skysight-inc/HackerNews huggingface dataset:
fwiw. I read HN daily because the submissions are a fantastic source of raw material. However it is impossible for me to ever debate on it.

If I had said in a different context "Dumb as rocks religious theories" or "dumb as rocks conservatives" nobody would even blink.

One thing for many here might want to think analytically about is the concept of "civility" and how baised and subjective that is.

Certain types of personalities might be able to provide useful analysis but as part of their personality will display aggression in presentation. By having strict policies you create bias in the types of analysis that can be contributed and imho the effect is a strong bias to liberal group think. I'm sure that hurts feelings but thats the issue we need to promote thoughts over feelings to built working solutions for reality.
How do you think things and people get to and from farms?

Before the invention of the automobile we were an impoverished agricultural nation where huge numbers were forced to work brutal farm jobs to feed themselves and the rest.
A clone is not a copy. When you clone a node in leo, the same node can appear in multiple places at once. If you edit any of the clones, the original is updated.

One use case: You're trying to fix a big in code. You can create a new node and place under it clones of all relevant code (which may exist across multiple files) for the bug. And not just code but also collateral for tests (e.g. unit test or input files that reproduce the bug etc). Oh and might as well clone the bug report as well.

So all that you need to work with the bug conveniently under one node. Just edit there and all relevant files get updated.

Leo is powerful and has a decent user base. It is the closest thing I've found to Emacs in the Python world. Unfortunately the documentation is really bad and I just don't have time to learn it without good documentation. I toyes with the idea of becoming a master at it just so I can write proper docs but life is too short.
Malicious Libraries Found on Python Package Index
Generally speaking, anything that requires you to gather funny money to play, and tempts you with the ability to buy credits. Free is usually crap.

A recent one was "Star Wars Force Arena". You really need to shell out to play, but you get these virtual "cards", sort of like electronic Pokémon cards that have characters and weapons. Usually they give you junk characters, but once in awhile you get something good. Your have to connect in specific time intervals to get more cards, and we discovered that my son was actually waking up early to claim his cards.

Other nice games come from Toca Boca. My son and his cousin like to play with "Hair Salon 3", where you basically cut and style hair -- they have little contests to make wacky looking people.

The physical Apple Store is actually a good place to discover new games. They change it demos every few weeks and the staff is often very knowledgeable.
Probably for "emphasis".
To fit 500 petabytes on 1500 tapes, you'd need to put 333TB on a tape. Do any currently available tape formats support that much data on a single tape?

Granted, I stopped paying attention to tape drive capacities a while ago, but the upcoming LTO-8 standard will "only" support 13TB/tape, so you'd need 38,000 of them to hold 500 PB.

I've seen some higher density announcements in the 200 - 300TB/tape range, but couldn't find any products available.

AWS does offer a "Snowmobile" [1] product, that can hold 100PB on disks in a tractor trailer.

[1] https://aws.amazon.com/blogs/aws/aws-snowmobile-move-exabyte...
Hey bitch, don't ignore me. imma make sure you don't get that promotion, Imma make sure everything in the company knows you're a slut.
Oh wow, I did not even notice this until you pointed it out.

So the solution is SO bad that the "amp" tag even becomes part of the URL?!

Now THAT is really weird ... well aside from me disliking AMP anyway, that ... hmmm. We can send people to the moon, probably soon elswhere but ... we have to denote that ... we use AMP by ... a appended string called 'amp'.

Google should be ashamed of this "engineering".
What do you mean by "hardcore bitoiner"? Just curious.
Not exactly what you need but "File System Forensic Analysis by Brian Carrier" goes over a lot of the internal data structures on common filesystem. It is a bit older book so it mainly covers fat, ext2fs and ntfs.
But we did not have AMP until recently.

So OTHERS made a new decision for YOU - as the visitor.
That's how Microsoft manages its campus real estate. :-)
That's awesome. Get your kid to do that with blocks, pen and paper or a toy.
Well said. More monopoly control by a company that has already gotten way too big for the world to (want to) swallow.
Children in various age groups have numerous rights that go far above education and health care in many countries, from the right to privacy to things like religious freedom. Saying that parents should have full control over their children's sex life until they reach the full age of majority is certainly controversial.
My method was evolutionary, put too simply - something not completely undiscussed even at the time and it's undoubtedly happening in one way or another now. I also designed a method for parallel processing dedicated to neural nets that seemed much more efficient than just "more processors", I've no idea whether NVIDIA et al have caught up with design that or passed it by now.
My guess is that this is implemented by the publisher.
I was going to say that the canonical example is the Chevy Nova ("no go") but TIL that that never actually happened. It was a made up story.

