skysight-inc/HackerNews huggingface dataset:
> it's disingenuous to point at some line in some far-away terms and conditions, and say "that authorizes Equifax and two other companies to collect and maintain all information on you, in perpetuity, without any option to revoke this grant."

To be fair, I'm pretty sure they can legally do that if this was actually the case.
Given the number of operating system kernels in the world, it might be helpful to change the title to say "the Linux kernel" instead of "the kernel". I understand TFA is on lwn.net, which has "Linux" in it's title, so it's clear there, but here it becomes a little vague.
Exactly we are just aware of ours.
How do we hack our computers to be secure?
European economy class is worse than in the USA?

I have no experience flying in the USA, but it thought it would be the other way due to the seemingly massive amount of people complaining about seating.

Maybe it's because of the obesity rate.
I'm kind of blown away that some of these larger companies aren't using SAML to do their Slack authentication. I guess when you're provided with a super simple turn-key solution to getting employees on the system (corporate email verification) then you're probably inclined to use it. I wonder how diligent these companies are about cleaning up old employee Slack accounts, as it's not like Slack re-verifies periodically that I'm aware of.
Exactly what I wanted to know, thanks.
Golden rule of UI development: do not block the UI thread with I/O.

With ORM packages, the degree of I/O becomes proportional to the app's feature growth, and the UI eventually stutters. I've been on several successful app teams, and everyone that started with ORMs had to throw them away to solve stutter, and since the data and threading models of the apps were written around ORMs, they had to be mostly rewritten. Going through this, I also noticed that the before and after ORM code was about the same in line numbers, and it didn't save time to use the ORM (because ORMs have lots of negatives that required time to work around, e.g., distancing you from control over the use of indices).

For a great example of successful UI code, see Chromium, which explicitly outlaws blocking I/O on the UI thread.
Recommending Articles in Real-Time at News UK
The government creates a Request for Proposal (RFP) listing what the government wants.

Companies have some listed period that could be as short as 7 days or as long as 6 months to respond with a Proposal of work including costs.

Government then reviews and picks one based on the stated criteria.

This might seem like a reasonable solution, but it adds significant overhead.
Some do, some don't. It's not as simplistic as that.

Saying "Do you need a large amount of Data?" and then saying not to use GPU databases ignores SQream's experience in managing more than 1PB of data, and Kinetica's experience in clustering multi-TB machines.
Sonic sparklines
Sounds like AMD know how to pressure the TLAs for a better deal.
They likely upload the filings some time before they are released.
ah! thanks
> Isn't basically all your data, everything you type being sent to Apple?

No. And I have looked.

Apple is very up front about the features that do and don't talk to the mothership. It has been a while, but I recall that as you go through the setup process, there's always info available telling you when they'll see your info, and more info online. But it tends to be pretty obvious - Apple has slurped up sensitive data before[1], but it did look like an accident, they fixed it, and were forthcoming about what happened.

They're very clear that security related stuff (Secure Enclave - the thumbprint/faceprint data) never leaves the device.

Things I know that talk back:

- App store (obviously, and they care about analytics)
- News app (ditto, it is basically a thin web browser)
- iCloud (ditto, clearly, and pay attention to the various modes for encryption: IIRC, you need 2FA enabled for the encryption key to not be recoverable on their end. But you should double check for yourself, I don't use iCloud, so I haven't paid attention.)

And looking at my phone on my local net with Wireshark, I also see some chatter that looks like things saving config information, similar to what you see on a Mac. I'm guessing this is them just not being careful - they want everyone backing up to iCloud, and even though I don't, various daemons keep nattering. I block all that stuff when on wifi (both Mac and iOS), with zero problems.

On iOS, you mainly need to be concerned with third-party apps. Some of them build in shady libraries for adtech shitheads, do stupid things with analytic/instrumentation libs, etc. The ecosystem seems less bad than Android, at least.

As close to a bottom line as I can come: turn off cloud backup and the syncing crap, use 2FA, don't download sketchy free games that ship your data to some guy in Romania, and you're leaking significantly less than on Android. Take more precautions (a content filter/ad blocker more aggressive than the defaults, disable wifi and bluetooth to avoid snoops along wherever you go, run your own mail/calendaring, etc.) and you're in pretty good shape, relatively speaking, and depending on your threat model.

[1] IIRC, location data was being logged such that it ended up being sent back in crash reports.
Agreed. As long as credit reporting companies report conservative numbers and lenders err on the side of minimizing risk, all of the potential lost dollars will fall into the "loans I could've made money on but decided not to loan out" category and that is difficult to gauge.
No, if I don't speak up, these bad engineering practices proliferate and the ecosystem gets worse. Sorry, but people are going to be called out on their mistakes and that's fine.
Most agencies have listings publicly available. It's actually not that hard to bid for a contract if you follow the rules.
Now you're talkin'! Today, an ordinary person can barely even get inaccuracies in a credit report changed after laborious effort -- to say nothing of being denied a house, a car, or a job as a result of that inaccurate info.

