skysight-inc/HackerNews huggingface dataset:
I've heard wages have been stagnating since the 70's or onwards. The latest QE or whataver is just the banks trying to kickstart a corpse they killed.

In a horrible way, by funneling huge amounts of made up cash into the Silicon Valley 'ites. And we get Facebook, Twitter and other inane wastes of time.

Edit: [1]

https://www.youtube.com/watch?v=k6z42a8yfTg
No, you come on. What is it, specifically, that you find difficult to not do, especially at the workplace?
I have a theory that everyone experiences some form of tinnitus, but only some are bothered by it. It's like when you start thinking too deeply about how your intangible mind controls your body, it can be rather suffocating, as there is no escape from the unanswered sense of emptiness that thought can generate. Similarly with tinnitus, once you start focusing on it too much, it feels like like something you can't escape from. I've helped a few of my friends with tinnitus by simply helping them focus on other things (especially when alone).
As someone who lost over 100 bitcoins in a sketchy mining pool, for the love of god, please be careful. I was in early on this madness, and dedicated my gaming rig for a couple of years. Basically forgot about it, until one day I went to move my coins only to find the site just a Cloudflare mirror. Learn from my mistakes and be careful.
I don't buy your view of what transpired. "In an ideal world", "making a near perfect switch like that is probably unlikely", "took a hit on our reputation", etc. None of these truly recognize the actual weight of what Uber has done as an organization.
Full disclosure: I'm the founder of CloudSploit[1] which aims to reduce these risks.

You're definitely on to something here. While I wouldn't call AWS security "broken," it is next to impossible to implement it correctly in any medium to large size business. There are 30+ services that AWS provides, each with an infinite number of security controls, JSON-based policies, etc. Cross-service access is even worse. Almost every service has some form of sub control that extends or complements the main security tool (IAM). KMS has key policies, ECR has registry policies, SNS has delivery policies, etc. S3 has perhaps the most confusing permission policy in existence, which has led to scores of high profile hacks this year alone.

There are 12+ public regions now, with more coming every few months, each fully enabled, yet segregated within the UI and API (which makes detecting attackers who have embedded themselves in unused regions more difficult).

All it takes is literally one typo in a single user's policy and leaked credentials and you're environment is completely compromised. Recovery is next to impossible without basically starting from scratch because you'll never find every tiny hole the attacker left as a backdoor for later without combing through GB of CloudTrail logs.

Now take all that, put it in an organization with 500+ engineers and you can see how easy it is for this to happen. Think you're safe by putting each team in their own account? Well AWS supports cross account role provisioning and engineers can easily set that up within their accounts. The spider web of issues is endless.

[1] https://cloudsploit.com
Although you're right that if tethers are not backed by anything they'd inflate BTC, keep in mind this is likely an extremely small effect, because a lot of the inbound also occurred throughout time, and at any given time, the vast majority of trading and volume was outside of any trade involving tethers. It should be well below single digit % - a lot less than the daily volatility, hence any influence on BTC price is negligible unless I am missing something (which is entirely possible, I'm new to this stuff).
Before Peter Thiel invested, research on herpes vaccine began in US hotel rooms
> Also, they claim this provides assistance in meeting regulatory standards, but never saw much more than assertions on that.

This is probably in reference to this old message by Richard D. Hipp [1]:

"Fossil, in contrast, is designed to remember everything. Fossil was
specifically designed to support the DO-178B inspired development
process used by SQLite, with few developers and a complete and
immutable audit trail for all inputs."

DO-178B, now superseded by DO-178C [2], was an FAA standard used for the approval of commercial software-based aerospace systems.

[1] https://www.mail-archive.com/fossil-users@lists.fossil-scm.o...

[2] https://en.wikipedia.org/wiki/DO-178C
I'm moving up my research on migrating to Nextcloud, or some combination of it and maybe FastMail. I'm sick of this kind of bullshit.

