skysight-inc/HackerNews huggingface dataset:
Blackhat/Defcon videos aren't up yet but Orange Tsai gave the same talk at HITBGSEC and that video is up:

https://www.youtube.com/watch?v=D1S-G8rJrEk

He also has a blog post about it:

http://blog.orange.tw/2017/07/how-i-chained-4-vulnerabilitie...

The premise is that URL parsing is complex and libraries get it wrong. This problem is pervasive and leads to server side request forgery vulnerabilities, which Orange was able to escalate to remote code execution on Github.
Have you checked your pocket recently?
I'll cop to it: I mostly drink OOLA for the gin and only occasionally buy the whiskey.
> Or, you know, maybe stop talking to homeowners, victims or not, and start talking to people who make locks and safes. Actual subject matter experts rather than targets.

You want to talk to the burglars. They already know the locks and safes and likely know even better how to break them than the creators. In this case, you want to talk to hackers.

The reason Congressional panels do things like this, is to put on a good show. They like to be seen dealing with higher level matters/people as a demonstration of stature.
FBI Again Finds Itself Unable to Unlock a Gunman's Cellphone
most lawyers don’t charge 3k to incorporate. He got taken advantage of, plain and simple.
The first one is not the real URL that you're visiting. Go to Firefox and turn off URL trimming or open the browser console and type window.location.pathname. The server will add the trailing slash, but the browser will pretend that it isn't there.

Or go to http://example.com#123 or http://example.com?123 and see where you end up.

It makes things more confusing, by hiding what is really going on.

It leads to things like otherwise technically-savvy people leaving off trailing slashes on longer pathnames, which can cause other problems. For example, http://example.com/some-path can be much different than http://example.com/some-path/

Some browsers were also hiding trailing slashes on longer pathnames, which seems to have stopped (possibly due to breaking sites).

By hiding the real URLs, even programmers get confused, not just the end users.
Being alive means that you have a random chance of being killed multiple ways including choking, a heart attack, tripping and hitting your head, a medical mistake, killed by an improvised explosive device, etc. Welcome to life. The best way to not have bullets in your body is to just go about your daily life because it is more likely you will be killed by lightning from the sky or a transformer from a pole hitting you.
The same way you do now, as a new adult: apply for a very low-limit credit card, get an older relative to co-sign a loan for you, etc. Over time you build history that shows you are (or are not) trustworthy to lend to.
It works for me; however, I am enrolled in the beta so that could possibly be why it works for me.
FOSS self driving car systems would be a pretty sensible regulation.
Snap Shares Lose 20% as Loss Nearly Triples
If this is really happening frequently, could it the pickers going for items they already know where to find?
Yes (soft fork). But it already took place, so there is currently network capacity to double the tx rate without another fork (although it will likely take 1-2 years for Segwit use to approach 100%).
Investors Sue Ad Startup for Alleged Fraud
this is so cool. I'd love to play a few rounds of Quake team fortress where everyone has to use an oscilloscope as their display.
> Life isn't fair.

Why not?
How does paying the premium help you get job offers?
I mostly just want to thank you for a detailed reply -- you clearly know more about this than I do and I've learned a bit.

In the interest of science, do you have some $35 bottles you'd recommend as better? It seems more productive to get a suggestion and try it than argue all night. (:
Bridgewater Paid $1M Secret Settlement to Female Employee
You all would be surprised how many people will operate and act like him in worse ways. He’s putting it in business, however it looks dumb for what he did, people gamble in casinos, what would you say to that? He had a dream, was dumb, reckless but attempt to fulfill it. Hard life lessons learn the hardest of ways
It's really weird reading this when the first people I can think of that got funding didn't go to a top school, didn't have traction.

Naturally you can expect more top school people to do well because they're smart overachievers.

Is there data you have on this? How big is the difference in funding uptake for students from Harvard versus students from low-class schools like Caltech?
Yup, and that’s the anchor of trust. The walled garden doesn’t make that better or worse... we’re not going to having key signing parties at birth.

