skysight-inc/HackerNews huggingface dataset:
Copyright Reform (algorithms will decide what developers allowed to share)
The EU is getting ready to vote a "Copyright Reform" package which fundamentally undermines the foundations upon which Free and Open Source Software is built. The proposed Article 13 of the EU Copyright Directive targets every online service that allows its users to upload and share content with each other, including code hosting platforms.

Under this proposal code hosting platforms will be compelled to prevent any possible copyright infringement by developing fundamentally flawed filtering technologies. These filtering algorithms will ultimately decide what material software developers should be allowed to share.

As a result of this ongoing copyright review, every user of a code sharing platform, be they an individual, a business or a public administration, is to be treated as a potential copyright infringer: their content, including entire code repositories, will be monitored and blocked from being shared online at any time. This restricts the freedom of developers to use specific software components and tools that in return leads to less competition and less innovation. Ultimately this can result in software that is less reliable and a less resilient software infrastructure for everybody.

Sign petition at https://savecodeshare.eu/
>Perhaps repealing the English only teaching requirement via prop 58 last year had something to do with harming English proficiency in underserved populations.

It wouldn't have affected any of these test scores. Prop 58 was approved Nov 2016 and took effect July 2017[1], whereas the 2017 tests cited in this article were taken 2/3 of the way into the school year[2], which puts it in Spring for a normal school year schedule and months before Prop 58 ever took effect. Any effects of Prop 58 on testing scores won't be seen until this school year when students take the tests in early 2018.

[1] http://downloads.capta.org/leg/Prop58_Support_FullAnalysis.p...

[2]https://www.cde.ca.gov/ta/tg/ai/assess1617testdates.asp
Wonder what the harmful emissions from my flat and walk to work were vs the van. /s

Smug statements about how wasteful people not living in these fringe conditions are always remind me of the Soylent founder lecturing about how doing laundry wastes water while also reordering all his clothes from china when they get dirty. [1]

[1] https://arstechnica.com/gadgets/2015/08/op-ed-how-i-gave-up-...
Yeah but most nomads don't spend much time in home country. They might spend 1-2 months in home country and rest of the year travel around. Or even less, could be home just for Christmas. Then it gets quite tricky because technically you haven't even spent enough time in your home country to count as resident there.
Introducing TokenTrax – We want to help crypto owners become better investors
I set up Family Sharing this weekend and you are correct for a family of five it is like a half day effort including figuring out unique usernames, being asked to use the same secret questions and then fixing the settings on each iOS device. If you have a toddler hanging on you and a curious 9 old, it is exhausting. Still it seems worth it as with each iOS update iMessages is re-enabled, which would lead to embarrassment if my vigilance wavers. Also, I like the idea of the kids having their own iCloud sync/backups.
I'm not here to say that the permitting process that we have is a good idea. But I don't think that everything else is cake.
The joy of React+Redux with Elixir/OTP
Standardized testing encourages teaching how to take standardized tests, why does anyone think that's a good idea?
Flashing a third party ROM is probably your best bet.

I'm curious to what phones you're considering to replace your OP3 with, though.

For myself, I've been looking for something that has "much better than average" security and, unfortunately for any mobile platform, that looks like it's probably not going to happen.

The closest ROM I've found is CopperheadOS, but it is only supported on a few devices.
I mean this flaw has been known for years. How long have we been pressing ctrl-alt-delete to log in to Windows?
Introducing Dialogflow, the New Name for API.AI by Google
I'm responding that lots of things are intuitively plausible, because that's an incredibly low bar. When you're trying to make decisions about how to educate people for example, leaning on presuppositions that are just "intuitively plausible" is lazy thinking and I would argue that for any serious matter you should dismiss out of hand such lazy thinking.
Please answer this.
You're right, I don't understand it. Why does a government structured around the economic activity of its voters suddenly become tyrannical and dysfunctional when when most of them are no longer productive?
My guess is that it's because there are very rich areas mixed in with relatively poorer areas, and they're easy to travel between. Also, bikes are in a sweet spot where they're valuable enough to make some money on, but not valuable enough for the police to spend any time on.
I was hoping JS would be listed. I wasn't disappointed!

