skysight-inc/HackerNews huggingface dataset:
>That’s because having a freeze in place should block Equifax from being able to ask you the four KBA questions.

My father put a freeze on all three agencies when the news of the breach came out. Today, I tried to help him sign up for informed delivery (on the theory that if he did, it would be harder for someone else to do so in his name).

I don't know what impact the freeze had on the KBA, because it showed him a batch of four questions with information that was definitely his (like, last 4 digits of SSN), but then wouldn't verify him; he then got two more batches of questions that had absolutely no relevance, and choosing "none of the above" just resulted in two more failures to verify.
Gerbil is there as well.
I've been very open about that (it's in my HN profile) and I didn't think it was relevant here since I was quoting the judge and not offering up my own opinions. Apologies if you disagree. :)
We heard a lot more about Sandy, and, besides that, although I lived through it and it sucked (especially being in a more rural-ish part of Connecticut that was not a priority for power restoration... though we were better off in other ways than parts of New York I guess) we weren't experiencing these kinds of fuel shortages or resorting to taking a bucket to a creek to get drinking water.
Caguer is from the south-west. It's derived from he latin cacare, to shit.
Agree. Any language that's been around long enough is like that though. PHP is a good example. I've heard it called a hammer with no blunt end and 2 claws. You _can_ turn it on its side and hammer in the nail but... why? Lol. That said projects like Laravel show that you can write easy to use and, dare I say, beautiful code with it. Its just a matter of who is driving.
> Do these scanners ever work?

See https://www.tenable.com/blog/apache-struts-jakarta-remote-co...

Yes, they do. Detecting the flaw is not a problem, but often operationally patching can be a big deal.
Missed the edit window, but “Forrest” should be “foremost”.

Mobile keyboard autocorrect is fun.
> the only way Waymo could find out for sure what had happened was bring a lawsuit. Or do you think Waymo should have just taken Uber's word that it hadn't done anything illegal?
The reason SSN became a form of ID in the first place was because it's the only way to track a person across all states.
If I get a loan in California, then move to Arizona and apply for another loan from another bank, the new bank should still be able to know about my loan in California. SSN was just too convenient for that purpose and banks stuck with it even though it wasn't designed for it.
I can't imagine being a subordinate to Jared fucking Kushner for a full year
Pirates of the cryptocurrencies
The basic problem for the publishers is technological advance.

Publishing became a big industry due to the invention of the printing press. And because publishing a book requires a printing shop that can be easily located by the police, it was practical to pass copyright laws that forbid counterfeiting.

With the invention of the internet, piracy become trivially easy and basically impossible to block, and so copyright laws are simply not enforceable. I think the publishing houses realize this, and are just trying to hold off their demise as long as possible.
Tarka sastra -> I believe was ancient Indian way of teaching. Vedas as written in this manner which I think predates Socrates.
In the time period we're talking about, what you're saying is not trivial. Hell, it's not even trivial today - look at the stereotypical 'poor white trash' guy. Scrub him up and put him in a suit, and the way he talks and behaves isn't going to make him indistinguishable at an upper-class dinner party. Or a different angle: take a modern-day American and put him in the UK. Without a lot of work, it's clear what his origin is from his speech and his customs, despite the similar cultures.

Now go back 500-1000 years, where people didn't move around much (sometimes enforced by law) and most people only spoke their regional dialect. And if you were able to move town, the work you knew how to do was still the shit work for the lowest class - it's not like you could just pick up silversmithing on a lark, for example.
Good Eggs | (Senior) Software Engineer | San Francisco, CA | Full-Time | Onsite | https://www.goodeggs.com

At Good Eggs, we’re changing the world by changing the way we eat. We’re looking for software engineers to help us grow and sustain local food systems by building an online market and supply chain that delivers same-day, absurdly fresh groceries and dinner kits to customers' homes throughout the Bay Area, seven days a week.

