skysight-inc/HackerNews huggingface dataset:
Yeah unfortunately they are not cheap; I have two, both by Airthings. I first purchased the Corentium version [shows a 1 day, 7 day and lifetime average], and most recently the "Wave" product [graphs the details over time, also tracks temperature and humidity, transmits results to an app via bluetooth].

I actually went to the effort of decompiling the source code to their Android app as I want to integrate the Wave product to my SmartThings hub so i can automatically ventilate if levels go too high. I find my radon levels build up from around 60 to 200bq/m^3 over time [takes about a month], and my basement walk out opening for 15 minutes once a month tends to lower them < 100bq/m^3 again. The goal i have is to intercept the BT traffic and send it to SmartThings from there over an internet connection or local wifi, ideally automating turning on a vent to the outside that is located near the ground level.

I also learnt a while back that different countries have different levels of "acceptable" radon in residential properties. Currently Canada has a limit set pretty high compared to the rest of the world (200bq/m^3), where as most European countries are suggesting < 100bq/m^3. I found that in the code they consider this when deciding what colour LED to show on the device: https://gist.github.com/ndroo/384bceeb16d771757b6996bd28001d...

The level's they use i personally find a little irresponsible, I'd prefer they pick reliable research (1) and go by that. Experts in Canada acknowledge our recommended levels are out of date and need changing, hopefully an update comes soon that lowers what is acceptable. For now, I've told the app I live in France.

Here is a snippet that I find interesting from the study:

"Radon levels greater than Health Canada’s acceptable limits (of 200 Bq/m3) for the naturally occurring but cancer-causing gas were detected in all areas, with one in eight containing dangerously high radon levels between 200 and an astounding 3,441 Bq/m3. The World Health Organization estimates that the relative lifetime risk of lung cancer increases by 16 per cent for every 100 Bq/m3 of chronic radon exposure. Surprisingly, the scientists found that newer homes, built within the past 25 years, contained substantially higher radon gas levels compared to older homes."

The goal of Airthings states they want "to make radon sensors as common as smoke alarms". I don't know how many lives per year smoke alarms save, i imagine a lot, i would guess if everyone had one of these we would see a massive public health spend drop in relation to lung cancer treatments.

Expensive, but hopefully they get cheaper with time. If you can afford one, get one.

(1) http://cmajopen.ca/content/5/1/E255.full
That's an interesting point. My other comment suggested one way we could give employees a vested interest in reporting negligence in security and the handling of users' data. You're saying the shareholders (or at least the large ones) should realize this is a risk to their money and act accordingly. Something of a two-pronged approach to keeping a company honest.
No problem with the concept, only the execution. If you can't secure the data, you don't get the data (by law). That simple.

This is Econ 101 (incentives matter). If you do not penalize negative behavior, there is no reason for it not to continue.

Those security vulnerability notifications should've gone into a tool to be actioned by a team (JIRA, PagerDuty, whatever) with follow up and verification (audit logs from their CICD pipeline confirming a patched version had been deployed to all environments dev through prod); that's an organizational and leadership failure, which should have consequences.

Disclaimer: I work in the financial services industry in security, but not CRAs.

EDIT: Agree with your assessment edit, its a total failure of risk management within the org. Again, you need dire consequences when that occurs.
One word: Heartbleed.

It spread far and wide the idea that open source infrastructure was a temerary proposition.
Can someone explain how that utm_* stuff got there if the original poster didn't include it? And if he did, where did he get this URL from?
Just a guess, but based on your comment that you can't "justify moving away from Python or C", I suspect you've never moved much beyond procedural programming, possibly with a bit of OOP mixed in.

If you stick with procedural programming (and it's perfectly fine to do so), then it's true that most languages will not offer you much that Python and C cannot. If you're willing to re-think how you model the problems you're solving, you may find other languages, such as Clojure, help immensely.
You make a fair point that the OC didn't explicitly declare that they expected the emails to stop.