That Mitsubishi one is hilarious.
I really did before I posted anything. I just jumped ahead to a related effect that I had direct observations in regards to. Clearly plastic bags are great for the immediate need of shitting somewhere. and I fully understand they have negative future externalities.
take a look at my other comment in response to being flagged and why I just added.
Teenagers also have the right to live lives that allow them to experience the world on their own terms and to learn from their experiences. Overly controlling parenting is ultimately detrimental to teenagers' development. Why is that so hard to understand?
Flag is a pretty obscure term that you learn from using the linux command line. Booleans are in math and engineering. Flag is not clear at all and using it instead of boolean, especially when you don't even use the term boolean directly all that much, seems kind of silly.
I heard she was in a similar role at First Data, prior to the Equifax gig.
I love Mozilla. I rue this kind of clause which has been so destructive, causing so much rewriting to get to another license.
We kill for many other reasons than food as well as for no reason at all. Why did you choose the eating for your statement? Well, anyway eating your own species has selective pressure working against such a trait so your statement doesn't make sense.
Child marriage is legal in much of the the U.S.A.[1]:

> The search turned up cases of 12-year-old girls married in Alaska, Louisiana and South Carolina, while other states simply had categories of “14 and younger.”

Most states have no minimum age, though some have a minimum age between 14 and 17 (only two have a minimum age of 17 going by the map in the article).

[1] https://www.nytimes.com/2017/05/26/opinion/sunday/it-was-for...
Secret meetings with Kremlin-linked individuals days before the DNC hacks were first released and lying about why they were set up - nothing to see here.

Emails talking about collaboration with Russian government during the campaign to obtain damning information about Hillary Clinton released by his own son - nothing to see here.

Firing the director of the FBI "because of the Russia investigation" according to the man himself - nothing to see here.

Repeatedly downplaying the influence of Russia in Ukraine and changing the GOP platform after hiring a pro-Russian political operative to be his campaign manager - nothing to see here.

Repeatedly disagreeing with the evidence provided by American intelligence agencies and dozens of cybersecurity firms while agreeing with the statements of Russian intelligence after being president - nothing to see here.

Having a national security advisor who sat at the same table as Vladimir Putin in December 2015 during a gala for the state propaganda network - nothing to see here.

Having the same national security advisor lie about meeting the Russian ambassador - nothing to see here.

Having a campaign operative in Roger Stone (who he still in contact with) openly allege that he has a backchannel with Julian Assange - nothing to see here.

Peter Smith coordinating with Russian hacker groups, only to kill himself a few weeks after telling the WSJ? Nothing to see here!

....but a highly regarded charity founded by one of the most popular presidents in recent history raising money...now, that's a scandal!

I'll be honest, if our enemies are this afraid of someone, I want that person on my side.
I believe they mean bringing the SSL/TLS handshake closer to the user is beneficial, it doesn't mean the proxy doesn't use SSL/TLS to its upstreams.

In this post they say specifically it is about the handshake:

https://blogs.dropbox.com/tech/2017/06/evolution-of-dropboxs...

I don't know if they use SSL/TLS to their upstreams, I'm just saying terminating in at the edge doesn't mean that is the end of all SSL/TLS. It is totally normal to terminate SSL/TLS at the edge, pretty much anyone using an HTTPS load balancer or CDN does it, but the LB or CDN can still use SSL/TLS to the upstreams and verify certificates of upstreams.
Exactly. I'd say the check of how fast can a security patch be deployed from the moment upstream OS or library releases is a good benchmark for a team/system and should be evaluated at the same level as log audits, what ports are open and what openssl versions are running.

> it's just underinvested in early on.

And for cases where there is no personal or financial data involved it is shameful and just a bad practice to not have the system which allow fast security patch deployed. For a system that holds sensitive personal information for hundreds of millions of people it should a very serious issue not to patch the system for months after vulnerability was known.
EUV Lithography Makes Good Progress, Still Not Ready for Prime Time (2016)
Yes, marketing. Also software development, web development, design, customer services, corporate services, support, sales, PR/comms, human resources, finance & accounting, legal, and so on.

1500 sounds like a lot, but keep in mind how many customers they have, and in how many countries they sell their services.
With mobile there are some constraints that are not a factor on a laptop. For example you don't have a full sized hardware keyboard. Which seems obvious, yet you are expecting a better deal than what you perceive Apple is offering. And you are making the unfair comparison to a laptop.

Also with a laptop the use cases generally can tolerate a bit more delay in the login process, with a few seconds being tolerable, whereas with mobile devices a login process over a second starts to get intolerable very quickly as the length of the process increases. Again this may be obvious and yet you seem oblivious to it as a consideration, as you expect a better offer, as though there are no constraints and tradeoffs, or you are unaware of them.

