unwilling to explore bold ideas in favor to minor tweaks. The framework of thinking itself becomes precious, but big advances usually come from discarding the old framework in favor of something radically new. The kind of humility and bold thinking needed for that kind of change is rare and hard to foster (especially while still remaining grounded by empiricism).
Interesting that they've tried to tackle this too:

https://www.macrumors.com/2017/06/30/ios-11-do-not-disturb-w...
But that was going to happen anyways. Today, a dump truck spends energy going downhill by burning fuel and brakes that it doesn't need to if it's electric.
uh... how is "just trust the resources already on the client" more compliant than forcing known good resources to be included with every response?

cache poisoning is specifically mentioned in the RFC as a major issue. this is terrible for web crypto and HIPAA compliance.

you're all idiots
Only in jail as far as I am concerned, why would be the only one to suffer.
Inferno is awesome I'm working on a project with webmidi and inferno there is no shim for webmidi fir react native so infernos speed is key for me.
I suppose if you deploy a lot, that can be wasteful.
While there is no public announcement from the PSF yet, I sent an email to the python-dev mailing list at least to announce the issue but also try to discuss how to mitigate/prevent it.

https://mail.python.org/pipermail/python-dev/2017-September/...

Honestly, I am impressed that the information gone so quick! The National Security Authority of Slovakia contacted the PSRT 10 days ago. All packages were removed 1h10 after we got their email. We were discussing how to communicate about this issue, while they published an advisory. A few hours after the advisory was published, I saw the information on IRC, Twitter, LWN, etc. I didn't expect that the advisory would be published so quickly. FYI last week there was also a CPython sprint attended by more than 20 Python core developers. We were busy on discussing Python enhancements.
I was pretty sure it was true that the CISO had no experience at all after listening to the first two or three minutes of the video interviews that were available here[1], but apparently they don't want anyone to see interviews with the CISO from before the breach (as they have been scrubbed from the internet.) I have never seen anybody say cloud so many times in two minutes.

By the end of the interview, I felt sorry for her. I have no idea if she had relevant experience or not, she just sounded like someone who has been conditioned to argue that delays in new development are unacceptable, and that the cloud is inevitable, and if it costs more to do it right then you'll have to make do with less, and cetera and so forth.
I'm not terribly shocked that they've taken down these interviews, but I am very sorry I didn't save a copy when I found them.

The interviews were still available for viewing as of 12:31pm Eastern Time on Sept 10, and there are transcripts that you can find following the links in the article, which has been updated to note the videos were scrubbed from the internet.

[1]: https://www.hollywoodlanews.com/equifax-chief-security-offic...

"The full interview videos went far in explaining what may have been the eventual cause of the massive leak of information now gravely affecting 143 million Americans."

Serious question, is there any way this might actually count as destroying evidence?

It says the interviews were removed by user, but I saw them and they were briefly still playable after they were first reported on. Someone must have been keen enough to snag a copy. They were eye opening.

The transcript does not include the quote that really brought it home for me, "resistance to the cloud is futile" – I wonder what else it does not include...

https://archive.is/Je7Yi

https://archive.is/6M8mg
Gitlab is currently facing load issues
Shoutcast is the preferred method for both live performances and recorded music in Open Sim type virtual worlds, since it's supported in the viewers, although I often copy the stream url into Winamp.
Poor diet is a factor in one in five deaths, global disease study reveals
HN has a max depth but here is a fantastic rebuttal to the absurd Uranium One allegations:

http://www.snopes.com/hillary-clinton-uranium-russia-deal/
BEST CORDED LAWN MOWER – Kobalt Electric Lawn Mower Review
I currently work in DNA analysis. I wholeheartedly agree.
They also made sure their execs sell shares before the news and delayed news as long as possible.
Equifax's entire job is maintaining highly sensitive financial information. That's their reason for existence, that's how they make money. Following a sort of, I don't know, stackoverflow level of quasi "good enough" practices might be fine for J. Average Corporation but it isn't fine for a company like Equifax.

The question on the table is whether or not Equifax could have prevented the data breach with the application of up to, oh, let's say a few tens of millions of dollars in resources (personnel, equipment, what-have-you) and merely applying common sense and industry accepted best practices. The answer seems to be: unquestionably yes. At least for this breach. And so, because that amount of money is much less than even their annual profits, Equifax has unquestionably acted negligently in that they had both the resources and the obligation to prevent the breach, but did not. There's no excuse for that.
You should probably edit this comment too- 45 tons up and 110 tons down means the efficiency just has to be >41% (45/110).
The bet being made, I think, is that when Patreon is doing several times current revenue, Google will want the paying users and their credit card numbers and will be happy to pay for them by acquiring Patreon.

