skysight-inc/HackerNews huggingface dataset:
I spent night and day wasting my time away trying to make sure my apps are secure enough. I am never satisfied and it wears me down.

"I need to change my random token generator to use the one that comes with openssl, but then I'll have to rework a huge part of my application. Eff it, I'm doing it. "

Mean while Duolingo just saves the password in the database and gets on with it.
Nike now does regular audits of their factories to ensure compliance of good working condition requirements. They've improved since their factory fiascos in the 90s. Don't think they're perfect, but they seem to be trying.

https://about.nike.com/pages/transform-manufacturing

NIKE’S COMMITMENT TO TRANSPARENCY

Transparency and accountability are fundamental to Nike’s sustainable business approach. The Nike Manufacturing Map discloses the names, locations and demographic information about the workforce at the factories we contract to make our product, and holds us accountable for our chosen source base.
All of the areas where you can actually submit data or login (comments, submit a site) are in https iframes. I'd agree that there are benefits for read-only sites using https, but it's not quite as serious.
Somewhere I have a picture of a car that was parked in the no parking area next to the dummy load for a data center generator. All of the plastic parts on the outside are melted off and the paint is a different color on the side that got the bulk of the hot air coming off the dummy load.

I had not realized it could get pretty hot there but it made sense given the energy they were dumping out.
> You haven't been a millionaire/celebrity I take it

You haven't spent any time thinking about this, I take it.

This is a really gross thing to say. Go read Louis C.K.'s statement as just one example out of many recent ones. There are a lot of rich playboys out there, but just because "they let you do it" doesn't mean you're not forcing yourself on them and you're not a disgusting fucking creep.
AOHell!
On my journey to catch back up with ML after having abandoned it around 2000, I find myself thinking the same things as Karpathy. There is something profound here, and as someone that has been writing software for 40 years since the ripe age of 8, it is scintillating in its potential. I'm working in a field distant from most current applications of ML (DDOS detection/mitigation and "cyber" security), and so I'm reaping the benefits of being able to take this stuff and apply it to lots of problems. Results are shocking so far.

It feels more like training a cybernetic animal than programming, and I'm ok with that. It's a puzzle of trying to figure out how to morph reality so that ML systems can gain traction, and that's just a fascinating new way of looking at problems.

Great article!
Am in same boat as you. Its effecting individuals more than the companies they are aiming for.
I think what landlines were used for when they were first rolled out are very different from what cellphones are used for today. Snail mail, for me today is almost exclusively junk mail. I still have occasional formal notices from my bank or companies I do business with and a few times a year a seasonal card from family. I bet my attitude towards mail differs from people's attitudes 50 years ago. I think the same goes for telephone calls.
This reminds me of the story summed up in this quote:

There was no such thing as an average pilot. If you’ve designed a cockpit to fit
the average pilot, you’ve actually designed it to fit no one.

Good enough source here: http://wmbriggs.com/post/18291/

Humans form a very high-dimensional space. I'm not sure what to make of the point about orthogonality in that regard.
How to convert HEX colors to UIColor in Swift 4?
Show HN: An Introduction to React and the Surrounding Ecosystem in November 2017
I agree with the sentiment of his article, but I also agree with you. The article is written in a condescending and arrogant way.
Looks cool, but right-click and drag doesn't seem to work properly. (Firefox, Mac OSX.)
Having trouble understanding a lot of the specifics of this--though broader concepts grok-able. Before I go blindly googling around to get up to speed--

Any recommended foundational texts to begin with?

Recommended learning trajectory to get to where this is understandable?
Why does everything need to be https? Are you worried someone might find out what kinda lols your into?
Super slow, please use a CDN for the static assets, like the huge *.warm file.
clowntown
Industrial 3D metal printing is a real thing. SpaceX is using it for parts of their Super Draco engines.
it's mostly pointless to have an https iframe on an http site, as you won't know if the page is intercepted and the iframe is replaced
Wow, they are less than 2 mi from the ocean and they had to dig 1300 feet to get water, including about 850 feet below sea level! That must be some pretty impermeable ground they've got.
At least these are all in the BMP...
Games, payment, micro-transactions.
The IF competition games are supposed to be judged in two hours. In theory this motivates the authors to keep their games shorter.

