skysight-inc/HackerNews huggingface dataset:
IMO, the board of a public company is responsible for overseeing risk, audit and internal controls, and the CEO is the one person most responsible for ensuring the company acts in accordance with those directives on a day-to-day basis. That an error could be made by a worker is human, though an automated system could also suffer a fault. Audit would have caught a gap, risk management would have caught a vulnerability, and internal controls would have detected incomplete work were these practices properly designed and deployed. Good CEOs look at governance, process, oversight and don't fling muck at employees.
And passports are cancelled and taken after a felony conviction. Not many know this.
Copy and paste might be the wrong method to use, but following directions isn't hard. It's not a REPL, it's a tutorial. Typing something wrong should cause you to fail the lesson.
There must exist some kind of adage out there that acts as a couterpart to Betteridge's Law [1] which states:

Any headline that celebrates an achievement in greater speed will invariably omit the correspondingly greater cost.

If not, you can name it "Andrew's Law" in my honor.

Hydroponics works. It works fast. But that's because it's using more resources in the form of heat and light than the average passive garden. Thermodynamically novel, this is not.

[1] https://en.wikipedia.org/wiki/Betteridge%27s_law_of_headline...
Phaser.io is worthy project and the folks on the team are dedicated to creating something useful and amazing for the web.
Well, not exactly. That would only work if your address was registered as foobar@gmail.com but not if it was registered as foo@gmail.com. Essentially, periods don't matter in gmail addresses.

Adding a . in between any of the characters (or removing, if you registered the account to have .'s included) will still go to the same email address.

But you can't add .anystring to your address and still receive the message as you can with +anystring.

This always blows the mind of the average gmail user who thinks they registered first.last@gmail.com when they find out that firstlast@gmail.com also works.
Out of curiosity, do you use any type of framework for the frontend?
I wasn't aware of the combo of CFAA and copyright. Are there any blog posts describing amendments and court cases regarding CFAA/copyright that a layman can read into?
The Miracle of Minneapolis
What does the money go to? cdns and hosting? Or to main contributors? That's pretty cool nonetheless.
> // It's a 2's complement machine, this'll work

Let's see, that's not an assumption you can make in C, or is it? I seem to remember that a compiler is allowed to present to the programmer at least one or two representations other than two's complement.
Here's the same URL but without all the utm_* tracking garbage:

https://stripe.com/elements
Because you’ve never won one, I kid. It meant a plethora of things in the 20th century, for one, it could be your ticket to tenure and a lifetime of scientific pursuit without dying of hunger.
Serious question: what problems does Clojure solve for programmers? Every time I try a new and interesting language I end up saying "Gee, that was pretty fun I guess" and then go back to whatever it is that I was using prior to that. I have never been able to justify moving away from Python or C. Learning a new language can be fun and enlightening in it's own ways, but it also feels like a waste of time.

Just curious if anyone can add some perspective.
It would probably be worth asking yourself if the main criticisms of Electron are actually something you or more importantly your end users care about because if not it is a fairly obvious answer with a lot of major upsides as well.
> Not talking about (fake) Nobel prices of Economy that do not exist but have managed to buy themselves some recognition because the money printing of central bankers.

Name one Nobel prize winner in economics with whom you disagree the awarding and explain your disagreement.

Otherwise your comment can be dismissed as another vapid "I disagree with the economics Nobel because the economic science sometimes disagree with my preferred political ideology".
That's all a problem, but a lot less important then whether or not you'll have health insurance next month, or whether your cousin will be shipped off to fight yet another war in the Middle East, or whether there will be coal jobs in your state (The answer is no, regardless of who you vote for, but at least one side will tell you that there will be.)
May I recommend giving ReasonML a try? Trust me when I say, you've never seen a faster compiler (except maybe C). Try writing a little experiment in ReasonReact and seeing the speed for yourself: https://reasonml.github.io/reason-react/
Not to dismiss the point entirely, but this is still an edge case - and one that doesn't justify the continued use of an identifier as a password.