Even though Google could recreate the whole Patreon system, they'd be forced to start with a customer base of zero and risk pissing off Patreon's customers and creators by trying to get in between them.

Also, as others have pointed out, Patreon is not just Youtube. Google tried to clone a product and a network before, with Google+, so they know how difficult that can be.
Define 'life'. (bonus points for not using wikipedia)
Once you have ""Hyperloop for parcels", same Hyperloop can be used to transport people as CAR Pools by Fleet companies such as Uber and Google Waymo .

Building that Tunnels is expensive, that is what Elon Musk BORING company is experimenting with .
What is it about Russia that makes them so partial to espionage as a preferred method? From the Cold War to today's cyberattacks, they manage to use intelligence gathering and espionage as a method of maintaining disproportionate world power. Is it cultural? If so where does it come from, and when did it start?

America has great intelligence capabilities as well, but in general you tend to think of it as more of a "brute force", or "diplomacy" type of nation, while Russia's strategies tend to be more asymmetric.
I think we're looking at this all wrong. It doesn't matter what the technical details are. If you're controlling something dangerous it's your responsibility to ensure it doesn't do damage or hurt anyone.

Take a car for example. If you're driving and you allow the car to hit someone and they die, you are charged with manslaughter. It's your responsibility to operate it safely. It doesn't matter if the conditions were difficult. In fact it's worse - you shouldn't have operated the car.

It's the same concept here. They were operating something dangerous and did not take the necessary steps to ensure our safety.

They should go to jail.
Indeed, the only comparison we have for Google's progress in most cases is what they claim. The few times other parties have stepped in and spoken up, there's been some less rosy truths in there.

It's in all of these companies' best interests to look like they're in the lead.

The tech we can judge the progress of is the tech we can actually test and use.
Mastodon is very interesting to me but discoverability would seem to be an issue. Despite Twitter's flaws, I can at least search all of it.

What are people using to find things across Mastodon servers? Google search?
It's interesting to me that now the "figure out if the picture is of a bird" task is becoming "gimme a few hours"
They can be held to a much higher standard than this - a system that can leak all the sensitive data due to an error in the web app. You are describing an amateur architecture where there is a web app directly communicating with a database of sensitive information, and that web app has full access to the database. No experienced developer would do that.
No?

Capitalism doesn't own the idea of "markets", "sales", etc. Rather, the distinction between capitalism and most other economic theories relates to the ownership of organizations and the splitting of the revenues from sales between different economic factions, eg capital and labor.

Capitalism is the position that ultimately, capital should own the organization, while things like socialism argue that the people who perform the work should have the ownership.

In almost all systems, it makes sense to monetize a video, so the owners of the organization that produced it can get some of the value they created returned to them.
Agreed.

Though I think it's debatable whether leaking SSNs is comparable to manslaughter.
I'm not a lawyer, but after reading the patent file, it seems to me that it only covers the kernel implementation; unlike facebook patent clause which covers everything.
The capitalist system is the one we have now. Even people who dislike it and want it changed have to live within the system as it currently exists.
I kind of wonder why there aren't neo-luddite communities literally re-inventing the wheel, these days.

The Amish seem to pride themselves on their ascetic use of technology - it sounds like they believe in the discipline, patience, and lack of distractions that come with a disdain for tools which have not yet been refined by a long history of use.

Why does nobody take that attitude with the production of say, bipolar transistors instead of wood stoves? Why don't we have any community-run film deposition machines? Throw together a cruelty-free hand-milled pressure chamber, a bespoke hand-wound HV transformer, an artisanal gluten-free vacuum pump, and you've got yourself a stew!

I don't think Jeri Ellsworth counts as a prophet quite yet, but I might read that sort of holy book. The article mentions the Amish's occasional use of personal solar cells and batteries for household electricity despite a prohibition of connecting public utilities to a house; wouldn't it be more kosher to make the solar panels and batteries yourselves? We ARE getting to the point where 'electricity' is a tried-and-true, fundamental human tool. Why is say, a metal-air battery particularly different from a saw or a hammer or a match?
You're clearly being intentionally provocative. I don't even know what you're railing against. Vaccinations have basically eradicated many diseases in the Western world. Certainly if these people were vaccinated a hep outbreak would not have occurred. Furthermore, if these people had access to proper facilities thru social safety nets, they also wouldn't be in situations where the loss of plastic bags means increased risk of hep A. UHC and more resources for the homeless would have helped prevent this, objectively.

You rant about changing the world yet propose no solution or alternative of your own.
Please put [PDF] in the title.
Do you have any idea how many 'whites' fled poverty, oppression, and worse, to come to America?

