skysight-inc/HackerNews huggingface dataset:
I've been running forums since 1996 using almost every major forum software that has existed. I'm currently running my own software (which we tried and failed to commercialise), and the largest forum I run is https://www.lfgss.com/ with 250k monthly unique visitors, but the long tail is very long.

We actually now survive more on donations from forum users than any advertising. About 2/3 revenue is donations, 1/3 from affiliates.

Affiliates work really well, but the rise of cash back sites mean that the revenue per sale is dropping. Affiliates work well for delivering new customers, but cash back is leading to retailers paying out for retaining customers which means the cost is shifting from acquisition to retention, which is traditionally where they make their profit. Hence cash back is leading retailers to make the terms far more strict, shorter cookie periods, lower %, etc.

Donations have been the saviour. As I'm running the sites as a platform, the larger sites effectively subsidise the young and growing sites.

Also, as a platform: 1 volunteer (me) runs all of the sites. Moderation is by communities, and has proven very effective whilst not requiring any additional cost. Though I did invest in some good lawyers for the T&Cs to make sure that approach kept the platform free of liability from individual sites on the platform.
What claims have they made? That it can’t be fooled by masks? No. That one in a million other faces can open your phone. That’s still fewer people than could open you phone with Touch ID.

At no time that I’m aware have Apple claimed resilience against masks or gelatin fingers.
They're an "Interesting" company...

I'm not sure the authenticity of this story. The authors of the hack claim to be: "the leading firm in network security, software, smartphone manufacturing (Bkav.com/Bphone) and smarthome"[sic] and one of their products is a "gold plated SmartHome for super luxury villas".

I wonder if it will work is ordinary luxury villas...
Remember: Attacks always grow better, not worse. The bluetooth distance records grew quite quickly.
Two words: incremental improvement.

3d printing is getting better and cheaper all the time.

Cameras and software are getting better all the time.

If someone cares enough to invest the R&D it should be pretty easy to automate everything between getting photos someone and printing the mask.

The point is that using biometric authentication as an all-in-one isn't secure.
Also, it took them a whole week to achieve this. So this is definitely not something someone could realistically do to you unless you are a some sorts of high-profile target.
The company I am looking for to work
Hello,

I am looking for a company which,

- Work and Life balance is respected for 8 hours 5 deys in a week
- Employees help and smile each other
- Women and men treated and paid equally for the same job
- No mobbing at all, with real job security
- Offered jobs are permanent, not contract based to exploit workers
- A real equal employer who discriminates no one
- Invites employees to job interview for hiring them, not marketing

I am a Computer Scientist & Engineer, ZCPE PHP Expert, Full-stack, back-end and front-end with JS and React experience. I also have a mobile app published in Google Play store, so I develop for Android and Ios too.

mynameismidori.com/resume.pdf
Artists aren't particularly well paid.
Bitcoin Is in Wild Upheaval After the Cancellation of the Segwit2x Fork
In the video, he shows the iPhone being unlocked with his own face at 1:06:

https://m.youtube.com/watch?v=i4YQRLQVixM
And then the question would have been if it could be beaten after the system was given time to learn.
No, that's OpenStack. :)
Top Invoicing Tools for Freelancers (2017)
Most of your Californian friends would need to pack extra underwear for the first few weeks of commuting in MA.
Would it be possible to just capture the IR beams with a camera, and use a projector to send to the phone's sensor a new set of IR points as they would appear if they were projected on an actual 3D model? This would allow to use only a digital model of a face, without the need for printing it.
<here was a misleading comment>
What do you mean with their state of self-awareness, could you explain ? More like, I wonder how does it look from USA.
Getting Things Done is by far the most influential book I've read. It has changed the way I think about everything.

