skysight-inc/HackerNews huggingface dataset:
> Socialism and Capitalism isn't really applicable on non-tangible things.

I agree, but that may not hold when we go out of our way to make things tangible with inventions like "intellectual property". FOSS is a continuation of this within the legal framework, it's trying to take the non-tangible software and make it something more solid that we can "touch" and play with.

That said, I'd say it's more like philanthropy, no one is being forced to give anything away.
"Retired". With full pension, etc.
I guess the ability for a single person able to essentially 'drive' an entire fleet of cars is an improvement but it's not exactly the utopia I imagined.
I actually went to a talk recently by USDS and 18F. Really enjoyed it and seriously considering going to one of them as my next job. A few clarifications:

* USDS limits employees to two consecutive years.

* 18F, it's sister agency, does support remote work. They're more like consultants and switch between different agencies project by project.
Apparently, in some states, they're not allowed by law charge a fee. I'm in NY, and I was able to freeze my credit reports for free.
+1. I also use *@mydomain.com feature in G Suite, and it's very convenient to understand which companies sell/pass email databases to others w/o my permission.
In some cases, you need to reply from that "aliased" address -- in this case, I do go to the Settings, add an alias, got a confirmation code, and confirm it. Then this new "address" is available in GMail in drop-down "From:" menu when you write a new email.

username+anything@mydomain.com is also a useful feature (as well as u.s.er.nam.e@mydomain.com – dots are all ignored in GMail; some services don't allow "+" in email address field, so you can use finite number of variants with ".").

These little tricks make GMail convenient for geeks :)
> If you're interested, shoot me a message!

Can you let us have your e-mail address?
> Also, if you try to kill Equifax, companies will stop reporting breaches.

The US government killed Arthur Andersen. Financial fraud is still reported. Equifax is not too big to dissolve.

https://en.wikipedia.org/wiki/Arthur_Andersen#Enron_scandal
No it's not.

It may be the actions of a single employee that finally caused the breach to occur, but there was a series of failures that lead up to this point. There should have been no way that it was possible for a single employee's error to cause such a massive failure.
There is no question of parroting, as these was not classroom exercises, but
discussions between grown-ups trying to grapple with something difficult in the laboratory. After the Professor's explicit explanations, the student was able to carry on intelligently with the discussion and did not get stuck as he did with my Socratic explanations.

That still leaves the possibility that he only understood things in a rote-ish way. But if so, that was enough to get him unblocked and thinking about the other related stuff we were talking about. That's valuable in itself, and will contribute to his understanding of the original sticking point.
Developer for 2 relatively small Saas apps (< 50k users). Not in remotely the same industry as each other. One privately held, one not. I don’t think it’s industry specific or particularly common, but I’ve had a couple of job offers and seen/heard of other places with comparable benefits. A lot of it is company culture and negotiation. If a company already provides 28 days and you interview well, you can likely get that increased.
Is there any Australian government data available anywhere? it's worth checking.
Show HN: Find it for me (Search engine for Facebook pages)
Me too thanks.
Singaporean here. 'Failing" Public Transport System? Sure the SMRT has issues, but it is still one of the best run train systems in the world. Second only to HK MTR. Having used the BART, UK and NY Train services, the Singapore MRT system is far more cheaper and efficient. Not to mention cleaner, safer , etc. Yes, it is fashionable to criticize the PAP fatcats. But having lived in an assortment of first world and other Asian countries, Singapore is haven, albeit a "Gated Community" with a benevolent and paternalistic government. Given the chaos I seen in some of the late-stage-capitlisitic democracies, Singapore gives you safety and stability, at the expense of giving away some freedom and rights. Price that I'm willing to pay and I'm sure the majority of Singaporeans also do. And yes, I'm OK to fund and support the PAP "fatcats" as long as they deliver the goods. Their salary is peanuts compared to the waste, corruption and chaos that I see in the regional Asian countries due to corrupt kakistocracies in power. Case in point, up north from Singapore.
I don't understand how an organization so concerned with privacy can hand over private unencrypted user data to the FBI and then nonchalantly pass it off as OK because those users violated the "letter and the spirit" of their "social contract". This is a massive design failure on RiseUp's part and should not be taken lightly.
> But the goodness or badness of software doesn't have much to do with what language was used.