And the thing is, Google, Apple, Microsoft, are less still evil than Time Warner, Verizon, Road Runner, Xfinity, etc. But I'm concerned they are not sufficiently opposed to that fiefdom to maintain a neutral balance on the internet.
These are absolutely not white-hat hackers. In order for a breach of this nature to be white-hat, they would have to be acting openly, and within the parameters of Uber's bug bounty program (https://hackerone.com/uber). I have yet to see a bug bounty program that would allow the pen-testers to access private user data en-masse (I don't even think a company could legally allow this).

Anonymously extorting a company after stealing its data is a black-hat activity any way you look at it.

If Uber didn't have a bounty program or responsible disclosure policy, and the hackers didn't download the user data, but reported it in a manner consistent with other responsible disclosures after discovering a means to access, then it would be grey-hat at best.
I just downloaded this app to see what the hell the fuss is about. I guess it's true that no press is bad press...
Ha, should've known this would devolve into ad hominem. The discussion is about simplicity vs. complexity, not 'difficulty'. Address any of the points I've made and I'd be happy to discuss.
No the source code won't help you. If you want to hide sth. you can hide it ;)
http://wiki.c2.com/?TheKenThompsonHack
You're commenting on a discussion of general principles related to the article's content, and not a sanctioning of nor condemnation of Lasseter's specific behavior. The question is whether the general issue is 'simple' or 'complex'.
Having been inside places like Google: yes, in the ways that are relevant. These people may not have as much effect on (e.g.) national elections, because they don't have nearly as much influence. But for places like Google, their press coverage and employees/candidate pools are disproportionately affected by said loudmouths. Again, anyone who's paying attention can't but have noticed that corporations have had to bow to demands from these lunatics.
"things are never that simple" says the guy who is implying that you shouldn't think about whether a company is moral/not if you live in a country that does horrible things?
mac = shit man
U.S. government warns businesses about cyber bug in Intel chips
From my anecdotal experience, a lot of recent immigrants (legal or illegal doesn't matter) don't know English and it takes them time (some times many years) before the can work in English speaking environment. Naturally such groups of same ethnicity are formed, and typically are the only work option for new immigrants (who don't speak English). This also means they are paid less, as have limited job options.

I'm not sure if I understood correctly, that your dad's crew was mostly immigrants, why do you think it was like that? If pay was good and semi-skilled (easy to train), why mostly immigrants?
But the coverup persisted until just now. Kalanick has been gone for almost half a year.
Internet providers are like shipping companies. They charge you a price to deliver some volume of data/goods at a given speed.

- Should shipping companies be allowed decide what you can and can't ship?

- Should shipping companies be allowed to charge more to ship specific things?

- Should shipping companies be allowed to charge less to ship specific things?

- Should shipping companies allow stores to pay for shipping (free shipping)?
Your career path (and its determinants) mirror mine to an uncanny degree. Nonetheless, I disagree that there's a long-term shortage of skilled labor in the US in general, or that any short-term shortage has its root cause in underdeveloped supply channels. I saw first hand how easy it was to procure non-union labor, even at the height of construction boom circa 2004 (when I left construction trades) or 2015 (when I left the construction industry as a licensed engineer). Like yourself, I couldn't compete (or refused to put up with) what's essentially become a migrant work force. While it does take about as long to become a skilled carpenter as it takes to become a software developer (and a strikingly similar mindset too), it's infinitely easier to employ migrant skilled workers, the workers are highly mobile, there's a ready supply of them anywhere there's active construction going on, and everyone in the construction business -- from employers to clients -- has de facto acquiesced in the status quo where work permits are not enforced. Union labor is indeed rather inelastic during the periods of boom and bust, but it's also chronically underemployed, historically shrinking and in the big scheme of things a tiny portion of the overall labor.
It's only a matter of time before China feels they can do it. They will, if they haven't yet. Not defending U.S. politicos and bureaucrats who also want it. Just saying that the U.S. asking or not asking for backdoors will soon make no difference.
are any ambidextrous?
To get the network capabilities of the ME, the machine has to have a compatible NIC, AFAIK.
I have an Asterisk exchange at home (1 message asking people to choose a digit for the person they want to speak to cuts 99% of telemarketers)

The thing that annoys me the most about being on hold is that it requires attention from me that eats into me doing other stuff while I wait .... in fact if the people who you're calling are too bust to talk to you right now it's they who should be on hold.