Some of my favorite short games: Photopia (http://adamcadre.ac/if.html#photopia), 9:05 (http://adamcadre.ac/if.html#9:05).

The last two are more narrative genre, it is very hard to get "stuck".
In the classical puzzle genre try Balances (http://ifdb.tads.org/viewgame?id=x6ne0bbd2oqm6h3a) (unofficial successor to the great "Enchanter" trilogy games from Infocom).
It's the dumbest app ever. The UI blows.
Make it fully automated, self driving, on controlled trackways with entry and exit on the opposite sides of cars.

Why? They do it with elevators don't they? I recall when all elevators had operators - yes a person in the car to push the floor button.

This evolved from old systems with a hand operated cable line with a window the operator put his hand into to pull up/down and to level the car. This led to elevator operator unions, and strikes - which led to fully automated push button elevators when the unions got whiney and greedy.
Operators were getting $50,000+ for riding and pushing buttons. .

So the were all left out in the cold and courts supported automated elevators.

Then there were the movie projector operators, relics of the carbon arc in the old days. Now fully automated digital projection rules this work place,
Question: Is it possible she simply typed her password into the wrong field when registering for the account? It seems like all of the fields would be an appropriate place for the name of, for example, an organization.
If you think this is bad... here are the emails I got from Robinhood after I had to contact them for my statements (since the app wasn't loading them):

> Robinhood: For security purposes, we'll need you to verify the following: Your username, the last 4 digits of your SSN, and your DOB.

> Me: (reluctantly sent them the info, because what else could I do)

> Robinhood:
Attached is your requested document. For security purposes, we've encrypted it and set the password to the last 7 digits of your SSN.

(In case you don't know, SSNs are only 9 digits, and the first 3 digits are known based on the location of either where you were born, or where you got the number -- I forget which. I recall the following 2 are also predictable, though I forget exactly how. In other words: they are not hard to guess. And don't forget the whole thing is 9 digits. Meaning it'd take less than a minute [if even a second] for anyone with a copy of my statement to crack it AND extract my SSN from it.)

> Me: (Sends them an email lecture telling them exactly why everything so far has been extremely alarming.)

> Robinhood: Robinhood Financial is a member of the Financial Industry Regulatory Authority (FINRA) and the Securities Investor Protection Corporation (SIPC). We take the security of our members' private information very seriously.
Robinhood uses bank-level security measures to protect your personal information. Your password, social security number, and other sensitive data are encrypted. Our mobile and web applications communicate securely using SSL and 256-bit encryption.

(emphasis mine)

Oh, and to top it off, it turned out they had forgotten to actually encrypt the document with my SSN like they had claimed to. In other words they aren't even following their own security policies. Which I'm not sure whether to classify as a good thing or a bad thing given what their policies were.
I have spent time thinking about it which is exactly why I am not just jumping on the same train as you.

You are welcome to feel it's a gross thing to say I am not expecting you to understand what I am talking about. I was simply answering someone who asked for my opinion.
I don't think software 2.0 is a good name, because I don't think the programs we write right now and neural nets are that comparable.

They're more complementary than overlapping. It's something new in the toolkit, not something that replaces existing programs.
Do you know any undergrads? Writing notes in cursive was was essential to me taking a bunch of math and CS courses at once and doing well.
I think it is a pretty unnecessary sentence. 81 comes from the 9x9 kernel size. It is obvious that those will overlap despite of the stride of 2. Maybe they mean the projective field.
That's a good point. I only really deal with https-enabled sites any more - hadn't even thought of that.
I'm inclined to trust in the intentions and competence of the people at Duolingo because I've worked with them before, so with that disclaimer:

Is it possible that this person accidentally mixed up the username and password fields when editing their own account? Or, some type of browser auto-fill mixup put the password in the username field when editing the account?
Presenter: "Johnny cries, Johnny smiles – Johnny Cash!"
> RubyGems defaults to newest version available. So if you don't specify a version for a dependency and they create a breaking v3.0

No it doesn't. RubyGems allows you to say "I want to depend on the latest 2.x", and if your dependencies use semantic versioning it works pretty well.