However, if that isn't the basis of their expectation, I don't really understand the rest of their post. Especially "knowing full well that I didn't see them" (how?) and proceeding to mark the emails as spam... instead of turning off the notifications...

The latter is why I believe they expected the notifications to stop.

Edit: as far as the notifications getting more frequent, that actually is pretty interesting, but not really relevant to the other points made.
Per Apples policy interpreted languages are allowed to be updated over-the-air as long as they don’t change the app in any significant way (aka bug fixes and such)
Former Equifax CEO blames breach on a single person
Two conditions. Each widget is customized in a unique way, and 10000 exceeds the capacity for customization.
On the contrary, it is commonplace for contracts to take away your rights.

A common example is an arbitration clause, where you sign away your rights to use the courts to resolve disputes.
> Is its branch prediction keeping pace?

Well, most ARM cores are not designed by ARM Holdings, and even among their own cores there are many models.

The answer to this question depends entirely on the specific design.
You're correct, of course, but missing the implications raised by the parent poster, and they are important.

Sensitive personal data is necessary but not sufficient to rip someone off. And if you want to try to make a living ripping people off, there is even more business overhead, making the cost of sensitive personal data an even smaller portion of overall operational costs.

From the point of view of the thief, our personal data is a vital but cheap input into an operation that tends to have very high security costs, viciously expensive liquidity issues and terrible personnel problems, among other more quotidian business headaches.[1]

I suggest trying to think like a crook now and then. Trying to try on other people's lives is a useful way of shaking up one's thinking habits, empathy (don't confuse with sympathy) is always useful, and it can help you keep yourself more secure.

[1] I am leaving out things like several potential fates far worse than bankruptcy and related issues because they aren't opex-related, but they probably do effect retirement planning.
Russians.
But if you present them with a small, easy-to-understand example before going into pondering mode, maybe you just saved yourself an hour.

It's the difference between having API documentation and having a quick start + API documentation.
Sure, throw that one guy under the bus, CEO.
I think those are the biggest in general or in the relational category at least.
Why Greece took the fall for a European banking crisis
> Also, if you try to kill Equifax, companies will stop reporting breaches.

Equifax is a special case though. It isn't Equifax that needs to be killed, it's the concept of credit reporting agencies in general -- they inherently constitute systemic risk. The more private information is concentrated in one place, the more attractive a target it creates for attackers and the more severe the consequences of a breach.

We need to figure out a way to make data warehousing operations like this impractical so these dangerous targets no longer exist.

One good step would be to prohibit the use of social security numbers for anything other than social security.
I don't know how it is in Singapore, but in general there are universities that require AAA or even higher.
*and caught red-handed.
AT&T issues dividends to shareholders. Dividends are taxable, and must be reported to the IRS with the shareholders' tax ID.

Now, AT&T also asks for account holders' tax ids, which the use to pull credit reports, and to report on credit activity.
Hiring this guy as CEO?
> Which it looks like it doesn't.

That's a hell of a claim.
With great power comes no responsibility, apparently.
"usually by relying on immense government subsidies" makes one think that Boeing and GM failed to do the engineering work that SpaceX and Tesla had done because they were somehow barred from some kind of government subsidy.

But of course, the opposite is true: Being, Lockheed, GM, Ford, etc. enjoy a lot of help from the government (money and regulation) and use a bunch of dirty tactics against Musk's companies. And despite this, SpaceX and Tesla did things the incumbents were incapable of doing. In some cases things that were said to be impossible rather than just uneconomical.

I think at least the "usually" in your post is unwarranted.
https://news.ycombinator.com/item?id=15397642
Haha, I just have to comment that this is the funniest whataboutism I've ever seen:

"Nicotine is bad for you."

