skysight-inc/HackerNews huggingface dataset:
A commenter below already mentions the difference between high-trust and low-trust society. I'm from a country which has a notoriously low-trust society. Opening a credit card or bank account is notoriously hard. It's so hard that a large portion of the society is left out of the system.

The problem with chip-pin, 2FA ...etc is that people would still be vulnerable to fraud. Except in those cases, banks can wash off their hands.

I lost my credit card recently and someone misused it. my bank reverted the transactions immediately. I know they got my back. It's the merchant or the merchant's bank that usually absorbs the cost. It's also a conscious decision the merchant makes to not check an id card for every single purchase. It's a risk they are willing to take and they probably take an insurance to cover for it. They are rewarded with reduced friction in transacting with them and hopefully better revenues as a result. I think it's a system that works good enough. Would I prefer something more secure like Apple Pay - 100%! But I'd take this over being checked for my ID card for any purchase over very trivial amounts.

Now, you may argue that it would never happen with chip-pin...etc. That's not true at all. There are people who can't remember the pin well and would choose to use cash or write the pin in a paper and keep it in their wallet. Exposing themselves to more risk and no protection from the card company either - "hey someone knew your pin so you are responsible for it".
So does using a chip reader. Assuming its up to current standards the card's information is cryptographically locked to Sonic's vendor ID and any stolen stored CC info could only be used at other Sonics.

Chip + Pin solves it even better by forcing the attacker to learn the pin for the card. We're not there yet in the US but once everyone has modern chip readers, adding pins will be trivial.

Also as a customer I'm not liable for these issues. The vendor is. With cryptocurrency, if there's a hack against me and my coins are gone, well, they're gone forever.

Sure beats giving up on cc's entirely for cryptocurrency, which comes with its own headaches and problems, especially Bitcoin which as a network wouldnt be able to cover 1 hour of credit transactions in the states.
Well the purpose is of course all those things.

Someone locked up for insanity wouldn't be released while they are still a danger to the public. But anyone imprisoned for a violent crime might be released while still a very clear danger to society, even murderers and similar. Time limited sentences work that way.
A factor of 10 would be impressive enough, but a factor of 3,628,800 is incomprehensible.
Pirates and Ninjas: Emacs or vi?
>How many software projects have to deal with gravity?

Gravity comes with a pretty little equation, and as far as problems goes is as predictable as it comes.

Tolerances of various materials are also well known in advance, and their behavior under different designs and with different levels of stress assigned can be trivially modeled with CAD packages (and even manually).

Same for weather. It comes down to a few behaviors (rain, wind, earthquakes of various degrees, sunlight) that people can model, and have been modeling for ages. We have 25+ centuries old buildings that still stand.

>How many software projects need teams of construction workers to actually build?

Not sure what you even mean here.

>Different kinds of engineering have different requirements.

That's obvious. The question we ask here is different: sure they are different, but are those requirements equally well defined and equally difficult across software and other engineering fields (like construction)?

And to that I say no. Construction has pretty solid, rarely changing requirements (and almost never changing ONCE construction has begun), and works with specific materials with a limited set of interaction. With software modeling the entire universe is the limit as far as complexity goes.
But clearly when a huge crowd of Antifas are overwhelming and attacking a relative small crowd of stupid nazis, with bats, and one guy try to make it out of there before his car is smashed to bits (with the obvious tragic accident waiting to happen)...

Clearly it’s the nazis who are out of control and we need to take down their websites. Freedom of speech be damned!

Seriously. This was a harmless, stupid, non-violent demo for nazis to out themselves in, before the antifa turned up and got people killed.

Are their websites being taken down? No? How come?

Disclaimer: think nazis are about as stupid as it gets.

Edit: not exactly expecting upvotes for this post, but this thread clearly needs some balance.

These are the guys who rushed a non-violent demo. These are the people you are defending: https://mobile.twitter.com/PoliticalShort/status/90191505521...
> There was a very high profile case in Ontario over a decade ago.

Manitoba, not Ontario. I remember my shock of this happening in Western Canada where I was at the time.
I and others I know have faced this problem often enough that it is a primary concern for me.

Political dissidents are the group I'm concerned about. Police are very interested in extracting contact lists from activists' phones in order to build a model of their social networks and infiltrate/disrupt them. This is a pervasive problem.

Yes, the answer is to get people to turn off FaceID if they're at risk, but educating large groups of at-risk people is hard, and it would be better if this feature were not turned on by default.
> “The problem is that software engineers don’t understand the problem they’re trying to solve, and don’t care to,” says Leveson, the MIT software-safety expert. The reason is that they’re too wrapped up in getting their code to work. “Software engineers like to provide all kinds of tools and stuff for coding errors,” she says, referring to IDEs. “The serious problems that have happened with software have to do with requirements, not coding errors.”