You still want to pin your dependencies versions for deploying the versions you tested, but you should be able to safely upgrade using that scheme unless your dependencies screw up.
Since when did you have to join Medium just to read something? Beginning of the end for Medium then, I guess.
Bored teen cuts finger on metal. Parent sues you and Snapchat.
It took Facebook and Google a while to nail their advertising strategies. FB shares dropped down from an IPO price of $38 to less than $20 at one point.

Its a very competitive climate and Snapchat needs to keep innovating, but I wouldn't write Snapchat off too early.
The aching and the beautiful often come together, strangely. Pain makes poetry.
Consider BM25 as a newer substitute for tf-idf https://en.wikipedia.org/wiki/Okapi_BM25
It feels like in both places that's the location of the username. Forget having passwords in plain text, for what reason would passwords be prominently displayed?
I'm not sure she is so well adapted as the media as made her out to be (physically) considering she is on antidepressants.
This article emphasizes the positive without taking a close look at the risks. Molten Salt reactors have been seriously problematic so far because the corrosion and wear of pipes and valves has exceeded predictions. The assumption here is that we now understand all the factors involved and can control them, but even with that it is not clear that the costs of doing so will balance out over the long term. Having to make super high tech coated pipes and valves for everything and replace them frequently adds up to significant overhead while the reactors are only ever that: just reactors.
Yup, we've got that here in AU - but I gather the de-listing process isn't especially arduous, given the potential $-incentives for developers to push through.

It seems to rely on the presence of motivated defenders, with sufficient time and resources - a big ask given what they're up against.
It makes paying back debt easier, doesn't it?
Tom Swift and His Photo Telephone
Show HN: The Submarine
> It's only a matter of time before a good photo editor or digital paint application is ported to the web.

There already is, for photos: https://photoeditor.polarr.co/

Handles RAW and everything, all client side.

Also Adobe Lightroom now has a web interface. I think they have an online Photoshop as well.
I think it's no coincidence she specifically works on animals in /captivity/, her public talks basically start with how she was "broken in" like a wild animal as a child having to learn to act like a "normal" person.
Anyone exhibiting Mr Fishers phobia needs to consider seeing a therapist - Its going to cause them major problems at work and socially.

I have noticed a reluctance to use the goddammed phone as intended - rather than call me to discus something important and time sensitive people will just add a task to base camp in a some what passive aggressive way
Yes, it is possible, the complete silence from Duolingo is as much a frustration as anything.
Mathematical proof did not originate with number, but geometry.
Datasheet here: http://mediatek-club.ru/datasheet-mediatek-mt6261a
I've had exactly one spam call ... no, I lie, two but from the same company. GoDaddy.
Facepalm. I actually was aware of the han unification of 自+犬 and 自+大 as 臭 (U+81ED), but forgot about it. There's now also 臭 (U+FA5C), that is 自+犬.
I don't disagree that it's possible to beat the big three, but even prior to the snap IPO, the tech market felt a bit bubbly. There will be some big losers in your list too. It's worth saving this comment for posterity.
https://https.cio.gov/everything/

Privacy is beneficial in itself, but also:
> protecting less sensitive sites strengthens the protections of more sensitive sites

Any site that can be MITMed is a site that can be used to gather personal information and escalate from there. Especially seeing as most people reuse passwords like crazy.
> 3 billion monthly active users.

I was trying to suggest that a lot of those "users" are not sources of income/data. I'll bet a lot of them are either bots, or humans smart enough to use an ad blocker. And most of the MAU humans are probably in a 10-year age range, having signed up when FB was useful.
This does seem to be very likely, I've spent too much time to count trying to investigate bugs that should not exist only to discover that the issue is of PEBKAC nature.
Sure it's normal for people to make an assessment on other people. Some of those people fall outside the bell curve.

The middle of the bell curve for a particular trait (e.g. talking on the telephone) is normal - so about 90% of the population.