Equifax and the credit agencies only exist because they are allowed to perpetrate great harm spread across millions. They are a giant negative externality.
If you are looking for a terminal to use with cygwin then you should check out http://extraterm.org . It is in development but is stable enough for me to use full time on Linux and cygwin. Plus it has a bunch of other useful features.
It wouldn't work. Suppose Equifax gets hacked and the data gets out. Would TransUnion then be liable because they also had that data? What if TransUnion subsequently got hacked? Would they be able to argue, "Sorry, your data was already in the public domain," and get out of the liability?
D-Wave has nothing to do with quantum computers (the way the word is normally used). And no relation to the numbers I posted earlier.
Do you buy a shiny new car from a dealer who knowingly sold you a lemon?

What record of inspections and promises would convince you to buy?

The NSA provides that record https://eprint.iacr.org/2017/560.pdf

We currently know of no technical reason to reject the ciphers.
You can also keep progressing in the tests under the same $15 fee. That is, after taking and passing the tech test, you can take the general during the same session (same day) without having to pay another $15.

I did it this way for the Tech/General/Extra, hammered all three of them out in the same session spending only $15 that Saturday morning.
Sounds to me like the criticism is more along the lines of “his argument is intentionally occluded by dog whistle writing”.
Building the Pinterest Taste Graph, Part 1: Assigning Interests to Pins
Unique ownership would be really nifty, and it makes sense that you'd definitely need pass by reference for it. Thanks for explaining!
Check out Dr. Fill and maybe Cruciform.
Not really [1, 2]. Labor costs aren't the highest in Europe, but they're fairly high. This is a persistent myth. Wages stagnated after reunification (near economic collapse of a large part of the country and 10%+ unemployment will do that for you), but other than the financial crisis and the mini recession of 2012-2013, real wages have been growing for the past decade [3].

[1] http://www.dw.com/en/germanys-labor-costs-rising-faster-than...

[2] https://krugman.blogs.nytimes.com/2014/06/17/german-labor-co...

[3] https://www.destatis.de/DE/ZahlenFakten/GesamtwirtschaftUmwe...
Duplicate posting.

Target page may have malware. DO NOT CLICK.
Just to triple-confirm, there was no additional hardware besides the Pi? I'm assuming at least some sort of antenna was involved...

Any links to write-ups/HOWTO's would be tremendously appreciated!
Arguably, the relatively high wealth per capita in Switzerland is mostly because they've been one of the few western European countries to mostly avoid wars (and subsequent rebuilding from rubbles) in the last centuries.
Discover hidden functions in your car (using CAN bus sniffing)
> May I ask you why you moved to Sweden? or Amsterdam?

I moved here because choose least worst option, not because I appreciate socialism and high taxes. In Uzbekistan, taxation is also very high but in different dimension - the government squeeze you via high inflation (by printing money) and unofficial taxation (corruption).

I'm logically consistent since Uzbekistan is on 148th place in rating of economy freedom (read it as how economically liberal the government), Russia (my second country) is on 114th place, Sweden (my third country) is on 19th place, the Netherlands is on 15th place.

So as you can see I move to more liberal country each time in terms of economy freedom and taxation (in Russia real taxes are high by the same reason as in Uzbekistan).

Liberal economic policies are core reason why western Europe stays afloat despite (!) socialist policies and high taxation.

People in Uzbekistan and Russia are less capitalist than in western Europe.

Yes, I'm absolutely sure that my little success is despite socialist polities and more generally the Government (Uzbekistan, Russia, Sweden, the Netherlands).

Look, I've never received any help from government. I don't have any formal education (neither school nor university). I'm self-taught. I have zero inheritance. Everything I've earn was from private enterprise.
Why not establish a formula for theoretical damages from identity theft, and then allow that as a standing for damages?
Interesting! A conspiracy theory of mine is that one factor in the push to digital TV and radio was to prevent widespread pirate transmissions, as much more people got access to "studio" equipment aka multimedia devices. Of course if that was one motivation it is moot now, since the internet has become more relevant than traditional media.

Still, this might be cool for subversive actions in countries with censored media, in an "Arab spring" like situation. Just a laptop, SDR and antenna on a driving truck and your on air (ofc I think there is not much overlap in places with widespread digital radio and places where you'd need to do this anyway)
Good things don't scale
Governments get hacked all the time. We need a new philosophy: if you can't secure it, don't even collect or store it in the first place.
What's your opinion?
Besides, code speaks to the compiler/runtime; comments speak to the human.

