skysight-inc/HackerNews huggingface dataset:
I have one area / worry that I would like Troy to introduce as a question and to give his advice / opinion as a subject matter expert:

1) The role and responsibilities of security researchers in discovering and investigating data breaches (maybe also discuss the spectrum from white-hat to black hat, yet the tools they all use are effectively the same).

2) The role and responsibilities of journalists in reporting the said breaches.

3) The impact of laws and litigation leveraged by governments and corporations to protect themselves in the event of data breaches.

4) Why a fair and happy balance between the interests of 1), 2) and 3) is a necessary part of mitigating and reducing the possibility of data breaches along with unhappy examples and their consequences.

I'll admit that four questions above are a kind of scope creep to the intended discussion, but my concern is pretty real. The laws and norms that we have today, while imperfect, are the reason why Troy is being asked to appear as a subject matter expert. Whatever the laws and norms of the future are, they will need to sufficiently flexible to allow future subject matter experts to learn and operate, so that they too can make meaningful contributions to the issues of their time.

Edit: formatting
tell them to return to paper voting
Show HN:Ultimate Express.js CLI.Route hot reloading,route controller generator++
>real scenarios

Comcast didn't count movies streamed through there service against the monthly cap. They did count movies streamed through netflix.
Try it out. If it sucks, let me know.
I suffer from it in my right ear, I discovered some foods exasperate it.
Starting a Blog and Lessons Learned – Part 1
Show HN: Savethenet.today, send your rep a letter in support of Net Neutrality
So then one should create such a place!
FCC will also order states to scrap plans for their own net neutrality laws
The pivot to reality for digital media
This is true and false. It is good to assume your Wi-Fi networks are insecure, and I've done so for a long time. But the fact that WPA2 is not the lynchpin of your entire security plan doesn't mean that WPA2 being effectively nullified isn't a massive layer of security being ripped off.

WPA2 working correctly does not guarantee that you are secure, but WPA2 working correctly means it is much harder for someone to do something malicious. The fanboy crowd has leaned heavily on Google's push to get sites to use HTTPS everywhere as a reason to suggest KRACK isn't a big deal, but the reality is a massive amount of Internet traffic still isn't HTTPS, and more than likely, never will be.
Without the location (Country, State, City) the pay isn't really contextualized properly.
> Flixbus bought MeinFernBus a couple of years ago

It's a common misconception. More precisely, FlixBus merged with MeinFernBus. At the time MFB had the bigger share of the market.
FlixBus was chosen as a name mainly because it sounds better to foreigners.
> there's no way you can drive a 5K monitor with any current or near future Ethernet standard, the bandwidth demands are too punishing.

Really? You need more than 100gbit for 5k monitor? Because there is an 40/100gbit ethernet phy standard right now (has been for a while, since 2011). And work is being done on up to 200gbit (due to be ratified in late 2018).
Jesus christ has this thread lowered my expectations of this community.
Regarding extensions, can we really trust random 3rd party developers that their code is 100% safe and will not steal our passwords.

Giving full read/write access to an extension seems VERY dangerous to me, especially if the extension was compromised unknowingly by someone who hacked into the developers machine prior to a release.
> if you're making $10k/mo writing code on it

hah... if only the world was silicon valley.
It happens with TV all the time. House was Hugh Laurie. You couldn't possibly replace him. I presume there are standard contracts to help deal with that when you anticipate it, but it seems to always be expensive to keep a star.
Are there any non-neutral actions that aren't behind the scenes peering disputes? Is there an example of an ISP using network policy to maliciously throttle or block traffic from their competitors?
A similar thing happened to Jeremy Clarkson of top gear fame in 2008 when he said the theft of bank numbers wasn't a big deal and published his bank details.

Someone donated £500 to a charity on his behalf to prove him wrong.

http://news.bbc.co.uk/1/hi/7174760.stm
Huzzah!!! Nailed it.
How would having the iOS source code show you that Apple is selling data?
Wouldn't surprise me if this was achieved through apps as much as anything else in the future. Imagine an Uber-style app for odd jobs (lawns, etc) that focused on teen/young workers. The app could have gamification or reminders that if you commit to a job, you go hard and complete it well. If you don't have the energy or ability to keep performing jobs to that level, then take on fewer jobs or use a different app.
Spray-tan is a very good example. However, as the article states - "Housing, employment and credit are the three areas in which federal law prohibits discriminatory ads" and it does make sense for those three areas.
> I'll admit that four questions above are a kind of scope creep to the intended discussion

I think they are absolutely relevant, specifically around the context of disclosure. Frame it as "people shouldn't be afraid to report crimes or vigilant in watching for them" and you can get support. Yes, Troy should make it clear how he and his ilk are chilled by these same offending companies.
Shouldn't consumers have privacy and anonymity by default? Unless there is a specific, explicit permissions to collect data that can be personalized it shouldn't be created.