You want to redefine the word normal. OK, sure. What should I use? Different? Strange? Unique? Flower? Snowflake? I don't know. Sounds pretty odd behaviour to me. Not wrong, not bad, not dirty. Just weird. Odd. Not normal.
Yes, everything does need to be HTTPS. If not for user privacy then for response integrity - to be sure the response hasn't been MITMed.

You might think most sites are innocuous, but it depends on where you live. I could see this site getting classified as "hacking/encryption-related" by something like sonicwall's firewall (HN too). What if your government tasks your ISP to round up all those trying to bypass state firewalls? Heck I live in a western country where our government is misguidedly angling to ban encryption. For the minimal effort involved, I believe all sites should be https.
She gave a wonderful talk at google in 2014 about the different ways humans conceptualize the understanding their surrounding world and how her thought process differs from that of non-autistic people.

"The Autistic Brain: Thinking Across the Spectrum" [60min]

https://www.youtube.com/watch?v=IA4tE3_2qmI
I don't think Mr Fisher is hearing impaired though donot AWS and other US institutions offer typetalk or text relay services.
I’m saying that it doesn’t work well because Do Not Disturb blocks all notifications.
And dont forget, robinhood is a b$ company now...
"and how Russia used it during the election to elect Trump"

Stopped reading right about there.
Here's the cereal shelf of one of the larger supermarkets in the city centre of Copenhagen (still a fairly small supermarket).

Kellogs' products are on the bottom, only two boxes have child-appealing designs.

There was nothing worth photographing in the dairy section. One product was designed for children (cheese stick thing). A chocolate milkshake had a cartoon logo, but it has probably had that logo since 1950.

https://ibb.co/cQco8G
> From an operations standpoint [...] many of the logging statements I'd like to see are pretty routine and let me know that something is actually running as expected.

Not to mention that these "everything OK" logs allow to track where exactly
some data landed or where to look for more context. Logs are not just for
reporting errors.
I think you just killed the goose..
Although people talking out of their ass about McLuhan have always annoyed me, that conspiracy nut who claims to be a 120 year old Bob (Neveritt) Dobbs is hilarious — his stuff is past performance art.

https://www.youtube.com/watch?v=T1JbomcBkck

https://www.youtube.com/watch?v=UY4HG9YCUJk

https://www.youtube.com/watch?v=D9kMq131GyE

https://www.youtube.com/watch?v=CRJr1kKYFYY
Arguable we could say the same from IAR or WindRiver?

I would love it if all these companies were more price transparent but ultimately they are not selling in high volumes, like the likes of MSVC, so I would hazard guess they probably depend a lot more on the margins from each individual sale.
刀 simply means knife/sword, or knife in general, while 刃 means the sharpest part of the knife. In fact, 刀刃 is its own word in Chinese, in this case meaning the blade of a knife.
If you're looking for physical site ip addresses rather than dns entries, SPF records may be worth looking at (if there are distributed mail servers and outbound mail doesn't all go through a single exit point).

Mail headers may be similarly informative if you can get one or more email messages out from within the office.
We can't build a road by ourselves.

We as individuals CAN decide where we spend your money.

Two very different scenarios. You very different level of civic duty.

Could regulation help? Sure, Uncle Sam gets lucky from time to time :) But it is never as powerful as the market. Until the market says "screw Amazon" Amazon will continue to do what rewards it and its shareholders.
Hi there, I'm an engineer on the Schools team at Duolingo and I remember looking into this a while back.

A couple of important things to note here:

1. We do store all passwords hashed. We do not store plaintext passwords

2. That spot in the subject line for the update is for the name of a classroom in the Schools product. When we investigated we realized this was just a case of user-error where they must have typed their password in as a classroom name when they created a class.

3. I'm not positive if we ever responded to the report... I'm trying to find the thread. If we didn't respond, that's my fault and I'm very sorry. Not a great user experience to think your password is stored in plaintext!

I'm trying to find the email thread where I first encountered this so that I can understand more thoroughly what's going on.