Let the hate flow through you. Then hire me.
All booleans - in the fullness of history, brought into the harsh light of business logic - are destined to become enums.
Excel is also well known for mangling gene names in expression data. No, SEPT2 (Septin-2) shouldn't be silently "corrected" to 2-Sep, but it is...
No because Apple would do a much better job of encrypting the data the OnePlus's silly Base64.
The major issue with basic income is what to do with all the government programs that provide safety nets for low income folks.

Will a basic income supplant those programs or be another addition to those programs?
If npm or even a single popular npm package is compromised, almost every website will be compromised.
Uh oh... Do you folks think I should take down this Twitter tracking some of the weird/racist stuff in my Silicon Valley NextDoor?
https://twitter.com/nextdoorsv/status/912353163453153280
Honestly, i didn’t even understand what this post was complaining about..

I’d hate to be on customer support for this kind of guy...
You honestly can't expect much more from a state whose top attorney says "We need all this free slav^W^W prison labor to keep our state going!"
Does anyone know if Travis CI does something like this.
AWS Lightsail is AWS’s option there.
Biometrics (fingerprint, face id, etc) are a poor use for authentication (password) because they can be copied and compromised.

Biometrics have value for identity verification (username) when used in conjunction with a password
A President Felled by an Assassin and 1880s Medical Care
The problem you describe sounds like a very nice utopia to have here in the United States :-)

We have this issue today in Seattle with regular push bikes—no electricity needed. We have people who are more than capable of maintaining speeds in excess of 15mph on facilities like the Burke-Gilman Trail. And those people strike me as jerks when I watch them exasperatedly blow past slow-moving families.

Most of the "Burke-Gilman Racing Team" eventually figures out that they'll have a better riding experience mixing with cars on the road. When you have a lot more people riding, you start to see those kinds of norms reinforced.

Last, bike-on-bike serious injury / fatality collisions are rare. If, in the United States, we get to this dystopian bicycling hellscape of... Amsterdam... that you describe, I'll gladly throw my all into helping to mitigate the problem you describe.
This would work. Sleep/wake is already used for Apple Pay on iPhone X.
Introverted Dad with a wife, two daughters, two dogs, and two cats reporting in. Wife and kid #1 are both high energy. I love my home life, but there is definitely some part of my psyche that is drained by it.

I took a couple of days to drive to the middle of nowhere in Oregon to see the eclipse by myself. My goal was literally to be as far from other people and as solitary as possible for the whole trip. (Not exactly easy given the expected crowds, but that was my hope.)

I slept in the back of my truck and barely spoke to a soul in 48 hours. It was absolute bliss.

I'd like to figure out to get a little more of that solitude in my life, but it's hard. Anytime I'm out recharging my spiritual batteries, my wife is at home solo-parenting with the kids draining hers more than twice as fast as usual.

Pics and video of the eclipse:

https://imgur.com/gallery/AWPxf

https://www.youtube.com/watch?v=y8PDDX1vnXM

https://www.youtube.com/watch?v=WsuxK81KnPw
Wow, what an awesome story. I don't think you should be ashamed of it - really inspiring.

Being a company owner, would you be more or less likely to hire folks with a criminal record based on your experience?
True, but the parent can just modify that to say "use touchID for users who have it enabled".
Your guess is right, I'm living in Germany. But I think I'm in the minority here - I really don't know any German who is in their twenties without a driver's license. I'm not German though and I used to have a license back in Istanbul, which is not valid in Germany. I didn't bother getting a license here because you can get a Bahncard from Deutsche Bahn, which covers 90% of one's public transportation needs. Maybe it's a similar story in other European countries but I think most people still get a license just in case.
I imagine very few users care about having a Disqus account. It's not a feature intended to make the user's experience a better one.
Wouldn't it make more sense to use a water basin?
Why not? Some companies don't want to host their own tiles server
I'm not sure if you're aware, but GitLab has integrated CI available on gitlab.com, which is a like-for-like alternative to CircleCI - so in that sense this comment is very much on topic, in my opinion.
Yeah that's fair, I should have... read the article.
As the author notes, the App Store provides a measure of defense against this. Apps that do this might get away with it at first but will eventually be discovered and banned.