Its fine for companies to collect basic usage and telemetry data--but when they start personalizing it without a user's permission/consent (i.e. when they start tying it together with personally identifiable information [as Facebook and Google do] then it becomes weaponized and can then do great harm to individuals. Privacy by default--and anonymous by default would essentially prevent this.
It should be illegal to use knowledge of ID numbers to authenticate things that will effect your credit report.
AFAIU the commits there was a rename and then a remove. Am I wrong in that assessment?
How does he get food?
Be careful of not setting the fine high enough to motivate companies to cover up breaches instead.

No one would have known about Equifax if they had not self disclosed. It doesn't even have to be the CEO - if I am the employee who is about to cost my company $$$$, I might just quietly fix it and say nothing.
This is awesome. More people need to see this.
"I don't need that law telling me the right thing for me" probably wouldn't go over that well in court but if you want to try it then go for it.

The nice thing about laws is that they aren't asking for your permission. They aren't a suggestion, they are telling you things you can't do. If you don't like them you are free to attempt to change the laws but until you do that it's literally "obey or else."
Yep. In fact I'll go one step ahead and say most COL discussions are fruitless unless you know a person's location and lifestyle (kids/dependents? students loans/debt?).
> The person who set the DELETE proposal on the page did so because he literally refused to believe that the collaboration existed

So what?

It's your job to present proof that the collaboration existed, and it's your job to convince others that the information you're providing is accurate.

And more, submitting a dubious article for deletion is actually just a request for other users to evaluate the merits of the article on their own, and they vote based on the information you provide and the case you make to support your position.
I used to approach drug tests with this mentality, but legalization and decriminalization across various states will muddy the picture. There will be a lot more everyday partakers as it starts being sold in safe storefronts, in forms that don't stink or make you hack a lung (cute vaporizer pens, delicious edibles). There will be a lot of middle class, white-collar people that prefer a "feel good" gummy bear after work over a beer.

At that point (and a lot of states are already there!), "Jeez, just don't smoke for a few days" doesn't cut it - 30 days is probably a safe guideline. When it comes to this for a lot of fine prospective employees, I would think it's time to reconsider the value of these tests as a proxy for introspection/awareness/intelligence.
The idea that net neutrality might not be not a big deal seems to fall on deaf ears here.

The notion that maybe Ajit Pai might even be making a decent point is an unspeakable blasphemy.
From May 2018 in the EU the maximum fine for a data breach is €20m or 4% of global annual revenue. This is due to the GDPR.[0]

[0] https://en.wikipedia.org/wiki/General_Data_Protection_Regula...
It absolutely is relevant, let's take a moment and review the key point:

> I can guarantee you Google protects this data more securely than your carrier does

Part of acting as a company who cares about user's data includes not collecting data that is sensitive. This is especially true with location data, and is extra especially true when you do it anyway without the user's permission.

Acting like this proves to me, the end user, that google does not guarantee to protect this data more securely than my carrier.

I can see how one could be easily confused by the original comment, but if you take a moment and review it again you'll see it rings even more true now.
Actually you can't, you can cut down most things but you can't get previews in preference to icons and you can't get more than two rows (from that menu, you have to go to about:config and browser.newtabpage.activity-stream.topSitesCount [for some reason the browser.newtabpage.rows and ..columns settings are still present but appear to be unused]).
Arguably, the Internet is a lot closer to being interstate commerce than a lot of the things the Fed has already stretched interstate commerce to cover.
You should learn basic plumbing and electrical if you own a home. Not only does it save money, but it gives you freedom and allows you to evaluate the quality of work done by professionals you hire.
...so a crippled version of TreeStyleTabs.

JS-based (crippled IMHO) vertical tabs are also in Chrome. Why would someone switch from Chrome to Firefox to use a crippled extension?

I hope I am wrong but I don't think Firefox will be able to increase their market share. They may be able to stop losing their market share, which is not really a huge achievement.
I struggled with this for many years, trying to get accurate shipping quotes for furniture and other items that get charged by 'volumetric weight'. I got stuck at the combinatorial explosion of currencies, location 'zones', taxes, product setup data inconsistencies and what happens if not all items can be shipped together.

I spoke to a specialist developer that had been in the game longer than myself and she said 'nope, it can't be done that easily in real world situations' and proceeded to go all computer-science on me. If you are in ecommerce you might know of Karen from WebShopApps. If anyone can get you a best solution it is her team.
I seriously don't see how transposing the period and end quote characters changes the meaning of the sentence. And I don't see how removing those few words at the end changes the meaning of the sentence.
> I think what dionidium was getting at was he only had about 20% of the story and filled in the rest in an uncharitable way.