UPDATE: The discussion we had internally was a slack conversation, not an email. I verified that one of the user's classroom names appears to be something someone would use for a password. Once we determined there wasn't a security issue, I didn't ask for the reporter's contact info or anything like that. I'm really sorry to Arron and his wife for the poor service & bad customer experience.
Pensions are inherently unsustainable because they guarantee returns. What investor in the world is ever able to guarantee returns, especially at the volume of clients that get served by pensions? It is likelier that the pension:

- gets rid of the obligation by selling it to someone else: https://www.forbes.com/sites/joannmuller/2012/06/01/gm-unloa...

- raises more capital or debt to fund the pension (or in the case of government pensions, raise taxes) and kick the can down the road: https://www.wsj.com/articles/gm-to-take-on-3-billion-in-debt...

- just lets bankruptcy kill the obligation: https://mobile.nytimes.com/2006/10/24/business/retirement/24...
They pretty much did the opposite of what Cassandra guidance recommends for GC tuning.
401k’s don’t have taxes and Microsoft employees don’t get secret better investment options than you do. Just move it into Betterment and forget about it.
I don't mean to imply that it's necessarily the fault of the individual. Even it the password did get entered into the username field (for example), it could be that an autofill bug, or just bad UI was the cause.

If this was the case, though, it means that there's there may not be reason to assume that passwords are not stored safely.
It's a bad thing.
For working example, see Singapore. That being said automated systems still require maintenance and maintenance engineers could get unionized and still have similar impacts.
Good thing there's still Discordianism for those of us who are more serious.

Hail Eris.
Yes! I met him in person at multiple local interest group meetings (probably the Almaden Cycle Touring Club and/or SVCS) back in the 1980s.

It sounded like a great lifestyle, if you could maintain it and/or had means. His data-input system using four keys on each handle to enter data a byte at a time while riding could be replaced with far more efficient techniques with off-the-shelf modern hardware (he had to innovate all of his stuff on the fly, with various hardware experts contributing prototypes).
Either one accept that other people may have a different views

People are entitled to their own views, but not to their own facts. Denial of facts that can be openly verified by any person is clear and convincing evidence of bad faith, and I have no rhetorical obligation to be charitable to someone who does so.

When you can acknowledge verifiable reality, though, perhaps we can discuss it.
Not really, the Phoenician alphabet, which considered as origin of the writing system of many western languages created somewhere around 1200 BC. Oldest Chinese oracle script is discovered around the same time.
So Nike (and others) de-swearshop'ed itself because of legislation? More and more food companies are cleaning up their ingredients because of legislation?

We all know Uncle Sam's track record: great for wars and the MIC, subpar for just about everything else.

If people can give a shit about how Nike makes a pair of kicks, certainly Amazon can be held to the same standards.

Uncle Sam can't get the food pyramid right. It's not going to save us from the likes of Amazon. There's little evidence that it's up to the task. Ideally, yes. Realistically? Too doubtful.
> start a new car or airliner manufacturer since the 1920s (except for Tesla

Porsche (1931)
Nissan (1933)
Volkswagen (1937)
Toyota (1937)
Kia (1944)
Hyundai (1947)
Honda (1948)
Land Rover (1948)
SEAT (1950)
Lotus (1952)
Subaru (1953)
Lamborghini (1963)
Dozens of Chinese companies in recent years...

On the aero side:

Antonov (1946)
Embraer (1969)
Airbus (1970)
Diamond (1981)
ATR (1981)
Cirrus (1984)
Bombardier (1989)

These lists are very far from inclusive.
This is just a regular article submission, not a "Show HN". Please read the "Show HN" guidelines: https://news.ycombinator.com/showhn.html
I can't read any of these characters but to me the difference between 已 vs 己 is as clear and obvious as the difference between 𠮟 vs 叱
Oops looks like a login needed. Cue an exodus from medium in 3...2...1...
Location: Westbury, NY (Near NYC)

Remote: Yes

Willing to relocate: Yes

Technologies: Java, Android Studio, Git, Gradle, Kotlin, SQL

Resume: https://commanderpepper.github.io/Humza Ahmad Resume.docx

Email: ahmadhumza7@gmail.com