However, I have never been able to find a good implementation of the system. I know that David Allen (GTD) and Charles Simonyi (Intentional Software) were working on something at some point, but I haven't heard anything since.
Also learning Python and intending to learn about pandas and other data tools with this: https://github.com/jakevdp/PythonDataScienceHandbook

I haven’t made it very far yet, but so far it seems worth recommending.
It seems much more secure than fingerprints, since that was defeated much more quickly (within a couple days?), with easily lifted prints and a more cost effective (though still somewhat lengthy) method.

This, in comparison, seems much harder and consequently further reduces the realistic attack scenarios where people have to be worried. For most people this is a non-issue. (It mostly already was a non-issue with fingerprints, for the same reasons.)
You have been exceptionally rude to a commentor that has not been rude at all but given some insight about the true difficulties of the making a viable CPU business.
I hope this does not result in me getting 3D face scanned as I pass through border control
You could do that by putting in actual driving standards - proper test procedures for example. As a society we aren't bothered.
Isn't there some form of case folding of one of the characters into the other?
I love trains. As long as I don't have to get on one.

Car trains is an idea I could buy.
This is all fine and good. Just don't improve it between Boston and any city you expect people to be able to afford to buy a house in.
> No it's not: it may as well be that the function applied to the perceived colours, while takes neighbours as an input - still outputs the same 256^3 colours.

Kinda like those post-processing shader effects (like blur etc) that look at neighbouring pixels to output a 256^3 colour value for the center pixel. The pixel value never leaves the 256^3 range, but its value is adjusted based on what surrounds it.
Mercedes markets luxury bicycle
Social Studies Dissertation Organized Crime London
I don't, sorry, it's in my inbox. The part I snipped is completely unrelated to the incident.

As far as BGP goes, Halabi's _Internet Routing Architectures_ [0] is pretty much considered the "bible". It's really old nowadays but it covers BGP4 (the current version in use) and not much has really changed.

I'm sure some of the newer BGP books are excellent as well but I can't personally recommend them as IRA and the (old) CCNP BGP book are all I've ever read/used (while preparing for the CCNP certification and in my day job).

Of course, pretty much everything is covered in RFC 4271 [1] (and updates) although the RFCs can be a bit "dry".

[0]: https://www.amazon.com/dp/157870233X

[1]: https://tools.ietf.org/html/rfc4271
I70 joins I76 (the Pennsylvania turnpike) in Breezewood, so traffic would be slowed at the toll-booths even if a proper intersection was built. I suspect that there was some political wrangling that resulted in the US30 transition though - the truck-stops, restaurants and tourist-traps are loving it!
He does no such thing. The passcode is never entered in front of the mask. They also explicitly state in their Q&A that the passcode was never entered in front of the mask.
Most legacy extensions should already be broken on Nightly, are they not?

They've refactored tons of code under the hood, basically all the changes that they've wanted to do for years but couldn't do, because it would have broken too many extensions over and over.

We're also talking about all the performance improvements that were made since Firefox 48. The majority of legacy extensions are not multiprocess-compatible and they would not have rolled out multiprocess in 48, if they wouldn't have known those multiprocess-incompatible extensions to be deprecated now with 57. Otherwise AMO would have basically been reverse Russian Roulette, where only roughly 1 out of 6 extensions will not kill your performance.
Adding things to calendars is the biggest habit I've built from reading the book years ago. That's the one thing I recommend as the best takeaway if you only have one.
This.

If you were willing to put up with the downsides the price couldn't be beat.
> For better or worse a lot of COBOL code also gets replaced when new compliance measures like Basel II and III are implemented.

That's really not my experience.

I was brought in to maintain, and manage a series of changes to a major bank in Australia, where I trained a full-time replacement before leaving.

We replaced COBOL code... With more COBOL.

> Additionally, there are even transpiler-like tools that convert COBOL to Java code. The resulting code of course is horrible but at least it then is available in a language with a long-term maintenance outlook.

Not just horrible to look at. Slow. Performance that is hundreds to thousands of times slower than the pre-existing code. That's just not acceptable.