Plus 2FA also protects you from this. iOS has easy-to-use 2FA and is on a good trajectory of mainstreaming it and driving adoption. I'm not sure his proposal for defeating 2FA would work:

> even with 2FA enabled accounts, what if the app asked you for your 2 step code? Most users would gladly request a 2FA-token and ask for it, and directly pipe it over to a remote server.

I wouldn't give this much credence without a proof of concept. iOS throws up a dialog when there's a pending 2FA request which consumes the code or cancels the request, so that would prevent the app UI from intercepting it.
Could easily see this working on the mobile web as well
I have both in my "Saved for later" bucket on Amazon but never really got around to actually buying them. I'm just not sure whether they will be interesting and dense enough or you actually have got the whole message by reading a comment like yours.
I often find this to have been the case. Gates wasn't poor either you know. Neither was Jobs. Not poor like I was in the sense that if all else failed, they could still fall back on their parents' house. I had no backup like that and so the kinds of risks I could take were shaped by the reality of not being able to fail not even once. I have done okay based on where I came from, but I'm just a couple of extra zeros short of the goal now. "Decamillionaire" has a nice ring to it, and am still going to give that a shot.
Let me know. I added it too, how are you verifying it works? DNS66 logs? or Network Connections app?
UAC came out over 10 years ago! In any case, NT is structured quite differently than the typical UNIX variants. When you log in, NT creates two access tokens for you. One with all your privileges, and one with admin rights masked out. When a process is launched it uses the non-admin one by default, even if you are the admin user.

When a thread requires admin privileges, NT will first check if your unmasked token already has those rights, in which case, it will prompt you (UAC) for permission to use the token. This is unlike traditional UNIX where the 'effective user' changes to root on a global level, not just per-thread. So you get 10 minutes (or w/e) as root to do your thing.
Deep RL Bootcamp: Lectures [video]
Khroma — AI color tool for designers
Bloomberg had a recent article about similar issues in San Francisco: https://www.bloomberg.com/news/articles/2017-10-05/michelin-...
Roadmap towards non-experimental macros (in Scala)
Hell, we even look at good programs and imagine we could have done them better.
Wouldn't similar vulnerability be present in most SAAS platforms? All of them include tons of analytics scripts on their website. If you are a logged in user, your session presumably includes a token (encrypted cookie?) to use the SAAS API.

Therefor in theory other scripts loaded on the page could grab the token and make authenticated API calls as well? Although I guess this is mitigated by verifying script integrity when loading scripts from CDN (e.g. integrity attribute of script tag)?
And that's extremely easy. The App Store review is not nearly as thorough as most people think.
I am not advocating easing the restrictions in human experimentation but these rules definitely slow down progress.

They surely slow down the work, but whether they slow down useful progress is a different question. Given the amount of time and money that depend on software systems today, as well as the more general effect of software on our quality of life, poor quality software costs society as a whole a great deal. If we built our software more slowly and carefully but also with higher reliability and fewer issues with security, privacy and so on, would we really be worse off?
I really like the solution that includes the iOS background — the os password dialogues should adopt this approach immediately. Zoom out to a view that includes springboard and your background image, and maybe include a preview of the app in a little window that the user can tap to return to the app rather than a non-contextual “cancel” button if the password prompt is related to the app context for some reason.
Nice clean and short landingpage! Well done!
KDE Plasma 5.11.0 released
> Why don't you include a POC? I have one that demonstrates this attack, but I don't want to show script kiddies how. If you can't figure out how to construct it by reading the above description and the network traffic, you don't deserve to know how.