We run a mature Agile engineering process with:

* pair programming
* test-driven development
* continuous deployment

We’re building next-generation web applications with JavaScript across the stack and a wealth of other tools from the rapidly-evolving JavaScript ecosystem including:

* Node.js
* MongoDB
* ES2017
* Flow
* ESLint
* ReactJS
* RabbitMQ

We believe in the magic of empowering small teams with clear accountability to achieve business goals. Our team is passionate about our mission, talented, and driven to change the world. We cultivate an atmosphere of openness and support where people feel free to be their true selves, take risks and let creativity bubble up. If that sounds like you, get in touch!

http://grnh.se/4vs5k21
Thunderbird has the virtual identity plugin for this.
It never exfiltrated data, but it could have.
What Exactly Is Vegan-Mayonnaise Company Hampton Creek Selling?
> Eh, I still think the best thing for the gov't to do in regards to SS numbers is just publish them all in an open database accessible to anyone.

They basically are available to any business that needs them. Just takes a few months to go through the compliance process for an identity verification company. See https://cognitohq.com/docs

Regarding it being a password, yeah that is pretty bad. Some friends of mine are working on Bloom (https://hellobloom.io/) which is trying interesting things that hook into the real world (necessary) while also trying to create a better system eventually. Basically, an ID you control with a private key is approved by identity verification services. Your friends basically vouch for the ID being correct. Your identity is tied to that ID. If you lose the private key then you have your friends invalidate the old ID and transfer their vouch to your new ID. Way better than just a secret number.
What is your objection to simply solving the problem? Why is it unreasonable to have public funds go to publicly-available research? Is there some reason that we as a society should care if rent seeking middle men who provide no value are disenfranchised?

It sounds to me like you're so slavishly devoted to Silicon Valley economics that you want to incentivize nails rather than use a hammer.
What is your strategy? Today is not -12 years. 16 MB memory and B/W monitors is not actual now, for example.

You must update your Solidity for more actual cases at 2017. Kickstarts support and early stage of Startups, etc. What be actual at 2017.

Thanks.
There are technically no Nobel Prize winners in economics. I think that's what the comment was talking about. The economics prize is not a Nobel Prize as established by Alfred Nobel, it is the Nobel Memorial Prize in Economic Sciences [1], established in 1968 by the Swedish National Bank. It is grouped with the others and awarded in the same ceremony, however.

1. https://en.wikipedia.org/wiki/Nobel_Memorial_Prize_in_Econom...
FYI, I couldn't even get it running because "hasuractl.exe local start" is not a valid command with the version of hasuractl (0.1.12) you have available for windows on this page:

https://docs.hasura.io/0.14/ref/cli/hasuractl.html

:(
Welp, that was locked quickly. Not looking good for us, is it bcantrill?
Meanwhile 44 states run lotteries. Apparently gambling is acceptable in principle, just not competition with the states' games.

https://en.wikipedia.org/wiki/Lotteries_in_the_United_States
Unsubstantiated, self-serving FUD from Oracle.
That's correct, no native aggregations right now. See this doc for some more info on how to achieve what you want:
https://firebase.google.com/docs/firestore/solutions/aggrega...
> Starting with the Haswell micro-architecture, the indirect branch predictor got much better

Looking at the results I get, I feel like there's also an inlined switch lookup so that the CPU can get ahead of it.

Basically if I had to the same, I would try to inline the top of the switch down into the break; jump directly instead of jumping to a common location.

So now the operator case ends with looks like

op1_offset:
<invariant=pc> (operator code)
pc2 = pc+1
jmp_off = ops_table+pc2
jmp jmp_off

Because there's no jump between the operator and the pc2 = pc+1, the CPU can compute jmp_off during any time from entering the op1_offset (and this is why you have an HLT opcode, also 32 bit opcodes are much more compact than 64 bit direct threaded CGOTO).

I'm not sure if the inlining of the jmp to_top_of_loop can be done by the compiler itself or if it is done by the lower levels of the CPU.