- The machine need to know HOW something should happen. That's code.

- The human needs to understand WHY that thing should happen that way.

These are two different objectives, and good quality code weaves the two in the appropriate measure.

Having said that, I don't believe all code should be reduced to the subset that a junior dev can understand. Keep it simple when possible, yes. But don't limit yourself, otherwise it's just a shift to verbosity, eating into the finite attention span within the brain. Rather, if the intent is properly documented, then the junior devs can still work on the parts of the code they understand, and reach out to a senior dev when they need to touch the part they don't understand, because even if they don't quite grasp the "how", they can follow the "why" in the code.
That was the case, at least for parochial schools in the 90s.
> any company storing SSN-type data owed some nominal amount (say, $10) to the owner of that data if it is compromised for any reason

I think a company should be able to avoid a fine if they disclose breaches immediately and are able to document that they followed best practices. From what I've read about the Equifax breach, they would definitely be found negligent.
A) and B) are variations of a classification problem. You can use any kind of classifier algorithm / approach. Naive Bayes, ANN, etc. C) is arguably closer to a clustering problem, but you have to figure out how to define the notion of distance / density for the clustering.

Basically, from a "what to google for" perspective, I'd say read up on "classification algorithms" and "clustering algorithms". The respective Wikipedia pages aren't a bad place to start reading.

https://en.wikipedia.org/wiki/Statistical_classification

https://en.wikipedia.org/wiki/Cluster_analysis
Apparently April happens twice in 2017.
You understand that they are employees and not employers? Are you self-employed/entrepreneur or do you have a passive income?
Is a bankruptcy greater than >10 years ago statistically a red flag? What do you think would be a better term?

The government has several interests, beyond lenders. The government enforces the lenders abilities to claim debts. It is also in the government's interest to allow people to get back on their feet if their finances crater, because taking someone out of the financial system indefinitely is not productive.

Someone, somewhere, could be abusing any system. That, in and of itself, is not a disqualifying feature of a system.
The only proposal for any kind of action I have heard on this is the Warren and Schatz legislation which is appropriately titled" Freedom from Equifax Exploitation (FREE) Act"[1]

Aside from Senator Warren I have heard very little concern from lawmakers in Washington regarding the menace that these credit reporting agencies have become and the threat they pose to people.

[1] https://www.warren.senate.gov/?p=press_release&id=1837
> But until any of these new age apps/platforms support federation and decentralized communication, there's not much use for the masses to look for servers run by specific people.

Federation of self-hosted servers and the "official cloud" seems to be on Wire's road-map, cf:

* Third paragraph of OP

* https://www.reddit.com/r/selfhosted/comments/5vylls/wire_end...

* Last sentence on https://medium.com/@wireapp/open-sourcing-wire-server-code-e...
SQLAlchemy with transactions on SQLite should get you very close, probably close enough.
comments like these are why I love HN
The mess is probably on both sides. The issue is that management doesn't care about IT until everything breaks apart. This means IT is seen as cost and not worth the trouble to do well and keep in house. Then of course everything starts falling apart and it's easier to put the fault on the vendors. Of course IBM has its faults, but I'd guess they are more on the overselling side (we can do everything and cheaper and better!) than on the pure technical side.
100% this. Allow consumers to opt-in or out of data sharing with credit bureaus. This at least would make room for alternate models of credit rating / risk that would not centralize this information in a couple of annoying locations.
"In at least 40 other countries — including Belgium, France, Germany, Italy and Spain — credit reporting can be done by a public credit registry. It is usually operated by a central bank that already oversees the financial institutions that feed information into the reports. These reports tend to be more accurate because the operators have a legal right to demand data from banks as well as a mandate to ensure it’s correct and that errors are fixed. Data on late payments and defaults are erased once a consumer has settled up."

From the article.
What aspects of the design do you feel needed explanation? In what sense are these not mainstream cipher designs?
I'm ok with not listening to him, not to take him serious. I wouldn't be okay with exclusion, out of principle (I'm in the camp "talk with the fringe in public spaces and needle them till their inconsistencies show", I think non-platformism is the only "toxic" thing there is in this context). But to me he still has to prove being worth active inclusion.

Flippantly, my criticism is "he's hinting at provocative ideas without committing" or more aggressively "he's a weasly,trolling edgelord".

You can't debate his views because as far as we know, they do not exist, he's just using sophistry and language tricks to either dog whistle (which you can call out directly, but he can always claim you got it wrong) or to make room for everyone to fill gaps with their own emotional/pattern matched reaction (which lets you argue against things he never said).

To me, once someone sends me or I find a writing of his where he clearly states what his ideas are, he'll be worth listening to, and as I said, I'll happily needle him till I have something I can intellectually engage in and debate. But I won't put in effort to read his blabla to find that.