That’s why police and public trust background checks look to confirm bona fides with real people over an extended period. You still don’t know that the birth certificate is real in many cases, but you can trace it back to grade school if need be, or if the birth record is from a suspect issuer.
If you think video cards are more expensive due to Bitcoin, just wait and see hard drive prices skyrocket if this cryptocurrency gains popularity. It isn't exactly eco friendly because hard drive manufacturers will try to fill that demand by producing more drives that will end up empty.
and other short-term packaging

The main problem with biodegradable plastics is that they have an inherent "expiry date", the countdown to which begins basically upon manufacturing. Product which could be stored for an unexpectedly long time may start degrading too early and thus become prematurely unusable. Trying to avoid waste myself, I've had a few times where I reused plastic bags which were biodegradable, without being too aware of it, and had some bad surprises when they functioned exactly as designed and disintegrated at the worst of times.

Personally, I'm not a fan of biodegradables --- they seem to be a way for the manufacturers to keep making things which don't last as long, a sort of forced obolescence, under the guise of being "green". Also, overall it probably takes more energy to produce these materials than recycling existing plastics.
It wasn't a real natural transition...

https://en.wikipedia.org/wiki/General_Motors_streetcar_consp...
And, ubiquitous rectangles of light with all actors' attention directed thereto, makes for really bad cinematography
SEEKING FREELANCER | Software Engineer | San Francisco | jobs@aquabyte.ai

Aquabyte is seeking a Software Engineer to help with product and algorithm development for our underwater camera algorithms. We work on stereoscopic 3D video, object detection and segmentation, and other problems in the underwater domain.

Job Responsibilities:

- Build entire application production pipelines from ingest to visualization

- Build new products from the ground up

- Work at the cutting-edge of the latest underwater video research

Qualifications:

- Technical degree (CS, math) from a top research university

- Expert developer with experience building production-scale data pipelines and web applications in Node.js, Python, JavaScript, and Lua

- Excellent with React.js / web development

- Previous startup and product experience

- Ability to work independently and efficiently on projects

Bonus Qualifications:

- Experience with Caffe, Torch, or Tensorflow and knowledge of how to optimize these models

- Experience working with underwater video data

- Previous startup founder

If interested, please email your resume to jobs@aquabyte.ai

Aquabyte is a venture-backed startup that uses computer vision and machine learning algorithms to optimize fish farms. We are invested and advised by NEA and Princeton University.
So was the world view of Richard Stallman in Richard Stallman's Sedentary, Physically-Debilitating Quest for the Gnolden Treasure.

I'm not saying that you imply his wasn't equally skewed. Just that when I read about Stallman or other people who rightly attract admiration this truism tends to be conspicuously absent. But the mythology is just as strong there too-- a rational person would not take years to find out from a specialist that their chronic hand pain was due to repetition caused by an unreasonable amount of typing[1].

[1] https://stallman.org/stallman-computing.html
My role was largely symbolic anyway, and after a few shifts stretched over a three-month period, I checked off that box.

I am reminded of a college class where everyone but me was solely concerned with getting a good grade and enthusiastically encouraging the professor to curve the grades and skip parts of the curriculum. I was the only one who expressed the concern that we might actually need to learn the course materials in order to actually be prepared for higher courses or even, god forbid, a job at some point.
Sure, but you're still the same person/individual underneath. Your various identities share, for example, the same creditworthiness.
Don’t take my anecdote to mean I’m against prescription opiates, there’s no way in hell I would have been able to manage my pain after these procedures without them - in fact I think we’re steering the ship far too hard away from their use in a reactionary move to combat these deaths. But I don’t have any doubt many people have become physically dependent on these drugs and are now turning to the black market - it very well could have been me in another life.