Mobile device designers and mobile system designers deal with this stuff every day for years on end. They know a lot about it, and have thought stuff through way more than some of us. It's super easy for you to criticize from a position of relative ignorance (not even a current iOS user...) but I'm pretty sure they are still following the mantra of trying to make stuff insanely great.

Still, you can dream of even better devices. I'm sure the bar will keep being raised. Let's hope we get there to a place where we do have both freedom and security.
Bingo. You said it, that's exactly why I want to hear more from Susan Mauldin. (That, and the fact that there's someone evidently who doesn't want to hear more from Susan Mauldin...)
as a parent and also someone who was a child at one time I can see that kids make all kinds of mistakes. I mean, I seriously don't even ask why sometimes because I know the answer I'm going to get will not make any sense.

I'm very lucky and I have some wonderful children I cannot see them going out and doing something like this however people do stupid things. I don't think charging someone with something that is going to stick with them for the rest of their life for something that they did when they were 13 ,14, 17 years old.. they are kids and their brains, hello all you scientists out of there, are not even fully developed.

Listen, if a 17-year-old child sent an explicit image to my daughter I would be over at the parents house faster than you can imagine. That kid obviously needs a swift kick in the ass, he or she does not deserve to be charged with a crime will follow that person for life.

If we continue to charge children as adults, kids that are 13,14,15 or 17, then we might as well change the age of when you are an adult to 13 years old.

has anyone given any consideration to the crap that these kids are bombarded with on a moment by moment basis on television in music and all entertainment, it is hyper sexualized. What do you expect your children to do when they are faced with this?

The sad situation and I don't agree with the stupid thing that this kid did in the stupid things the kids are going to do but they are kids! Come on now, haven't we seen cases recently where adult pedophiles have been let off? Are we going mad?
What we lack is an AI equivalent of a theory of aerodynamics. At the moment we're just brute forcing random solution when we have perfectly good systems we should be trying to reverse engineer: biological brains. This will likely require genetic & evutionary algorithms, a developmental genotype-phenotype mapping, and competitive ecological systems for open ended evolution. Right now we have back propogration which is effectively reinforcement learning--just one piece of the puzzle. I actually applied to Hinton's lab in 2009 for a postdoct position to address these very issues. He said they didn't have any money and were not taking new postdocs.
Also, there's the possibility of poor children with Android phones getting convicted while rich children with locked iPhones go free because they're more costly to investigate.
Isn't this the point of hiring a CISO? So that you can blame them instead of the CEO?
Implying that Snapchat is mostly for sexting is doing a disservice to the platform, isn't it? In my experience (which is just an anecdote, idk if there are stats on this) Snapchat has been ~95% showing dumb jokes to friends
I agree. And that's part of the point. If we could scientifically agree on definition of human life, it would be way easier to navigate the abortion topic. But since we can't, it's currently entirely a social issue. The reason I didn't want to group abortion with CP under "silly socially issues" is that I'm still holding out on us being able to eventually understand our own humanity. And when we do, it may shed light on an agreeable framework under which to legislate termination of a fetus.
Chrome new feature block auto play and other
Harry Dean Stanton, 'Repo Man' and 'Twin Peaks' Actor, Dead at 91
I'm working with a fifteen year old app that's slowly modernizing. There's two types of updates, the normal kind that's slow, and "everything is on fire, get the fix into production ASAP, then pray". The latter kind is super quick, and it's what Equifax did here. But that doesn't mean patching is easy for them. It means patching without doing whatever laborious QA/manual testing they normally do is easy.

(Btw: it might sound like I'm defending Equifax. I'm not. I fully agree with the article. They have a responsibility to figure out how to secure their systems. "We can't patch quickly" may be true for them, but they needed to figure out how to change that).
It's struts, and the CVE fix was pushed to a newer version than the one they were using. That's an intense app rebuild, akin to moving mongo versions.
Yes, but in my experience it's just talk.

What they actually mean by "team" is have the founders previously founded a successful startup, or been involved in one. That's it.

I'd love to hear other opinions, but that's my experience talking to VCs. They rarely ask detailed team questions, or get to know the team. They ask tech and market questions mostly...
Adobe Systems CEO Touts 'Textbook Transition' to Cloud (2016)
> I don't think a successful crew capsule abort would be likely past a couple of hundred miles per hour. If that.

That's not true at all. Every manned space launcher has provisions for bringing the crew down safely on a suborbital trajectory if orbit can't be reached. You would hardly give up on your astronauts just because, say, some stage failed to light. It's not like with an unmanned satellite, where it either gets to orbit or crashes/burns up.

Apollo certainly had provisions for crew abort all the way to orbit, which are discussed here:
https://en.wikipedia.org/wiki/Apollo_abort_modes
When two people are clearly intelligent but disagree, the reason is almost always a different set of experiences. My experience differs from yours; if I could Vulcan my brain to yours, you'd see why I feel this way. You might still disagree, but it would be far less clear cut.