Did you mean something different from that?
I can assure you the healthcare industry in India is by-and-large for-profit. It doesn't mean everything has to be more expensive.
> then the answer is unquestionably that you should both buy and store you coins on coinbase.

That is such terribly bad advice that I cannot ignore your post. Storing any amount of coins on an exchange is a liability that is far more considerable than keeping your funds on an encrypted USB-key sized device that you can keep at your home, or at the bank, or anywhere you think it will be reasonably safe. It has fail-recovery procedures built-in so that even in the event of a hypothetical hardware failure, you can recover your funds. If you're even a tiny bit technical it won't be a problem at all.

Your argument boils down to your one single bad experience with a hardware wallet that you dub the "nicest one" despite popular knowledge and maybe because of its price alone. And that's despite being able to recover your funds safely as advertised. And the rest of your post is split between audacious comparisons between banks and exchanges that I won't bother to address; and appeals to authority ("exchanges know better!") that has been debunked over and over again in very recent history. I don't ask you to believe me, for every high-profile case you hear of MtGox, Bitfinex, BTC-e etc. there are many more smaller exchanges that (just like the big ones) sink with their customers' funds.
Well the estimate kind of assumes a point source, but at 100km from the merger that assumption is probably no longer accurate.

You'll need to simulate the black hole merger to figure out where exactly it would be unsafe, but it looks like it would be distance that's pretty unsafe even without the merger.
> The alternative take is that LIGO's detectors are unfathomably sensitive, detecting when its ~4km arms stretch by just 10^-19 meters. That's a 10,000th the width of a proton, where the proton is just a 100,000th the width of an atom, and the atom is about a 1,000,000th the width of a hair.

Wow. Hearing the sensitivity described in those terms is absolutely mind-blowing.
You raise very good points, but it's not like there aren't ways to break into a house without signs of forced entry.

To my mind, privacy is often the most important difference. There are a lot more private things on my phone than in my house, honestly -- a phone these days is often almost an extension of the mind. Which is why we should hold it to a higher standard.

I personally have no problems with TouchID/FaceID, I think the secure enclave is great, but I still think there's a lot of room for improvement, better sandboxing of data, better tripwires for when data is accessed/transferred, etc.
Our Open-Plan Office Failed, So We’re Moving to a Towering Panopticon
Bitcoin is more analogous to gold bricks or cash, not credit cards.

Credit cards are built on underlying currencies, offering easy short-term debt and a simpler payment process (compared to check/cash)... I expect that bitcoin credit cards are another prerequisite for consumer adoption.
LIGO also searches for BH/NS mergers and for NS/NS mergers. None have been announced yet, but they are definitely something we look for.

BH/NS and NS/NS mergers are exciting because they involve conventional matter and are likely to give off neutrinos and light as well as GWs. This means that EM followup is more likely to be worthwhile.

The smaller mass of neutron stars means they are more common, and the NS event-rate is expected to be much higher than the BH event rate. But BH events are louder due to the extra mass, so we can search in a much much larger volume of space, which so far has been favorable for BBH (binary black hole) merger detections.

Another interesting thing about BNS mergers is that, because they get closer/faster before merging, their signal should climb to higher frequencies and spends much, much longer in our sensitive band than BBH mergers (this is also true for lighter BBH mergers vs. heavier ones). This is really cool because it means that BNS mergers can be fit much more tightly to model waveforms, allowing for more precise parameter estimation (among other things) given the same peak signal-to-noise ratio.
Considering we don't have any way of currently producing an energy positive fusion reactor that can sustain a reaction, he's not wrong... but it is comparing a proven technology to one that, despite the hype, is still in its infancy. Fusion has a lot of benefits should we ever engineer a reactor successfully.
The Definitive Guide to Choosing JavaScript Framework
Technically I could see FaceID being marginally more secure in one very specific edge case... If you are asleep. With TouchID, all that is needed is to push their finger to the phone. With FaceID, your eyes would need to be open (theoretically, let's see in practice).
The US health system is probably subject to the least "freedom" of any industry in the US - possibly the world.
Yes, the Ti body almost had me. Give me this: a Ti body phone with replaceable CPU/Memory. Give me an heirloom quality phone (like the pocketwatch of old) that has strong utility for 5 - 10 years.
Laravel and Twilio: Group Video Chat
Just finished Manhunt: Unabomber[1] on Netflix. According to the show, it was Ted Kaczynski's entire defense to rebuttal his charges saying forensic linguistics and the FBI agent who "cracked" the case had no precedent. The agent was in fact a traffic cop before becoming an FBI agent and had little formal linguistics training. Instead Ted's defense behind his back went with insanity and tried to get him to plead to "save his life". Ted chose to plead guilty instead of insanity fearing his ideology and manifesto would be ignored if he pleased insanity.