So the thing I keep meaning to implement for my exchange is a feature that puts a line into a "waiting for hold" state - you do this and put the phone down - Asterisk keeps saying to the still open line "I still want to talk to you, please press '' when a real person is on the line" ... when they take you off of hold they press '', your phone rings you answer and talk to them
Million Dollar Corruption in WordPress
This isn't an ad hominem. You're saying that these things are hard, so what is it exactly that you find hard about it?
I'm on iPhone 5 right now. No problems.
Penalties need to impact CEO compensation. Punish them with a $200K max cash salary and no options or security instruments to get around the penalty.
> Maybe the next iOS update comes with privacy intrusion because it's more lucrative.

That’s not a great argument when you’re talking about the single most lucrative consumer product in the history of the world. At that point, the risk to your existing product by making an abrupt 180 like that is far too great.
It's simply that many people feel they need a little more solitude than they currently have, an unmet need (like when you're hungry, you could "eat a horse").

Certainly, many people live at a far greater density than that at which humans evolved (or even of a generation ago).
I thought AHC transfers were very difficult to get chargebacks on. How much could they actually be losing on these events? Are they actually not that rare?
While I agree that accountability matters, I believe you are stripping blame from U.S. actors when there is blame on the U.S. front as well. To think our country doesn't do these exact same things to other nations is blatantly ignorant.

It has been proven that U.S. agencies hold flaw information so that they may use it against foreign or domestic actors rather than informing the entities responsible for these vulnerabilities or the greater public.

This is truly a global issue and it is a mistake to focus blame on any singular nation states. You must not let the U.S. propeganda machine cloud your judgement.
Friendly reminder the FBI still have their HQ named "The J. Edgar Hoover Building"

They still celebrate their proven criminality.

How about renaming it the "John Raines" building to show they don't think being criminal was or is a good idea? How about just having the building nameless rather than celebrating their own evil?
The biggest problem is that we've become conditioned to using our name/address/SSN/birthdate/etc for everything, so we give this info, without batting an eye, to services who have no legitimate need for it. We're basically using the same username/password for all of our most sensitive accounts.

For example, an orthodontist in my area asks for SSN, employer, marital status, spouse's SSN, spouse's employer, and states "you must complete the entire form". I only enter name/phone/insurance info, but I bet most people will just do what the form asks.

So part of the responsibility is on the user to not willingly give away irrelevant data. Part of the responsibility is on services to be good stewards of data.

What should Congress do? How about unifying PII and IP? Give Equifax the Napster treatment.
Ask HN: What functionalities have you built using AWS Lambda (or) Serverless?
On this topic, shout-out to ykman oath (if you have a YubiKey).
I haven't heard stories about how Uber employees are getting screwed. (Presumably financially?) Are you referring to Uber drivers in this comment?
"the glass is curved"

No, I'm not joking.
Lack of the low-level stress of noise pollution, danger of attack/need to conform, less chemical/petrol pollution, and no temptation of fast-food etc may help too.
Paypal turned that around, so in theory it's possible for Coinbase to do the same.
> Apple had a fairly similar headline in 2011[1]. Now watch people here on HN explain why that was completely different. It's a guarantee.

Ok, since you’ve so eloquently asked - a local copy of your location history that colllected when location services are turned on is completely different from remotely collecting location data even when you’ve explicitly disabled location services.