People on HN make jabs at things like fingerprint / facial recognition as passwords all the time, but if you have something you need to keep private it's easy to forgo them and use a proper password instead (even if it's more inconvenient). Even if we replace SSN's with a 1024-character identifier leaks will still happen, because we continue to use the wrong tool for the job - leaving us no better off and just more inconvenienced.

We need a national ID system, ID numbers need to be no more than identifiers, if you need to validate your identity proper two-factor authentication - possession of your national ID card with your private key, and a password only you know - is the only safe way to do so.
Oslo’s fairly far south; I’d imagine the more northerly cities would be more comparable.
I visited Sweden once, during the Nobel Prize award ceremony.

I loved how the ceremony was broadcast on TV, and the scientists, who are famous in their own field, walk the red carpet and are given the (literally) royal treatment for their visit.

I loved the clips where they show the award winners and family visiting places in Sweden - a bit like the background clips they show during the Olympics.

For this brief time, scientists eclipsed actors, athletes, and the other pop culture stars.

'Course that could have been just me. I do like a bit of absurdism.
Bitwarden Launches Program on HackerOne
That's like saying a company will always be successful as long as it executes well. Good execution is absolutely necessary, and can compensate for mediocre strategy, but it can't fix a truly broken model.
My personal data is an asset. And it belongs to me.

Anyone who has my data for any purpose owes me my cut.

Making this a property rights issue solves all the privacy & identity issues.
Certainly not the case with Einstein or Dirac.
Private / Public Key Identification needs to be revisionable. Public keys need to be accessible. In the case of a breach new keys should be generated against some sort of public / private block chain. When a enitity requires your data they should be granted a revocable public key to it. If there is a breach we generate a new pair and the private key is stored on a sort of IIA server, and a new key is immutably added to the person. Or something more.
You almost certainly need a password hash, and that’s (as I understand it) the main privacy worry related to the Yahoo breach.
I did a few community cryptocoin projects, they haven't afforded me anything (yet) but served as learning experiences, I consider them art projects, there is:

YC Coin: distributed karma for HN on the Ethereum blockchain (ycco.in)

Also Facebook Coin, instagram Coin and reddit Coin (just add co.in).

Perhaps the best "art" project is www.dotcomco.in itself.
If you liked the dotcom bubble you will love the cryptocoin bubble, so I mesh the two. One domain owner has contacted me willing to list their domain for sale and was willing to pay the listing price of 1BTC.

I am also an attorney and begun offering community smart contract/blockchain services (loyalty programs and asset-backed tokenization) to my clients and I use the above as my portfolio of work. So far I have had a local craft brewery interested in me developing a blockchain loyalty program and some private aircraft owners interested in creating tokens representing economic interests in their planes.
“Use of open source software has been declining rapidly in the private sector”
It's a rare circumstance where there's an allergy to national ID cards on both sides of the political aisle. On the Republican side they (supposedly) fear greater Federal Government power, tracking, etc. On the Democrat side, they're afraid of national ID cards being required at voting locations.
I am super excited for Chez. If we see the speed we are look at a possible doubling in speed.

There is certainly a reason why he has stuck with Gambit and not my beloved Racket. This seems perfect for using Racket's macros. I just don't know Gambit's Macros well enough to compare them to Racket.

Here is the Bench Marks for Chez, Racket and Gambit https://ecraven.github.io/r7rs-benchmarks/
Why does the block chain have to be applied to every problem? We already have a solution for this, many businesses and the US military use it - smart cards.

Generate a private key on the card, have the government sign it, keep it locked up with a PIN/password (and self destruct after X number of invalid attempts). You can verify authenticity offline as long as you can request the card to sign a response and verify the signature, problem solved.
I don't know why they couldn't be. I'm pretty sure Gerbil's macro/module systems are heavily inspired by Racket.
Gambit is amazing. And gerbil brings a lot of batteries to it.
We're already a lot closer to George Saunders' My Flamboyant Grandson[0] than that.

https://www.newyorker.com/magazine/2002/01/28/my-flamboyant-...
And for every one who beats the statistics, another must fall victim before their time. RIP Tom Petty.
better than the Facebook trick! Thanks
But similar to a hamburger machine, it's relatively easy to build a machine that can cook what's on the menu, or to buy the small number of machines required.

