skysight-inc/HackerNews huggingface dataset:
Folks seem to like my "polluting a river" analogy in the parent comment. I thought of a related point.

People have said that if there are consequences for losing customer data, companies will be motivated to cover up their mistakes. Part of the solution there would be "whistleblower" laws similar to what we have for OSHA violations. But another part would be legitimizing white hat hacking.

Suppose my apartment has some hazardous problem, like exposed wires. It's perfectly legal for me to notice that and tell my landlord. I can take pictures for proof, and if necessary I can report it to the government. The landlord will not be allowed to ignore me.

If, however, I notice a glaring security problem on a web site I use, there's no government agency to tell. If I tell the site owners, there's a good chance that they can ignore me or even punish me for noticing.

Now, going along with my "results-based" argument, unlike building codes, we don't want our laws to specify security practices. But if an outsider can demonstrate that they can obtain personally identifiable information from a computer system, the owners of that system should be fined and required to fix it, and the person who found the problem should be legally protected.

Imagine the mess a landlord would be in if somebody died because of a hazardous condition that they'd been notified of six month earlier. Now imagine that web sites were held to the same standard. "You had a massive data breach, and this security researcher has proof of notifying you six months earlier of the vulnerability. You're in big trouble."
> I believe this tactic has been using by Yahoo and others in announcing the number of stolen accounts as well.

"We lost personal information of 57M users, but no credit card leaked and we paid the hackers to delete it"
Fullstack web developer (php + devops), 7 years working (coding for 20 years), ~ 74k$, Germany, no bonus

+ doing some freelancing part time @ 100€/h
I see your point. Still, my latter comment stands, even if the first one just betrays my personal hatred of Apple.
No. My internet is completely useless at peak times - as in even HN won't load. Expecting competence out of ISPs is simply too much.

My ISP is the only game in town for me, and they know that. They have zero incentive to lower prices or raise quality.
Why anyone would have such a device in their home is still beyond me.
I can turn on my lights, play music and manage my calendar just fine without the direct line to the NSA in my living room.
Show HN: QuickBoost.club curated video highlights of inspiring people
The works of Alan Watts have been instrumental in providing me with a mental framework to notice exactly that kind of bamboozles, and many more. A lot of his ideas (or his intrepretations of others) seem to me like a straightforward cure for many of this information age ailments, I think a rehash for modern times is long overdue. I strongly recommend to look at least at a couple of essays of his, if only for the absolutely delightful prose.
Christmas in Germany on whychristmas?com
Where can I find a list of all million dollar worth of startups?
I am looking for startups around the world that are worth $1 to few millions. Is there a site which lists such startups/companies?
A sense of units and scale for electrical energy production and consumption
Hi,

I’m building a small platform of curated video highlights of inspiring people. It’s in very early stages though.
I like to watch videos where I usually learn a lot, but I tend to forget things that I like after a short time. This platform aims to help me with this problem. I can document those thing now easily and and get the highlights as video snippets (I use this currently as a new-Tab page in chrome. So every time I open a new tab, I get a new video snippet).
I plan to build collections for certain topics and open it up for everyone to document and share their highlights.

I would love to know if this could be a helpful tool for you as well.

Thanks,
Sascha
The biggest issue there is for screening for guns and some employment screening.

If you’re name is John Smith, good luck!
Don't net neutrality advocates precisely want to prevent Netflix from subsidizing access to their sevice through some ISPs?
> If customers are not happy with a service they can shop elsewhere.

For much of the US, that isn't the case with ISPs.
> It's more expensive for an ISP to stream data from Netflix than it is to stream data from their own server

Where to begin...

1) Almost by definition, if you connect to Netflix via your ISP, you are streaming content “from” at least one “server” belonging to Netflix, and at least one “server” belonging to your ISP

2) Netflix is an especially bad example for your point, because they provide free caching appliances to any data center with enough traffic. So most of the time you are streaming Netflix, assuming you’re accessing the most recently popular content, you are literally streaming it from a “server” on your ISP’s network.