I might say the same thing for this comment :/
Hapi.js – v17
From my point of view, a curated internet would be much less noisy. I'd only be allowed to access to the content that I want to have access to.

Reducing the amount of useless and distracting information that I can see would increase my overall productivity. I realize I could just blacklist sites like reddit and youtube on my laptop, but when I have control over it, I'll just turn it off and browse anyway. If access came at a premium, I'd be much more selective of the information and content I consume through these distracting sites.

I don't think ending Net Neutrality is the best way of filtering the noise, but I think it is one (naive) attempt at doing so.
Tinnitus really is a horrible. I suffer from it and find the ringing detracts significantly from my cognitive abilities; my train of thought is often derailed because my brain is being goofy and fighting with the noise.

I also had headphones glued to my ears all through middle-school and high-school, and even though I was careful with the volume I can only assume this is the culprit for my current auditory state.

I wish I could make it go away.
> Personal liability for every person involved in gathering and protecting the data

So basically you want a law requiring all employees to hide any evidence of a breach?

It reminds me of the law requiring all TV's to be quietly dropped of at night at a random neighbor, because it's no longer legal to throw them away, and the legal methods are expensive and inconvenient.
To elaborate on another poster, in sales that are both high-value (to warrant extra effort from the advertiser) and not a commodity but with a high emotional value (like buying a home), it would certainly make business sense to ensure that the pictures in the advertising material contain people like themselves, and that requires recognizing race. Minorities respond well to ads that show members of their particular group.

The same goes with many other viewpoints - you might have a version of your advertising material with a same sex couple, but (as e.g. the recent Starbucks ad situation shows) take care that certain groups of more conservative people don't get that ad but get some other version.
> I wonder what the creators of git think about your opinion on how to use it properly...

Are you the creator of git? If not, how exactly are you qualified to judge "proper" usage -- by YOUR standard you're not qualified yourself, so...?

(I realized it was a joke, but I offer the above as a counterpoint to the satirical/ironic element of the joke. My opinion is that the originator doesn't get special treatment. But then the point wasn't git, it was what/how things get merged into the Linux kernel. The mechanism is entirely immaterial.)

Squashing commits for merge into Linux is not standard practice AFAIK... and happily I see an Linux committer has async'ly backed me up on this.

Generally the preference I see, where git is concerned (not sure about the kernel), is that everything is rebased right into the master branch to avoid merge graphs getting absurd.
> There are not federal laws prohibiting discrimination in spray-tans

Insofar as the spray-tan vendor constitutes a public accommodation, this is untrue. But those laws have different precise contours than those for housing and employment, and would not seem as likely to apply to ad targeting.
I could have sworn this same article was one the front of HN a few days ago...
That's pretty funny - probably should have taken that approach with the second call rather than digging in further
One thing to make clear about the Equifax breach is that it wasn't caused by a single security update that was never applied, as has been put forward by Equifax. It was caused by an insecure information architecture that let web front ends have direct database access. Good security requires defense in depth, not an unbreachable perimeter. Equifax's security was a failure long before it was hacked.

Obviously the technical details may not be the appropriate level to discuss with Congress, but an analogy that they can understand might be helpful. What Equifax did was the equivalent of keeping the country's nuclear codes at an outpost in Afghanistan and then blaming a sentry for falling asleep when an enemy slipped in and stole them.
As Earth's rotation slows, 2018 could see a spike in large earthquakes
Not to forget the DMCA anti-circumvention provisions which make it illegal to report on security breaches you discover on your own devices.
>Near instant worldwide transfer of funds with low fees

>Of course the fees are still high
> From my point of view, a curated internet would be much less noisy. I'd only be allowed to access to the content that I want to have access to.

No, you'd only have access to the content that curator wanted you to have access to.
A lot of people reading this have no doubt bought into this (conveniently flattering) idea that they're creative people doing very difficult work -- and surely some of you really are! -- but a lot of us are just connecting databases to javascript front-ends. It's not composing a symphony.

I assure you it can be done at 9AM when you're a little tired.

Whether or not you should have to be at work at 9AM is another matter, but this idea that you can't possibly get anything useful done unless you're in the zone has been oversold.
While everybody is busy yelling and flailing about how Trump has small hands and is literally Hitler, those policies, that will have an actual day to day impact on everybody, go through unchallenged.
Header-only C++ template library with over 70 DNN convolution algorithms
Why don't people, when pitching the benefits of net neutrality to conservatives, highlight the fact that much of the distrusted "left wing media" (like CNN) is owned by the very ISPs lobbying for permission to give their own media holdings special treatment? Why not e.g. use Comcast's ownership of MSNBC against itself?
I think at this point that isn't enough though. We need people writing handwritten letters. People actually showing up to their representative's offices and talking to them directly. People showing up to where their representatives are and protesting against those who are for this.