Any attempt to say these are the same thing has gone beyond naive to willfully ignorant at best.
As someone who has dozens of thousands of dollars (not in Bitcoin, I sold some of them) on an exchange, what should I do with that money ? Should I ask the website to verse everything on my bank account ?
My favorite react talk of all time ( as as beginner, which I was back then ) was by one of the react training staff, Michael Jackson, who gave it at the London React Meetup back in 2015 or so.

It seems to be the same material as the Imperative v. Declarative ( <Tone /> ) lecture, and I highly recommend it as a mental model to keep in mind when programming in React.

I like this series because it's not 'how to program in react' but more really awesome design patterns and how to use them to better architect your apps.
Think about it logically rather than emotionally. It’s pretty safe to say that #(women who just want to work and build professional relationships without being propositioned for sex) >> #(women who want to have sex with their boss). Drawing bright-line rules that take sex categorically out of the professional context makes life vastly easier for the former group of women.[1] At slight inconvenience to the latter group. It optimized for the common case.

[1] People hate being solicited so much that we created a nationwide donotcall registry for it! And that’s with no power dynamics in play!
It could also be chemical + association. Or just association.
I'm curious, how much did you pay? I do ORD-->SFO around monthly, and I've never paid more than $150 roundtrip. Amtrak is super expensive by comparison
Justice shouldn't be based on statistics. If a sexual harrasment claim is made,why not treat it like any other accusation of wrongdoing?

If the accused admits(like many of the popularized cases recently),he should be charged in court,why would someone admitting to rape not be prosecuted?

If the accused does not admit guilt then he(or she) should be viewed as innocent until proven otherwise. Is it not better for many guilty suspects to escape punishment than for one innocent person to pay for a crime that didn't happen?
Wal-Mart has more employees, is it more powerful? Number of employees is a negative metric. It means the NSA has less ostensible secret bribe money.

Throwing up a big number is dazzling, but when you look at what the NSA does with that $10B, there is a limit. For example, the supposed 40k employees already eat up $3.2B, assuming an extremely charitable average fully-loaded cost of $80k per employee.

Including facilities and supercomputer costs, this rapidly dwindles.

That leaves maybe $5B for bribes, according to your accounting. Is that enough to subvert everybody?

> they are certainly not a "passive" intelligence agency

What is this addressing? Are you attempting to change the goal posts? The topic is ostensible unlimited NSA resources to corrupt every proprietary technology.
Apparently it needs to have appended &languageid=en-fr to work [1]

[1] https://security-center.intel.com/advisory.aspx?intelid=INTE...
How did you lose money in a mining pool? Hopped in a cloudmining scam?

Mining pools don't store funds, you tell them your payout address.
Reminds me of this post by Fred Wilson: http://avc.com/2015/06/loyalists-vs-mercenaries/

Summary: Starting a tech company outside SV is better in the sense that engineers aren't there solely for the money, but have other motivations such as the mission of the company or growing in the city that they'll be happy. Therefore companies outside SV have less labor rotation.
There's a fantastic book 'Outsiders' by Gerard Hindmarsh, that overviews the story of Tom Neale and many other fringe New Zealanders such as Robert Long, Maori Bill, Snow Mayer, and Keiko Agatsuma.

Hindmarsh himself spent some of his youth in the hippie homestead/commune at Golden Bay, and that perspective really helps illuminate how these people chose to live.
That might be a digression, but overall you have to "trust" a company or software provider to some extend.
Even if you have all source-code etc. there are always possibilities to include a backdoor or similar if there's one binary involved (in this case the compiler):
http://wiki.c2.com/?TheKenThompsonHack
We can't know since none of the cases appear to be going to court, arbitration, etc.

It's clear that a large % are resulting in immediate "guilty" punishments though, with people forced to resign, being written-out of movies, etc, etc.

