skysight-inc/HackerNews huggingface dataset:
> It isn't just marketing.

What makes you so confident? How do you know Apple thinks of itself as a hardware company whose incentives are aligned with those that buy phones? Their marketing certainly has made a lot of people think that, but, well that's just marketing.

Apple hasn't exactly always stuck with one identity. In 2007 one could have easily said that Apple is "a computer company" and not "a phone company" like Nokia.

Ultimately though, Google and Apple are incentivize to collect data for a lot more reasons than just selling ads. A lot of software functionality on phones benefits from rich user data. Apple may well be collecting data to drive better software experiences, and how much of that data they'll keep in-house vs sharing with third-parties is anybody's guess.

Even if you only consider advertising and hardware in simple terms, Apple is very directly incentivize to advertise new iPhones to current iPhone users. They want you to crave new models as soon as they come out, and to think your current model is kind of lame and old. Why wouldn't they be tempted to leverage user data to do that?

Finally, the vast majority of iPhone users probably aren't so sensitive to data security (the market of people who are is pretty small). So I doubt Apple cares that much about their perception among security-conscious people.
PC vendors scramble as Intel announces vulnerability
This isn't really surprising.
Sure, but I think you’re missing the forest for the trees here.
Hmmm, lots of good points here.

> You're making claims about their underlying motivation, and dismissing their actions as just virtue signaling.

This is true.

> Showing the presence of B is not sufficient to demonstrate the absence of A.

This is also true.

> Second, you haven't actually shown that they're virtue signaling. Note that your definition specifically includes intent: "publicly expressing opinions or sentiments intended to demonstrate one's good character" -- the OP could be expressing their sentiments publicly in order to induce others to follow suit, for example. The same post admits many possible explanations, and you are in no position to read the mind of the posters in order to divine their intent. You're making assumptions, but you again haven't presented any evidence to suggest that your hypothesis is better than any others.

Indeed, though, with respect to this there's no evidence --
save the person themselves stating that's what they intended -- that I could present that would be sufficient.

Overall I regret my original post and the ensuing posts, since ironically, my original intent was far less aggressive than is implied by the responses.

Oh well, live and learn.
My very first npm module
Emacs and the Atreus keyboard and xmonad etc. are white elephants.
Never trust the official communications, in fact you should treat them counter factually. More important, you need to be in some circle of know for highly political companies.
When blue collar wages rise it is due to flawed economic policies!

When white collar tech wages rise it is because they are creating an incredible amount of economic value and deserve all of it! It is absolutely all because of their own genius!
The stolen documents served to illustrate that there's a big difference between what the public thinks the FBI does and what they actually do:

"According to its analysis of the documents in this FBI office, 1 percent were devoted to organized crime, mostly gambling; 30 percent were "manuals, routine forms, and similar procedural matter"; 40 percent were devoted to political surveillance and the like, including two cases involving right-wing groups, ten concerning immigrants, and over 200 on left or liberal groups. Another 14 percent of the documents concerned draft resistance and "leaving the military without government permission." The remainder concerned bank robberies, murder, rape, and interstate theft."
I don't have any reason to be suspicious beyond "they have been accused of this".

BTW the fact that GDAX has high fees doesn't mean it's expensive for them to create fictitious trades... they don't have to pay themselves fees!
I'm a beekeeper, and I have a home-made bee escape to clear bees out of boxes that are ready to be harvested. I put it between the honey super and the brood box, and as it gets colder at night, bees move downward to keep the brood warm. The escape has a series of baffles that the bees can only navigate in one direction, so they're unable to get back into the honey super.