3) Your ISP does not pay Netflix for every byte it downloads from them. That is, traffic from ISP <-> Netflix does not cost your ISP anything more than traffic from ISP <-> news.ycombinator.com.

On point 3, it’s important to note that an ISP does not pay per unit transferred over its network. The only costs to the ISP are the fixed capital costs of network infrastructure and maintenance. Beyond that they may have transit agreements with other ISPs (usually mutual but in some cases maybe paid). But none of these agreements charge the ISP per gb.

The ISP builds pipes with capacity and then charges you based on how much you put through the pipe (whether directly through $/gb pricing, or indirectly through capped plans). They make their margins with overselling and traffic shaping. True, streaming Netflix does not cost your ISP extra, but it does take up capacity in those pipes. The reason ISPs are concerned is because dominant content providers effectively limit the ability of an ISP to oversell its capacity, reducing margins. It has nothing to do with increased cost of serving bytes from Netflix vs bytes from somewhere else.
Nope, this is the first email - http://lkml.iu.edu/hypermail/linux/kernel/1711.2/01357.html

Entire thread links from start:

1 - http://lkml.iu.edu/hypermail/linux/kernel/1711.2/01325.html

2 - http://lkml.iu.edu/hypermail/linux/kernel/1711.2/01357.html

3 - http://lkml.iu.edu/hypermail/linux/kernel/1711.2/01368.html

4 - http://lkml.iu.edu/hypermail/linux/kernel/1711.2/01636.html

5 - http://lkml.iu.edu/hypermail/linux/kernel/1711.2/01701.html
LastPass has a terrible track record in security, that was nicely edited out from wikipedia by a fresh user: https://en.wikipedia.org/w/index.php?title=LastPass&action=h...

The user in question has some specific interest in editing LogMeIn, parent of LastPass, pages: https://en.wikipedia.org/w/index.php?limit=50&title=Special%...
but those things you mention don't' happen in safety critical systems.

Errors in logic happen everywhere.
2FA wouldn't have necessarily solved this, if the hackers had access to an engineer's ssh keypair (e.g stolen laptop) they could clone repos as they pleased. 2FA isn't a silver bullet.
I don't want to be a vegetarian.
Controversy as a brand strategy
Unbelievable: Uber concealed #databreach that exposed 57M records in 2016
No. Oracle bought Sun for control over Java, and its (ailing) Enterprise datacenter marketshare to cross sell into. Having done Sun I don't think there's anything to gain by acquiring HPE (but maybe there's a low enough price which is right.)

Re:MySQL was an inconvenience to Oracle in the Sun deal, not an acquisition target. PostgreSQL was/is a stronger OSS competitor to their DBMS tbh, due to its closer feature parity, especially PL/pgSQL - and no sign of them sponsoring (controlling) that project.
The joys of maintenance programming (2011)
I struggled with this. I suppose it's not intellectually honest, but I learned intellectual honesty is not my highest priority.
Two Fat Ladies – Play Best Bingo and Slots Games Online
End of Year Cybersecurity Assessment – How to Guide
Milksnake: ship Python wheels written in Rust without linking to libpython
I was working at an ISV trying to get a new product production ready. It was horrible, a monolithic opaque system that didn't work properly and had been languishing in development hell for almost a decade. Management refused to consider alternative proposals, insisted on doubling down on this system and 'bet the company' on it. When I realised they were really serious, I left.

Their first major sale of the new system to a client fell through 6 months later because the system wasn't ready (would probably never have been ready) and 3 months after that they were bought out and the project cancelled by the new owners. For those I left behind it was utter hell.

So this is a counter-example in a way. Rather than their commitment being unconvincing, it really was convincing. Still they were on a direct course to screwing up and I got out at just the right time.
Three of Sci-Hub's domains just went down for good
Guys, this is all just plain old wishful thinking. Neither you, nor me, nor most people here have any real clue what decisions are being done behind closed doors of Apple, or other companies. All the high profile cases are mostly PR-oriented, see how PRISM was handled (not that they had any choice, but it is what it is).