"What about water??"
The Innocence of Things: A Conversation with Karl Ove Knausgaard
Smarter half tiling in Gnome Shell/Mutter
Realtime sensor calibration is hard to prove, but proving that an absorption kit is a reliable reading also has it's challenges: In practice radon emissions vary dramatically throughout the seasons and based on rainfall, in particular in colder climates.

Hopefully one day we see slab depressurization become standard in all houses with below grade construction, combined with a realtime sensor just like you would have a smoke alarm.
This is awesome. I have to figure out how to use it with stack instead of Haskell Platform! ;)
Absolute rubbish! For a company that needs to protect sensitive data, the data breach could be traced back to the decision to put that much data on a publicly accessible web application without any defense in depth. I stand by what I wrote the in the week after the breach https://rietta.com/blog/2017/09/18/equifax-defense-in-depth.
This line of thinking is that it's acceptable to fire a CEO of a company for not having the same political views of employees. Do you not see how rediculous that is?
11 best Russian vodkas
Facebook Ad Reach Is More Than U.S. Census Bureau Data in All 50 States
6 best Russian vodkas
Am I missing something here?

Why do you think your customers don’t know their own address?
How is that different to flutter.io (beside using GO) ?
It's almost like it was planned.
> (In a moment of true dystopian chaos, the official Equifax Twitter account repeatedly tweeted a phishing link, mistaking it for the breach-response page.)

These institutions are cancerous devolutions in their current form. They are no better than predatory lenders. What has motivated their current structure seems cynical at the core.
http://web.mit.edu/2.75/resources/random/How%20Complex%20Sys...

7) Post-accident attribution accident to a ‘root cause’ is fundamentally wrong.
Because overt failure requires multiple faults, there is no isolated ‘cause’ of an accident.
There are multiple contributors to accidents. Each of these is necessary insufficient in
itself to create an accident. Only jointly are these causes sufficient to create an accident.
Indeed, it is the linking of these causes together that creates the circumstances required
for the accident. Thus, no isolation of the ‘root cause’ of an accident is possible. The
evaluations based on such reasoning as ‘root cause’ do not reflect a technical
understanding of the nature of failure but rather the social, cultural need to blame
specific, localized forces or events for outcomes.
Windows 10 Version 1511 Build 10586 ISO Free Download [HERE]
In my experience, a lot of corporate entities have bad rules like "30 days to review patches before they go live", or "no patches not reviewed by team X" that slow down changes. These sorts of caveats are both hard to change, and even harder to circumvent, because big companies make change difficult as they usually have more to lose than to gain.

If you look at the article, it matches this idea:

> ... Mr. Smith referred to an “individual” in Equifax’s technology department who had failed to heed security warnings and did not ensure the implementation of software fixes that would have prevented the breach.

I doubt one individual is responsible for every patch in the organisation, and I reckon that Equifax likely has many individuals each responsible for different systems, all of whom have to deal with a central security department before they can, well, patch their system. I further bet the internal politics are off the chart, and the security team is a "no, you can't do that" department who makes things worse.

I put money on there being plenty of "individuals" who are each responsible for patching different systems at Equifax, and while this particular breach was in system X, A-W might, at another time, have been the epicentre of a breach for similar reasons related to internal processes that make moving fast nigh on impossible.

Now, while that's no excuse, I think the fault is likely not the individual who missed the patch, but the interaction between departments with different goals (political and practical) combined with an internal structure that makes changes glacially slow, and this sort of breach inevitable.
Having lived in singapore 6 years and being in hospital 3 times with total bills amounting to around $75,000.