The war on drugs really needs to come to an abrupt end, people who need opioids to manage their pain should have them, people who are hopelessly addicted should have access in a controlled and safe manner, and for crying out loud can we just legalize weed already?
I know I accidentally left my phone GPS on when Google tells me I am and that I should take a photo and share it to Google maps.
Well the red flag was he didn’t even bring in someone that knows how to check out a kitchen and inspect the damn place before committing to it
Nothing to cop to! Local indie gin is pretty much legit.
Coming from a heavy MSSQL background two things pleasantly surprised me about PG's copy, both of which are mentioned rather casually in the article:

1. The CSV data can be streamed over STDIN that is read over the driver connection. This takes the "write a file over a networked filesystem that the DB server has access to" overhead completely out of the equation.

2. The overhead of bulk insert is shockingly low - in some ad-hoc benchmarks we did for our use case, we were breaking even between regular batch prepared statement inserts and copy-based bulk insert at around 10 records, and by 100 records we were already seeing the same factor of speedup that the article demonstrated.
That can be easily arranged when the Government sends the signal to the automated big rig next to you to change into your lane when you are in it.
A really, really high percentage. Being born from a poor country doesn't mean you are poor. Even the most impoverished place has an upper class that lives really well - they form the bulk of your immigrants to the first world.
You're almost describing a high end twist on a mall food court. It's an interesting idea. I suspect this doesn't exist because the high startup costs (multiple full kitchen build outs would like push costs into the 7-8 figure range) would be too high given the inconsistency of restaurant rents.

With office rents working on fairly regular timelines, it's easier to get a new tenant before an old one has finished up. But if restaurants inconsistently go bust, that may mean that you can't look for new tenants until you're already dealing with a vacancy. Given that restaurants may be cyclical, there's a decent chance that you'll face multiple vacancies in parallel. I know you bring up vacancies, so I just mention this as a possible consideration.

I actually think this is a really cool idea, and would love if someone pulled it off successfully. I've seen it done with clothing stores and would love to see the food equivalent.
Requires third-party cookies in Chrome. Also disappointed.
www.chia.network
Agreed, I think CS50 is an excellent intro.
This is exactly what the Government does. It is why it exists, to take from the populous.

http://www.dot.ca.gov/road_charge/news/
So what? People who live in the EU engage in inter-state (-nation, I mean, to disambiguate) commerce daily as well, and that seems to be going no worse over there than it is over here.
I generally agree with this sentiment.

VIPER is terrible except for maybe 1% of projects - and those projects I envision having thousands of developers, dealing with legacy code, and fragile infrastructure.

I've seen companies actively avoid auto-layout and storyboards because "it messes up during merges", so then they turn to ridiculous code-based layout which makes it impossible for designers to work with. However all those storyboard format issues were resolved back in XCode 6 (or maybe even XCode 5). I think XCode 7 introduced storyboard references which allowed devs to work on decoupled storyboards without any possibility of conflicts.

Anyway what I've landed on for production apps is something closer to MVVM: Using Swift's protocol extensions for dependency injection without any frameworks, and having a view interface over the controller for testing business logic. There are other small tweaks, but for the most part, no crazy frameworks, no fighting the system.

I don't agree with the idea that you HAVE to use MVC. You should try out some of these ideas if you have the time/resources and see what works, what doesn't. Make the call based on team/time to market/skills/performance requirements/reliability requirements/etc.

If I'm writing a quick prototype app i'm going M(assive)VC all the way.
I don't deny that wealth gives you advantages. But I think the comic exaggerates it. If you live in a first world country you already are rich by world and historical standards. A minimum wage job will earn you multiple times the income of a person in a poor country. A century ago food used to make up something like 50% of people's income and now even the poorest are fat. There are a nontrivial amount of NEETs that get by doing no work at all.

The comic makes a big deal about education. Yet there's a number of studies that show there is basically zero effect of education and education spending. In a single chart see this: https://www.cato.org/images/testimony/coulson-2-9-11-3.jpg and a nice in depth essay here http://slatestarcodex.com/2016/05/19/teachers-much-more-than...
> If instacart had not even had an MVP ready, the more likely response would have been to wait for next year.