"Sorry, no fajitas today, the machine's service has been called. We just got a crepes machine ..."
Why can't you just click 'unsubscribe' in the bottom of the email?

If they don't provide the unsubscribe option as a one-click option, mark their emails as spam. It's harsh, but getting flagged for spam when they won't stop spamming you or providing the required one-click opt-out is their problem, not yours.
The YouTube channel Health Care Triage has a series on different countries health care systems. Super interesting how different the systems are.
I want to be a fly on that wall.

"Ah, s--- we got hacked."

"How many users?"

"145,534,902"

"Ouch, that's a lot. Let's say it was 143,000,000."

"He he he, nice."

---

I've misplaced more bytes in a megabyte.
> Also I wish I could opt to "block sender" for ads and other junk. The post office would still get money/postage, but I would just give the post office advanced consent to shred/recycle all mail from this sender and consider it officially delivered.

I don't think you understand how junk mail works -- the mailers have a close business relationship with the USPS, and the fact that you can't 'block' it is a deliberate design pattern. Junk mail is a huge (possibly the major?) revenue stream for the post office. Forcing you to physically handle their advertising message before discarding it is the whole value proposition of this form of advertising; junk mailers aren't gonna keep paying the USPS if the ads are never getting to you.
https://ecraven.github.io/r7rs-benchmarks/ recent addition to the charts, and is doing quite well.
We do not know anything about the number of people who could have known about this issue and escalated it, but it does not surprise me at all that there is one primary person who is responsible for it. In fact, if there were not exactly one person who is responsible for the security of the application that would be a different sort of problem as diffuse responsibility can be neglected quite easily in large organizations. Still, at my own company - A LOT of people were focused on the timely remediation of this issue and there was no chance of it being left to one person, even for development environments of internal facing applications.

The scanners do work, we used them at my company and they found this specific vulnerability. It surprised some development teams because there are libraries that use struts without really advertising it, so even applications that don't "use struts" had a transitive dependency on it, it was running in their container and showed up on the lists that were circulating.
Yes, as a data point, the other tracker apps are only now beginning to add exchange API integration, while we were able to develop and launch this feature over a month ago.

While I like self hosting (was previously a RethinkDB user), from a business perspective, it doesn’t make sense to spend time on operations if it doesn’t give you a competitive advantage. It’s going to be very difficult to outpace a business that only has to focus on development versus one that has to do development and operations.
From the article: "The biggest amount ($194,000) went toUshahidi, an open source software platform for crowdsourcing, monitoring, visualizing, and responding to reports from people caught up in political turmoil or subject to governmental or vigilante abuse. They are working on making it easier to securely submit reports, and documentation on how to deploy Ushahidi while minimising risk to the hosts."

Wireless mesh fully distributed world here we come! :)
>$100,000 to RiseUp, a coordination platform used by activists across the political spectrum, to improve the security of their email service;

However, RiseUp has shown to be leftist several times[1]. If I was a right wing activist or something similar, I would not use RiseUp, because of the serious conflict of interest of the owners of the platform.

There's nothing wrong with RiseUp being leftist, but I expect Mozilla to be neutral politically, except when something related to free software is at stake in politics.

[1]Apart from their logo being a reference to the anarcho-communist flag, they've said "[...] We do this by providing communication and computer resources to allies engaged in struggles against capitalism and other forms of oppression." (https://www.counterpunch.org/2017/09/01/responding-to-antifa...) I'm sure I'd find other similar quotes if I looked it up.
Obsessed with Blastocysts
As of 2016 you can now add to the list "suspected state actors." How could any private company be responsible for being able to stop this?
Am I crazy, or is this backwards? Keep SSN for retirement benefits, and only retirement benefits.