Compilers used to ruin the immediate dispatch of computed goto, to extract the common jump code - I've had to force GCC to leave my CGOTO alone to make this work before[1].

[1] - http://notmysock.org/blog/php/optimising-ze2.html
Encryption is not a panacea.

If the vulnerability got to admin level, then since the database can read everything, all is lost.

Encryption at rest essentially protects the disks from being compromised if they are physically stolen. Or if the attacker manages root on the system and reads at the sector level. But even then, if you are root, you can find the key, and you are in anyway.
FIFY:

"Former Equifax CEO says 'There is only one infosec person in our company'"
Ok, I think I see the problem.
What about traversing down to as deep as possible, then walking up the AST inlining as you go? This should allow processing in a linear time in the number of nodes, with a single pass.
"Not looking good for Waymo..."

Odd take, given the judge's words to Uber:

"But Alsup had harsher words for Uber. He said that using the joint attorney-client defense privilege to try to keep things like the Stroz report secret was an "elaborate scheme to conceal the facts from the public and particularly from Waymo." That made Uber mostly responsible for the delay. Uber also said, just this weekend, that it found that Levandowski's e-mails from his startup, Otto Trucking, hadn't been properly migrated to Uber and weren't produced. "That seemed remarkable to me, after 25 years of doing what you lawyers have been doing and 18 years on the bench," Alsup said. "That the most important witness in the case, somehow his own files got overlooked. That's very suspicious."
Not sure why this is being downvoted. The GP commenter is mistaken, the following line is completely valid Rust:

const USAGE: &str = "usage: blah blah";

Compare it to the equivalent in C:

const char *USAGE = "usage: blah blah";
> Oh, and it's already full of furries, so you might as well torch it and start again.

Many of the most prolific creators I knew on SL had some affiliation with the furry fandom. I would take that as a good sign, actually: they tend to be early adopters.
Am I the only one bothered by the reclassification of ISPs as telecommunications companies? For this reason, net neutrality drastically expands the reach of the federal government, and opens up the internet to legal regulations drafted decades before the internet was even an idea.
What kind of application? If you're working by yourself, faster time to market and simpler cross platform support is a massive benefit that unfortunately is more important than CPU and memory use for most applications so Electron makes a lot of sense. Electron gets a lot of negative comments on HN but for many apps I don't think consumers will have strong opinions about it.

Most small teams don't have the resources to develop polished native Windows + Mac + Linux apps. Electron might not be perfect but it's better than having to exclude a platform.
Of course, because only Americans or American educated people can "speak good English".
Presumably this didn't apply to CFCs or sulfur emissions?
Can't help but recall this quote:

"Bad response time doesn't bother the Real Programmer -- it gives him a chance to catch a little sleep between compiles. "

-- from "Real Programmers Don't use Pascal"

http://web.mit.edu/humor/Computers/real.programmers
Federal government buys Twitter and makes your twitter handle your national identifier. I'm sure Trump is fine with that.
The two parties in the US are on the same side of the political aisle. The Democrats are 'sane conservatives', actually trying to make policy and govern, and the Republicans are the 'insane conservatives', preferring to resort to sloganeering and worshipping a fantasy ideal rather than making policy.
From Oracle's vantage point, that's probably true.

https://www.youtube.com/watch?v=LrDnuvHfBr4
Well, money, and the concomitant access to things like good health care it provides, certainly tilts the board in your favor.
Background on the author (from [1]):

> Ken Glueck, Senior VP for government affairs, Oracle

> Bio: Based in Washington, Glueck has run Oracle’s Washington office for about 20 years, having built a career as a tech lobbyist before there was a phrase for it and running field operations for Connecticut Sen. Joe Lieberman.

[1] https://www.recode.net/2015/8/18/11617800/meet-silicon-valle...
3D printing: a threat to global trade
#LASVEGAS_SHOOTING: What Happens to Your Social Media Accounts After Your Death
Material in this sense means that it has relevance to the share price of the stock. Tesla's Model 3 ramp up schedule is material information. You are right they could have not volunteered it, but since they did they have a duty to ensure it was the most accurate estimate they had at the time of release.