No
2018: Hold my beer.

featuring: NK, Trump, Blockchains, Brexit, Nature doing Nature things, pending economic bubble burst, et al.
Why would anyone else run the ad?
Yup. If I define rockstar as someone who loves teaching, has a thirst for new knowledge, and has a passion for quality, I can write a counter-article no problem.
> work life from home life

I have to imagine it would be hard to separate your work life from your home life when you know your boss doesn't believe that you have the right to your home life.
Use JSX with React or you have issues
The ultimate conclusion of the article is that, if you hire someone who does not work well with others and doesn't allow other to critique their code, it is going to be harmful to your organisation. Doesn't seem terribly interesting. Although the authors definition of a "rock star" coder is someone who doesn't work well with others, I think that the assumption that everyone shares that same definition is mistaken.
According to a friend who is a vodka expert, several years ago Flagman and Russian Standard were the best.
Structor – React UI Builder
What's confusing is that Oracle just announced a partnership with Cloud Foundry [1]

[1] - https://blogs.oracle.com/developers/cloud-foundry-arrives-on...
It reads to me like warmed-over old propaganda about how The Government uniquely sucks at doing anything useful and The Market has already optimized everything into the best of all possible worlds anyway.
I think someone else commenting on this story correctly noted that penalties create a reverse incentive for disclosure, and there could be negative externalities in that incentive structure (to riff on the Econ 101 them). Since you are in the field, have you heard if it was confirmed vector of CVE-2017-5638? I have heard so little confirmation/attribution here... it's really hard to attribute how much was negligence without knowing how long the attackers were present, how many systems were compromised. I added a comment (I think) before your reply that generally agrees that this had to be a systemic failure on several levels. I still struggle with the fact that on some level Equifax were the victims of a criminal action, though.

EDIT: hoping to do this quickly to avoid comment/edit race conditions, but I wish I knew the right answer in re. penalties. Think about the system that exists with doctors, malpractice insurance industry, medical liability, review boards and the benefits society gets from transparent disclosure from reviews of medical errors. Honestly, short of jailing people, it's hard to see how criminal liability in this case could be worse than potential civil liability.
I'd like to understand how the Board was able to do this with Travis having his special class of shares which I believe is giving him board control. Or was it because he had not yet appointed the two new members, that the Board had the votes?
Are Singaporeans less selfish?

Are Swedish people?

Etc etc.

I don't think selfishness or lack of empathy are responsible for the state of US healthcare.

I've personally found Americans are very welcoming. Especially in the south.
Snap install-time setup: the install hook
Stifled Laughter: How the Communist Party Killed Chinese Humor (2004)
The individual responsible is him.
In C90, the Language clause goes from page 18 to 95, so 78 pages. Not 3X less but 2.3X.
Wait so how/where is the url/title/image stored? (I assume it's a url?)

I notice you buy it then you later change the details?
I'd addressed that a week or few back regards account security questions. A big problem is that there are only so many place names in any country, and of those, a relatively small set with birthing centres.

There are 248 birthing centers in the United States, and only about 1% of all births occur outside of one (typically a BC is at a hospital).

https://www.cdc.gov/nchs/data/databriefs/db144.htm
> Seeing all of these people listed definitely lends some weight to the "it's kind of unreasonable for only 1-3 people to win a Nobel for this sort of work" view for me.

But what is the alternative? The article doesn't give much detail; it just says, "Why not award the scientific prizes to teams and organizations, just like the Peace Prize can be?
The price of reform is low, and the cost of avoiding it is high."

But this is clearly wrong. If you give the Nobel to a collaboration of 5000+ physicists, then you greatly devalue the Nobel prize. Either they are all laureates, including those hundreds of grad students who signed on for just six months, or maybe none of them really are. After the Nobel is devalued it will be nearly impossible to rebuild its status, or to replace it with another prize with equal status in the public consciousness.

The main problem described in the article is that the current system gives a "misleading impression of how a lot of science is actually done." I don't agree with this claim; anyone who has seen a picture or budget for LIGO knows that this isn't a one-man show.

And that is not the point anyway. The prize puts a human face on major scientific accomplishments. This is far more important than the possible downside of slightly misleading some people about how science works.
You want roadies, not rockstars.