The only reason it works is that bees will consistently turn in one direction when they're faced with an obstacle, very much like a maze-traversing algorithm. Luckily my bee escape doesn't assume right or left handedness of the bees :)

The design exists online and has been around for ages, so beekeepers at least were already aware of this behavior.
For me anyway, they certainly don't. iOS is the only computer platform my parents have ever been able to use well, and for that they adore it. Anecdotally I've heard similar from many friends.
Without this it’s significantly easier to install bad extensions posing as a “good” extension. It’s happened many times and is a huge win in terms of security.
Well it all depends, how good professional is, how much time you spend and how much you care about details.
From my experience comparing to the jobs my nieghbord/friend had done by contractors - I can do better :) Though they didn't hire expensive contractors, I'm sure there professional who can do much better. But as mentioned in other comments, for average contractor time matters and they don't pay attention as much as you can. So if you care about details a lot and can't/don't want to hire expensive contractors, better do yourself.

Painting is especially easy, if you screw up some spot, you can always return and repaint (worst case you'll have to do that couple times :)) Painting equipment is (relatively) cheep, you can cover floors with plastic covers/blue tape and don't worry about screwing floors/doors while you learn :)
https://www.youtube.com/watch?v=oNagIA8sKY0 watch these videos and you'd be ready to start.
Cutting wall/ceiling line by hand is not that hard (the video has a trick), there're also "helper tools" for cutting lines in home depot/lowes. One trick is that if you go with light color on walls, perfect line with white ceiling doesn't even matter, you won't notice small deviations anyway.

If have doubts in your own skills (I did), try starting with closets and bedrooms. Only then move to living rooms/kitchens. If you screw up closet or your bedroom - it's not that of big deal. Though if watch above video series, it's really hard to screw up too much.
The first time I got introduced to Emacs, I hated it. Who would like to read email inside a text editor with non-standard keybindings?

I got it all wrong. It's not an editor, it's a text-mode virtual Lisp machine.

The Emacs ecosystem has matured a lot lately. It has two applications I adore. Org, something impossible to describe in a few words, and Magit, the perfect Git porcelain.

Plus it has 3 pretty darn good email clients (Notmuch, Gnus and Mu4e). And some great extras: Dired, Calc, Eshell, Erc, PDF Tools...

Everything is really well integrated. And if something doesn't suit your needs, changing it is a few ELisp lines away.

My computer setup has become very simple: a tiling WM (XMonad), Emacs, Firefox, and a terminal (Urxvt).
A Notch Above Thoughts on the iPhone X
When signed out, Google maps' initial view is entirely based on IP address. Sure, they could use cookies, but they don't. They could also use device profiling, but they don't.

The IP -> location mapping is googles secret sauce, but it collects data from a lot of places, and is for most users very accurate. We're talking street level accuracy in many cases. The data you or another user feeds into it you could easily get back as your reported location, especially if you were trying to fool it.

Your phone doing a wifi scan for nearby access points to determine it's own location, then doing a google search could easily mark your whole home external IP as being in that place (after a few hours), which would then affect non-signed in google services from other devices in your home.

There are cases it's very bad too though, especially VPN's and frequently-shifting dynamic IP's.
/r/programmingcirclejerk

kinda ironic
Ability to delete all data related to me is a key. It should be possible for me to go to Google or Facebook and ask them to delete all data they have collected on me over the years (emails, photos, text messages, list of friends, phone number, job history, geo location, search history etc). And by delete I mean actually get rid of the data so it is not recoverable. NOT soft delete.

If a company fails to do so (or doesn't provide some relatively simple way to do it like an online form), there should be harsh financial penalties.
Him and this guy from Denton, TX need to be friends: http://ntdaily.com/home-adorned-with-cryptic-messages-under-...
I ran the docker container and it uses 56.97MiB without any requests going through.

docker run -d --publish 80:80 --env S3PROXY_AUTHORIZATION=none andrewgaul/s3proxy
docker stats
What if a trans man administers the Ketamine?
We might also need to remind him of the story of Icarus's study in flight...
So was the stolen data deleted? This could've easily just been part of a "bug county," no?

Except when you actually steal data, you're not eligible to bounty. This means the hackers had decent leverage and negotiation skills (maybe Uber could've scared them with lawyers, etc).
When I tried emacs a few years ago I found the learning curve to be far more steep than vim at the time. After trying out https://vim-adventures.com/ (no affiliation, just thought it was useful) I learned it in about 15 minutes.

