skysight-inc/HackerNews huggingface dataset:
If you took a few minutes to write out a few sentences, like Patreon's recent actions of X, Y, and Z run counter to the sort of values we should promote in a free and open society...

It would likely get your point across better and might spur some useful discussion. With the type of info asymmetry inherent in most discussions, people lacking your knowledge on this subject are likely to quickly dismiss statements like this.
The difference is that by default, Google's app store is the only option on Android devices and Apple's one is the only option on iOS devices. This means being banned from one basically means your app or service can't become popular on those platforms, especially with the mainstream user (who doesn't root their devices).

Walmart and other large retailers have alternatives available in most areas, and it's incredibly easy to choose to shop in one of these alternatives as well.
I strongly dislike the credit agencies as much as the next person but I have to ask: Guilty of what?

Just because something you don't like happened doesn't mean someone goes to jail. This is the hard but important idea you have to learn in a civilized nation. Bad stuff happens, and you don't just get revenge on whoever is nearby. This was a crime entirely perpetrated by another party. You don't get to transfer their guilt onto someone who may have been reasonably diligent.

Now the issue on aggregating the data in the first place is another conversation.
Hi Will, I work at Atrium LTS. Please check out our careers page and let us know if there's something that might be a match!

https://www.atrium.co/careers/
> The few times other parties have stepped in and spoken up, there's been some less rosy truths in there.

What are you referring to?
But it won't work if your eyes are closed, or not looking at the screen. All it takes is 5 fails, and then your face is no longer an authentication token.
What would be the competition angle for Apple pulling the app?

The fundamental reason these apps were pulled was related to their content, not competitive.
I'll take the New York Times over an organization who's founder embezzled money to pay for escort services.

https://mobile.nytimes.com/2015/04/24/us/cash-flowed-to-clin...
Appreciate the architectural discussion. Reminds me of an architectural feature of ceilings in ancient buildings. I cannot recall the name of it, but it did allow for cooling of the buildings. The design would consist of a lower ceiling with the middle gone. An upper ceiling would extend over this. The section between the ceilings would have openings to allow for light and ventilation. Wish I could remember the name of this design.
You've just described a large subset of the HAM community ;).
They're trying to gain publicity and strengthen the narrative "liberal California is censoring conservatives".

I don't think they care about winning this either. The kind of people who use gab would already know how to sideload an Android app or use alternative app stores. Besides, you don't need an app, the website does the job too.
Protection from what? You’re willingly pointing a 3D camera at your face and giving a 3rd party permission to use the data. What exactly are you seeking protection from?
Similar open control room with lots of screens at LIGO.
That also takes more space. Understandably, when memory was counted in kilobytes and disks were counted in kilobytes, file formats were designed differently than they are today.
Yeah. It's a subset of Li-ion. Tesla vehicles use NCA and their stationary storage products use NMC [1]. They are pretty similar but NCA is lighter and cheaper and NMC has better cycle life (and hence long-term value). It makes sense to use NMC for this application since weight is a non-issue.

They're both significantly cheaper than LCO (the most common) and because of that NMC has become a lot more common than it was. They're also much better behaved (ie happy to put out high-power bursts, temperature-stable, and less likely to ignite), but last longer than other chemistries like FePO4 (which not well behaved but quite hard to ignite).

[1]: http://fortune.com/2015/05/18/tesla-grid-batteries-chemistry...
Actually you can. That's what they do in the rest of the western world. Not saying it's a good idea, but it's far from impossible. It's more of a "do you want to".
> I guarantee you that most people reading this work at companies that are similarly vulnerable.

And I 100% support holding them responsible for damages caused by that.

Netflix: Oops, we let an unauthorized user watch all videoes.

US Navy: Oops, we let an unauthorized user launch all ICMBs.

I would hold each of these parties 100% responsible for those respective damages.

> look at this rationally.