[1] https://www.discovery.com/tv-shows/manhunt-unabomber/
CGP Gray did a really good video[1] about this recently. The short version is that it's the least terrible mechanism presently available for uniquely identifying and disambiguating American citizens.

[1] https://www.youtube.com/watch?v=Erp8IAUouus
I guess the best advice for staying relevant is to find a niche that still has some future where you're an expert in your field.

Angular 1 and 2?
Anna Freud was ostensibly Sigmund's doctrinary heir. Whereas Jung, Adler, Reich and others started developing their own ideas.

Jacques Lacan later claims to be a "return to Freud" too, but is entirely different.

----

The key thing to realize about psychoanalysis is that it's a sham psychological treatment in utter opposition to current scientific practices. As far as psychotherapy goes, it's basically fraudulent -- at least in the light of today's knowledge.

However: in the process of building psychoanalysis, many interesting ideas about society and language and even politics were floated. These ideas are salvageable in part, IF one keeps in mind that their original goal (building a psychotherapy oriented by leading patients to sudden insights) has long been known to be a dead end.

So... stop thinking psychology, the good parts in Jung and Lacan etc. are not the psychology.
You forgot the military...
2FA is not inherently part of bitcoin's design. It's something that can be enabled, but not all implement it.
> your biometrics can't be easily stolen, and you can't lose them.

Fingerprints are very different from face. Someone has to actually follow you around and clone your fingerprint from something you touched.

With facial unlock, as virtually all previous systems have demonstrated, you usually only need someone's online photo, or a close variation of that to unlock a device/system that uses face unlock.

With everyone plastering their photos in high resolution all over the web these days, and with machine learning advancing so fast these days, how long until a system like this is defeated?

Do you really think "3D photos" of you can't be created? Or even ones that test for "liveness". What exactly do you think that "liveness test" is? It's just an algorithm that Apple uses. That algorithm can be reverse-engineered.

Also, Apple's Face ID has a False Acceptance Rate of 1 million versus TouchID "only" 50,000, is very misleading. That metric only works when you think of an attacker throwing completely random faces at the system. Do you think an attacker that wants your phone is going to throw random faces at the device? Or do you think it's far more likely that it will start building that 3D profile out of your high-resolution online photos?

Suddenly that 1 million FAR becomes much smaller, as the difference in profile from what the attacker has already gathered on you from public websites is much smaller than how you look like in real life.

This is what may actually make the Face ID system less secure overall than TouchID. It's just way way easier to get someone's pictures than it is to get their fingerprints.
>Yes, but the police have to get warrants. If they fail to get a warrant, then it's inadmissible in court.

Depends on the country. Not everywhere, including western Europe, is this true.
> What is possessing Sonic to keep the number

They don't. From the article:

"Malicious hackers typically steal credit card data from organizations that accept cards by hacking into point-of-sale systems remotely and seeding those systems with malicious software that can copy account data stored on a card’s magnetic stripe. Thieves can use that data to clone the cards and then use the counterfeits to buy high-priced merchandise from electronics stores and big box retailers."

"The last known major card breach involving a large nationwide fast-food chain impacted more than a thousand Wendy’s locations and persisted for almost nine months after it was first disclosed here. The Wendy’s breach was extremely costly for card-issuing banks and credit unions, which were forced to continuously re-issue customer cards that kept getting re-compromised every time their customers went back to eat at another Wendy’s."

That provides an interesting lesson for vendors doing CC transactions: card compromise does not impact repeat business, so don't worry about breaches.
Credit Cards can co-exist with bitcoin, while btc solves some CC issues its target replacement is still cash.
Oracle does have fantastic health benefits, at least according to the gf who is in sales.
> Funny enough public debt is largely a non-issue, as long as said debt is denominated in the nation's own currency.

You seem to imply that money printing, and the resulting inflation, is painless and a non problem. I am not sure I agree with that. Lots of people will suffer in a high inflationary environment. Pensioners to start with.
>How many software projects have to deal with gravity?

A better question is: How many civil engineers need to deal with the fact that gravity keeps changing?

The nice thing about most engineering is that the laws of physics are assumed to be constant.