I feel this is a bad way to approach it and a bad attitude in general. Showing people how this can be exploited (after responsible disclosure) is a great opportunity to spread awareness of potentially their own issues in the same space and create points of discussion. If a user feels compelled to do so, they can seek out the info. But to show disdain to the reader for their lack of knowledge comes off as unprofessional in spirit.
And on this positive note, you might want to have a look at efforts to make spreadsheets better: https://www.microsoft.com/en-us/research/publication/improvi...
All studies from Berkeley are politically biased.
That was kinda my point, it's not the be-all deep learning library because they made it for their own use case, but its towering popularity (as in 10x the number of stars of other popular libraries) is not genuine.

Also I highly doubt that the main reason Google open sourced it was to be charitable.
Yahoo used that, except with an image, not a phrase. And then one day yahoo.com didn't show that image anymore.

What do I do then, as a user?

At this time, I didn't care much about my yahoo account, so I simply didn't log in anymore; but in general, this solution leaves the user alone. You need to give them a potential remedy when that happens.
Optimizing Learning in College
Rfc 4180 definitely lays out rules for how to escape double quotes, commas, and newlines.
Respectfully, I disagree with the notion that lots of programmers don't know best how to manage their own time and productivity. Of course, we can all stand to do a better job of meta-cognition and thinking critically about our workflows, but I trust that if most people spend a lot of time in a debugger, it's because it helps them get their job done faster.

Personally, I definitely find myself going through stretches where I just use printf debugging. (I work on a lot of hobby language implementations where that's often the only kind of debugging there is.) Then I remember, "Oh, yeah, debuggers are a thing." More often than not, I'm surprised by how much faster I am at tracking down an issue using one.
We had weekly releases to production. during my first month I checked in some code without yet fully understanding the spaghetti'ness of the 20 year old codebase.

it turned out that our beta testers found a lot of cases that were broken on Friday when the release was next Monday. The problem was that a ton of other classes pointed to the one in which I made changes and altered the state..

Worked through the weekend with my teamlead and got it fixed somewhere on sunday afternoon.

good bonding experience though. All had a laugh about it the next week. :-)
It would appear that “van” has a different definition in Europe. In the U. S. I think most would consider that a Class C RV. I’m not just being pedantic, as there is loads more room in the authors rig than our VW Westfalia, or even a Chevy conversion. I’d live full-time in what’s pictured (and plenty of U. S. retirees do just that), no problem, but I’d have to have a genuine need before I’d consider more than a month or two in the VW.

EDIT: now I’m genuinely curious, so please help me out Europeans. Scroll to the bottom and relieve my ignorance: is this considered to be a “van” in Europe? https://ruby-on-wheels.github.io/blog/the-first-ride/ Because I think you’d be hard-pressed to find someone in the U. S. that would call that a camper van.
One of the examples of 'pants on fire' syndrome I mentioned is udev. Other examples are equally easy to search and examine.

"After udev is merged into the systemd tree you can still build it for usage outside of systemd systems, and we will support these builds officially. In fact, we will be supporting this for a long time"

http://article.gmane.org/gmane.linux.hotplug.devel/17392

"...this will effectively also mean that we will not support non-systemd systems with udev anymore starting at that point. Gentoo folks, this is your wakeup call."

http://lists.freedesktop.org/archives/systemd-devel/2014-May...

So when Lennart or somebody in the systemd team claims something to be optional you can bet everything it is not or soon won't be.
1) they know exactly what they are doing; 2) arbitrary 3rd party JS running in privileged contexts (dashboards) is a wider problem I would like to draw attention to; 3) It's not immediately exploitable; 4) It takes five seconds to understand what the problem is; 5) I did not want to wait 90 days to be told "we are not going to fix this;" 6) my history of reporting problems (not security related) to the company in question is that they are not very responsive to fixing them.
Just went to nextdoor.com to see what the app was all about after seeing this and sure enough, there's a full-width banner on their front page of media outlet logos, including NYT and WSJ. Oh the irony.