The measure of offence is not based on how 'fussed' you, an individual, feel. Nor is it based on a myopic view of history in which 'whites' have never been victims and everybody else has.
The Roadster's drivetrain is relatively inefficient for an EV (notably, it uses an AC induction motor rather than a permanent magnet motor) so I wouldn't be surprised if this truck could reach the breakeven point. But I don't have hard numbers to back that up!
Yeah this just doesn't scale, especially if you're pulling from GitHub.
Running the same version of Spring, or different versions?
If you like this, you may be interested in Megan Prelinger's book Another Science Fiction: Advertising the Space Race 1957–1962 (http://meganprelinger.com/book/another-science-fiction/). If you're near SF, I highly recommend visiting the private research library she runs with her husband: http://www.prelingerlibrary.org/home/ Has an interesting collection, including plenty of space art, since her research resources are there.
The Canadian Liberal Government's Proposed Tax Changes
I would expect variable costs for Patreon to be very low, and this their margins to be way higher than 10%, especially if they continue growing.
And a complex 40+ character password is much more secure than a 4-6 number pin. There is always a trade off, I personally don't want to press 7 times on my screen everytime I want to use it.
According to von Braun's Popular Science AMA it was a safety feature:

"It is in the area of crew safety that fins come in handy. In Saturn V the booster fins are not to provide perfect aerodynamic stability under all conditions - that would take fins of excessive size. But the fins reduce the aerodynamic instability enough to make sure that the astronauts can safely abort, no matter what technical trouble may afflict their space vehicle."

( https://books.google.de/books?id=MiYDAAAAMBAJ&pg=PA184 , continued from https://books.google.de/books?id=MiYDAAAAMBAJ&pg=PA68 )

Both could be true at once, just like when bicycle helmets are worn more as a fashion statement than out of confidence in their protective value. Or maybe he was just squelching rumors.
And what would they do?

Everyone either goes silent or describes an idealized architecture that has glaringly obvious flaws in regards to meeting business goals.

I think maybe the top ten companies in our industry do this at scale well enough to work. Maybe.
Prob better to point to the current (9.6) version of that doc, rather than the no-longer-supported ancient v9.1 version. There are some differences. :)

https://www.postgresql.org/docs/current/static/pgtrgm.html
Scott Aaronson’s Big Numbers Talk at Festivaletteratura
where do you live with mass transit and cheap housing? Also Chicago?
It might be worse. But I dont know how anyone can weigh destruction of one life vs ruining thousands of people's lives (or at the very least increasing the general angst among society at large).
It's a lot if it doesn't pay off eventually.
Patching is hard; so what?
They're correlated perhaps, but there is a huge variance in political views, at least among the major religions.

This is especially true with economic policy, which really has little to do with religious belief, but even with a lot of social policy its true.

That is, while there probably aren't many devout Catholics who support late stage abortion, the opinions on things like LGBT rights, the environment, refugee and immigration policy, homelessness, access to education, and more will vary wildly between devout Catholics. That second part is also true for devout Protestants and Jews and Muslims and Buddhists.

Sure the means might not sit in exactly the same places, but that's very different than the political spectrum in the US, which is essentially bimodal.
> We collectively have not figured out any techniques to achieve the goal: to be impervious, always.

What? It takes vigilance, training, competence, and a culture of security. Oh, and lots and lots of money backing it up. If your company isn't willing to make that commitment, then your company shouldn't legally be allowed to handle any sensitive data at all. The legal consequences of a leak will be moderated if it is proven, by fellow professionals, that a company took every standard precaution necessary based upon the sensitivity of the data in question. Nobody (except for perhaps yourself) seems to be claiming that Equifax's technical chops were anything but inept.

> Six decades of computing history would contradict you.

Feel free to actually cite anything at all supporting your position, rather than glibly appealing to inevitability.

> The moment the world freaks out about this lack of security, we've all lost.

As if we haven't already lost? The Equifiax leak is a privacy disaster of the highest order.

> Imagine a dystopian future where the only way to write consequential software is to have it approved by three committees.

I welcome this dystopia with open arms, if it means it can save us from defeatists who have given up on the idea that software doesn't have to be completely terrible.
Patreon is more like Kickstarter but for ongoing projects/support (e.g. web comics, YouTube channels, etc.). People can set up accounts to charge per item produced/released (e.g. per comic page or per video) or on a straight monthly basis.
I'm curious what the trade off is between a hard realtime kernel like LK and a kernel that only offers soft realtime guarantees.

I would presume there are some costs associated with providing hard real time guarantees ... otherwise every OS would be a real-time OS right?

And if there are tradeoffs, why did Google choose a hard realtime kernel to be the basis of its new OS? Since Linux and BSD seem to be fine bases for mobile OS (as evidenced by iOS/Android).