Is there any equivalent for emacs? I'd love to get it another shot.
Magneto is pretty concerned with ethics and morality, I think Uber is more owned by Tony Stark on a particularly bad binge.
Indeed they are: https://arstechnica.com/science/2017/11/breitbart-other-cons...
Don't people have access to 4G? I live in a tiny village (1000 people) and have 40/6 home Internet via 4G that I pay less than $10/mo with a 200 GB data cap that you can prepay $5 for 100 gb more if you spend it. I'm not from the U.S. though.
Can you define etc, i.e. the other white elephants?
If only it were all so simple! If only there were evil people somewhere insidiously committing evil deeds, and it were necessary only to separate them from the rest of us and destroy them. But the line dividing good and evil cuts through the heart of every human being. And who is willing to destroy a piece of his own heart?

- Aleksandr Solzhenitsyn

I'm reminded of this quote every time another one of these scandals breaks.
software consultant, 10 years, dallas, $140k, nil
How's Fossil do with large binaries? We've got a 24GB git repo and it's...not the greatest. (Not terrible, either, but not great.)
This is news to me, I've never come across an average person having a negative opinion of Musk. On the contrary they think of him as some iron-man like figure.
Someone needs to start a Top 10 Evil Corp web site.

maybe a yearly most evil corp awards.

because it looks like uber is relentlessly bad.
The one written by Ajit Pai? It's paywalled, just like the every page on the internet once this guy is done screwing it up.
Ask HN: Are YouTube's demonetization choices ideologically influenced?
A friend of mine made this claim to me.

At first, my reply was that this was absurd, and that Google/YouTube are motivated by shareholder value only, and any ideological bias is only due to it's impact on shareholder value (e.g. through impact on ability to recruit, through impact on advertisers).

But, now I'm less certain. Still seems unlikely, but I'd like to challenge my previously strongly held opinion on this that there's no way it could be true.

Is there good evidence one way or the other, on whether google or YouTube specifically (and not their advertisers) are ideologically influenced on demonetization?
Just because we haven't found the edge of the world yet doesn't mean it's not there...

We just have to sail a little further. Now if you help finance my "research" yacht, I promise I'll send you a picture when I find the edge of the world :)
Did anybody try https://github.com/shakacode/react_on_rails for this comparison?
Eh, maybe.

I'm wary of romanticizing the situation. There's an island, once privately owned but bought back by the Italian government for several million €, which is part of a national park set up to preserve the ecosystem.

And by serendipity, we have Morandi, shipwrecked some thirty years ago and with no background in botany or biology, who's set up as steward-for-life on a place any grad student would give their left arm to caretake.

The guy lives in a literal (and littoral, ha!) paradise in a situation so bizarrely irreproducible one can only think, "Yeah, must be a nice life..."

Would we have the same warm fuzzy — "That guy's got it aaallll figured out" — feeling if NatGeo wrote the article about the once-owner, Michael Harte, bivouacking on his private island?
Uber is like the Donald Trump of corporations. It sets new ground in how openly vile you can be without any consequences. Just like Donald Trump the real danger is not in Uber itself but in whatever it will be that uses it as a role model.
Also not the greatest in my (very limited) experience. Everything is stored in one SQLite file. Thus at a certain size the problems which SQLite has with large data start to show up in your repository.
I wonder if mice can finally settle whether traps are gay.
And people wonder why I keep saying that Uber needs to have its business license yanked or suffer some similarly drastic sanction or they'll just keep right on doing it and others will follow the same strategy. I mean, how often does a firm have to breach the trust of (just about) everyone it deals with before it's time to punish it in some meaningful way?
That 51 MILLION $ golden parachute must be really nice. Now she gets to go to a new place and do this all over again.