Now, I've seen nearly a hundred codebases and they all looked pretty much like Equifax. I don't even need to see Equifax to know the kind of disaster their codebase facilitated.

Equifax's codebase is your code, and my code, and Bob's code. The only way to make this situation better is to talk openly about it. And the best way to do that is to actively defend the unpopular side in order to call attention to uncomfortable truths. It's a calculated strategy.

Just because you worked at a place with good security hygiene, it makes no difference to the world at large. Everybody else looks like Equifax. We need to (a) acknowledge that and (b) actively seek out solutions. That's what's happening here.

Ask yourself: "Why do I disagree when I've seen one or two enterprise codebases?" Those big, plodding institutions you mention are similarly vulnerable. Everyone is.

Why aren't data breaches happening almost daily? Because it's illegal. It's no coincidence that companies with public bug bounties are among the hardest targets to hit. When you make it not-illegal to attack you, surprise: you find the vulns.

A good question is, "is it illegal for a white hat to attack my business?" If the answer is yes, seek to change that. It's a low effort thing that will increase your security posture. But it's no substitute for $40k pentests.
That's actually a great idea. Because then you can get a diff between the outputted 3d and the actual 3d used to generate the images, as opposed to what I assume is just diffing the generated profile with a profile shot of the subject.
Early SSL/TLS termination is to reduce latency; the longer-lived connections from PoPs to Dropbox datacenters is over a TLS 1.2 connection with PFS. See an earlier blog post[1]:

> We use TLS 1.2 and a PFS cipher suite at both our origin data centers and proxies. Additionally, we’ve enabled upstream certificate validation and certificate pinning on our proxy servers. This helps ensure that the edge proxy server knows it’s talking to our upstream server, and not someone attempting a man-in-the-middle attack.

(N.B.: I work on security at Dropbox, and consulted on this design)

[1]: https://blogs.dropbox.com/tech/2016/11/infrastructure-update...
Most people work at companies with 401K plans and HR goes over the nuts and bolts of the plan early on when you first can enroll and they ask questions of their coworkers who have the same program.
Correct, but some is probably an understatment. They are pretty much run everyting on AWS except what you cited (e.g video processing and content delivery). Netflix is the biggest AWS user.
>They've driven 635,868 miles (two orders of magnitude more miles than their next closest competitor) and their miles driven per disengagement was 5,128 (an order of magnitude higher than the next closest, with many still in single digit miles per disengagement).

Making the assumption that "disengagements == bad" is a bit suspect though. We have no way of knowing if the reason for disengagement among competitors is purposeful, or due to more strenuous testing environments. It's not like this is a performance metric we know they are trying to optimize. Without knowing the testing methodology, it's meaningless to compare these numbers.
When I was in law school I worked on a Florida legislative project to bring forward a version of Romeo & Juliet laws to Florida [1]. For example there are cases where 17 year old girls become registered sex offenders for life due to relationships with their 16 year old boyfriends (whom they have married in some cases). These types of cases have made it to the SCOTUS. Challenging on the grounds of cruel and unusual punishment and double jeopardy, and upheld by the court.

It goes without saying civil and criminal child abuse, neglect, and abondonment cases are as difficult as any to stomach. But there are famous case of parents with "bathtub" framed photos of their kids on their hallway walls and grandfathers with pictures of their grandchilds running through sprinklers, and as you might imagine they were painted as the devil incarnate.

Our law clinic was very aware the issues of text messaging even then, 2006. At the time we used the Socratic method to debate the logic and human aspects of charging the young children guilty of originating "sext messages" of themselves. My position was always that such a law would chill the indemnity a victim needs to come forward.

One of the major issues is that many of these crimes are under the strict liability [2] standard meaning if the pictures exist, the defendant is guilty,
notwithstanding their intent.

[1] https://en.m.wikipedia.org/wiki/Statutory_rape#Romeo_and_Jul...

[2] https://en.m.wikipedia.org/wiki/Strict_liability
> Specifically, these folks point out that patching is hard. The gist of these points is that you can’t expect a major corporation to rapidly deploy something as complex

Then they should be taken to court and be forced to pay for it. It's like saying about a company which runs trains and didn't do maintenance which caused an accident to happen "Well, you see maintaining the brakes on the trains is too hard so don't blame them too much...".

> The gist of these points is that you can’t expect a major corporation to rapidly deploy something as complex as a major framework patch across their production systems.

So those corporations will be hacked, and then they should be dragged to court, made to pay, some might even go bankrupt and disappear altogether. Eventually only the companies that manage to build better infrastructure will survive.

Oh well, one can dream...