---

Now, we were writing "new" stuff in a different language - C++, because IBM has a wonderful linker framework between Fortran and C++ on their mainframes. But the COBOL is staying put, because nothing can really replace it without unacceptable downtime or performance regressions.
I don't see any suggestion that this is what they did in the demonstration. In fact, quite the opposite is suggested:

"Q: Were you able to use the mask to unlock the iPhone immediately after freshly enrolling the real face? The reason I ask is that, according to Apple's whitepaper, Face ID will take additional captures over time and augment its enrolled Face ID data with the newly calculated mathematical representation. Can you describe precisely how you went about conducting this experiment?

A: It does not matter whether Apple Face ID "learns" new images of the face, since it will not affect the truth that Apple Face ID is not an effective security measure. However, we knew about this "learning", thus, to give a more persuasive result, we applied the strict rule of "absolutely no passcode" when crafting the mask."
The solution is obvious: genital scanners!
https://www.youtube.com/watch?v=0zu4XlM_89s
So it does. It seems that the iPhone is better at recognising faces than me at least.
Photos are not enough, they would need a high resolution 3D scan on the person’s face as well. Also they didn’t just use 3D printing, they had to use different fabrication methods and materials for different parts of the face part of which was ‘simply’ hand sculpted. This is not at all trivial to automate.

But then we already know it’s not as secure as two factor authentication and a random passcode. Touch ID could be fooled with predict fingerprints as well, though with the deep subcutaneous scanning in later versions it was much harder than with the first version. Anyway, Nobody who critically depends on the security of their phone should use Face ID or Touch ID anyway.
Whilst they might not consider it fixable, that doesn't mean they're not going to do the best they can!

Chrome does support rel=noopener, _and_ the "fairly good demonstration" that page links to doesn't work in Chrome any more.

https://caniuse.com/#search=noopener
> If you’re going to make arguments like that though it’d be easier to just keep things the same.

For the government and businesses, that may be true, but if taxes were sales/VAT based instead of income based, then it would remove a significant burden from individuals (since they would no longer have to file taxes every year).
I'm guessing people still running XP are running Firefox or Chrome anyways, I'm not sure if IE8 can even render most pages on the internet. That would be like trying to surf the net with Firefox 3.5 :O
That is very true. Baking can go really wrong if you are not precise.
The special processing is done to large areas of skin, so I would say that it is makeup powder to make the plastic have IR reflective properties of real skin.
Best Bike Rentals Service in Copenhagen, Denmark
I've read somewhere (probably in one of Troy Hunt's posts) that biometric data should not the be password, but rather the username. Maybe we're looking at this the wrong way. Biometric data seams to be equivalent (or at least similar) to a public key.
Black Friday and Cyber Monday 2017 Deals
One is that if you open a window, you can change the URL that's loaded later.

In the example that Google's page links to they change it to a data: URI - which no longer works in Chrome - but they could just as easily change it from http://good.com/ to http://evil.com/ - which would still work in Chrome - and hope you don't notice.
That's surprising. To me it looks like you sped through an intersection without slowing down or looking out for cars.

You hit the car, the car didn't hit you.

Also, bicycles at that speed can stop very short if brakes in good order. You didn't brake! Sorry... I don't mean to be rude. But I ride in the city, and there's no way I'd speed across an intersection without making sure it was clear.

Lucky you're living in Amsterdam because in Australia you would be paying for damage to the car!
If you want to check whether either of two values is NaN, rejoice, it is now optimized to a single instruction on x86 by GCC 6 and Clang 3.7: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63387

You write isnan(x)||isnan(y) but the compilers now optimize the whole thing to one instruction.

If you want specific syntax you can use the builtin unordered(x, y).
This is the first step, it's only going to get easier from now on.
A pillow battle
i enjoyed the presentation, he has a flair for the dramatic.
So you think that calling out someone who makes (very) public, demonstrably false statements for pretty clear personal gain is internet bullying? I would call it being held to account - what sane society would listen to such a ridiculous story and not call it the bullshit it obviously is? Allowing that to happen would lead to a society where fantastic lies are the norm and you’d never know if you could trust anything anyone would say.