A program's universe is the hardware it runs on. When that hardware changes, the equivalent of the laws of physics changes.

Amount of RAM, clock speed, number of cores, cache size, etc are all things that you can't assume as constant. Real engineers need not worry too much about deadlocks the way we have to for software. If you have physically moving objects, you can easily design to have things synchronized (gravity doesn't change, friction won't change much, etc).

I have plenty of old software that won't work properly on today's PC's because they can't run on fast computers.
"That just sounds like slavery with extra steps"
Wasn't sure what a hash index was vs. btree

Short version - hash indexes are faster in PG11, but they only apply to "where = foobar" queries, giving a 0(1) time. Btree indexes have O(logn)

But hash indexes can't be applied to range clauses, like "where < 50". You can still use a btree index however.

SO post:

https://stackoverflow.com/a/398921
Can't you steal a hardware wallet ?
Even as a technical person I've found it much easier to cut the cord with a few different devices. I've yet to find a single device that does it all well.

Kodi is great at file playback but the bring-your-own-hardware approach is a great way to spend movie night trying to fix a broken computer (a separate mysql backend is needed for multi kodi device sync... seriously?) I replaced my kodi boxes with rokus and plex and haven't looked back.

Roku has a nice app selection and the remote makes a huge difference in usability for non tech folks. Then again roku lacks a good built-in "airplay" feature so I have an apple tv to do that.

I'd recommend to your friend two devices. A Roku, and a device that they can "cast" from the mobile platform they use.
Ignoring batch processing, they're also keeping this information in case of fraud issues, refunds, customer tracking for marketing purposes, etc. Even with PCI compliance you can store card information. You only can't store the CCV number. If your storing methods uses easy to circumvent encryption, then, ta-da, the hackers get all the credit cards.
Would you buy coca cola if it costs $15 in usa?
Sure everyone would jump to an alternative of Windows.

Sadly every piece of software and hardware since win95 has been made with windows in mind and no alternative has been able to come even close to that.
> I'll be the contrarian and ask why this is surprising?

Because users aren't actually all that aware of there being location data attached to their photos. If you told them that an app could stitch together a relatively accurate map of where they'd been in a day based on the photos they took, most users would be surprised.
> ... Target storing CC numbers at least made sense when you needed to make a return.

This is why I think the merchant processors should be instead be doing this by some kind of transaction ID. I.e. send the refund amount to the processor with the transaction ID instead of sending a new transaction to the card. It's more secure, and less error prone since you could build in checks for the amount returned and other such bits.
"Liveness tests" will be beaten in the same way Apple created them: with machine learning.
The day I reached the 1600 columns limit in PostgreSQL
Chromecast has the same design for some reason (I think it has a magnet on it, but still).
You are implying that there is a "secret" based on that face mapping that can be copied out of the device and then used to either 1) gain access to a non-Apple system that has some kind of biometric face detection system or 2) can be used to reproduce a face like yours to unlock your phone without you present

From the PDF:

"Once it confirms the presence of an attentive face, the TrueDepth camera
projects and reads over 30,000 infrared dots to form a depth map of the face,
along with a 2D infrared image. This data is used to create a sequence of 2D
images and depth maps, which are digitally signed and sent to the Secure
Enclave. To counter both digital and physical spoofs, the TrueDepth camera
randomizes the sequence of 2D images and depth map captures, and projects
a device-specific random pattern. A portion of the A11 Bionic chip’s neural
engine—protected within the Secure Enclave—transforms this data into a
mathematical representation and compares that representation to the enrolled
facial data. This enrolled facial data is itself a mathematical representation of
your face captured across a variety of poses. "

So, it's more like a hash of your face, which is very similar to how TouchID works. So, again, even if someone were able to break into the secure enclave and get that data, what could they do with it? It's a representation of yourself that is used for Apple devices.

Also, this is an OPTIONAL feature. If it doesn't fit your security model, don't use it. For the same reason a lot of people don't use TouchID -- they want the security of a passphrase. But for 90%+ of people that will buy that phone and are not at risk of the government or police pursuing them, the security it offers is more than adequate and it achieves this by not annoying the user and requiring them to have a 50 character passphrase.
In our case it will likely mean that we have a defined documented procedure in place to remove the customers data within the specified period.

In terms of technical implementation it'll be a bastard (or result in us holding backups for a shorter period), dumping your DB backups will mean that you still have the data outside of the period (for a lot of places).

It's going to be interesting.
What about XMPP with OMEMO? I know it's not the latest hype but has decentralized usernames.
Nintendo takes us back in time with the SNES Classic. It doesn't really