Don't attach these emotions where they are not appropriate. Apple is a for-profit company. If they will be pressed hard by US government behind closed doors, they will bulge and you won't know about it, why should you (maybe in 10 years as part of some leak). If they will decide to change their strategy, they will. They have 0 moral issues hiding gazillions of cash offshore from IRS. Just like any other company out there.

Simple fact is, most people don't care about security. I work in IT, and I have numerous friends with iPhones, but exactly 0 of them cares about extra potential security when choosing phones, most have no clue about these issues. Regular people choose Apple because of Apple and how things look and feel, and how they are perceived among others as a status indicator.
Perhaps you forgot about the significance of life?
Stop Using Excel, Finance Chiefs Tell Staffs
Do you really think China and/or Russia would ever get in line with something like that, given that they're responsible for (or at least turning a blind eye to, in the cases where it's not government-sanctioned) almost all of this crap?
The Sci Hub Twitter account suggests a workaround by specifying direct DNS servers for the sci-hub.ac domain:

Sci-Hub is working. To get around domain names problem, use custom Sci-Hub DNS servers 80.82.77.83 and 80.82.77.84.

https://twitter.com/Sci_Hub/status/933081884380278784

I'm finding this works at best only partially -- primary site responds, but secondaries don't.
Displaying all Cron users jobs (python script)
Well, if your town has only one ISP it's probably a small town where everything is much cheaper and there is less money to be made. Why would they invest in infrastructure there if they would never recoup the costs? You already get many advantages by living where you live (lower cost of life, probably less air pollution etc). I used to live in a small town in Peru, everything was much cheaper but it was impossible to watch a video on youtube at more than 144p resolution. That's a bargain I was willing to take and never complained about it, life was cheap. If you want better services that costs billions in investment, move to a place where it makes business sense for someone to invest in such infrastructure and don't expect anyone investing free money for you out of their good heart. You wouldn't do it either, why should they? Here's the thing, you will _never_ get better or equal infrastructure and services in a small town than in a big city. Whether it's the diversity of asian food, schools, museums or internet speed. You'll never get it by living in a small town. Want all those fancy things? Move to these big cities and don't ask people to subsidize your small town more than they already do, big cities folks already pay enormous bills each months, they don't need more of it.
It's amazing to me how many hardcore devs/hackers still are reliant on Google for everything they do, and don't come up with alternative solutions.

It's not like Google has a monopoly on tech knowledge.
NET Cloud Platform as a Service
My point exactly ;)
Buy Nothing Day 2017
Show HN: Chrome extension for GitHub
Born prematurely..
I love the polluted river analogy.

You often hear today that "Data isn't oil" but from a breach perspective it is a good analogy when considering its toxicity.
> "How evil is tech" is a nice Trumpian headline. Looks like NYT is catching up with the times.

What makes you think it needed to catch up at all? Look, press/media, tech, and any industry out there are there to "Make world a better place... for themselves".
I was not making myself clear; the top comment seems to imply that there's some sort of natural connection between anti-globalism (in the popular sense of the term) and a rejection of net neutrality laws.

I am a fierce proponent of net neutrality, and I don't understand how you can reasonably conclude that I must therefore be pro-globalism.

Or how you can say that someone who is anti-globalist is probably also anti net neutrality.

That's the connection I don't understand. How do you make it?
Nope, his first email in the thread was this:

https://lkml.org/lkml/2017/11/17/423

Where he's quite civil and explains quite clearly why he won't accept the patch, and what should happen for the patch to be accepted. The Kees's reply insisting on the merge is what led to the profanity-laden email, and frankly I understand that (not condone, but understand from a human-reaction point of view) - how many times does one have to iterate his viewpoint to others to make himself heard?
This is going in the correct direction.

If Firefox provides the correct API's we might have the power of vimperiator back. Off the top of my head it needs:

1. A way to load config from the filesystem so I can keep its config with my other dotfiles

2. To be able to work on about:addons etc

3. To work in reader mode

4. Vim keybindings in textareas/inputs (although for modularity this could be a separate addon).

5. A way to open textareas etc in an editor - again for modularity this could be a separate addon.

6. Be able to open file://

7. A way to focus on the page content (away from e.g. url bar) - this could be a FF level hotkey though.

EDITED - I'm adding things as they come up.
How is that not a (temporary) shortage? When did it become part of the definition that all shortages must be permanent?

