skysight-inc/HackerNews huggingface dataset:
Great feature! I switched to FF Nightly some months ago, and I can confirm the performance is great. Sadly I had to switch back to Chrome, the quality of extensions in Chrome is just much higher.

Now, I only just learned recently that in theory you can use Chrome extensions in Firefox, does this actually work well? Or just so-so.
Yes - we've been trying a variety of different backgrounds for our "hosts."

The most exciting approach is to level up our members to lead groups with their challenge. They truly empathize and care about the group, which can make them more effective than a whole bunch of training. Plus, it reinforces that this is not a case where you are being treated for a mental health problem. This is a tight-knit community helping each other.
Examples like this aren't useful or practical. Society's ethics can and do evolve over time. It's not "crazy" for someone who is 21 to not be dating someone who is 15.

You're arguing that the grandfather would have broken the law regardless of it existing, and is therefore innocent. Or that because a child was born out of this relationship, and grew just fine, that it makes it ethical and permissible in the general case. We don't know what the grandfather would have done. Time length of the relationship doesn't matter, and people often remain in dysfunctional marriages to the detriment of their own children.

This doesn't mean your friend's grandparents are bad, but that it's just an anecdote from the past that doesn't prove the rule against modern ethics regarding age of consent.
I'm against Google hosted amp but what's the issue with self hosted? This page is so much nicer than the overly busy normal TC site.
I wouldn't call anyone egregiously stupid for engaging in normal sexual activity. If the vast majority of teens doing so have gone unprosecuted, why should someone assume that something might happen to them for the same action? A risk/reward analysis will not make it seem like such a bad idea, so I can't see what part makes the teen particularly stupid here.
Is anyone else over all this? I just can't seem to care anymore. Why can't people just do their jobs and go home? Why is it so important for a work environment to be "socially safe"? The definition of social safety is arbitrary anyways. The assertion that sexual comments could be so pervasive you can't do your job is utterly absurd in my opinion. Then again maybe I'm just incapable of seeing past my male perspective...
If "an authenticated context such as HTTPS" isn't being used -- regardless of the presence of this extension -- isn't your computer already "subject to an executable planting vulnerability"?
Is that because people who farm the land using modern techniques can get much more out of it than the Amish, and therefore are pricing them out of it?
Fun read, thanks for sharing!

It is just a start, so I am hesitant to pick at it. I am excited to see this getting explored, I was hoping for a dive into bug reports against software, though.

That is, I share the same bias most of software developers share that mutable code is ultimately dangerous and should be avoided. The flipside, only when working with established codebases does this really bother me. Greenfield projects that are not close to shipping are usually quite clean and not a concern. Battle worn codebases, though...

To that end, the CWE attempt (https://cwe.mitre.org/) was an interesting start. Especially if it was backed by numbers in the CVE database. So my question is, how many of the CVE reports could have fully been laid to this class of bugs? (I'll see if I can put together a notebook going over this idea. Still hoping someone else has already given this a better treatment than I am likely to.)
It also crashes some of their modems! Every few hours through normal traffic, in under a minute if I quickly visit many IPv6 addresses.
> How exactly the spy agencies want to crack Tor remains vague.

> Precisely how the BND plans to „chop“ Tor is unfortunately redacted in the document we obtained. But as before, the spy agency refers to public research. To implement the attack, it is likely that the spies runs their own servers in the Tor network. M.S. points to passive snooping servers, which are presumably operated by the NSA, and emphasizes the „protection of the anonymity“ of the spy agencies.

And indeed, there are no specifics.

Tor Project acknowledges that Tor is vulnerable to global adversaries. With enough intercepts, they can correlate traffic at various relays, and connected users and servers. There's nothing magic about onion services. It's just that there are seven relays between users and servers, rather than just the normal three for Tor.

But hey, it provides better anonymity than any alternative. Other than meeting in remote locations, anyway. And you can add VPNs to the mix. I always use Tor through nested VPN chains. That adds misdirection. But perhaps most importantly, it adds latency and jitter, which mitigate traffic correlation attacks.

Edit: As a fun science project, you can play with traffic correlation between you and your private onion service. You use unlisted private bridges as entry guards, both locally and for the onion service. So it's only your traffic that gets analyzed. And you don't need sophisticated software. Wireshark and a spreadsheet are enough. So you have packet captures from your local machine, and from the VPS running the onion service. Using Wireshark, you export bitrate in millisecond bins. Then in the spreadsheet, you have two columns, one with each bitrate series. Just create a third column for the product. Each sheet will hold 1E6 lines, or 1000 seconds. Excel works best, because it uses multiple cores. R would be better, because you could crunch segments in parallel.
Just saying, I would have happily had sex with adult women from about age 6 onwards. I did have my first sexual experiences at that age, and have no regrets.
You are right, it was a hyperbole, but I still don’t see why they should be allowed to continue operating. Would you let a bank continue to operate after they have lost all their money?