Correct.
Ask HN: What product I should build on iOS and Android? Side Projects?
We are a development agency working on mobile projects & web applications.

Last month was very difficult for us.
2 of our long-term customer's projects were finished & 2 other projects were closed intermittently due to budgetary issues. Some of our pipeline projects are not getting confirmed.

We have 4 iOS developers & 1 web developer with very minimal work.

- Do you recommend building a technical product which can eventually generate revenue in next quarter?

- Building in-house side projects, what sort of planning we need to do?

Cheers
There is a point where the cost of rentention would ensure a failure to survive.

At that point you have to just cut the line.
This is the very definition of animal cruelty!
Ha, my 7yr old twins could explain that one to you. It's just not. You have to make the most of the gifts you are given.
This isn't just lack of experience with financial planning. This is lack of common sense. You can't teach common sense.
> making more room for bad programmers?

That reminded me of

https://en.wikipedia.org/wiki/Braess%27s_paradox

and

https://en.wikipedia.org/wiki/Wirth%27s_law
No. They will flee to mining other crypto currencies. If all of this turns out to be e big Ponzi scheme or becomes illegal and just about everyone loses interest in mining crypto currencies, maybe then will power consumption fall.
Build order for startups
My wife has had issues with Fred Meyer’s (Kroger) ClickList service on a couple occasions, she stopped using it because they would give us milk with super close expiration dates or bad produce - which is really unfortunate because all 95% of the time there was no issues with our order, but that 5% was enough that paying $5 per order and still needing to go back to fix issues was more hassle than it was worth. Real shame too, because she regularly spends an hour or more a week shopping for our family of 3 - the time saved was invaluable.
So it's a survey in a chat window? I don't see how this is any more or less annoying for either side. If anything it sounds like this one is more invasive.
I am actually going to recommend this to my friends in HR right away. Very impressive user experience.

I have not played with the product beyond the onboarding demo but I have to say the sign up was very impressive too and much to learn there for my own work.

Having worked with surveys over the years the problem I find is that testing takes longer and longer. Sometimes you are filling in a form and sometimes you will have an optional page, e.g. in a custom job application form you may have a page on education that only the person with a degree has to fill in, this implies two testing paths through the form and therefore doubles the time to test. So testing time goes up by the cube of form complexity, or so it seems.

Years ago it would take a whole evening to make a C90 compilation cassette of songs for someone. Just the interface of the cassette deck, turntable and other cassettes would mean that it would take 5-6-7 hours to put it together, even if you knew all the songs and knew what you were doing.

Nowadays if I want to put together a playlist for 90 minutes of music I could do that and think what I was doing to get it done in ten minutes, not hours. I wouldn't be using cassettes or record players or even CDs. Just tick boxes in a UI.

So the key thing for me is that how-long-does-it-take question and much like how with compilation cassettes you still had to play it back to test it, with a survey you need to do some testing, ideally with that test time not going up 'by the cube' of form complexity.
Intel does more than integrated GPUs.
Not going to get anywhere assuming you're in the bottom 80% and not trying.
Ideally mining usage could help drive volume for economies of scale, or at least provide a good used market once this particular boom dies down.
This comment highlights the victim mindset that seems to be more and more common these days... I've been on Hacker News for 6 or 7 years and it is only the past 2 or 3 that the notion that everything should be "fair" has taken such a deep hold. It is one of the major reasons I am starting to lose faith in this country.

We have a generation of people that thinks every person can be rich, successful or famous... and if they aren't then they are a victim somehow.

Perhaps they are. But the issue I have is that this type of thinking is fundamentally unproductive. The barriers that have been broken have been done so by achieving success despite the odds, and becoming a role model ... not through whining. Equality is only achieved when people obtain power and change things. Power requires being successful and valuable to whatever society exists, not complaining.