Ban SSNs as identifiers with private companies not affiliated with providing retirement benefits.

Problem solved.
Being born outside the US doesn't preclude you from having a SSN. Quite the opposite - they're given to anyone who has ever worked in the US, even on a temporary work visa.

https://www.ssa.gov/ssnvisa/
iOS and MacOS Kernel Source Code Are Now Available on GitHub
FYI, v2 of the Stripe.js API isn't being deprecated last time I checked with them.
> ... static typing does not catch value-related bugs, but Clojure.spec can.

Can you provide an example?

> In a static type system, how easily would it be to exactly specify and guarantee that a function's second parameter is of a higher value than its first, or that a function's output is an integer between 5 and 50, etc?

Scala:

def foo(param1: Int, param2: Int): Int = {
require(param2 > param1, "Param2 must > param1")

param2 - param1 ensuring { result =>
result >= 5 && result <= 50
}
}
Are you aware that the rules can be and have been changed many times by the committee?
Sputnik, the tiny sphere that launched the space race
I am shocked and curious at the number of downvotes for the above satire. I don't think it was horribly executed. I mean I hope they understood it is satire. Or perhaps they don't think that post-docs and graduate students are exploited?
It must depend on the specific project. Hopefully to more traction bearing and birthing elements than just hosting
It's amazing to have someone just drop by on HN with appropriate expertise to clarify this. Thanks!
why is this a tracking link.
It was encrypted.

(HTTPS/TLS)
Try building a modern project in either. Anything non-trivial will highlight where Gerbil stands out.
Impressive. What area/industry are you in that you can find accommodations like this?
So if the ISP's act on this recommendation, it will lead to many more people downloading and using Tor.
I distinctly remember waiting quite a long while with my Symbolics locked up while it completed a GC.
Singapore has the nickname "The Air-conditioned Nation".

More to the point, the climate hasn't changed but the percentage of obese people there, like in most countries, is increasing. You therefore can't attribute that recent increase to heat and humidity.
So wouldn't that be more of a pyramid scheme rather than a ponzi scheme?
Imo Switzerland is poor example and free trade cannot be guaranteed for small states in today's world but I guess we will not convince each other in this limited debate . .. Let's agree to disagree.
Seems to me to be dead simple. One dns entry for equifax.com, another pointing off to different hardware for equisecuritybreach.equifax.com. Nothing fancy at all. Make the page have a different look and feel.
React is used on the frontend. It maps very well to Firestore - each component listens to one document.
That's a quote from the judge, not something that I said. The judge also doesn't make any value judgement about whether or not their assumption was reasonable, so I'm not sure what or who you're arguing against.
Value is derived from the potential application of data. Ads as an application isn't worth much since you can still be shown ads just fine without any personal data targeting.

Black market data is worth way more because it's often more personal than just demographic markers and interests, and can potentially lead to large sums of money.
It does though. Things were quite different when the constitution was written. The federal government was never supposed to wield absolute power over the states. "...consent of the governed..." etc. It's pretty clear that they believed that a populace should be able to abolish their own government - they did so themselves.
Under this "Howey Test" Bitcoin would be considered a SEC registered security.
A Mapathon for Puerto Rico
Net Neutrality is part of Freedom of Speech and I will not waive my right so thoughtlessly simply because a different human sits behind a respected desk.
Quarterly is possibly fine, but when sparks are flying in the back end, and fluid is pouring out of the transmission on the running engine, CSO needs to be able to access CEO promptly.
Yes, I'd just expect the "common market" effect would be significant. I'll bet it would have been harder to manufacture pharmaceuticals for sale in the US in the Dominican Republic, for instance.
Ponzi schemes advertising themselves as ponzi schemes are fine right?
I think Equifax just did that for them.
The line is pretty grey, but I don't consider that much different than a project in any language writing and linking to a few modules in C where necessary.
I mean, I guess? Again we are talking about preferences here. I think being explicit has less to do with the language and more to do with the developer writing it. Poorly or well written code is universal and all offer you the tools to shoot yourself in the foot or vice versa.
But also each channel has to have the total amount being sent precommited in the initial channel opening so in your example if Alice want's to send Charlie 1 BTC the balance in both the A-B and B-C channels has to be at least 1 BTC. Which kind of demands some pretty central clearing hubs in the lightning network that will need a large amount of BTC locked into these channels.
Why does he have to be arguing against something..? he's just saying that Waymo's legal machinations were rational based on what they knew at the time.
But then you're back into the old cultural fit/bias questions, right?
Just looking at it at a glance, 50% of the money went to what appear to be political/activist projects/websites "masquerading" as "Open-Source", namely "Ushahidi" (194k/35%) and "RiseUp" (100k/18%). The latter only really putting their "help site" on github: https://github.com/riseupnet. I don't personally count "open-source" or "any one can contribute" websites/platforms as actual open-source.