Rationally, organizations would take different security precautions depending on the consequences of a hypothetical breach.
Does this mean that YouTube won't play automatically after clicking on a video?
Create new knowledge
I was impressed by a 25% return rate, and then I saw Tokyo's 60%.

Why are we not funding this??
If only you could somehow enable users to make decisions for themselves we could solve this....
With the square root of the length.
Everything You Need to Furnish Your Mobile Help Desk
Could someone explain the bit about "The Internet for Dummies" at the beginning? Why is that quote there?
Is there anyway to wipe the whitelist?
Protection from an app developer reading the raw sensor data and unlocking Face ID without you being present.
FYI - For those unfamiliar with the rules of the US National Industrial Security Program ... those who enjoy the trust of the US government by having a security clearance are required to report foreign national contact (this is not unique to the US) ... they are also required to continue to report such contact should it be ongoing, and most especially if they form a "close and continuing" relationship. It is NOT prohibited. This gent made it a secret, and then he lied, and now he is a convicted felon because he didnt want anyone to know he had a girlfriend .. Self inflicted wound in my book.
I basically never open a web page to look at a video. For me, it's a straight up waste of bandwidth.

I don't mind clicking on eg youtube videos.
They have a Chief Security Officer. If there was one thing that was in the direct line of this person's responsibility, it would be a security issue like this.

Food for thought.
This I would agree with. Actually, having grown up in Florida, it really irks me when I go up north and stay in households during the summer. It seems like Floridians take air conditioning seriously, whereas northerners don't see it as a priority. Growing up in a hot place and always wanting to be in a cool place, sometimes it's just odd living with people who grew up in colder places that yearn for warmth.
I read it as "you need to enter your password if you haven't used your phone in a week, but if you use your phone every day, you only have to enter your password after each reboot"
What? It takes vigilance, training, competence, and a culture of security. Oh, and lots and lots of money backing it up. If your company isn't willing to make that commitment, then your company shouldn't legally be allowed to handle any sensitive data at all.

I have personally breached companies that fit this description. That was my job, and it's why I was hopefully the last person to breach that particular facet of their landscape.

But pentests can't catch everything. That's the dirty secret that is also somehow not a secret. The very next commit could make that pentest obsolete. Ditto for spinning up a server.

As if we haven't already lost? The Equifiax leak is a privacy disaster of the highest order.

Well, what do you think will happen from this? That may be true, yet the world will go on. We've been trained to accept the current system as inevitable, but SSNs aren't a security mechanism. The underlying absurdity is that we view leaking them as a disaster rather than recognizing and replacing the fact that we all rely on their secrecy.

If someone wants to impersonate your identity, they can usually find a way. This breach will certainly make that easier, but I'm not sure it will affect the actual fraud rate. Time will tell.

(I'm aware far more than SSNs were leaked. The point is that it was a bad idea to have this central point of failure in the first place. If it wasn't Equifax, it would've been someone else.)
They leaked far more than SSNs.

This also raises a real question about scale and distributed harm. If killing someone is wrong, what is stealing one ten-thousandth of a lifespan (through stress and monetary loss) from a hundred million people?
What's the parallel here? There was no app store back then, I'm guessing you're referring to IE, but again, that was Microsoft integrating two Microsoft products together. Similar with Windows on top of DOS.

What if Microsoft had never made a browser, but 90% of manufacturers chose to make Netscape default over Opera, and Opera sued them for it?

Also, why only comment on one of the scenarios?
I mean, even without this investment, they were always going to have to make a profit. That's kinda what businesses do.
Integrated information theory: from consciousness to its physical substrate
That’s a heck of a corner case, and I’ve got a secret for you - everyone else in the meeting who cares already knows you’re looking st your phone. You’re not hiding it as well as you think you are.
I'm not sure if the weather in California really provides enough sunlight for sufficient testing...
Same "noise" has to be at receiving crypto otherwise no key to decode it.
>the key difference in Maven Central is a manual review process

Lipstick on the pig, still covered in mud.