Never mind, I guess too big to fail applies here as well.
Still more of a recall than will be possible in the new world. And you can always detect the old code and prompt users to refresh. (Typically happens on a restart.)

Again, though, I am ultimately for this. I just remain skeptical of any panacea.
Let me add - transmitting a photo of your genitals to someone uninvited is pretty awful, and should be illegal for a completely different reason.

So no mistake about this guy. The bigger question is if it was intended to be received by the adult, are they both guilty? Or just the adult at that point?

It seems to me the biggest hinge with this case is that the recipient didn't want the pic and actually called the cops herself.

Would be much more satisfying if they would have charged and proven that he assaulted the woman and just stuck with that.

The courts are saying there must be a legislative fix. What's the chance they actually fix it?
"How does your architecture work in practice? Encrypting items won't help when the keys need to be stored in the same place to access the data. The attackers will just go after that box instead of the DB."

Simple. Don't store a key with the data. A credit bureau only incurs liability by knowing the PII for hundreds of millions of people readable from one location - that they provide to everyone who asks!

How does a company create a better architecture? Separation of duties and responsibilities, defense in depth, authentication and authorization, cryptography, updating software, etc. Hire a security team to help with vulnerability analysis, design reviews, due diligence, and threat modeling.

This gets solved every day at many companies.

"You can guard it more carefully, but the point is that some box somewhere needs access to a substantial amount of the data at any given time. It's the nature of a credit bureau."

Yes, but the elephant in the room is that a credit bureau possesses that information in usable form. This can be taken care of by key management, where the individual owns the key and only one key is able to exist per individual at a time. Then, only those credit grantors who have been authorized by the individual are able to update or view the data.

In cryptography the operating assumption should always be that everything is known about your data except your key material, which is kept private.
Just type: netcat ryukinix.tk 5558
It's great that you were able to answer your own question.
The Epic Story of DropBox's Exodus from the Amazon Cloud Empire
You could just feed Oracle DB raw filesystem partitions back in the day. Don't know if that is still possible.
The idea that informed consent is a characteristic that magically appears in full at 18 or 20 is ridiculous. Obviously some people acquire it earlier. Some much later.

Problem is, judges and police have yet to design an objective maturity test, so instead they use an age threshold, easy to test, objective but arbitrary.

Like the map is not the territory, the law is not a perfect match to our moral landscape. It works with constraints of fairness, neutrality and enforceability.

It is clear that there are couples for which some illegal relationships are actually harmless or even positive and done with mutual consent. It is also clear that some relationships are abusive and extremely dangerous.

The balancing between protection of the abused and individual freedom is easy to make: on one hand, you have children being raped, on the other hand, you have young lovers that may have to wait a few years before fucking. I would say the first goal has priority.

If we open the pandora box of consent under 18, we will have to tread very carefully.
Another is medical... some mothers face risk birthing their child and dying, or aborting the child. Deeply traumatized from this myself :(
All I can say is that Howard Hughes did run an airline, and he apparently wanted the Jetliner quite badly.
Here's a secure architecture for you:

Don't ever store multiple pieces of personally identifiable information in the same place.

The consequence of this is that Equifax's business model is no longer viable. I care about that as much as they care about me and my data.
I disagree. Note that it wasn't a counter-argument, just added comment.

Incidentally if you're interested, the historical "ao" didn't really refer to a specific band of the the visible light spectrum as you suggest, it could mean any pale or ill-defined color, with "red" being used for any strong vivid color. Per wikipedia, anyway.
My point is very much about normalizing the use of this technology, not denying its existence or claiming that Apple invented it.

We've been able to bug houses for years, but only recently did Google and Amazon normalize it by selling an always-on network-connected microphone (and now camera) as a consumer product.
China was the trigger. But it was not the reason. The reason was the incredible appreciation over the last year. A meaningful correction was imminent.

I still don't think it is done. I would expect to see 1500 again before the next leg up. But you are right, trying to nail the bottom is not a good strategy.
> Why can't people just do their jobs and go home?

I would actually use this line at the beginning of a rant to the opposite effect: why can't people be professional in the workplace? Why can't they just do their jobs and go home, and not treat the office like a social club / bar?
The article is dated today, but isn't this news from a few years ago? https://www.wired.com/2016/03/epic-story-dropboxs-exodus-ama...
> The article mentions the Amish's occasional use of personal solar cells and batteries for household electricity despite a prohibition of connecting public utilities to a house

The Amish are not isolationists. They are fine with trading with non-Amish communities. They just want to preserve their communities and values, and believe that they may have trouble doing so if they become too dependent on non-Amish communities.