The current environment is obviously open to abuse and the danger is there will be a backlash.
Love Potion No. 9?
"Delete"

can't even lolz
If you’re on a legit exchange you should be able to withdraw everything. You should never use an exchange as a bank. Have exactly the money on there that you intend to trade with and no more.
More information on the position available here: https://www.linkedin.com/jobs/cap/view/133063378/

We have recently opened new positions, including Full-Stack Developer and System Engineer / DevOps / Sysadmin. The complete list is available here:

https://www.linkedin.com/jobs/search/?f_C=3705078&locationId...

Interested candidates please either send your CV to jobs@digitas.co or apply directly through LinkedIn. Thanks.
I'm not even mad, thats a good bug bounty
> to 1318x686, which by itself is already unique,

Is it sticky though? I don't know how the spoofing works, but if the next time, the same site gets a different size, wouldn't your profile become less identifiable across visits and other web sites.
I had a chairman of a company scream that if we did all not do exactly as he said, he would consider it insubordination. I found another job, then sent him a private message to go fack himself.
5 Secrets to Design an Excellent UX Designer Resume and Get Hired
Protip: Uber's own bullshit aside, their drivers are employees.

Who are getting screwed.
Maybe slander applies here if the accused feels the media(and social media) accusations are wrong.
For me number 1 of your requests won’t find anything a lot of the time. I think I can reproduce it, snooze something, let the snooze occur, unpin the snoozed message and the notification count doesn’t go away without quitting and reopening the app.
can someone explain succinctly what they like about fossil over git? I found a few overall articles but a nice HN comment would also help if anyone is game. Are there certain types of projects where it just works better for you than git?
I'm usually a strong proponent of regulation to protect people, but only where the harm can be studied and analysed. If games are not marketed to minors, I do not think it is reasonable to restrict the content of the games lest minors see or interact with them. If the content is aimed at children, then a case may be made (as gambling can develop extremely harmful addictions and tendencies) for their restriction.

Many things which adults may freely consume within society, including pornography (and certain genres therein), alcohol, tobacco, etc. are regulated, but these "vices" are not illegalised for the sake that a child may engage in it, and I think that an effort to do so would be very disappointing.

Although this reads like a typical libertarian argument, I want to note that I simply don't consider myself to be an advocate of illegalising something because it has a bad effect on some users, or it is used for nefarious purposes. Encryption can be used for terrorists to communicate, the Internet can be used for revenge porn, and a baseball bat can be used to bludgeon someone to death.
Ksonnet: Simplify working with Kubernetes
legality questioned? come on, of course it's not good to assume anything about people, lots of things happen in life. That doesn't mean I had to go ask each of them to show me their documents, so I can make a guess on internet forum.
Can you elaborate? I feel like torch.nn gets you pretty close.
Ah, you've found an error on my part. I was thinking "classical states of matter" referred to the understanding of states of matter in the classical period, which could not have included plasma. Again, plasma is not observable via fire, because fire is not plasma.
I thought it was a good idea when an error message says

bad request type, see http://company.com/API/ce32h

except that it always seems the company forgets and removes the page.

maybe that could be fixed to some degree in a build step
For perspective, the going wage for a skilled (journey level) carpenter in the SF Bay area is essentially the same today as it was in 2005 (the last time I was part of the labor force). This is from a quick survey of Craigslist ads. If anything, the real wage seems to have decreased.
Trading some freedom (to run whatever code/apps. you want) for the security afforded by a centrally run repository is definitely a reasonable one to make, but the same mechanisms can be co-opted and used in ways that aren't in the users' interests.

It's a difficult line to draw IMO - providing _any_ way to bypass it opens the non-technical user up to malicious software (to varying degrees), but if all platforms (or even just all the major ones) become so locked down, IMO that's a big loss in itself.
It's quite different being a 18 year old male pressuring 18 year old girls into sex and being a senior manager pressuring a new hire into sex.

It is a problem when the lady doesn't feel that she has the right to say no. A manager at a billion dollar company can be more intimidating than an 18 year old with a knife.