The key difference is the regular occurrence of malware finding its way into PyPi and NPM due to the lack of multilayered security on those repos.

You guys keep trying to prop up the straw man that ONLY package signing is needed. It's not. It's a start. Nobody is making that argument but you. You not only repeatedly beat that dead horse, but you carry it to the illogical extreme that package signing is somehow harmful. Not only do you see no value in that layer of security, but you actively resist any talk or attempts at implementing it.

Meanwhile, your repo is infested with hackers and malware. Big surprise.
> It never really explains the experience of red or the smell of a rose, it just posits an attention model for having conscious awareness. It leaves the notion of qualia untouched.

Baby steps! Consciousness is an onion we'll have to peel apart one layer at a time.
oops meant to post link the full article here: https://www.nature.com/nrn/journal/v17/n7/full/nrn.2016.44.h...
> A well functioning society, where people don't live like dogs in the street, does.

I guess I've never lived in or visited a well functioning society then. I have lived in two countries with universal healthcare and visited many more and they all have homeless populations living on the streets. Whether they live "like dogs" would be a subjective call I guess.

I don't think you understand the term 'limited resources'. The opposite would be 'unlimited resources', not 'a different allocation of limited resources than I would prefer'.
It's hard to invest much interest in the opinion of someone on a subject they've literally devoted their lives to knowing as little about as possible, to such a degree they live a life entirely isolated from it.
+1 for Sandcastle (SHFB). I used it a couple of years ago and felt that it was pretty easy to use and that the documentation came out nicely.
Did you even read TFA or any other info about it? It’s an alternative to your PIN - it doesn’t replace your PIN, and t isn’t required. Just like TouchID.
Theories like IIT are just barely one step away from magic IMO. Consciousness is an intricate, macroscopic phenomenon, so to require it be present in every microscopic spec of matter just because we can't get a grip on qualia seems like a serious overreach.
Calling something "North American Regional Dialects and Accents" when they really mean white north american regional dialects and accents strikes me as a racist title choice. Black people are not an outlier, they are an integral part of the society and have been for hundreds of years. The assumption of the title is ridiculous.
Finally. A perpetual motion machine. Never knew it would be a dump truck.
If your house was converted to cash, and that cash invested at, say, 7%, that is what the "paid off" house is costing you.
Iron Maiden – The Trooper – One Man Band ( All Instruments Cover )
Some more detailed info here:
http://zircon.fyi/syscalls.md
http://zircon.fyi/concepts.md

The PCI syscalls and a lot of the other DDK scaffolding stuff will be going away in time (and are not accessible to general userspace processes).

I'm hopeful that we'll hit 1.0 with fewer than 100 public syscalls and hopefully not many more than 100 total.
There are two sites, and two sites only that I like autoplay on: YouTube and Twitch.
He said "billion images" not "billion people".
I think those that follow the alt-right overestimate how much others care that they are banned. I remember when loads of them left Twitter for Gab, pronouncing that Twitter was doomed without them. And yet, Twitter hasn't really seen any negative effects of them leaving.
Fingerprint login is a pain. Still has lots of times when it doesn’t work.

Rather just not have to do anything to get into the phone !
To live to see a more equitable, more pleasant world, brought about by both technological and cultural evolution. To contribute to that in some small way would be icing on the cake.
> Well, you are asking for perfect security.

No need to read the rest of your comment. I'm not biting.
> Yes, it was stupid for them to have everybody's PII attached to that one webserver.

No, see, this right here is the part where you and I disagree with each other. This wasn't stupid, this was negligent.

Once you have a certain amount of customer PII, you have to act like an adult. You put all the PII behind a special interface and database and hire a well-paid team of security specialists to take care of it. There should be people whose entire job is to read about new exploits and be updating that PII system within hours, not weeks.

A good PII system should have triple-A: authentication, authorization, auditing. You should know for certain who is calling the PII system, how often, for what records. You should have automatic audits/alarms looking for clients who are suddenly increasing their call rate (or better yet, rate limit each client). Automatic searches for clients whose behaviour has changed suddenly. When someone is clearing out your PII, you should know very quickly.