> Whitman would get nearly $91 million if HP gets acquired – more than double her peers – and $51 million if she's forced out (not fired for cause) – again, nearly double.

Source: [2015] http://www.businessinsider.com/whitman-gets-51-million-if-hp...
'you signed in from a new location' uses a cookie that remains after signout.

Clear cookies, and you'll see it again.

In Chrome, it also uses the TLS Client Channel ID, which is a persistent unique identifier established between a browser and a server which (on capable platforms) is derived from a key stored in a hardware security module, making it hard to steal. Ie. if you clone the hard drive of a computer, when you use the clone, Google will know you are a suspicious person, even though you have all the right cookies.
FCC Chair Ajit Pai: How the FCC Can Save the Open Internet
Things like this make me feel much less concerned about the confidence gap.
Are you talking about the command line porcelain? If so that's certainly true, but Fossil really shines when you use its web UI as part of your VCS use cycle. And there's certainly room for additional porcelain as the repository format is a well-documented SQLite file.
You cant just give Jail-time for data breeches. It would encourage cover ups and scape goats.

WEll that's already happening without jail time so maybe give it a whirl. LEt's get real here, the idea of suits going to jail is just scary to some people but it'll be fine.
Great, except for this…

> (in general, always use ValueError and avoid assert).

ValueError is for when,

> an argument that has the right type but an inappropriate value, and the situation is not described by a more precise exception

(the docs explicitly note only for builtins, but I'm frankly okay w/ people using it in their code.)

You should not be raising this when you should be raising AssertionError, however, the two conditions are very different; the latter is for conditions that should be true but for some reason aren't. I find these usually crop up when running through a bunch of ifs:

if a:
elif b:
elif c:
else:
# *One* of the above should always match, in this case.
# This branch should never be taken, and it wasn't any fault of the user we're here.
raise AssertionError('good description of the situation')

Attempts to restructure the above are usually fairly bad: you can omit the `else`, but then execution will never take any branch, and if the branches do something like initialize a variable that the code following the branches will make use of, you're doomed anyways, and it's better to bail in an informative manner. You can meld the last elif and else together (i.e., the else just handles case C above), but then it also inadvertently handles unexpected states D, E, etc. too.

IMO, AssertionErrors should indicate bugs in the called API. ValueErrors indicate bugs in the caller's use of the API.

(You may choose a less "destructive" method of asserting, such as logging, but in my experience, these get lost, and if you're in an undefined state then you still need to find some way to repair that state, and in my experience most attempts to do so are more trouble than they're worth. It's better to fail earlier and harder and louder, s.t. bugs are discovered and swiftly fixed.)
I am so glad I don't notice this.
With these scandals, it really is simple: don't sexually harass or assault others. Most of us manage.
After spending a ton of money on SSL certs over the years, I not only salute Let's Encrypt but also fart in the general direction of those orgs who fail to support it.
It seems like an example of market failure that radical transparency isn't rewarded.

In the cryptocurrency wild west, there are no government regulations, no deposit insurance, no SIPC.

But a new kind of exchange could hold themselves accountable and publish their assets and liabilities every day.

They could publish the addresses that hold cryptocurrency and sign messages to prove they control these addresses.

They could authorize their banks to confirm deposits of national currencies.

With this data, audits of their positions could be automated and updated every day.

Why would traders risk losing their funds to sketchy, secretive exchanges?

A radically transparent exchange would have an enormous competitive advantage and attract large volumes.

This liquidity would drive down spreads and the exchange could operate profitably with lower fees, further driving up volumes.

So why doesn't this exist?
Honestly - I think a sharp enough correction in Bitcoin would be a bloodbath.

It's a plausible scenario anyway - although strongly differing views on the probability.
I ran afoul of the titles being the same as the source titles - I glanced and saw no net neutrality posts. My bad!
Why the hell are Marines still driving Humvees?
Ecosia – Search the web to plant trees
On an iPhone you can see how much time you spend with each app open in the last week. (Go to the Battery section and toggle the clock button).