Because, you know, if you are actually insightful and actually care, you'll make it understandable and concise
So, a little anecdote, a friend of mine was the victim of an attack and wanted my advice. The attackers used the SS7 hack, but he also used a phone based TFA, and somehow attackers were able to get the keys to this. He was able to get some of his coins elsewhere on a paper wallet, but they got everything in his hot wallet, and he received a notification that his coins were being moved out of his cold storage. Thankfully this process takes some time, so he was able to get that company on the line and stop it (probably pure luck that the attackers didn't intercept this). I told him to lock down the cold storage and trash his phone (based on the level of control that would be required to get TFA private keys). So, there hasn't been any further analysis done on this attack (the cold storage coins are safe, that's the main thing), but just want to mention this to get your gears turning. It's possible coins being stolen this way are being used to fund a nuclear program - keep them close.
I have been learning Clojurescript with re-frame (basically react + opinions about how to write apps). This has been the most fun and logical way to write SPA's I have ever experienced.

Bonus points because it will hot-reload code (figwheel) without destroying your current state. Speaking of state, you can see the entire state of your application with re-frisk, which also shows all the events going into the system. Really wonderful stuff.
while wire seems better than most alternatives I prefer matrix.org/riot.im - it is not quite geared at same function but it works just as well for it.
Instead, you can have one designed by a different group of cryprographers... Would you prefer Russian, Chinese, or Israeli? Is a covert shill workimg for one of them preferable?

They are all going to be peer reviewed before becoming a standard like AES was reviewed, and they are much less complex. I view political subversion of the technical process as a bigger issue.

Paranoia is fine, but you have to pick your battles.
Even if it's common practice, it's still worth asking whether it's good for customers.
The state of the art in amateur timekeeping (2003) [pdf]
I would also guess a full 3D simulation would give slightly different results.
Yeah, having flown quiet a bit in both the EU and the US I can say for sure that the major American airlines (Delta, United, Southwest) are far more comfortable than European budget airlines (Ryanair, EasyJet, etc.) in economy class. They usually offer a bit more leg room, complimentary drinks, and might even have wifi on shorter hops. LGA -> ROC (a quick 45m hop) on Delta has both!

That being said, perhaps a better comparison would be Ryanair vs Spirit, but American budget airlines are still pretty limited in routes and aren't nearly as entrenched as their European counterparts.
this chef is exclusionary and saying that no matter how much expreience a "foreigner" has with Japanese food, he can never understand it or properly judge it.

You're torturing the quote to look for intent that simply is not there. Maybe he does feel that there is no level of assimilation sufficient to judge Japanese food, but it's simply not there. It's an imprecise blanket statement made in the context of reviewers showing off their lack of assimilation with judgements seen as very incongruous with local tastes.
Crypto status
Monsanto’s New Weed Killer, Dicamba, Divides Farmers
Thanks for the feedback! Glad you liked it. We will cleanup the logs as well!
The first 11 words are cool. But my favorite was the chapter heading that said "Five Thousand Years Later".
Stupid title, broken link.
Differences in legal rules across jurisdictions, taxes, benefits, and contractual differences from person to person

Some of the things I know of. Probably a ton other exceptions.

My main takeaway is that payroll deals with people on a highly individual and highly impactful way. This is not ordering a taxi. This is stuff to do with whether you have dinner on the table or whether you can pay for your daughter's life-saving surgery.

It's interfacing with the messiest, most nonlinear, and most emotional parts of human life. You cannot simply put in a rulebook into a computer and call it a day.
In my opinion you should show all the content by default with filter options. I don't want to search for anything specifically, so there's not much I can do with the site.
I Accidentally Found a Security Vulnerability in Windows 10
Well they use code files for discussions, so it's a bit different.
”Small set of very narrow purposes” or even “data” are too difficult to define legally. There’ll be loopholes to exploit.

Better safe than sorry. No numbers. No nerds. No evil.
Thanks for reporting the bug. We are looking into it
> Would somebody have some benchmarks against pandas for some standard operations ?

pandas creator here. Numba is a complementary technology to pandas, so you can and should use them together. It is designed for use with NumPy arrays and so does not deal with missing data and other things that pandas does. It does not help as much with non-numeric data types.
You can get far better IDE experience if you use TypeScript, instead of plain JS. Webstorm does a lot of things that are quite popular in IDEA, because it can rely on the type system. This includes refactoring and realtime compiler errors.
You might want to be more flexible in your beliefs. You're very wrong.
Is the second paragraph of TFA spoiling the whole book, or is that just part of the premise that is set up during the first chapter or so? Because it just sounds like a massive spoiler.