What's funny is that it doesn't explicitly say that they're endorsements from these outlets, they're just there. I was always under the impression that this isn't technically legal, but I'm no legal expert.

I know this is off-topic, but can anyone just add a banner of media outlet logos to their site/blog? There's definitely an implied status claim being made here. Why else would one company randomly post other corporate logos that aren't paid for or explicitly endorsed?
People with kids need two levels of access.
Fingerprint (and other "bio" features like eye retina) scans come with their own problems.

For example, how do you handle compromise (I suspect fingerprint mills / printers are not ubiquitous just because there is no demand for fake fingerprints; technologically they should be easy to make). Also, do you really want a unique match every time you log in from different devices (e.g., work and home); etc., etc.

Sorry, fingerprint solution may be worse than the disease it is trying to cure.
Palm Had. I was a fool not to try and develop a 3rd party app for it. I had a Palm.
Because the interests of the majority in consuming does not align with the interests of the minority in producing.

In a widely-diverse economy, it's impossible to have huge voting blocks like that. There's just too many vastly different economic models represented. But if you start heading down the road of UBI, you're basically splitting the population into two groups. Something's gotta give somewhere. You either get debt default or oligarchy.

It currently works in the U.S. -- assuming you believe the U.S. is not dysfunctional -- because while we have retired folks, they're just a small part of a vastly more diverse electorate. And even then, you'd imagine they would bring some of their experience in the economy to bear on their current decisions. A nation full of people who have never economically participated would have no data to decide or discuss which voting decisions to make. It'd all just be about more consumption.

In fact, assuming you could make it work, it would end up with folks voting in short-term bumps in UBI increases at the expense of long-term budgets, for much the same reasons as corporate boards vote in CEOs who can increase the share price short-term at the expense of long-term strategy. Only way out of that is tyranny/oligarchy.

Note that I'm not saying it won't work. I want to see more experiments and real data instead of all of this arguing about how many angels can dance on the head of a pin. Real data beats this kinda stuff hands-down. I'm simply saying it's an interesting argument that deserves some attention -- especially when looking at the results of the experiments when they roll in. The last thing I would want to see is something like YC doing an experiment where the only people looking at results were folks who were already true believers. That's total crap. You want results you can throw rocks at.
I'm sure you can find specific cases where it isn't the case for critical systems, but for the most part, I've found it to be true (having worked in the nuclear power, power electronics, electric grid, and ICS/SCADA industries). Sure there are cases where software fails, but in my personal, and anecdotal, experiences, software serving critical infrastructure is held to a much higher standard.
The first publically declared African feminist. Please help me send a message
Hi,
My name is Ousmane Ba,
sharing my storry as war victim and how I am contributing to the cause of peace, I became perhaps the first African to decare himself a feminist, a huge champion for girls education and women empowerment. I want boys and men to know that being a feminist is not a bad thing and that we can empowerment girls. People say I speak like Obama. I do not know about that. I am just being me.

Please help me pass this message out, so that more boys and men can respect and support women.

Please find the video attached below

https://www.youtube.com/watch?v=21GCr-OePe4
Your comment is correct but getting downvotes (including mine) because of its tone / manner of statement. Don't say "You don't know anything about X", say "You don't seem to know about X, here are examples A, B, C... etc."
I get that prompting for an iCloud password again adds an extra step, but if someone has your unlocked phone they probably have enough (email, SMS, phone) to take over your iCloud account anyway.
Were you generating CSVs or importing them?
OP3 owner, I love my device.

But I run LineageOS. It's far better than OxygenOS, which trouble knows no end.
Does Murdoch (an Australian national) own Fox News still?
Yeah its a problem for domain names too: https://www.xudongz.com/blog/2017/idn-phishing/