If I made statements saying that not only did I discover, but also made love to and raised the children of a dragon to international media, do you think it would be bullying for people to tell me it’s nonsense? If so, you’d have a pretty spectacular definition of bullying if you ask me. We should not allow liars to go unchecked.
> Because... we are the leading cyber security firm ;)

But you don't even use HTTPS. Why?
Human labor cost for example, but apart from that: how many masks were used to trick Face ID? I would assume it was not prototype number 1 that did the trick
I also run searx self-hosted, configured to proxy all its queries through Tor. Occasionally one of the engines doesn't return results (probably due to blocking), which is barely noticeable since several others still work, but normally all the engines including Google return results.

Since searx doesn't store cookies returned by the search engines, and I'm using it through Tor, I think this is a significant improvement over sending all my search queries to Google directly from my laptop.
The only implementation I have found worthwhile is paper, and to a certain extent, plain markdown/org files in Dropbox. Everything else, like OmniFocus and whatnot has had severe issues with the flexibility inherently required.
This is not how searx works.
They unfortunately sort of had to rush it. They needed to deprecate legacy extensions, because the majority of those are multiprocess-incompatible and they needed multiprocess to stop the bleeding of users.

It's really quite visible, multiprocess was rolled out in Firefox 48 on the 2nd August 2016: https://www.netmarketshare.com/report.aspx?qprid=1&qpaf=&qpc...
Nothing is secure about a determined attacker (in the same way the door to your house doesn't resist being battered with a ram)

The issue is convenience together with good enough security
I can appreciate that, but I don't think I would enjoy developing using assembler or older languages like Fortran and Cobol.

But yeah, totally depends on the type of person and while I could potentially see myself doing these things I much rather develop in newer languages that makes my life easier. It isn't like it's bad pay for modern languages anyway.

The compensation would have to be a lot in order for me to even consider it :)
well, we only need a process to rotate faces now every month and a minimum complexity check because faces with only one nose are clearly not secure enough
It's definitely a better situation than an attacker being able to steal your fingerprint off a glas or other everyday object. Copying a fingerprint requires very little skill.
> These systems will be fixed and then tossed out

> Nothing is infeasible to replace, it might be costly, but not infeasible

Too costly. Which does make it infeasible.

Five minutes of downtime can result in multi-million dollar profit losses. (At least that's the quote I was given by the CTO when he was explaining the scope of my role when I was consulting at a major Australian bank).

When you have literally millions of transactions a second you need to handle, building a new system to handle the same:

* Regulations
* Specifications (Some thousands of pages)
* Edge cases
* Load

Turns into a multi-year, multi-million dollar operation that will likely be outclassed by the old system by the time it is ready.

No manager in their right mind would approve such a project, no matter how forward-thinking it may be.

Not impossible, but entirely infeasible.
Zoes Bingo – Play Online Best New Bingo and Slots Games
Advanced fingerprint recognition devices recognize things that are not left on things that you touch. They look under the skin at blood vessel and measure body capacitance and other statistics. That's why there is the weird light on the "biometrics" device in the airport, to be able to see through the outer layers of skin.

https://en.wikipedia.org/wiki/Finger_vein_recognition
That's a good point but I'd argue the rights of the existing residents to a good view is lesser than the right of all potential new residents for reasonably affordable housing.
TouchID was spoofed in 2 days and FaceID in 7 days. Still, I feel like the difference in time is not that relevant.

I think the biggest difference in time was given by the "attacker" trying to understand what the FaceID system is looking for exactly, as an algorithm. But once they know that, future attacks should be much faster. Like if they try to bypass someone else's phone, it shouldn't take another 7 days. It could even be hours.