If it turns out that they knew or should have known they wouldn't make the schedule then they are liable for misleading investors.
damn, another lesson in reading the comments before clicking on the article
So is the world just a top that's about to stop spinning? I mean we are probably the most educated group of humans in history, yet it still feels like we're just playing make believe and we aren't doing shit with our jobs. Besides people building buildings, catching criminals, and putting out fires, are any of us actually contributing anything to the world or are we just laundering money around from one person to the next? It feels like we're just really good marketers is all.
I work for AWS. We haven't had a breach, but consider that S3 outage not too long ago, which was due to one engineer fat-fingering a command. Rather than blaming or disciplining that person, AWS changed the process so that people aren't manually typing in those commands.
You agree to give up your data in return for services. Yahoo mail, or gmail for that matter aren't actually free. You are trading your data for a service.
> It's not a reward by a government or any community or democratically elected organization where we really have standing to argue that it should be different, it's just a committee trying to follow the century-plus old will of a single person. If we don't like what it does, we don't have to pay attention.

It's apparent that mainstream society sees it fit to uphold the tradition started by Aflred Nobel; so it's worth questioning what exactly is being sought after.
> but I expect Mozilla to be neutral politically

Why?

> except when something related to free software is at stake in politics.

They're the Mozilla Foundation, not the Free Software Foundation.

The free software movement has always been intertwined with more or less radical political movements to lesser or greater extents over time. It's only relatively recently that "open source" is primarily the thing you do so you have a GitHub profile that will land you a 100k paycheck.
According to Yegor Gaidar (look him up), USSR basically ran out of resources, including food supply, around 1985. However much army do you have does not matter if you can't feed it.

The problem was not only very high military spending (thanks Mr. Reagan, you won the Cold War), but also very low efficiency of industry and agriculture.

Having lived in the late USSR, I can attest that the scale of waste was enormous. It was not only because of the inadequate planning, but mostly because the population did not care. Without the feedback loop which a market provides, the only reasonable action for a worker was to steal; the fact that 10x more resources are wasted as a result was totally inconsequential: getting fired was hard, and unemployment was seriously negative.
> My personal data is an asset. And it belongs to me.

Hm. How would this work for (say) a social security number? Does it belong to you? Does every number anyone chooses to identify you belong to you?
Smacking my forehead right now, wishing I had thought of this first. This is practically guaranteed to raise $300k and it's actually legal and ethical, unlike most of the cryptocurrency schemes these days. Great job, you'll soon be regretting not making it the 10,000 ether homepage I think...
This attack doesn’t work with smart cards that basically do nothing but act as a HSM. The MITM attack works with a loophole in some EMV cards because the card isn’t signing a transaction request but just saying “PIN is good!”

If your card holds a private key and won’t sign anything without also being fed a correct PIN you’d need a proper exploit of the application on the card to defeat it.
People lose their phones, wallets, and keys all the time, and these are things that they constantly use and check for. What chance does a "little device the government gave me that I don't use very often" have?
Why don't we just <incredibly naive solution that does nothing to help, but somehow also involves the blockchain>?
If one person not doing their job leaves the entire credit card holding populous of the US vulnerable to this kind of data leak.... then there was a lot more then one person not doing their job.
the situation is still better because when those people find out they can actually get a new public cert unlike now.
Most of us here could, but prepare to be shocked st how much of the general public couldn’t or wouldn’t.
> The actions of 18F and USDS plainly promote open source solutions and then propagate those mandates across government with the implicit endorsement of the White House. The USG’s enthusiasm for open source software is wholly inconsistent with the use of OSS in the private sector.

I think we can objectively say that the current administration places a priority on undoing the legacy of the previous administration. Since IIRC 18F/USDS were spawned by the previous administration, I worry about their longevity. They're really in danger if they're called out by business leaders like Oracle.