To a certain extent it does. COBOL is in the same category as Visual Basic in the sense that they make it easy for novices to quickly create programs that half work, but getting the other half right then takes far more effort than would have been required when using a better language to begin with.

The result is that people using those languages tend to give up at that point and subject the users to their half broken programs.
1947 Imperial and Chrysler Service Book – Cam Ground Piston
Droneseed is trying to address climate change by helping grow forests with drone swarms - surveying, planting seeds, and combating invasive species.

We are looking for general purpose, motivated technologists who are interested in the domain and thrive in an autonomous, self directed environment. We believe in building quality software for the long term using the best technology for the job. We are especially interested in individuals with experience in robotics, spatial data, and constraint-based planning.

Our hiring process involves reviewing work you have done, reviewing our stuff, and pairing up on an open source bug. We want creative, thoughtful, empathetic people to join a team dedicated to inclusivity and an important mission.

Preferred locations: Los Angeles or Seattle

Contact info@droneseed.co
The DESIGN of their whole infrastructure was terrible for years.

I work at a school district. If someone broke into our public web server they'd realise the entire webapp points at an WebAPI interface that will still only let you make requests as a logged in user. Meaning it does the same thing as the GUI, nothing less, nothing more. To get "full access" they have two different layers they have to break through.

But even worse for the attacker, in this case full access doesn't even get you full access. Our credit card processing, employee SSNs, and accounting system isn't part of our main database/WebAPI system, and has IP restrictions. In order to log into that you need username/password and 2F provided by SMS.

A completely flat design where a single breakin gives you the keys to the kingdom is unacceptable for any organisation that holds sensitive information. The school district's system was only improved after an external security audit flagged our flat design as dangerous, and they were correct.

No, a single employee was definitely not responsible. This is a systemic issue likely starting at the top. A CEO who thinks a single employee COULD even be responsible is ignorant.
Before searching on Facebook pages were allowed, I wrote this tiny (dirty) JavaScript code to search posts through Facebook pages. Few things are still broken but keyword search works!
2017 has been the most bizarre year of my life so far.
The bigger concern is the risk inherent in modifying big legacy COBOL projects and their maintainability, if you can even find programmers willing to work on a codebase that old.
>Kiddo needs to go back to school, he's clearly forgotten all of his training.

No he hasn't. He never had it. He was exposed as a fraud who didn't belong.

His golden parachute turns to lead. The investors take a bath. Its the only reasonable way any of this will ever get fixed.
From the Ninja Threat Model at https://www.nccgroup.trust/us/about-us/newsroom-and-events/b...: The attacker is going to sit on the same network segment as the application. There’s no firewall or filters. There’s a special place in hell reserved for products that require firewalls or filtering to protect themselves against attack.
A few thoughts about hiring at a startup
Seriously? They are the only ones? What about Lexis Nexis, experian, transunion?
"False Narrative: In-house government IT development know-how is critical for IT
modernization. In-house government procurement and program management
expertise is central to successful modernization efforts. Significant IT development
expertise is not. Substantial custom software development efforts were the norm at
large commercial enterprises, until it became obvious that the cost and complexity of
developing technology was prohibitive, with the end-products inherently insecure
and too costly to maintain long-term. The most important skill set of CIO’s today is to
critically compete and evaluate commercial alternatives to capture the benefits of
innovation conducted at scale, and then to manage the implementation of those
technologies efficiently. Then, as evidenced by both OPM and Equifax, there needs
to be a singular focus on updating, patching, and securing these systems over time."

Um. Yeah. 'Cause that's going to lead to a good end.
That lone employee would be the CEO...
Chainfire Retires from SuperSU, to Leave Fully February 24th
Whoa, there. This is just a casual HN comment thread, I don't think we need to be getting that uptight. Maybe the subject has primed you all to make believe as super serious lawyers, but we all know opinions expressed here really don't count for much. It certainly won't have any influence on the outcome of the case.

It's not like his bias was that hard to figure out, all you had to do was open his user profile. If there are genuine Uber astroturfers creeping around they wouldn't be that easy to unmask.
Uber will IPO by 2019 and let Softbank invest
>"The company sent out an internal email requesting that its technical staff fix the software, but “an individual did not ensure communication got to the right person to manually patch the application,” Mr. Smith told the subcommittee."

So someone forgot to forward an email? What else does ensuring email communication got to the right person mean?