Equifax did not do the adult things. They got owned, and now 150m people are at risk.
> Given 1-4, $1.1B doesn't seem like much.

Seriously, they'd make trillions from self-driving tech. They'd end up spinning off an Uber-like self-driving ride service, and then they can track you and serve ads to you wherever you go. The data mining potential alone is huge.
How much downtime is acceptable for an online backup service?
I recently started evaluating options for backing up Linux servers (entire file system) to the cloud. The provider we chose claims 99.9999% data resiliency and seem to have a good reputation.

However, within 24 hours of opening an account, my initial backup stopped working because they had a planned 8 hour outage. There is another 4 hour outage planned for 4 days from now.

When I contacted support, they replied that "maintenance and downtime is simply a fact of life" and that "This kind of maintenance downtime is _Extremely_ rare; normally occurring a couple times per year". To their defense, they also said that "if you were in a bind we would almost always be able to work with you to get you your data even when the system was offline".

Does this seem like a reasonable amount of time for backups to not be accessible?
https://github.com/vimoutliner/vimoutliner
It was mentioned in the introduction presentation, they hired top Hollywood mask makers and makeup artists to try to fool the depth mapping sensors.
>Twitch and co are no different from sexcams

Once you get past the fact that they are both livestreams the similarity ends. Twitch explicitly forbids sexual content [0]. There are some streamers that dress suggestively, but they're in the minority.

Your statement is not much different from calling YouTube no different from PornHub.

[0] - https://www.twitch.tv/p/legal/community-guidelines/
This is a the big issue. Too many people complain about that one patching issue. Yes, we know everything is broken in some way, but that doesn't stop anyone from constructing layers of defence where even with a full compromise of one system you get very limited access internally.

That should've been a huge point of the published document, not just "we didn't patch, so it's game-over".
I have come to the conclusion that I want a shell that is developed independently of any operating system - so that I can have consistency no matter which Unix-like OS I happen to have installed.

I've recently tried Bash, Tcsh, Zsh, and Fish. I ended up going with Tcsh, which Zsh being a close second, but honestly my choice was complete bullshit as it is based in nothing but preference.

As for Ksh, I particularly like OpenBSD's version, which is based on pdksh. Sadly, OpenBSD doesn't maintain a portable version like they do with some of their other products (OpenSSH, OpenSMTP, etc).
Verified boot support will arrive prior to 1.0, and as an earlier reply speculated, leaving the ipv6 boot path enabled at all is a development feature.
He isn't excusing it, he's making this point this is far more common, and if you looked at any of the fortune 100, in sure you will find the same or WORSE practices.

I agree with his assessment, I just wish it was otherwise. Many orgs are simply lucky they have not been actively targeted by a determined attacker - they would be lambs to the slaughter.
Out of curiosity, why is this still something people desire in a link? Can't any modern browser pretty much open a PDF as quickly easily as a web page?
What a desperately condescending thing to say. Really it comes down to a matter of perspective on life and your definition of "hard-driving". If your definition of that is writing code for more money, then fine. Other people work a hell of a lot harder, in much worse conditions, for a lot less, and choose to do it in a place where they like to live and the people they enjoy being around. Pretty compelling to me.
They're using a near infrared camera which can't see much beyond what your eye can see except for TV remote LEDs and security camera floodlights. It can't see temperature unless something is almost red hot.
If the credit history data of many people have been copied from Equifax, then the effectiveness and value of credit identity verification measures using the exact same data from the other two agencies and any company relying on those services severely drops. One wonders how that aspect of the industry will change going forward...
Added benefit: spin up the wheels prior to landing to reduce wear on the tires when they first touch the ground.
Normally startups raise money to accelerate growth. Nice try with your projection but that's not how startup valuation and growth works.
It covers the entire Fuchsia OS.
This is also known as key-based cache expiration, detailed by DHH here: https://signalvnoise.com/posts/3113-how-key-based-cache-expi...