EDIT: I guess I take issue with the fact that "life" is being compared to a dart game. It's just not the case. You can reduce it down to "throwing darts" ... but that is a very pessimistic way of viewing the world ... and it's quite sad. I've seen so many "rich kids" who were total nut cases and poor kids who were able to overcome the odds through their character. Reducing the human condition down to the amount of wealth is excessively simplistic. I agree that rich kids might get a few percentage points of help (maybe 5-10%) but if you come from a middle class background you can still become a billionaire and sometimes even if you're dirt poor. What other country let's you do that? yes my screenname is "Stanfordkid"... I came from a very poor family and am not some entitled brat. The fact that that was the first thing people pointed out I think speaks to the way in which people are trying to reduce everything down numbers or labels that are in fact, very complex.
Kitchens are 10x more complicated than a room that needs to house table and chairs only with a few plugs for coffee machine.
Yeah:

:PlugUpdate

See https://github.com/junegunn/vim-plug

EDIT: formatting
More people own stocks than you seem to believe: http://factmyth.com/factoids/about-half-of-americans-own-sto...
Oops, posted in wrong thread.
It kind of reeks of FUD from a cranky old person though. America has an extremely strong car culture. I don't see the constituency supporting measures that outlaw human-driven vehicles within 20 years. Forcing people to turn in their cars? It's just not gonna happen. It will probably take 40+ years after they've stopped producing vehicles with steering wheels before that even becomes feasible. And then there will be exemptions, the date will get pushed back a few times, etc etc.

Another thing that he and a lot of comments about self-driving cars seem to miss is the roughly 20% of the population that live in rural areas. Penetration in these areas will lag far behind city centers, and the large area to cover would make enforcement of a human-driving ban impractical.
AMD too, but were are talking about GPUs in this case.
I guess the question to ask is:

Medium sized company. It's your job to pick a stack. Your performance will be evaluated on whether a team of security consultants can hack you. Your stock grant will either multiply 100x or divide 10x depending on whether you get hacked. You get 1 month of unfettered access to all employee workstations. The consultants get one week to try to break in. Do you want a modern OS with its USB stack and whatever high level drivers, or do you want to put everyone on old school machines with bare metal drivers?

Assume the attackers get to know which choice you made.
"The filing is what makes it officially into a real lawsuit before the court"

That is only true in the sense that the court will now view it as "something" rather than "nothing". You are not being sued until a lawsuit is served, and the difference between having a lawsuit filed against you and having a lawsuit served against you is massive. A lawyer has a decent amount of liability for filing a lawsuit that turns out to be total bullshit, but that liability skyrockets once it is served, so if the public is trying to determine how seriously to take a suit, whether it is threatened/filed/served are three very different tiers.
Android Intelligence one of the new trend in App Development
The NSA gets their money from the taxpayer so you're only looking at more taxes to sustain they're storage costs.

We'll also waste money to power empty hard drives.
Yeah as somebody who was a personal shopper before the internet getting requested items can be really tricky there is no guarantee they won't run out of something there is no Ralfs API to plug into to give real-time inventory information.
I highly recommend "The Innovators" by Walter Isaacson. It dives deep into the history of computer science and the people who made huge innovations into the things that we use every day.

I read it when it came out and was really inspired.

[Link to Amazon] --> http://amzn.to/2zINlfi
> Instacart has more than 500,000 customers and approximately $2 billion in revenue, according to Forbes estimates. (The company, which counts the full price of customer orders as revenue, declined to comment.)

What significance does the caveat of counting (recognizing) full price of customer orders as revenue have? Is it different from traditional retail business?
Thank you so much. I do agree with asking a different kind of questions to get feedback on different insight

Another way to handle this issue is to segment your employees to multiple lists. Create different surveys for each level and you can be little more accurate. Say for freshmen you can have a list, while for your directors another list. Automate the different surveys. Finally, analyse the result from different perspective