What if nobody trains to become a construction worker (for whatever reason) and then over the next 5-10 years demand goes down because people get used to making do with the buildings that already exist? Is it also not a shortage then?
Is the person launching the bomb, or the person being blown up the end user?
>Is called cash :) It's accepted everywhere.

A lot of people refuse to carry any significant amount of cash. It is a risk factor, especially when at events and shows or just during busy shopping hours, due to pickpockets. An app with verified identity (using the national 2FA login system in my country) is significantly more secure.

>Should all be burned anyway. Plastic cards and bits of paper worked fine for decades, you don't suddenly need to run arbitrary code on my pocket supercomputer.

It's a bunch of silly plastic cards that I then I have to carry around in my wallet or remember to bring from home when going shopping, as opposed to having the app on my phone, which I carry around with me anyway. The app automatically calculates bonuses and rebate collection marks.

>Safer to use the website. My bank authenticates you by having you enter your PIN into a card reader - although they have created a mobile app, the security is strictly inferior as phones do not come with card readers (and the passcode is different from your PIN, making you more likely to write it down).

My mobile banking app is perfectly secure, it uses the Danish national 2FA login system, used for all public services.
> the markup is non-standard (not mediawiki, not markdown), etc.

FWIW, it looks like the current version supports Markdown in the Wiki.
Role of Artifical Intelligence for Mobile App Development
> Turns out it was a Lisp machine all along!

Hehe, in retrospect it is so obvious, but I really did not see that coming.
You're right, but you're wrong. In the system you describe, "good" candidates who give a hoot about their constituents' wishes will always lose elections to other candidates who are happy to fund their campaigns with bribes. This system will not fix itself. The improvements we seek will not come from voting.
Oh, I didn't know about either mpssh and mussh! Thanks a lot for mentioning, it does the job super well!

I'll update the article with a note about disabling the checking. Thanks!
Black Friday 2017 Deals for Graphic Designers
I did read the article. I didn't see that it was peer reviewed nor a repeated study, scientifically speaking. The last few paragraphs also give some (typical) scientific distance on the rhetoric that it will revolutionise ALL past rat experiments. It's still worth a read though.

What I found:

* It is a science story about findings presented at a meeting. The story is published in Nature, which does do very prestigious peer reviewed papers, but the findings and the story itself are not peer reviewed.

* Within the same institution, the head of the lab repeated the experiment.

* Some other actually peer reviewed papers with female researchers, rats and ketamine show positive influences.
Lasseter says : " No matter how benign my intent, everyone has the right to set their own boundaries and have them respected."

It's dead wrong. The boundaries are defined by society as a whole. The way he puts it basically says that if you don't set your boundaries, then don't complain if you are hurt.
Strongly disagree. Speed and Ketamine in combination is probably the greatest time you'll ever have.
Bitfinex is cashing out
How orgs will handle World Cup spikes and loads in 2018
that is actually a darn good question
I don't think there was an upgrade after iOS 7 that really made devices significantly slower. But a lot of people still have an iPhone 4 trauma. The 5S is like 5 years old and still runs iOS 11 very capably

(unless you're one of the unlucky people with whatever type of iPhone for whom iOS 11 still is borked for some reason, still having trouble on one iPhone 6S Plus with that).
PDFs are pretty easy to find, it's only the physical book which is rare.
text-mode?
> One longtime Pixar employee says Lasseter, who is well-known for hugging employees and others in the entertainment community, was also known by insiders for "grabbing, kissing, making comments about physical attributes." Multiple sources say Lasseter is known to drink heavily at company social events such as premiere parties, but this source says the behavior was not always confined to such settings.