You never worry about when to expire your cache entries if the key changes every time the item does. It's nice to finally see cache-busting coming out of the woods.
The Three Ticks
Why is this information sensitive? The deeper Equifax problem
It took me maybe 30 seconds of clicking to get to this: https://github.com/leo-editor/leo-editor/graphs/contributors

Doesn't look very dead to me.
Maybe relevant to see how it affected APFS design decisions due to Be FS developers working on APFS.

I am hoping Apple releases APFS with the xnu 10.13 code drop.
Salt Lake. Free bus + train in city center; yearly ticket outside of that.

Every big city has mass transit to at some degree. IDK what your specific requirements are though.
My nearest neighbor is a half mile away. The nearest village is 24 miles away, and has ~1200 residents. Today, I had three moose come visit my lawn. A few days ago, it was a rabbit, but I ate him for breakfast the following day. Tonight, I had trout caught from a stream on my property.

I don't think my age is salient, as I know plenty of young people who claim they'd love to live like I do. So, I guess what I'm trying to say is that there's lots of different desires, and they encompass all age groups.

I used to live in cities. I'm so happy to be out. Then again, I do love driving.
The first prototype was built using measuring tape: https://gimletmedia.com/episode/you-have-to-invent-something...
_You don't need to be able to see the camera to respond to messages in the bottom half of the screen._

But the camera _does_ need to see you in order to unlock in this case. You can't read or reply to a message without unlocking first.
Τον πρώτο λόγο ΠΑΟΚ και Ολυμπιακός
What about being the change you want to see in the world?

Has anyone even formulated and proposed any notionally viable alternatives? Apart from the vastly destructive and murderous attempts of communism in the past century.

Not saying the implementation of the current system is optimal, of course, but I think over time things tend to converge on that which does the most good for the most people.
Should be done locally anyway, assistant should have some functionality (alarm, timer, calendar, etc.) when you're completely offline.

Other comments indicate the assistant names are hard coded in ASICs but they certainly don't have to be.
>There was a critical vuln in the framework, and they failed to update their box for N months. But we're talking only a few months. N is very small -- maybe four?

The vulnerability was in Apache Struts and has existed for 9 years:
https://arstechnica.com/information-technology/2017/09/equif...
KS addict reflects on backing $16k worth of board games, regrets everything
That'd still end up dealing with currency conversions. People still buy food and pay rent in their local currencies.

If you're talking about something that's only usable on Patreon, then why a crypto-currency? It could much easier just be like gems in a clicker game. But then, they'd get some bad press for basically making people use casino chips.
And a car is darn convenient for a family-sized weekly grocery trip.
8 Reasons You're Going to Love Autonomous Vehicles
Their published document says the stolen information includes documents from disputes. Also only a small number of people (compared to the scope of the failure) would ever use their website. It's much more than logs.
No, that number is fixed at 10, with increasing intervals of time required between each attempt.

After 10 attempts, the phone is disabled until a restore, with the user-settable option of erasing the phone in this case.
Any patents that cover React are likely to describe VDom in genereal, which means there is little reason to believe those are much safer.
Use it through Tor then? :)

Though I suppose "Google through Tor" is pretty similar.
How much has downtown Detroit paid for Auburn Hills the past 20 years or so?

Or, in another way: are these just recent calculations? There are a lot of places where downtown cores hollowed and had most of the big-financial-impact businesses move out to the suburbs a few decades ago, and now that reversed more recently, and will probably cycle around a few more times in the future.
They started early and seriously, unlike manufacturers who embraced it with marketing in mind and then put "beta" products on the road. Google were the first to gather massive amount of data on SDV.

Maybe they're not the first right now, but they're safely in the lead, waiting for the others to fumble.
People who have a decent knowledge of what they're likely referring to will probably also dismiss it, too.