From what I've read, the reason most Amish communities do not connect to the public electrical grid is that they believe that would make them too dependent. In most places there is only one grid provider and so you are putting all your eggs in one basket if you become dependent on electricity and you get it from the grid.

If you use electricity but get it from solar cells or batteries or a gas/diesel/LNG/propane generator, you generally have multiple sources. It is still a dependency, but it is just a general trade dependency rather than a dependency on a single source.

> wouldn't it be more kosher to make the solar panels and batteries yourselves?

Amish generally are fine with using things that they did not make themselves. They use metal tools, but generally don't mine the metal themselves. They wear cotton clothes, but generally don't grow the cotton themselves or weave the fabric themselves.

For a good look at the Amish approach to technology, see the article "Amish Hackers" [1].

[1] http://kk.org/thetechnium/amish-hackers-a/
Dropbox hasn't dropped AWS, they moved things off AWS as it made sense to. The article is talking about two things, the move of file storage and a network backbone. Neither of which were done recently.

The file storage move from S3 to Magic Pocket is detailed in these blog posts:

https://blogs.dropbox.com/tech/2016/03/magic-pocket-infrastr...

https://blogs.dropbox.com/tech/2016/05/inside-the-magic-pock...

https://blogs.dropbox.com/tech/2016/07/pocket-watch/

The network backbone is talked about here:

https://blogs.dropbox.com/tech/2017/09/infrastructure-update...
Fortunately I don't have to juggle anything here: Tarsnap's encryption makes it impossible for me to detect, never mind prevent people from storing "illegal bits".
Evolution of the Dropbox backbone network
It's not easy to frame someone successfully, the law is pretty careful about stuff like this.

However you could probably get someone fired or develop a bad rep.
Yeah and that's why it amazes me that Netflix uses Amazon a straight competitor that uses the money it makes from Netflix to compete with Amazon prime.
Gamestop does not sell games on SD cards for those tablets. So, somewhere between 99.99% and 100% of the time that's not what happens.

PS: iPhones and iPads don't have SD slots so for millions of these devices that do qualify as phones and tables it's really not an option.
What's a good resource for learning about expert systems? I'm curious about this "dead end" but most of what I've found online has been about the ai winter and not the technical details of expert systems.
What is professional? What sexual taboos are/aren't acceptable? What is acceptable workplace banter? I feel like it makes more sense to defer to the least restrictive system...
Only give the database user permission to execute stored procedures.
The problem is you making that decision for me.
I see your point, but why is my perspective the wrong one?
You bet your tight little ... that we should just do our jobs and go home. Maybe you should go home with me? You know my wife is cool with it and I can do really good things for you here at $company...

I don't see why you're upset? You're a team player right? We're not trying to run a "socially safe" workplace here. You're not one of those bleeding hearts are you?

/s
We are indeed biological computers. But this is a social problem. Socially we develop moral and ethical frameworks (codified as laws) in order to navigate the scenarios that come up in this biological thing we call life. It's not innately wrong to lust for someone who is younger than [country.min_adult_years] old; it's actually pretty biologically natural. However we socially agree that children are sexually off limits because we legally consider them unable to consent to sexual intercourse. My point was that abortion should not be grouped with "other laws that exist to protect vulnerable children" because it's more about the definition of a human life which is really hard and not about the vulnerability of a developing child's brain or decision making ability, albeit understandably easily conflated.
No banter is professional. Not sports, not politics, not art, not the weather.
Paste link as text (without link).

People would have to copy and paste it in browser - but it should avoid hijacking links.
>>“If you can just look it up on the internet, you’re not thinking,”

I really do not see how having instant access to information precludes you from thinking. Au contraire, it probably gives us more time to think and it allows our minds to branch out into much more interesting places. I think it's fine that we can just look things up. Even Albert Einstein seemed to think so:

“Never memorize what you can look up in books”

p.s. For the picky the real quote is:

“[I do not] carry such information in my mind since it is readily available in books. He also said, “…The value of a college education is not the learning of many facts but the training of the mind to think.”
Per foota [0]:

Clients SHOULD NOT issue a conditional request during the response's
freshness lifetime (e.g., upon a reload) unless explicitly overridden
by the user (e.g., a force reload).

The server is still going to serve up the resource when requested. This behavior is for the client-side of things (browser).

[0]: https://news.ycombinator.com/item?id=15262108
Is the proper reply to this not, "What the hell is wrong with you"? Followed by ignoring the person...
To the remote administration point, if you have this architecture and still open up the private data-network to remote SSH connections, you're at least limiting the attack space to vulnerabilities in SSH and the network stack/firewall on your ingress server, but not vulnerabilities in the application server. Much better than nothing.
I imagine that plays a big part, but it is definitely a multifaceted issue. A few other reasons:

* Farmland saw the perfect storm of record high food prices and record low interest rates around the end of the 2000s, so people went spend-crazy, resulting in as much as 500% growth in price in the last decade. They haven't yet come back down from that.