Then, more importantly, actually voting people out of office who support this.
Flashframe, formerly TRAC (YC W16), hiring inside sales in Chicago
Inside Sales Representative

About the position

Flashframe, formerly TRAC (W16) needs a talented and dynamic Sales Rep with a proven track record of success. We’re hiring our very first sales employee and to be frank this role is not for everyone. You have to be an incredible sales talent but also someone who wants to be an integral part in growing a business. Your talent and voice will be seen and heard at Flashframe. Not only that it will impact the future and success of the company.

Flashframe is a digital platform that helps organizations source photos. We work with some of the largest road races in the world as well as local clubs and high school sports teams providing them with additional sources of income. We’ve worked with organizations from Indonesia to England, focusing on the midwest to drive growth. We're actively looking to pivot the platform again into the digital fundraising space.

What you’ll do:

Lead the Inside Sales effort
Create a repeatable process of success
Define sales process and best practice
Act as a high integrity culture carrier- we want this to be the best job you will ever have
Maintaining and forecasting a pipeline
Hit monthly and quarterly goals

What’s required:

At least 1 year of Inside sales experience
Proven past success in a competitive environment
Openness to learning
Salesforce experience a plus
4 year college degree
Interest in sports is a plus

What you’ll get:
A competitive compensation package
Catered breakfast twice a week
Open vacation policy
An incredible team of smart and supportive people

Apply to jobs@flashframe.io
Seems to differ between companies. We have seen PII as a liability since early on, but more so as we move closer to GDPR.

GDPR forces us to justify and be transparent about each data point we collect.

This has increased the urgency of cleaning up any non required data points, adding expiration to data and moving data from subcontractors in house.

Guess that a lot of companies are in our position.
"not if anything to say about it, I do" - Yoda
Actually exactly like it for Whites and Asians.
> Its a test of self introspection and awareness and intelligence, not solely discipline.

If that was true it would be more efficient to design a test (assuming such a test is currently possible) to measure self-introspection, awareness, intelligence, and discipline. Oh, wait -- don't many people claim an undergraduate degree is also a signal for those things?
Meg Whitman to Step Down as HPE CEO
The majority of Americans can't choose their broadband internet service provider. I live in NYC and have access to exactly one broadband provider. You don't think they'll come up with any reason they can to make up new service levels and add-ons to pad my bill?
How do you get a grannie to use a public private key cryptography? It would probably have to be a physical device.
There is no reason the philosophy can't be the same.
> Should employers and landlords be able to blanket deny access to men?

There are a shitload of "females only/preferred" housing ads on Craigslist. I've never seen one for men.
One of the picture captions, "He has a companion who delivers groceries to the island every two weeks."
Just as a quick link for people interested:

https://en.wikipedia.org/wiki/Richard_Proenneke

He also wrote books. The first One Man's Wilderness: An Alaskan Odyssey isn't bad either.
I think you're conflating a legal term with actual people, who do the existing, offering, and building. These people (who work under a legal entity with rights, protections, and regulations) pay taxes while they exchange their product or service for our dollars. The service can be anything people want or need. Grocery, clothing, book stores, bars, cafes, airlines... Ignore the "percentage off the top". Why is that a concern of yours? Do you not tip at restaurants or give to charity? Part of your gain can be someone else's. It's all voluntary in the free market.

Not only are you free to not to give money to these corporations, you are free to start your own non-profit service, with a similar legal structure. You have to appeal to investors' altruism rather than their self-interest. A big challenge, but not outside the realm of possibility depending on the market you 'd like to cater to.
I would much rather have a "feature" phone or no mobile at all than have an iPhone again, even if it were free.

Living in a walled garden to escape prying eyes is sacrificing freedom for security.
The Woodworker Who Quit Email
I think I've had it my whole life. It's that persistent high-pitched noise - almost like the imperceptably high sound old TVs used to make when they were turned on - when nothing else is making sound. If there's not a lot going on around me I can hear it quite well. I pretty much tune it out and it doesn't affect my quality of life.

I sort of understand where the author is coming from. About ten years ago I ended up getting a ton of floaters in my eye and I struggled to accept them for a few months. In the end my brain tuned those out as well... at least most of the time.

Most of this comes down to acceptance of something you can't change. It sucks. Nothing you can do about it.
- Current penalties do not weight the cost-benefit equation sufficiently to overcome the financial and agility costs of implementing strong data security policies.

- Current remedies are designed for the convenience of the entity (write a check to a credit monitoring service and issue a public apology). The burden of action remains on the person whose data was collected, possibly without their knowledge or consent.

- Lack of accountability. It is difficult to overstate the impact of a breach like the Office of Personnel Management's SF-86 database, or any of the NSA leaks. That degree of negligence could arguably have been treated as a treasonable offense.
Possibly so that the code corresponding to each commit builds/works, which makes bisect much easier.