When the security or hundreds of millions of people's data relies on a process of selective email forwarding, the "lone individual" in question is the CEO.
Actually it is not. There are good reasons to call outside counsel first.
Having worked in both Singapore and US, I find the key difference in healthcare and other societal issues is the ideology. US: left or right, liberal or conservative. Singapore: whatever works.
After all Singapore is one of the few living city states and less than 60 years old. Running a 200+ year old huge nation state means complexity and challenges on an exponentially different scale.
> everything you do between 15 and 35? The majority of life's accomplishments for most

I was having a great day.
Yes, seriously. They made it pretty clear that _their account was still active_. That's why it's "regardless": it doesn't matter for the situation at hand.

> when the users wish/intent is clear

How is it clear? Their whole post is stating that all they did was not use the site for a bit.

Given that they have an active account and notification are set to notify, why would they ever assume you no longer want notifications? They could very well want all of those notifications (since they have them turned off), so not sending them would actually be the exact opposite of what it should do.

This would be like if my post office stopped delivering my mail because I didn't call them up and tell them to keep delivering my mail.
Tor regularly does stuff (conduct studies, update UI and censorship circumvention methods, etc.) to help people in oppressive regimes. Mozilla has donated to Tor. Are you against that?

If not, then consider that Mozilla is taking a political stance in that situation too by deeming those oppressive regimes as something to be bypassed.

It is not unlikely that capitalism is oppressive to certain groups of people (poorer groups everywhere in the world), and RiseUp has a mission to help alleviate that oppression. Again, not different from what Tor has done.
Equifax is going to turn into a business school case study on what not to do... and what not to say.

You could read any PDF or Kindle eBook on leadership to realize that this headline will play very badly.

On a more technical note, how is it possible for a single person to ignore that they needed to upgrade Apache Struts and nobody else notices or cares?
> Even a single self-driving fatality

It's more specific than that. It will be the first self-driving crash that would be glaringly obvious to a human driver. Like the Tesla crash where the sensors mistook a white semi for clouds and merrily plowed though it.

If the tech is adopted too soon it might face a death knell when computer assisted driving proves to be much safer than fully autonomous. It's much easier to fill a human's blind spots than replace the driver entirely.
That protects the data between the browser and the web server (or SSL offloader) from eavesdropping and tampering. It does not protect against the case where the attacker gains authorization, over HTTPS, to administrative access at the web server.
It's a convenient identity number. It roughly maps to a person, and usually health/dental insurance will be able to look up their customers by it. Ex: when I go to a new dentist, I tell them who I have insurance with, and my SSN, and they're able to confirm I have coverage. It's also a number most people have memorized, because it doesn't change, and is fairly often used.
Many reasonable people seem to believe that the backlash and horror inm response to the US government killing of Arthur Andersen and the subsequent job losses were what led to the later toothless reactions by the DoJ to subsequent corporate scandals:

http://www.npr.org/2017/07/11/536642560/is-the-justice-depar...

http://www.slate.com/articles/podcasts/slate_money/2017/07/t...

https://www.amazon.com/Chickenshit-Club-Justice-Department-C...
Yeah wow. Today I learned that the Red under the Bed fear is still real, even on HN.
No animation in Nightly? I just see a slideshow of different colored bubbles. All beautifully rendered though.

Edit: the bubbles are moving, but veeeeery slowly.
Maybe or maybe not. What if employees could blow the whistle on negligent handling of user's data, and even get some kind of whistle-blower reward for it? This would strongly encourage companies to keep their houses in order, I imagine.
Well, look at the home page for Atom. It describes itself as "a text editor that's modern, approachable, yet hackable to the core."

They then call out features like cross platform editing, a package manager, smart autocompletion, file system browser, multiple panes, find and replace, themes and customization. If this list defines what they mean by "modern" then Emacs has been modern since before modern was a thing text editors needed to be.

However "approachability" is the one characteristic that stands out because it's subjective and that's telling. I would guess most people who aren't already familiar with Emacs find it daunting, just a little bit too different from the rest, and I can see a natural reluctance to invest time in learning something so different if the outcome (how productive will I be?) is unclear.
> If a leader does anything to lose a consensus of respect from their workers (and ultimately authority over them) the long term productivity of the organization is imperiled.

So the leader has to go because employees can't separate work life from home life? Usually it's the other way around with companies being to over bearing of en employees private life.