It's very easy for people who haven't worked in software to hear "socialist" when told about "Open Source Software". This message from Oracle seems to try and evoke that sentiment.
Site is awful on mobile chrome
that is such a brilliant idea. I'd love to see it.
I think you mean "shell scripting".
LinkedIn is Dead
I think the essential ingredients for controlled healthcare costs is a) the principle of universal healthcare b) government control of procedure and drug costs. No one is as expensive as the US per capita for healthcare. All the other nations beating us have wildly mixed healthcare delivery systems from full public to hybrid public/private - the hybrids are all administered differently. The characteristic they all seem to share in common is those two features. Even the worst of the modern nations systems beats the US cost and universality of coverage, and quality, by a large margin.

Japan seems to have a mixed private/public insurance system, but has government control of the fee schedule.

https://en.wikipedia.org/wiki/Health_care_system_in_Japan

"The government has well controlled cost over decades by using the nationally uniform fee schedule for reimbursement."

"Fees for all health care services are set every two years by negotiations between the health ministry and physicians. The negotiations determine the fee for every medical procedure and medication, and fees are identical across the country. If physicians attempt to game the system by ordering more procedures to generate income, the government may lower the fees for those procedures at the next round of fee setting"

"Public health insurance covers most citizens/residents and the system pays 70% or more of medical and prescription drug costs with the remainder being covered by the patient (upper limits apply)."

For Singapore: https://en.wikipedia.org/wiki/Healthcare_in_Singapore

"Singapore has a non-modified universal healthcare system where the government ensures affordability of healthcare within the public health system, largely through a system of compulsory savings, subsidies, and price controls."

Notice the "price controls"... It really doesn't seem to matter strongly exactly what mix of private/public does the actual administration. To capture first order cost savings better than what the US pays you need to control the fees.
No PCI SAQ A-EP?
This is basically what's happening in S.Korea. Instead of investing more in security, banks are offloading the duty to the consumers. They issue a private key and ask for three different layers of password/pins nobody ever remembers. If you (or the bank) ever get hacked, well, you can't prove that it wasn't you "so too bad" is basically what happens.
my 2 cents, you're either going to have to be so successful on your own that people are trying to pry you away from your own goal... or you're going to have to hit it lucky.

Unless you've found yourself "a week late" on dozens of opportunities, I'd just keep trying until you get a reasonable sample size.
why oh why is this music in the background?!?!?
It's not leadership at all.
> They can, but in practice, they don't.

And you're confident of this how?
I'm not actually convinced this is true. It's definitely a widespread belief though.
"Deaths within 5 years" are strongly affected by when you start the 5 year clock. The earlier you detect cancer, the better your 5-year survival rate will be.
LKDDb: Linux Kernel Driver DataBase
In the linked page on the right, is that a video? https://i.imgur.com/qloK4xE.png

I was just wondering how they made that.
Because they keep being able to do it: https://mirage.io/
Maybe they did. Just saying it is common courtesy. If they did.. then... I can't see an issue for taking your vacation and then cutting out.
Silicon Valley Jobs Are a Good Deal for Engineers, Even with High Cost of Living
Kernel tinification (2014)
The developer who set it up tweeted that it was a "phishing site" (albeit one that didn't exfiltrate any actual data), so I'd say that was accurate reporting.
I prefer "Ghostery" which is more efficient in "Tracking" overall. try it out.
It's self-serving, but I wonder if it might true. Locally hosted applications are a varying mixture of open-source and closed-source, in different proportion in different places. But when they get replaced with SaaS, as is now the fashion, that replacement is almost always commercial closed-source.
Go is pretty cool but it can't be compared to Electron at all... Electron is a framework for HTML/CSS/JS guis, while Go is a programming language without any great GUI support.
I am pretty sure a sizable chunk of current digicash "investors" were not even born in 2000. And we know there's one born every minute too..