* That, of course, also brings out the speculators, so it is not just farmers who are buying.

* Certain types of farmers are given special market advantages by my country's government, so they tend to make more money than most other farmers, providing them with more money to put into land.

It is tough for the Amish to compete with any of that.
Those laws generally punish the older person, not the younger person they're supposedly there to protect. Prosecuting underage sexting as child pornography under laws supposedly meant to protect children from exploitation further harms the supposed victim.

Laws where the victim is the offender are problematic in a way that enforcing the law when the victim doesn't always want the offender punished is not.
We're almost there with ServiceWorkers. A site should soon be able to push a new manifest that updates or invalidates the cached resources.
Honestly, this makes perfect sense. I don't know if this is practical in the real world, but there is logic to it that I can agree with.
At that traffic volume Netflix has more negotiation power with ISPs
That's what the root Certs are for.

Firefox ships with its own, chrome uses the platform ones.
Your comment is on a completely different topic than mine. In child molestation there is a victim- the kid. I'm talking about situations where there is no victim.

You cannot victimize yourself by taking a picture of yourself.
Yum isn't going to patch Struts, though. That's an application package.

There are services that monitor your package configuration(s) and let you know when something has been updated.

There are also mailing lists. Unless you're a Node developer, you probably only have a couple dozen dependencies in your app. Subscribe to them.

Finally, you can just check in your lockfile and update packages as part of your dev builds, then commit it whenever something changes. Your CI/CD will make sure you are always running the latest version of every application dependency in production.
Is 500 petabytes really that epic?
1500 tapes? I could probably stuff that in the back of my minivan.
Separate URLs for separate devices? Talk about regression!
I hear this line of thinking a lot but I don't really buy it.

You could just as easily say it's amazing that Amazon allows a competitor like Netflix to run on it's platform. The reality is that relationship is more complex than that.
Sure, if they sell the storage system to someone and arrange a leaseback.
Having just raised a human from newborn to walking, talking kid, I have to say that her life so far has been chock full of oracles guiding her learning.

Long before language, babies spend hours every day just interacting with the physical environment, which is "true": the toy is here, not there. The body weighs a certain amount. If you move the head this way, you'll roll over. If you move it that way, no rolling. Etc.

And parents provide a different kind of guidance. We react differently to different sounds, actions, movements of child. Even if these are not "truth" philosophically, they represent for the child emotional truth.

I'm just a guy who reads things about AI on the Internet, but I have to say it sometimes seems to me like AI folks have funny ideas of what "intelligence" is, and how it develops. The description of "unsupervised" learning above doesn't comport with any human experience I recognize. IME, humans receive constant immediate feedback on everything we do in life.
Any colo or dedicated server provider.
Wait, but using the non-AMP version is a decision too. Why do you get to make that one instead? Shouldn't the person posting the link get some discretion?
Name a CDN (excluding DDoS mitigation) that offers useful BGP service to customers? Even some CDNs are not quite good at running BGP
The fundamental question is: what is the filesystem for? If it's for users to store documents, you want something like BeFS, with slower performance but more features. If it's for programs to persist data, you want something minimal which you can build database libraries on top of. Trying to do both at the time pulls you toward a mediocre middle ground.

Operating systems should really have two separate systems, one for user documents and one for low-level persistence (the former probably being built on top of the latter). Programs needing plain persistent storage shouldn't have to pay for nice features at the document level, and we shouldn't have to compromise the user experience of document browsing to get high-performance persistence.
Its not just patents in React. Its patents in "any software, technology, product or service of Facebook or any of its subsidiaries or corporate affiliates"

https://github.com/facebook/react/blob/master/PATENTS
Great comment for 2017. I would like to see the 1987 version and the 2037 version of it.
So you're saying that if an adult managed to coerce a child to take pictures of themselves, then send it, they are going to get a get out of jail free card?!

I think each situation need individual judgement, not a universal law.
Discovered it recently. Usually I am a bit suspicious of big IDE based on IntelliJ which I consider too slow and to have an annoying latency, but I really liked PyCharm.

Before that, I was using Spyder or vim depending on the size of the project.
But that’s the thing, if you get their name in the media, true or not, they’re ruined. People NEVER believe someone accused of These types of crimes are innocent.
Improbably Frequent Lottery Winners
Pretty much anywhere.
I've noticed this on many other news sites recently as well. I hope this trend dies soon. This is an immediate "close tab" for me when it happens.