Seems like it doesn't. It may be that I'm from Eastern Europe, where the social aspects are a little bit more pronounced compared to more puritan countries like the United States, but wtf is wrong with hugging? Honest question. Also, I know I used to drink heavily at "company social events" and thank God I was not let go because of that. Well, to be honest almost all of my co-workers should have been let go if I were to judge them based on their drinking outside of working hours.
We use a tool under a Linux Foundation project called anteater https://github.com/opnfv/releng-anteater, which does the same thing (but is for a jenkins / gerrit workflow). A key difference from looking at talisman, is anteater uses standard RegEx rather then code to seek out strings, so anyone can add their own strings / file names easily into a simple yaml file. Like wise they can use regex to provide a waiver, should something be incorrectly reported.

I am thinking now would be a good time to port it to working with webhooks as well.

The tool would have blocked the aws credentials from being checked in: https://github.com/opnfv/releng-anteater/blob/master/master_...
Faster OO but dog slow regexes? This is Perl, right? The Practical Extraction and Reporting Language where extraction is largely the work of regular expressions and, now, grammars. OO languages are a dime a dozen so how can OO be Perl 6's main priority?
Blockchain Makes the World Interested in Finance's Dullest Parts
Is it really camera that made the difference?
I had a motorbike stolen in Beijing. Police's answer? "Sorry, the camera didn't work".
A friend forget his phone in a taxi (who run away, then turned it off when he tried to call it). He left the taxi at a precise crossing with cameras. He went to the police station a very soon after. Police answer? "We couldn't identify the taxi".
I have a few more stories like this (like wallet and phones stolen at the ATM). Yes all in China.
And I'm not talking about the multiple scams that are very specific to china.

Maybe public surveillance camera help preventing armed attacks (but it's never really been a thing in China anyway, and in serious decline in the world in general) and I doubt they can do much more. As you say, purpose matters.

I don't believe crime stops with surveillance, it changes.

Edit: one thing I forgot to mention, I feel the Chinese state media are doing a very good job at not talking too much about the different crime/problems happening. Western media are doing pretty much the opposite. I think on that precise point, if other method than censorship were used, it's actually a pretty good thing and do make people feel safer.
One of the most amazing fact I'd learned was that invisibility to radars was not mostly due to the absorbing material but rather a specific geometry of the plane! The materials certainly enhanced it but it was still like 25% or so contribution. Even more amazing fact was that this possibility was first discussed in a Russian research paper but that was never followed through because it was too complex to compute such shape and no one believed it would actually work. The folks at Stunkworks got hold of the paper, hired a mathematician and used computers to do the computation to actually find the shape that would have invisibility property to radars. No one in army at the time believed that some special shape can just become invisible to radar. They did the demo to army to prove it and landed their contract. Considering all these was in 1960s, its just amazing.
For US$300 you'll get an iPhone SE that'll outrun a Samsung Galaxy S7 in most benchmarks. What's not competitive about that? Can't expect current flagship performance from a US$300 device.
Turkey poop is a promising renewable energy source
I think it will lead to a constructive discussion, much like the various threads on the google memo, but it depends what you care to construct.
Irony: On opening the article, a modal banner about some 'Black Friday' sale popped up.
It seems that the one responding to You, the op, is.

Be careful guthub is nice but a proprietary monolith -> but git is nice. Hm ok but gitlab.
I'm looking at the source itself, looks like it's got everything and the kitchen sink; I'm seeing XML datastructures, lodash-like utils, HTTP API handling, local storage (probably from the caching they mentioned), a script interpreter, buffers (very large section), etc. It's just go a lot of Stuff in it. Strong NIH feeling.
Corrupting SP is part of almost every exploit and I can guarantee you that it is very likely (going to cause harm on your system).
Try to pull Metasploit GIT repo to get some idea about thousands of payloads that do corrupt SP without crashing the host...
Because the cryptocurrency set is more easily impressed by a "blockchain" than a "database". E.g. this nonsense: http://www.ibtimes.com/un-will-use-blockchain-ids-fight-chil...
You mean like a smartphone, tablet, smart tv, and laptop? They all have the same capacities and most of them are always on.