With TouchID they already knew what to do - clone someone's fingerprint. There's no machine learning algorithm that needs to be reverse-engineered there.
>Most of the major pharmaceutical companies continue to pursue the amyloid and tau pathways. Dementia Discovery Fund complements their work by supporting startups as they explore less mainstream approaches to treating dementia.

That's very encouraging. Because what if it's something else?
They realize that at Apple too. Face/Touch ID can be forcefully disabled for enterprise. However for an average Joe this is not a threat.
>> Exactly zero members of the military get to vote.

Fine, fine, bad turn of phrase- it's like you say, the vote is for the citizens who've finished their service (which is voluntary... except you don't get to vote without it, I think).

Really, I don't see why you need to doubt that Starship Troopers is one of my favourite Sci-Fi works ever or that I read it "carefully". I haven't read it in ten years, at least. Does that sound so uncommon to you? I also haven't read Consider Phlebas in at least that long, so I hardly remember the finer details of it (I seem to remember Horza was hit by a train he derailed...?) and it sure blurs in my mind with other Iain M. Banks stuff- but I do remember very well the effect those books had on me when I read them. And there's few works I remember enjoying that much.

Sheesh. Happy now? What happened to "Assume good faith"? Or not insinuating people haven't read the (article)?

>> In that context, it's the powered armour and the bugs that are the "convincing fluff in an already interesting" speculative portrait of an alternative to universal-franchise democracy.

OK no. Because the book goes all the way off-world, where the war with the bugs takes place and gets down to detailed descriptions of fighting. If the war was not the focus and its purpose was just to create an ambience, it would only be alluded to, never directly described- it would be a McGuffin, a ploy to allow Heinlein to talk about his future society. Instead, the descriptions of the fighting, and the ships and the power(ed) armour and the bugs are detailed and engrossing -and have influenced much SciFi imagery after them because of that (like, hey, Warhammer40K space marines in power armour).

If the war with the bugs was only alluded to, or otherwise did not take center stage, then yeah, I'd agree it was fluff, used to paint a portrait of a (grim) dark future etc. But when it's the main content of most of the book, no. I don't see it your way.

No objection of course to the fact that Heinlein would never just write a pure action romp, without any attempt at painting a fuller picture of the future.
And yet you yourself said:

> The CPUs you mentioned were simple micro-controllers, they were not designed for heavy processing tasks, they don't even have a branch predictor which is something fundamental to have some significant performance.

So it seems his comparison was fair, after all? Given that the article is about microcontrollers too.
Thanks a lot for this code!
If someone is interested and does not want to copy the code by themself, I copied the code into a jupyter notebook:
https://github.com/davidgengenbach/chrome_history
At least for me, next to each result is a list of the engines that returned that result. I run searx through Tor, so I occasionally find that Google stops returning results for a few minutes.

It doesn't happen often, but it's easy to tell when it does because none of the first page results have "google" next to them, while of course normally most of them would.
I agree with you, sort of..my riding style was too aggressive and too fast on those days..It changed significantly thanks to this accident :-)
There was also a rumor that Apple was having trouble with FaceID recognizing people (it even happened to Craig Federighi on stage!), and they made the security less strict so it recognizes people more easily. For all we know, FaceID doens't have that "1 in a million" False Acceptance Rate" anymore, but only 100,000 which would be a lot closer to a fingerprint.
In Chinese calligraphy one is instructed to emulate the shapes of model master calligraphers, and typically there is only one stroke order that can consistently achieve the look and style of the model characters.
I haven't read the book, since this comes across as new to me...but doesn't this just makes you more alert/self-aware? Which is good but what is the point of adding things to do in a list or calendar if you don't actually go and make them? Is this discussed in the book?
if you apply the mindset to the OS level you've essentially got QubesOS[0] I love what mozilla does here :)

[0] Step-0 of https://iotdarwinaward.com/post/improve-your-privacy-in-age-...
I think the "self-service" passport gates in the EU already do this.
Has anyone low in conscientiousness had any success with GTD? It seems to me like this system is amazing for people who are already very conscientious but not well organised.