Both the above donations are individually much larger in monetary amounts than what Mozilla gave the last time around to actual "code" open-source projects (amounts: 10k, 25k, 30k, 50k) such as Tor/LLVM/etc.

Honestly, I was really excited to see what open-source projects were going to be getting some (I would assume "much needed") funding behind them, but I was disappointed with yet more politics. Except for Webpack, definitely kudos to Mozilla for funding their work on WebAssembly.
Off topic: Is there a chrome extension that will strip these query parameters off automatically when a user clicks on links?

I found https://chrome.google.com/webstore/detail/url-tracking-strip... but wasn't sure if someone might have found a superior extension.
Might want to put a big fat disclaimer (in comments on this article) that you're an Uber engineer, so you obviously are biased here.
+1. I did the same. At the time I had to do this (around 2015), Yahoo was the least concerned about identifying duplicate accounts. I was testing for an actual paying job, not some side interest investigation, mind you. Some of the services I had to test were clever enough to reject fakeinbox accounts so I used Yahoo.
https://news.ycombinator.com/item?id=7609289

> I agree with what people have already said, but I think there's one more point to add: people usually over-estimate how funny their own comments are. We have a tendency to think, "This idea of mine is hilarious! And different! Surely this witticism is the exception." And we are usually wrong. When you have N people all doing that, there's a lot of noise.

> I try to gently point this out to people who complain when their attempt at humor has been downvoted by the community. It's not that we don't like humor. We just don't like banal attempts at humor, which becomes noise. Or, put in a less charitable fashion, "You're not as funny as you think you are."
This could be a voluntary insurance that companies purchase on behalf of their users. If the company suffers a breach, they will be bound to pay X amount to their users depending on the data lost.

Dress it up with a fancy badge to slap on the front of their site. Maybe a silver badge means user data is insured up to $10 each; a gold badge is up to $100; platinum up to $1000.
People believed Social Security numbers were the Mark of the Beast too, but that didn't stop anything.
Yes, we tried methadone and it makes them worse and more compulsive than giving them heroin.
This is interesting. Is there a list somewhere of all projects that Mozilla has helped in the past?

Huge respect to them.
I think that has something to do with it.

My dad is 98 and lives a pretty active lifestyle. He jogs 5 miles a day and runs a hobby farm with chickens and sheep and a few acres of vegetables.

But some of it has to be genetic too. His older sister is 106, and my grandmother was 102 when she passed.

It’s kind of amazing to be my age and have a dad who was born in 1919 and a grandma born in 1882.

I’m grateful for having that much knowledge and experience around me.

There are things I’ve allegedly missed out on by having an older dad, but I wouldn’t trade my experience for anything.
Great question, I too would like to know this
Ok. First, DAs and jurys hate people that take advantage of children or the elderly. When I say hate - it is a true understatement. All that needs to happen here is a report to a DA.

Second, if you have grand/parents over 75 ask them to put all their financials on mint and expose this account to multiple portions of the family. Mint is read only. This way when things get strange - off to the DA.