> Is it reasonable for him to expect to maintain authority over a building full of relatively young and well-educated people, in San Francisco, after publicly (though perhaps inadvertently so) working against marriage equality? Of course not. Morals aside, it's unrealistic proposition.

Yes, because his opinion on gay marriage is irrelevant to his work as a CEO, just as my activities on the weekend should have no bearing on my job.
> It's not weird nor is it magic to expect Facebook to stop the notifications. That's what pretty much all other web sites and services currently do.

No, it's not. This would be like if my post office stopped delivering my mail because I didn't call them up and tell them to keep delivering my mail.
> Not just for the elderly either, I can think of a lot of people that would want the protection and power of obscuring money that real estate developers and politicians have benefited from for years. It would be a real game changer.

We live in a world where private persons and business entities no longer require bank accounts and can nominally hold cryptocurrency like bitcoin and Monero, or stable value cryptocurrencies, without anybody knowing.

The world you imagine already exists, and doesn't require a new startup or incremental half steps to make it exist.

This is knowledge you can accept or reject now to wait till 2040 when the people that didn't reject it are now being pulled through the courts in divorce proceedings, estate reorganizations, or are in the political limelight.
If I want to hide my ignorance, spread my ideological, or even merely troll you, I'll just keep repeating the low-effort pattern of deconstructing your position with more incisive questions, none of which I have answers for myself.

Which is what the Socrates character in Platos dialog seems to spend all his time doing. If he is such a troll even in the friendly retellings, can you imagine what a prick he must have been in real life?
Do you have any problem with the concept of credit bureaus, and is it possible that it's influencing your reaction?

edit: also, so this is topical, the CEO is clearly incorrect. Even if one employee were somehow responsible for the unpatched version of struts being present on a particular system, there is guilt by omission/neglect for at least 1) poor secure enclave design (attackers getting access to the system, degree of access that system had, lack of partitioning of sensitive data) 2) lack/deficiency of red team/pen testing 3) lack of process in static scanning of deployed code.. it goes on. As someone noted, seems like negligent process given the degree they were a target. Granted, I'm going off the publicly disclosed information, so who knows..
Thanks Bob!
Although open source likely makes up a large part of software inventory, particularly if developing or customizing software, most usually open source isn’t singled out from “software vulnerability management”
The one person is the CEO, right? Right?
This is such a nasty area, with such crappy solutions (name of your first pet), that it should become a service all of its own.

i.e. when I sign up with you, I can choose my own preferred vendor to handle identity recovery.
What this Guy is going to say about not encrypting DOB , SSN , name and address etc and storing everything in plain text. is it also a single employees fault ?
A good standard is another question. We're discussing what standards are weird. I am saying that normal human interaction is not a weird standard. Neither is paper mail.

Although when bringing up paper mail, we should note there are many different standards. Are we talking the standards of 1792, when the USPS was created? Perhaps we use the 1879 mail classification act? The 1920s, when the Direct Mail Advertising Association was formed? How about around the time of the junk mail controversy of 1953? Or perhaps 1970, when Chief Justice Warren Berger wrote, "Everyman's mail today is made up overwhelmingly of material he did not seek from persons he does not know. And all too often it is matter he finds offensive."
> something the best VC's in the business, who vet tech deals all day every day, struggle to do.

You just answered the rebuttal, which is supported by data. VCs don't outperform the S&P 500. Trying to support that everyone outside a specific industry is too dumb to be able to be risk-on just ignores too much.

I think this argument and rebuttals are red herrings. The SEC tried non-net-worth tests, before settling on the net-worth tests, they were intelligence (financial literacy) tests which were also a nightmare for the entire industry and perpetuated rampant discrimination across socioeconomic and racial lines.

Still, this current outcome should not be seen as the end all be all, and it merely hasn't been challenged adequately because the people rich enough to challenge it aren't affected by it, and the poorer classes barely know they are being so blatantly discriminated against because the private investments were prohibited from advertising to them at all!
Yes, but the conditional included “and the company won’t care”
It’s weird that the DB Engine list conflates OLTP and OLAP databases into one category when they are used completely differently. Would be nice if they had subcategories or filters for something like this.
Equifax clearly never cared about security or protecting people, because we aren't their clients. But yeah, some of this is just laughably bad.
Fine, FSF.

(Can't edit my answer any more.)

Just burn non-OS software to the ground and be done with it.
BS they already only report breaches when required by Law.