I think I’m going to start keeping a log to help be more conscious of this.

In the last week, I’ve had 28 hours total screen time. My top 3 are MiniHack 8.8 hrs, Safari 7.5hrs, and Reddit 3.6hrs
Would it not be easier to launch a camera of some kind? Or are cameras in on the conspiracy somehow?
I think it's important to separate different types of harassment. Yes, Feynman was probably sexist and viewed women in terms of stereotypical gender roles, but so did probably 70% plus of people in the 60s.

I specifically contrast that with the many recent reports of deliberate abuses of power or outright assault. There was still a knowledge, even back in the not too distant past, that those things were wrong, as evidenced by the fact that so many men tried to keep their behavior hidden.
Interesting. Thanks for the source.
Anecdata, but I'm at a startup and making $100k+ in Indianapolis.
You have the key points: Some significant (edit: strict, not negligence-based) liability for data breaches is the key. And regulation of security practices is the worst idea ever; it will ossify current architectural mistakes at best and turn into a complete regulatory capture nightmare at worst.

Ideally the liability would actually go to compensate victims (for example, via class action). But even if the government keeps it it might be better than nothing.

A potential improvement would be to require companies to carry insurance (or be able to solvently self-insure) for the maximum possible liability if all the personal data they store was disclosed. That way a company like Equifax has to price the full risk of the data they store even if it is larger than their whole market cap. And the insurance industry might learn to do some due diligence, and be a source of "regulation" with much better incentives to be optimal than a government regulator has.
"Maybe the next iOS update comes with privacy intrusion because it's more lucrative."

Isn't it likely to be more lucrative now? I imagine that the number of people choosing iOS over Android purely for security/privacy reasons is fairly low. I think the incentive exists for them now and they've ignored it.
If you know vim keybindings you can already use emacs with evil. Just install spacemacs and off you go.
Taker fees are significantly discounted for higher volume traders, because they bring smaller traders to an exchange. I know two mid-sized whales who have almost 0% rate as long as they trade certain number of BTC a month.
Not only would this exact error (a new field is added to a struct, and old basic operations on the struct weren't manually updated to take the field into account) have been solved by idiomatic Rust with #[deriving], it is remarkably similar to another CVE in curl that I commented on when the author was all "Rust doesn't solve all our problems because not everything is memory safety". True, not everything is memory safety. Rust isn't just memory safety. There are other things we've learned about programming languages since C was invented and today that also help eliminate bugs.

Quoting myself from https://www.reddit.com/r/programming/comments/61rh9j/curl_is... :

> For instance, the patch for CVE-2016-5420, "Incorrect reuse of client certificates", is about making sure that when you compare two structs, you don't forget to compare a field in the two structs. In C, you have to open-code this comparison. In Rust, you just stick #[deriving(Eq)] before the struct, because unlike C, Rust knows that comparison of structs is a thing that people might want to do ever. The compiler will generate a trait Eq implementation that compares all the fields, using the Eq implementations (either automatically-derived or manual) of each field, so you even get secure string compares if you define some SecureBuffer type and use it for the strings. (As a bonus, doing that also makes sure that you don't accidentally use a normal strcmp on the strings.) When you add a new field to the struct, the automatic Eq implementation on the struct will automatically compare it, too.

(Disclaimer: while I happen to like Rust, there are plenty of other languages you could also use instead—Microsoft Research even made a fork of C# designed for kernelspace. And while I am interested in writing Rust, I'm not particularly interested in telling people who are happy writing C that they should stop, just in making sure that people considering a language for a new project know what each language brings to the table.)
Wasn't like that when Uber let my account get hacked and 1k was stolen from me. When that happened I went searching for answers and found UBer blaming it's users for their lack of security. Further I immediately wanted to cancel my account .. chop off it's head/the source but had to wait days for Uber to delete my account.

They are worst then Comcast and sorry need burn through all their VC money til they are ashes! Loathe Uber so much!