If you ever meet someone who has a passion for enabling everyone else on the team to excel at their roles, you've found a roadie. They're your force multipliers.
Google Cloud Console Project Creation Error (almost 12 Hours)
Yeah that would be the CEO then!
Exact Incident URL: https://status.cloud.google.com/incident/developers-console/...
It did, by office (through 1972) or ZIP Code (through 2011), but not any longer.

If you are on HN and have a randomly-assigned Area Number on your SSN, you are, however, precocious.
It's just an amusing way of saying that Oracle are a bunch of assholes, and was not meant to be taken as literally as you are taking it.
True, but given this person is 65 with lung cancer, I'd imagine that life expectancy would be much lower, even assuming remission.
I wonder if the bit is cleared by doing a full wipe.
What Softbank really wants
That's actually a really good, and complex, question.

It might be sufficient to have an authority which ensures there are no duplicate numbers issued, though that doesn't get around the problem of a single individual with multiple assigned numbers.

In practice, there are methods of determining with a fairly high degree of accuracy whether or not two or more identifiers might indicate the same individual (or at least two very closely related individuals). But if you're looking for a 1:1 signifier-subject relation, you'd want that system to be quite good.
Also Judges can request cases, and it might be that since he understands what the tech mumbo jumbo is, he got the case.
It's someone not part to the ISP<->customer contract, namely that unknown video startup in Nantucket, or the e2e-encrpyted messenger app your friend Lauren is working on. They're going to be forced into paying ISPs if they ever want to reach the ISPs' customers. And there's no risk to the ISP, because nobody is going to change ISPs for some startup they've never heard about.

This is the problem with every truly great crime -- once it's fait accompli, the harm becomes impossible to prove. Whether it's MS of the 1990s with anticompetitive OEM agreements, or ISPs of today, we simply never get to experience the richer, more vibrant world that never was.
Sorry, could you clarify?

I'm presuming this EMV card: https://en.wikipedia.org/wiki/EMV
Have you tried a full erase and OS reinstall?
Adobe mistakenly leaks PGP key to PSIRT blog
In many other countries, you can put "No junk mail" or "No bulk mail" on your letterbox.

The US post service, being a service provided by the state, should help to prevent wasting paper and serve the people, not the corporations. In the US, the corporations are not just the primary customers of the USPS, they pretty much own them as far as influence goes.
Ya made me look - but no, you weren't saying starting. Nothing of the kind.
As one of the people who founded one of those projects in the ought's I can say a couple of things. There were only two in the early 2000s, SecondLife which raised 11 million in 2000, and my company Prototerra which raised 500k. SL came out to much fan-fair (amazing what a little PR will do for you). While we struggled to get any press. Eventually we did well being the tech behind a number of money making sites. Around 2005 there were quite a few new ones that raised a lot of money, none still exist. Neither does Prototerra, crash of 2008 killed business and the 3 guys working in the backroom had families by then, but it was fun!
There are a lot of things the average person simply does not care about as regards standardisation, or codes, or laws, or procedures, which government (or other entities) manage to find solutions for.

I would actually put that concern near the top of my list of things that is not relevant to this discussion.
I don't agree. It's shady regardless. It doesn't have to be "genuine" astroturfing, whatever that is. If I were posting snarky comments about my competitors and not disclosing my conflict of interest in the comment, I'd fully expect people to call me out on my behavior.

My employer (Microsoft) has a serious policy about disclosing employment if making comments about our products or our competitors' products online, because it otherwise reflects very poorly both on the individual and the company.

Of course, Uber's track record of ethical conduct is pretty spotty. It's not surprising that some of their employees wouldn't see the issue with posting negative comments without disclosure about not just competitors but competitors waging active legal battles against Uber.
> Also, if you try to kill Equifax, companies will stop reporting breaches.

The breach is not why I want the Equifax CEO (and everyone on the board) to go to prison. I want them to go to prison because of what they did and didn't do after the breach. The CEO is at best incompetent but that is a very generous reading of what took place.